Hello,
We have recently upgraded all the servers to 1.2.1 (graylog server and web
interface) from the previous 1.16.1 version.
We encountered an issue on the production graylog server, where it keeps
adding messages to the disk journal, but it never flushes them to ES.
Everything is green, no errors or warning on startup, new index is created
at startup.
We noticed that the index range for the new index is kind of strange :
"_source":{"gl2_index_range_index_name":"graylog2_118","gl2_index_range_begin":"1970-01-01T00:00:00.000Z","gl2_index_range_end":"1970-01-01T00:00:00.000Z","gl2_index_range_calculated_at":"2015-10-08T13:18:05.920Z","gl2_index_range_took_ms":1}
No matter how many times we recalculate the index, the range still begins
and ends with 1970.
Might it be that because the current write active index has a range from
1970, it will not flush the journal messages that do not respect this range
?
We have tried to delete and recreate the index, but the new ones have the
same range.
At one particular startup, we noticed the log :
2015-10-08 13:39:34,789 WARN :
org.graylog2.indexer.ranges.EsIndexRangeService - Couldn't load index range
for index graylog2_120
2015-10-08 13:39:34,919 INFO :
org.graylog2.periodical.IndexRangesMigrationPeriodical - Migrating index
range from MongoDB: IndexRange{indexName=graylog2_120,
begin=1970-01-01T00:00:00.000Z, end=2015-10-08T11:35:07.000Z,
calculatedAt=1970-01-01T00:00:00.000Z, calculationDuration=0}
We tried to remove any saved index ranges from mongoDB that did not have
all the fields valid, but we still have the same issue, and we did not
receive this log after that.
Any suggestions on how we could recover this situation ?
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/b87cb1a0-5d4e-41cc-a618-c422a96c0fef%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
