Hi all,
I have a cluster of two graylog (one configured as server and one as
backend), The messages processing on the primary keep jumping from mostly
In 0 / Out 0 msg/s. to couple hundred, sometimes to over couple thousands.
I don't see any errors on elasticsearch logs, or server logs. These are VM
with 16 gb of memory and 8 CPUs.Any idea what could be the issue?
root@graylog-server:/home/ubuntu# tail -f /var/log/graylog/server/current
2016-09-27_16:40:40.63539 2016-09-27 09:40:40,634 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:40:40.63965 2016-09-27 09:40:40,639 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:45:17.69555 2016-09-27 09:45:17,695 WARN :
org.graylog2.periodical.NodePingThread - Did not find meta info of this
node. Re-registering.
2016-09-27_16:45:42.62166 2016-09-27 09:45:42,619 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:45:42.62976 2016-09-27 09:45:42,629 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:46:41.12504 2016-09-27 09:46:41,124 INFO :
org.mongodb.driver.connection - Opened connection
[connectionId{localValue:13, serverValue:26}] to 127.0.0.1:27017
2016-09-27_16:50:40.63230 2016-09-27 09:50:40,632 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:50:40.64369 2016-09-27 09:50:40,642 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
2016-09-27_16:55:42.98717 2016-09-27 09:55:42,986 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Validating
all active sessions...
2016-09-27_16:55:42.99168 2016-09-27 09:55:42,991 INFO :
org.apache.shiro.session.mgt.AbstractValidatingSessionManager - Finished
session validation. No sessions were stopped.
^C
root@graylog-server:/home/ubuntu# tail -f
/var/log/graylog/elasticsearch/current
2016-09-27_16:50:25.42496 [2016-09-27 09:50:25,424][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_16:56:51.84823 [2016-09-27 09:56:51,843][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.11560 [2016-09-27 10:00:02,088][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.30210 [2016-09-27 10:00:02,300][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.35754 [2016-09-27 10:00:02,356][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.46050 [2016-09-27 10:00:02,459][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:02.60115 [2016-09-27 10:00:02,600][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.52049 [2016-09-27 10:00:22,519][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.65393 [2016-09-27 10:00:22,653][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
2016-09-27_17:00:22.82138 [2016-09-27 10:00:22,820][INFO ][cluster.metadata
] [Spectra] [graylog_246] update_mapping [message]
top - 10:02:10 up 5 days, 18:31, 1 user, load average: 7.91, 8.23, 9.32
Tasks: 177 total, 1 running, 176 sleeping, 0 stopped, 0 zombie
%Cpu(s): 49.9 us, 2.0 sy, 0.0 ni, 44.9 id, 2.8 wa, 0.0 hi, 0.4 si,
0.0 st
KiB Mem: 16432760 total, 16337928 used, 94832 free, 70564 buffers
KiB Swap: 4194300 total, 240772 used, 3953528 free. 5057920 cached Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
<https://lh3.googleusercontent.com/-ADLx9zE5UCQ/V-qkS4cir0I/AAAAAAAAMB4/gBKArmxkIRsOfqERJbPSAJwLp0EZpUEHwCLcB/s1600/graylog.PNG>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/c42f7c54-42ac-4b1b-b56a-4b53cd8a5d0c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
