Hi, On Monday, 26 September 2016 16:31:21 UTC+2, [email protected] wrote: > > As a 'coincidence', the the journal filled up to maximum capacity (and > failed) really quickly during the same period due to spikes in events at > that time (expected) so I adjusted the journal > size, processbuffer_processors and outputbuffer_processors in hopes it will > solve that part. > > However, can both events be related? If so, how? I'm not sure how the > journal issue can lead to the stream processing issue. >
Yes, they can be related, but it's usually the other way round: The disk journal fills up because message processing is too slow. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/260d05ab-e8c7-4cd6-a373-8bb769ec1c54%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
