I have Installed a Graylog-Cluster with 2 VMs. LAN: GraylogServer1 (Full-Config / Master) DMZ: GraylogServer2 (Backend)
The basic System is working fine. All Logs from the DMZ are sent to the DMZ-Server and all Logs from the LAN to the LAN-Servers >From the Website on the LAN-Server are all logs visible. But sometimes i have a problem with the automatic cycling of the deflectors. *My Setting is*: Message-Count: *2.000.000* / Max Number of Indicies:* 60* > The Servers have to handle 15k Messages per Minute / 10GB per Day *Problem:* Sometimes the automatic cycling of the deflector stucks. After 2.000.000 Messages it creates a new deflector, but it stops working at (~200kb / ~850 Messages) In the Shard Routing i can only See: S0 | *S0 *| S2 | *S2* and the SystemMessages has the ERROR: Notification condition [NO MASTER] has been fixed. The Graylog-Servers doesn't process the Messages anymore. When i "Manually Cacle Deflectors" from the Website, a new deflector is created and everything works fine. In the Shard Routing i can See: *S0 *| S0 | S1 | *S1 *| S2 | *S2 *| *S3 *| S3 But after a few automatic cyclings, i have the same ERROR! For troubleshooting I have tried to cycle the deflectors with a CRON-Job or restart the Graylog-Services every hour, but it doesn't help. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/c0862739-df49-4787-ac54-e971e94ad90e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
