So, it seems the issue was caused by a corrupt journal file. It was a coincidence that i upgraded to the new version just a day before. I tried to play around with the journal file properties and change some information so it would try to read from the beginning of the journal, or at least to skip the corrupt part and try to recover after that but i was not able to succeed. Final solution was to remove the journal file and admit defeat :) That worked and the index was initialized correctly. One interesting part would be that at each range scan, it would "insert dummy range for current deflector". This would happen at each range scan, and I would guess that this operation would never actually take place and this is why I would see the 1970 default timestamp. If I will be able to reproduce the issue I'll try to submit a bug report.
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1eedd610-3d1a-44a5-a699-a3009add71bd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
