Hi Steve, I haven't seen that behavior personally, but I wouldn't rule out that it can happen with a large number of indices.
Please think about reducing the number of open indices in your system, either by closing them (System / Indices page) or by archiving them, for example with the Graylog Archiving plugin: http://docs.graylog.org/en/2.1/pages/archiving.html Cheers, Jochen On Thursday, 2 February 2017 21:56:32 UTC+1, Steve Kuntz wrote: > > Hi > > This is still a big issue for me. Is there anything I can do? Is there any > more information I can provide to get help? > > On Wednesday, December 14, 2016 at 10:46:36 AM UTC-5, Steve Kuntz wrote: >> >> Hi, >> >> Has anyone else seen this behavior? Everything works well until I hit the >> Indices page or the try to edit an extractor. After this sometimes I have >> to restart Graylog to get the interface to respond again. Could I have too >> many Indices and/or shards? I'm currently processing about 40,000 >> messages/second. I have 1,700 indices, 24,500 shards and I've just lowered >> my shards from 8 primaries and 1 replica to 4 primaries and 1 replica. >> Currently my ES usage is ~40TB >> >> Thanks >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/ec88e254-b6c2-45e4-be8a-f3e497dda295%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
