Hi Eugene, the number of indices can also increase, if you cycle the deflector index a lot (e. g. in the web interface at System -> Indices -> Maintenance).
You have set the maximum size of an index to 100,000 bytes (100 kilobytes) which is quite low. Maybe you mixed that up with 100,000,000 (100 megabytes) or with another index rotation strategy, e. g. the message count strategy (see https://github.com/Graylog2/graylog2-server/blob/1.1.4/misc/graylog2.conf#L89-100 for details). Cheers, Jochen On Friday, 24 July 2015 08:16:08 UTC+2, Eugene Prokopiev wrote: > > Hi, > > I have this configuration (for testing purposes before running in > production mode): > > rotation_strategy = size > elasticsearch_max_size_per_index = 100000 > no_retention = false > elasticsearch_max_number_of_indices = 10 > retention_strategy = delete > > I see this messages in System/Indicies : > > - Your current configuration is 100,000 bytes per index and a maximum > number of 10 indices. > - 16 indices with a total of 1,014 messages under management, current > write-active index is *graylog_15*. > > How it is possible? Maybe a bug in graylog? > > > I use : > > > - graylog-server-1.1.4 > - graylog-web-1.1.4 > - elasticsearch-1.6.0 > > > > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
