Hello successfully increased java heap and for both elastic and graylog server still getting below error Malformed search query
The search query could not be executed, please correct it and try again. Take a look at the documentation <http://docs.graylog.org/en/2.1/pages/queries.html> if you need help with the search syntax. The given query was malformed, and executing it caused the following error: Error Message:Unable to execute searchException: org.elasticsearch.action.search.SearchPhaseExecutionExcepti On Fri, Nov 11, 2016 at 4:24 PM, Kunal Patil <[email protected]> wrote: > How to do that ? > > > On Fri, Nov 11, 2016 at 4:23 PM, Jochen Schalanda <[email protected]> > wrote: > >> Hi, >> >> you also have to increase the heap memory of Graylog, not only >> Elasticsearch. Those are different Java processes. >> >> Cheers, >> Jochen >> >> >> On Friday, 11 November 2016 09:17:52 UTC+1, [email protected] >> wrote: >>> >>> Hello >>> As u suggested i have increased ES heap size to 4gb >>> >>> /bin/java -Xms4g -Xmx4g -Djava.awt.headless=true -XX:+UseParNewGC >>> -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 >>> -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError >>> -XX:+DisableExplicitGC -Dfile.encoding=UTF-8 -Djna.nosys=true >>> -Des.path.home=/usr/share/elasticsearch -cp >>> /usr/share/elasticsearch/lib/elasticsearch-2.4.0.jar:/usr/share/elasticsearch/lib/* >>> org.elasticsearch.bootstrap.Elasticsearch start >>> -Des.pidfile=/var/run/elasticsearch/elasticsearch.pid >>> -Des.default.path.home=/usr/share/elasticsearch >>> -Des.default.path.logs=/var/log/elasticsearch >>> -Des.default.path.data=/var/lib/elasticsearch >>> -Des.default.path.conf=/etc/elasticsearch >>> >>> but on graylog web gui it is still showing 1gb >>> Please guide if i m missing something >>> >>> >>> On Thursday, November 10, 2016 at 3:48:38 PM UTC+5:30, Jochen Schalanda >>> wrote: >>>> >>>> Hi Jimmy, >>>> >>>> On Thursday, 10 November 2016 10:46:31 UTC+1, Jimmy Chen wrote: >>>>> >>>>> Is there anything specific on ES end I could start with? >>>>> >>>> >>>> Just the typical things: Check logs, follow general ES tuning tips. >>>> >>>> You can also get professional support at https://www.graylog.org/pro >>>> fessional-support. >>>> >>>> Cheers, >>>> Jochen >>>> >>> -- >> You received this message because you are subscribed to a topic in the >> Google Groups "Graylog Users" group. >> To unsubscribe from this topic, visit https://groups.google.com/d/to >> pic/graylog2/69aTmlXdshw/unsubscribe. >> To unsubscribe from this group and all its topics, send an email to >> [email protected]. >> To view this discussion on the web visit https://groups.google.com/d/ms >> gid/graylog2/08e26c5f-6bbc-4c55-9ba4-f766eb504110%40googlegroups.com >> <https://groups.google.com/d/msgid/graylog2/08e26c5f-6bbc-4c55-9ba4-f766eb504110%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > > > *Warm Regards,* > > *Kunal Vikas Patil,* > > *Linux-System Admin* > > > [image: cid:[email protected]] > > > *Just Buy Live Enterprise Pvt. Ltd.* > > 2nd Floor, B-65, CyberTech House, > > J. B. Sawant Marg, > > Road Number 21, > > Thane (W) 400604 > > www.JustBuyLive.com <http://www.justbuylive.com/> > -- *Warm Regards,* *Kunal Vikas Patil,* *Linux-System Admin* [image: cid:[email protected]] *Just Buy Live Enterprise Pvt. Ltd.* 2nd Floor, B-65, CyberTech House, J. B. Sawant Marg, Road Number 21, Thane (W) 400604 www.JustBuyLive.com <http://www.justbuylive.com/> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMmoEtbB6qHgfvUbkS%3D3jR7rnduv_XUXrstYRaW-Xmo8%3DDVRPA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
