Hi, On Monday, 12 December 2016 23:14:22 UTC+1, OlyLady wrote: > > Hi, I am having the same issue. The journal is getting big and nothing is > going to Elasticsearch. How do you actually "flush" the disk journal? I am > using Debian Jessie and Graylog 2.1. My graylog journal is in > /var/lib/graylog-server/journal. >
You don't have to flush the disk journal manually. If messages won't get indexed and removed from the disk journal, something is wrong. Check the logs of your Graylog and Elasticsearch nodes and make sure that the ES cluster is healthy. If everything else fails, you can delete the files under /var/lib/graylog-server/journal/ (while Graylog *is not* running) to "reset" the disk journal. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/95fd942f-c2cc-47f3-b1d5-6bbfb8e5a916%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
