On 10/03/15 11:41, [email protected] wrote:
Il giorno lunedì 9 marzo 2015 16:10:36 UTC+1, Kay Röpke ha scritto:
This sounds like you have lots of indexer failures, which lead to
messages being stored in MongoDB.
So MongoDB size should not be so large, usually?
Usually not, unless there's lots of errors during indexing, which in
itself shouldn't happen, but that depends on the data you send and its
format (numbers vs strings in the same fields of different messages).
Your best bet is REST and MongoDB queries, yes. Have a look at
elasticsearch delete queries. For MongoDB look at the size of the
system_messages and index_failures collections. For details please
refer to their respective documentation pages.
Thank you very much!
01
--
You received this message because you are subscribed to the Google
Groups "graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected]
<mailto:[email protected]>.
For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
