Graylog: Input and Output Buffers are filled, Outgoing Messages are Low and Journal is full

Graylog: Input and Output Buffers are filled, Outgoing Messages are Low and Journal is full. The outgoing messages are 0 Msg/s.

The problem statement is in the name itself. The In such a situation what we need to do. We have two options.

1.       Stop the Input and wait for the process and output buffer to clean up. Which is not a good idea.

2.       The Second Option is change the “ring_size ” to a higher value (ring_size = 131072 in my case) in /etc/graylog/server/server.conf and restart graylog-server service.

3.       service graylog-server restart

4.       After that goto the throughput details page and experience the difference. All this can be done in 5 minutes down time.

5.        Your Disk Journal usage will also come down and Input are still running.