Hi Jamie, For information , and concerning my first experience using graylog,
I 've defined an input udp syslog with haproxy extractirs (and I have checked all extrators). An haproxy Aloha forward messages in 5514 ports and I have noticied , something strange: I must wait perhaps 1 hour, to display the older messages hour hour ago(input receveid messages and search modukle) parsed and with the only condition if I disable the input before If I don't use extractorn the messages are displayed in real time. In my architecture I have separated elastic search in a different equipement than graylor server and it's web interface. I have take look in index performance from elastic search node (one shark), but i don't notice problem performance. My query is: is there a log activity concerning parsing extractor, because there is no doubt the impacte performance, but I don't understand How it can impacte the avaibility of consulting the messages already loggued Best regards. Le mercredi 24 septembre 2014 20:10:05 UTC+2, Jochen Schalanda a écrit : > > Hi Jamie, > > Am Mittwoch, 24. September 2014 19:58:38 UTC+2 schrieb Jamie Geyer: >> >> just a quick question - >> In general does adding extractors to an input cause any performance >> impacts on the input? >> > > In general yes, because the extractors have to be run for every message > which is processed by that input. The concrete impact varies between > "negligible" and "a lot" depending on the number and complexity of > extractors. > > I recommend taking a look at the stream_processing_timeout and > stream_processing_max_faults settings in your graylog2.conf and configure > them accordingly (or keep the quite sane defaults). > > > Cheers, > Jochen > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/43b121f8-dd35-4b95-a350-cb12a5eeab31%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
