Hi all!
A`m new in Graylog2, my question about the rotation and elasticsearch shard.
A have graylog rotation policy - 1GB per index and a maximum number of 10
indices*.*
2 shards, 0 replica. 2 elasticsearch nodes.
es cluster:
es1 node master only + data.
es2 data only.
# curl 'localhost:9200/_cat/indices/gray*?v'
health status index pri rep docs.count docs.deleted store.size
pri.store.size
green open graylog2-prod_19 2 0 3888529 0 981.9mb
981.9mb
green open graylog2-prod_26 2 0 2734000 0 975.6mb
975.6mb
green open graylog2-prod_27 2 0 3312870 0 876.8mb
876.8mb
green open graylog2-prod_18 2 0 3677397 0 930.1mb
930.1mb
green open graylog2-prod_22 2 0 2664485 0 869.8mb
869.8mb
green open graylog2-prod_23 2 0 355397 0 756.4mb
756.4mb
green open graylog2-prod_24 2 0 1047500 0 950.9mb
950.9mb
green open graylog2-prod_25 2 0 1273225 0 984.6mb
984.6mb
green open graylog2-prod_20 2 0 3578967 0 928.4mb
928.4mb
green open graylog2-prod_21 2 0 3233356 0 828.9mb
828.9mb
Why i have used space total for all es nodes ~18GB ?
I have 9.5GB used space disk on es1 and 9.5GB on es2.
I have duplicated messages on es1 and es2?
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/90a38ac5-cfc6-45fa-9ba1-4c751f5005e4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
