access "Home" very slow

[winsonlee]

when click "Home" or new login,it need about 1 min, what can I do to fix this problem?

[jdunitz]

Could you PM a system profile?

You can generate one from the command line, like so:

Code: Select all

/usr/local/nagioslogserver/scripts/profile.sh

Then, you should find the file we need in /tmp.

Thanks!

[winsonlee]

already send profile via pm

[ssax]

Please run this command as root and leave it running:

Code: Select all

tail -Fn0 /var/log/httpd/error_log /var/log/httpd/ssl_error_log

Then replicate the delay behavior and once you're finished logging in PM me the full output of that command.

Thank you!

[jdunitz]

We didn't see anything in your profile that would indicate a serious problem.

You might try going through this document:
https://support.nagios.com/kb/article.php?id=132

Let us know if that helps.

--Jeffrey

[winsonlee]

We didn't see anything in your profile that would indicate a serious problem.

You might try going through this document:
https://support.nagios.com/kb/article.php?id=132

Let us know if that helps.

--Jeffrey

i change php.ini memory_limit to 512M, it still very slow, and "Number of Logs Per 15 minutes" show "no data to display".

my index primary size is 320GB and docs count about 340,000,000 per day, and we have 4 log server node and shards number is 5 now
should i increase shards number or do something?

[ssax]

Please send the output of this command:

Code: Select all

cat /etc/sysconfig/logstash

Please send us a screenshot of your current settings in Admin > Snapshots and Maintenance.

I also see that you have a lot of large indices open, I recommend that you setup Snapshots and Maintenance to close indices older than 5 days if they are that large. See here:

https://assets.nagios.com/downloads/nag ... enance.pdf

[winsonlee]

###############################
# Default settings for logstash
###############################

# Override Java location
#JAVACMD=/usr/bin/java

# Set a home directory
APP_DIR=/usr/local/nagioslogserver
LS_HOME="$APP_DIR/logstash"

# set ES_CLUSTER
ES_CLUSTER=$(cat $APP_DIR/var/cluster_uuid)

# Arguments to pass to java
#LS_HEAP_SIZE="256m"
LS_HEAP_SIZE="2G"
LS_JAVA_OPTS="-Djava.io.tmpdir=$APP_DIR/tmp"

# Logstash filter worker threads
#LS_WORKER_THREADS=1

# pidfiles aren't used for upstart; this is for sysv users.
#LS_PIDFILE=/var/run/logstash.pid

# user id to be invoked as; for upstart: edit /etc/init/logstash.conf
LS_USER=nagios
LS_GROUP=nagios

# logstash logging
#LS_LOG_FILE=/var/log/logstash/logstash.log
#LS_USE_GC_LOGGING="true"

# logstash configuration directory
LS_CONF_DIR="$LS_HOME/etc/conf.d"

# Open file limit; cannot be overridden in upstart
#LS_OPEN_FILES=2048

# Nice level
#LS_NICE=0

# Increase Filter workers to 4 threads
LS_OPTS=" -w 4"

if [ "x$1" == "xstart" -o "x$1" == "xrestart" -o "x$1" == "xreload" ];then
GET_LOGSTASH_CONFIG_MESSAGE=$( php /usr/local/nagioslogserver/scripts/get_logstash_config.php )
GET_LOGSTASH_CONFIG_RETURN=$?
if [ "$GET_LOGSTASH_CONFIG_RETURN" != "0" ]; then
echo $GET_LOGSTASH_CONFIG_MESSAGE
exit 1
fi
fi

[ssax]

Please send us a screenshot of your current settings in Admin > Snapshots and Maintenance.

Did you do this?

I also see that you have a lot of large indices open, I recommend that you setup Snapshots and Maintenance to close indices older than 5 days if they are that large. See here:

https://assets.nagios.com/downloads/nag ... enance.pdf

Additionally, attach your /etc/php.ini as well.

[winsonlee]

/etc/php.ini is default, except "memory_limit" change to 512M, plz see attached file