Hi Roberto, what's the configuration of your Graylog servers? What's the directory inside /var with the largest size (check with du or similar tools <http://www.tecmint.com/check-linux-disk-usage-of-files-and-directories/>)?
What's the output of the following curl command (replace localhost with the host name or IP address of one of your Elasticsearch nodes): $ curl http://localhost:9200/_cat/indices?v Cheers, Jochen On Monday, 18 April 2016 14:12:01 UTC+2, [email protected] wrote: > > Dear, I have GRaylog 1.3 and I setup a /var partition of 1.5 TB. > > I define 10 indexes of 3 days each, and every index is deleted after that. > > In despite of this strategy, the /var partition of Graylog server always > increases and when it reaches 95% aprox, the Graylog stop logging. > > What can I do in order to maintain the /var partition size in a value that > never reaches the 90%??? > > Because in the firts days of my Graylog server, I had 3 indexes of 3 days > each, after that 20 indexes of 3 days, now 10 indexes of 3 days...and > always my /var partition gets nearly 100%. > > Thanks a lot, > > Roberto > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9d668fed-1ee5-4389-a6fb-2233ae6da703%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
