[graylog2] Re: Graylog dashboard showing no messages for last 5 mins
Thanks Alot Drew. Issue got resolved. fix: all the servers clients were in same time but my graylog server was showing 5 mins ahead of exact time. so the command "ntpdate ntp.ubuntu.com" fixed the issue and i can see messages flowing in dashboard for last 5 mins. Thanks for the help On Thursday, September 3, 2015 at 12:51:50 PM UTC+5:30, Drew Miranda wrote: > > This sounds like a delay in when the messages are displayed due to time > synchronization. > > Are you using a time synchronization service such as NTP or Chrony? Can > you verify your graylog server(s), log sources, and client all have a > synced timezone? > > > On Thursday, September 3, 2015 at 2:03:28 AM UTC-5, Sriranga Kulkarni > wrote: >> >> >> >> 1. I am not using any stream. Its direct search. I login and set relative >> time frame as last 5 mins no words in search no messages. If i change the >> time to last 15 mins i see 3k or 4k messages >> >> 2. I am not quering from dashboard or from stream. >> >> 3. When i use the search with empty Yes i get nothing for last 5 mins. >> >> On Thursday, September 3, 2015 at 6:08:58 AM UTC+5:30, Drew Miranda wrote: >>> >>> Can you elaborate on your configuration? >>> >>> >>>1. Is the dashboard using a query from a stream or global search? >>>2. If you use the "play" button icon to replace the search are any >>>results present? >>>3. When you do use the search and if the relative time frame is >>>empty, does an absolute search for the same range show any results? >>> >>> >>> On Wednesday, September 2, 2015 at 5:59:59 AM UTC-5, Sriranga Kulkarni >>> wrote: I tried Recalculate index but still the same . I had disk space issue so stopped the graylog and increased my disk and restarted the graylog. this was the only issue i faced. Moreover i have time based retention of indices On Wednesday, September 2, 2015 at 6:58:14 AM UTC+5:30, Drew Miranda wrote: > > Do you have your indicies rollover due to retention policies where > older indices are deleted? Also does running "Recalculate Index Ranges" > (System -> Indices -> Maintenance) help? > > > On Tuesday, September 1, 2015 at 8:32:43 AM UTC-5, Sriranga Kulkarni > wrote: >> >> Need help graylog dashboard not showing any messages for last 5 mins >> where as i am able to see messages for last 15 mins. I used to get >> messages >> for 5 mins before but donno what happened. >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/9c574a6c-9e2e-485e-a70b-1e066de2983f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Graylog dashboard showing no messages for last 5 mins
Can you elaborate on your configuration? 1. Is the dashboard using a query from a stream or global search? 2. If you use the "play" button icon to replace the search are any results present? 3. When you do use the search and if the relative time frame is empty, does an absolute search for the same range show any results? On Wednesday, September 2, 2015 at 5:59:59 AM UTC-5, Sriranga Kulkarni wrote: > > I tried Recalculate index but still the same . > > I had disk space issue so stopped the graylog and increased my disk and > restarted the graylog. this was the only issue i faced. Moreover i have > time based retention of indices > > > > On Wednesday, September 2, 2015 at 6:58:14 AM UTC+5:30, Drew Miranda wrote: >> >> Do you have your indicies rollover due to retention policies where older >> indices are deleted? Also does running "Recalculate Index Ranges" (System >> -> Indices -> Maintenance) help? >> >> >> On Tuesday, September 1, 2015 at 8:32:43 AM UTC-5, Sriranga Kulkarni >> wrote: >>> >>> Need help graylog dashboard not showing any messages for last 5 mins >>> where as i am able to see messages for last 15 mins. I used to get messages >>> for 5 mins before but donno what happened. >>> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/c77f6ad7-5dfd-491b-8af0-d33ebaa8ac51%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Graylog dashboard showing no messages for last 5 mins
I tried Recalculate index but still the same . I had disk space issue so stopped the graylog and increased my disk and restarted the graylog. this was the only issue i faced. Moreover i have time based retention of indices On Wednesday, September 2, 2015 at 6:58:14 AM UTC+5:30, Drew Miranda wrote: > > Do you have your indicies rollover due to retention policies where older > indices are deleted? Also does running "Recalculate Index Ranges" (System > -> Indices -> Maintenance) help? > > > On Tuesday, September 1, 2015 at 8:32:43 AM UTC-5, Sriranga Kulkarni wrote: >> >> Need help graylog dashboard not showing any messages for last 5 mins >> where as i am able to see messages for last 15 mins. I used to get messages >> for 5 mins before but donno what happened. >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/a9eb579a-06c2-481c-a32c-241957a35440%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
[graylog2] Re: Graylog dashboard showing no messages for last 5 mins
Do you have your indicies rollover due to retention policies where older indices are deleted? Also does running "Recalculate Index Ranges" (System -> Indices -> Maintenance) help? On Tuesday, September 1, 2015 at 8:32:43 AM UTC-5, Sriranga Kulkarni wrote: > > Need help graylog dashboard not showing any messages for last 5 mins where > as i am able to see messages for last 15 mins. I used to get messages for 5 > mins before but donno what happened. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/64a1926d-dbc4-405b-b2d8-65611abba370%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
