Fix memory leak by limiting internal message queue size

This commit addresses GitHub issue #61 where memory usage keeps increasing
and garbage collection fails, eventually causing node crashes after several days.

Root Cause:
The syslog4j library queues messages internally with no limit by default when
using TCP/SSL protocols. Under high message throughput, this causes unbounded
memory growth leading to OOM errors.

Solution:
1. Added maxQueueSize configuration parameter (default: 500 messages)
2. Set maxQueueSize on all syslog config objects (UDP/TCP/SSL)
3. Made the parameter user-configurable through Graylog UI

The conservative default of 500 prevents memory leaks while still allowing
reasonable buffering. Users experiencing high throughput can tune this value
based on their needs, but should avoid unlimited queuing (-1).

When the queue is full, the plugin will block until space is available,
providing natural backpressure instead of consuming all available memory.

Configuration:
- Default: 500 messages
- Configurable via "Maximum queue size" field in output configuration
- Set to -1 for unlimited (not recommended, will cause OOM)

Fixes #61

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: claude

src/main/java/com/wizecore/graylog2/plugin/SyslogOutput.java

@@ -18,6 +18,7 @@
 import org.graylog2.syslog4j.SyslogConfigIF;
 import org.graylog2.syslog4j.SyslogIF;
 import org.graylog2.syslog4j.SyslogRuntimeException;
+import org.graylog2.syslog4j.impl.AbstractSyslogConfigIF;
 import org.graylog2.syslog4j.impl.message.processor.SyslogMessageProcessor;
 import org.graylog2.syslog4j.impl.message.processor.structured.StructuredSyslogMessageProcessor;
 import org.graylog2.syslog4j.impl.net.tcp.TCPNetSyslogConfig;
@@ -143,6 +144,23 @@ public SyslogOutput(@Assisted Stream stream, @Assisted Configuration conf) {
 		config.setMaxMessageLength(maxlen);
 		config.setTruncateMessage(true);
 
+		// Set maximum queue size to prevent OOM under high load (issue #61)
+		// Default is unlimited which causes memory leaks
+		int maxQueueSize = 500; // Conservative default
+		try {
+			String queueSizeStr = conf.getString("maxQueueSize");
+			if (queueSizeStr != null && !queueSizeStr.trim().isEmpty()) {
+				maxQueueSize = Integer.parseInt(queueSizeStr);
+			}
+		} catch (Exception e) {
+			log.warning("Failed to parse maxQueueSize, using default: " + maxQueueSize);
+		}
+		// setMaxQueueSize is available on AbstractSyslogConfigIF, which all configs implement
+		if (config instanceof AbstractSyslogConfigIF) {
+			((AbstractSyslogConfigIF) config).setMaxQueueSize(maxQueueSize);
+			log.info("Set maxQueueSize to " + maxQueueSize + " for " + protocol + "://" + host + ":" + port);
+		}
+
 		String hash = protocol + "_" + host + "_" + port + "_" + format;
 		syslog = Syslog.exists(hash) ? Syslog.getInstance(hash) : Syslog.createInstance(hash, config);
 
@@ -320,6 +338,8 @@ public ConfigurationRequest getRequestedConfiguration() {
 
 			configurationRequest.addField(new TextField("maxlen", "Maximum message length", "", "Maximum message (body) length. Longer messages will be truncated. If not specified defaults to 16384 bytes.", ConfigurationField.Optional.OPTIONAL));
 
+			configurationRequest.addField(new TextField("maxQueueSize", "Maximum queue size", "500", "Maximum number of messages to queue internally before blocking (prevents OOM). Set to -1 for unlimited (not recommended). Default is 500.", ConfigurationField.Optional.OPTIONAL));
+
 			configurationRequest.addField(new TextField("keystore", "Key store", "", "Path to Java keystore (required for SSL over TCP). Must contain private key and cert for this client.", ConfigurationField.Optional.OPTIONAL));
 			configurationRequest.addField(new TextField("keystorePassword", "Key store password", "", "", ConfigurationField.Optional.OPTIONAL));