Hi Kenneth,

retention currently only works on index-level, not on stream-level.

What exactly do you mean with disappears? Can you still find the message 
via the universal search? Is the index containing the message still 


On Thursday, 22 September 2016 05:03:45 UTC+2, Kenneth Gyan wrote:
> I have setup host devices consisting of routers and switches and the logs 
> are been collected in the input with no issues. I have setup a stream to 
> capture syslog messages with level 0-4. Whenever this condition is met, and 
> it captures the syslog message in the stream, after some time (about a 
> couple of hours), the message/s in the stream just disappears and I am 
> trying to figure out why this is happening. Could it be a stream retention 
> time that needs to be set? Any assistance on this will be helpful. Thank 
> you. 

You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to