Graylog2 / Graylog2/graylog2-server

Metric org.graylog2.outputs.ElasticSearchOutput.writes Reporting 2x value in 6.1.1 vs 6.0.7

Open
#20,832 0 comments 0 reactions 0 assignees View on GitHub
bug triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Observed while monitoring the Metric `org.graylog2.outputs.ElasticSearchOutput.writes`, its value doubles in size when upgrading from Graylog 6.0.7 to 6.1.1:

![image](https://github.com/user-attachments/assets/df01fb47-a2b3-4030-83c3-76fe67bdfab9)

Note that the Indexing-rate of OpenSearch during this time does not change (e.g. does not double in-size), which reveals the curious change in value of the Metric `org.graylog2.outputs.ElasticSearchOutput.writes`:

![image](https://github.com/user-attachments/assets/d80f5658-81ad-45f9-bf99-6b2736b217e6)

## Expected Behavior

The value of Metric `org.graylog2.outputs.ElasticSearchOutput.writes` to remain the same while the version of Graylog changes.

## Current Behavior

By upgrading from Graylog version 6.0.7 to 6.1.1, the value reported by this metric doubles in size.

## Possible Solution

N/A, not certain of cause.

## Steps to Reproduce (for bugs)

1. Install Graylog 6.0.7.
2. Create input & continuous stream of data.
3. Monitor metric `org.graylog2.outputs.ElasticSearchOutput.writes`. Take note of mean/average value.
4. Upgrade Graylog to 6.1.1.
5. Monitor metric `org.graylog2.outputs.ElasticSearchOutput.writes`. Take note of mean/average value. Observe the value is now suddenly 2x of what it was in version 6.0.7.

## Context

This issue impacts monitoring of a Graylog node by causing inaccurate metric values to be logged.

## Your Environment

* Graylog Version: 6.0.7 & 6.1.1
* Java Version: bundled
* OpenSearch Version: 2.15.0
* MongoDB Version: 6.0.7
* Operating System: Docker
* Browser version: Firefox 131.0.3

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.