New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Alarm on receiveBufferSize not trigered on Gelf Udp input #1243

Closed
rlanore opened this Issue Jun 11, 2015 · 3 comments

Comments

Projects
None yet
3 participants
@rlanore

rlanore commented Jun 11, 2015

When you start an GELF UDP input there are no alarm like GELF TCP input:

2015-06-10T11:50:54.161Z WARN [NettyTransport] receiveBufferSize (SO_RCVBUF) for [id: 0xe574613f, /0.0.0.0:12202] should be 1048576 but is 131071.

it's important to identify problem for event lost

and they are no documentation this.

Graylog installed from deb package must doing this

sysctl -w net.core.rmem_max=1048576

@bernd bernd self-assigned this Jun 15, 2015

@bernd

This comment has been minimized.

Member

bernd commented Jun 15, 2015

Sorry, we cannot execute sysctl commands when installing a package. If you run network software with different protocols, you have to be aware of tuning the network stack of your machines.
We cannot decide which settings are correct for your setup and it's also just not nice of a package to change system settings on your machine.

@bernd bernd closed this Jun 15, 2015

joschi added a commit that referenced this issue Jun 15, 2015

joschi added a commit that referenced this issue Jun 17, 2015

Extend warning about SO_RCVBUF size to UDP inputs
Fixes #1243

(cherry picked from commit 98c5d5f)
@bernd

This comment has been minimized.

Member

bernd commented Jun 17, 2015

@rlanore There will be a warning for UDP inputs as well in the upcoming version.

@lxf1992521

This comment has been minimized.

lxf1992521 commented Jun 26, 2018

Get the same warning log like this:
WARN [NettyTransport] receiveBufferSize (SO_RCVBUF) for input RawTCPInput{title=Nginx Json log, type=org.graylog2.inputs.raw.tcp.RawTCPInput, nodeId=null} should be 1048576 but is 229376.

Maybe graylog should show “warning message” in input modal when setting SO_RCVBUF > net.core.rmem_max.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment