Hello everybody, First, thank to Graylog developper it's very good product for managing log, analyzing and alerting :). I have spend time to search the parameters to tune my ElasticSearch Cluster in production, it's standard parameters to apply on all ElasticSearch nodes :
####################################################### ES_HEAP_SIZE=your_RAM_value_in_gigabyteG Memory allocated to ElasticSearch, size 50% allocated RAM of your machine (Source : Graylog documentation, ElasticSearch Definitive Guide) https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html http://docs.graylog.org/en/latest/pages/configuring_es.html#heap-size Write this value in /opt/graylog/elasticsearch/bin/elasticsearch (For Graylog appliance (ova)) ________________________________ bootstrap.mlockall: true Allows the JVM to lock its memory and prevent it from being swapped by the OS (Source : ElasticSearch Definitive Guide) https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html Write this value in /opt/graylog/conf/elasticsearch.yml (For Graylog appliance (ova)) ####################################################### Don't hesitate to add, modify, comment this post :). Thank you, Jérôme Queneuder -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
