Hi Michel,
first of all I'd recommend upgrading to the latest stable version of
Elasticsearch (which is Elasticsearch 1.7.2
<https://www.elastic.co/downloads/past-releases/elasticsearch-1-7-2> at the
time of writing).
Are there any error messages in the logs of your Elasticsearch nodes?
Cheers,
Jochen
On Monday, 5 October 2015 17:16:07 UTC+2, Michel Laporte wrote:
>
> Hi,
>
> I have 2 Graylog Servers both running ES instances. However, after 1-2
> days of running, my Elasticsearch cluster always goes "No Active Master"
> (Using KOPF) for about 10-15 minutes, then comes back up.
>
>
> When it comes back up, i can NEVER search for Sources. I get this Error:
>
>
> Could not load histogram data
> Loading of histogram data failed with status: Bad Request
>
>
> However, if i select time to " All Week, or All month", data shows up, but
> sometimes doesn't show the messages when you query it from the source. The
> only way to fix this is to restart ES on the Master then everything comes
> back up and works fine.
>
>
> Could someone help me?
>
> So far i've increased Ram to 16GB on each Machine and dedicated 7GB Heap
> to each one as i thought it would be RAM. However, after a few days each
> machine has about 500-900MB of RAM free. They are both on Linux Ubuntu
> 14.04 Machines.
>
>
> Thanks (Errors Below)
>
>
> ES KOPF LOG:
> [2015-10-05 13:44:48]
> {"status":503,"name":"ess-lon-gray-002_slave","cluster_name":"graylogemea","version":{"number":"1.4.5","build_hash":"2aaf797f2a571dcb779a3b61180afe8390ab61f9","build_timestamp":"2015-04-27T08:06:06Z","build_snapshot":false,"lucene_version":"4.10.4"},"tagline":"You
>
> Know, for Search"}
> [2015-10-05 13:44:48] No active master, switching to basic mode
>
> -------------------------------------
> essencedigital.com <http://www.essencedigital.com/>
> Google+ <https://plus.google.com/102138558390623994587/about> • Facebook
> <http://www.facebook.com/essencedigital> • Twitter
> <https://twitter.com/essencedigital> • YouTube
> <http://www.youtube.com/essencedigitalvideos>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/39ac33cd-5cec-48bf-a835-9d3bf5f957b7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
