Hi all,
I have a cluster of two graylog (one configured as server and one as
backend), The messages processing on the primary keep jumping from mostly
In 0 / Out 0 msg/s. to couple hundred, sometimes to over couple thousands.
I don't see any errors on elasticsearch logs, or server logs. These are VM
with 16 gb of memory and 8 CPUs.Any idea what could be the issue?
root@graylog-server:/home/ubuntu# tail -f /var/log/graylog/server/current
2016-09-27_16:40:40.63539 2016-09-27 09:40:40,634 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:40:40.63965 2016-09-27 09:40:40,639 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:45:17.69555 2016-09-27 09:45:17,695 WARN :
org.graylog2.periodical.NodePingThread - Did not find meta info of this
node. Re-registering.
2016-09-27_16:45:42.62166 2016-09-27 09:45:42,619 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:45:42.62976 2016-09-27 09:45:42,629 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:46:41.12504 2016-09-27 09:46:41,124 INFO :
org.mongodb.driver.connection - Opened connection
[connectionId{localValue:13, serverValue:26}] to 127.0.0.1:27017
2016-09-27_16:50:40.63230 2016-09-27 09:50:40,632 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:50:40.64369 2016-09-27 09:50:40,642 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:55:42.98717 2016-09-27 09:55:42,986 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:55:42.99168 2016-09-27 09:55:42,991 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
^C
root@graylog-server:/home/ubuntu# tail -f
/var/log/graylog/elasticsearch/current
2016-09-27_16:50:25.42496 [2016-09-27 09:50:25,424][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_16:56:51.84823 [2016-09-27 09:56:51,843][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.11560 [2016-09-27 10:00:02,088][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.30210 [2016-09-27 10:00:02,300][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.35754 [2016-09-27 10:00:02,356][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.46050 [2016-09-27 10:00:02,459][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.60115 [2016-09-27 10:00:02,600][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.52049 [2016-09-27 10:00:22,519][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.65393 [2016-09-27 10:00:22,653][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.82138 [2016-09-27 10:00:22,820][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
top - 10:02:10 up 5 days, 18:31, 1 user, load average: 7.91, 8.23, 9.32
Tasks: 177 total, 1 running, 176 sleeping, 0 stopped, 0 zombie
%Cpu(s): 49.9 us, 2.0 sy, 0.0 ni, 44.9 id, 2.8 wa, 0.0 hi, 0.4 si,
0.0 st
KiB Mem: 16432760 total, 16337928 used, 94832 free, 70564 buffers
KiB Swap: 4194300 total, 240772 used, 3953528 free. 5057920 cached Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
<https://lh3.googleusercontent.com/-ADLx9zE5UCQ/V-qkS4cir0I/AAAAAAAAMB4/gBKArmxkIRsOfqERJbPSAJwLp0EZpUEHwCLcB/s1600/graylog.PNG>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/c42f7c54-42ac-4b1b-b56a-4b53cd8a5d0c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
