Hi Eugene, the index cycling/rotation and the index retention are two separate processes. This means that old indices are not automatically deleted (which is your current retention strategy) when an index cycle occurs.
Are there any error messages in your Graylog server logs? Cheers, Jochen On Friday, 24 July 2015 12:08:18 UTC+2, Eugene Prokopiev wrote: > > Due to https://groups.google.com/forum/#!topic/graylog2/Won5E6G9WJI I > tried to add extra debugging for IndexRetentionThread, but I see only: > > 2015-07-24T12:00:12.195+04:00 INFO [Periodicals] Starting > [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling > every [300s]. > 2015-07-24T12:00:12.196+04:00 INFO [IndexRetentionThread] Elasticsearch > cluster not available, skipping index retention checks. > > It is very strange because elasticsearch cluster works and messages are > saved in it. > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
