Graylog never starts

[deniax2]

Im using the compose from here: https://raw.githubusercontent.com/bsmithio/OPNsense-Dashboard/master/docker-compose.yaml
I got everything working in Grafana, except Graylog (and thus the map).

For whatever reason, when I docker compose up, it always fails with:
org.graylog2.bootstrap.preflight.PreflightCheckException: Journal directory </usr/share/graylog/data/journal> has not enough free space (1785 MB) available. You need to provide additional 3334 MB to contain 'message_journal_max_size = 5120 MB'

I tried adding - GRAYLOG_MESSAGE_JOURNAL_MAX_SIZE=10gb to the enviroment table, but it gives the same error, but with the 10gb size

I tried changing volume:
volumes:
- graylog_data:/opt/appdata/influxdb/graylog

But it still gives the error that it goes to </usr/share/graylog/data/journal>

Does anyone have the same issue?

[PaulePils]

I am also getting the same error message. Hoped to find an answer in this thread :-)

[bsmithio]

Hmm, strange, it seems like a disk space issue.

You can try running

df -h /usr

to see if you have enough free space in your root partition.

[PaulePils]

Sorry for the late reply.
After some more testing I got it working (sadly I don't remember what I did... I was happy that it worked)....

Now I have the same problem again after I had to restart my whole server. After some reading, I got to the point where I think the culprit may be the size of elasticsearch which uses a lot of space of docker.
In the dir /var/lib/docker/overlay2 the biggest files are part of elasticsearch and therefor graylog won't get enough free space.
I followed this tutorial to find the largest files: https://technotes.adelerhof.eu/containers/docker/overlay-usage/
I am curious how large they can get before running out of space again. Just adding space to the container doesn't feel like a practical solution....