Hello,

we got into the situation today that a graylog node (v 2.1.1) was temporarily flooded with messages, causing the journal to fill.

What surprised me was that the journal actually went above 100%:

WARN  [KafkaJournal] Journal utilization (126.0%) has gone over 95%.

The journal usage was indeed over 6gb instead of the configured 5gb.

The journal settings have remained unchanged from the original installation (I'm assuming the commented values in server.conf are the defaults):

#message_journal_max_age = 12h
#message_journal_max_size = 5gb
#message_journal_flush_age = 1m
#message_journal_flush_interval = 1000000
#message_journal_segment_age = 1h
#message_journal_segment_size = 100mb

When using the default values, what would the maximum size be that the journal could reach? I'd like to raise the max size to better utilize available space on the hard drive should this sort of situation reoccur (25g would have been available if needed), but since the 5gb do not seem to be a hard limit, am unsure what value would be safe to set to ensure that the disk can not be filled.

Any insight would be appreciated!

Regards,
Bruce Givens

--
You received this message because you are subscribed to the Google Groups "Graylog 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/dc574b61-6f10-02be-6cd5-ff877295de0f%40cipsoft.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to