Hi Timo, what are the hardware specs of your VMs and which exact versions of Graylog are you using?
Cheers, Jochen On Monday, 10 October 2016 17:01:16 UTC+2, Timo Beuker wrote: > > I have Installed a Graylog-Cluster with 2 VMs. > LAN: GraylogServer1 (Full-Config / Master) > DMZ: GraylogServer2 (Backend) > > The basic System is working fine. All Logs from the DMZ are sent to the > DMZ-Server and all Logs from the LAN to the LAN-Servers > From the Website on the LAN-Server are all logs visible. > > But sometimes i have a problem with the automatic cycling of the > deflectors. > > *My Setting is*: > Message-Count: *2.000.000* / Max Number of Indicies:* 60* > > > The Servers have to handle 15k Messages per Minute / 10GB per Day > > *Problem:* > Sometimes the automatic cycling of the deflector stucks. > After 2.000.000 Messages it creates a new deflector, but it stops working > at (~200kb / ~850 Messages) > In the Shard Routing i can only See: S0 | *S0 *| S2 | *S2* > and the SystemMessages has the ERROR: Notification condition [NO MASTER] > has been fixed. > > The Graylog-Servers doesn't process the Messages anymore. > When i "Manually Cacle Deflectors" from the Website, a new deflector is > created and everything works fine. > In the Shard Routing i can See: *S0 *| S0 | S1 | *S1 *| S2 | *S2 *| *S3 *| > S3 > > But after a few automatic cyclings, i have the same ERROR! > > For troubleshooting I have tried to cycle the deflectors with a CRON-Job > or restart the Graylog-Services every hour, but it doesn't help. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/51e26da7-4e87-4994-bdfc-fe1c24fba630%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
