I´ll chime in here since I just encountered that exact problem. More specifically it doesn´t matter how small the time frame was in my case - as soon as I used "quick values" on any number of message (in my case 18 message, timespan 10 seconds) I made graylog/ES crash with messages like "Unhandled exception in REST resource" and garabace-collector messages in ES. At times ES would run out of memory (21GB HEAP just aint enough) and crash on me as well, but usually I just "loose" the graylog server until restarted. It´s basically a DoS button that really worries me when thinking about other users having access to "their" logs.
Seeing as Graylog 2.0 and maybe graylog 2.1 is still affected, I really wonder if 2.2 will solve this issue - if it is solveable at all! -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/e8016137-14cd-4dfe-add4-b6222ecd7c0e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
