Try removing the entire nodes directory and restarting Elasticsearch. ES should rebuild the nodes directory.
On Wednesday, November 23, 2016 at 4:17:11 AM UTC-6, [email protected] wrote: > > We're using 2.1 OVA and ran out of space. Due to a lack of knowledge all > the index directories under > /var/opt/graylog/data/elasticsearch/graylog/nodes/0/indices/graylog_0 were > deleted. We now only have _state in there, before there were three > directories 0, 1 & 3. > > We can't go to System\Indices and when choosing Search we get: > Error Message:Unable to execute > searchException:org.elasticsearch.action.search.SearchPhaseExecutionException > > The log under /var/log/graylog/server/current shows: > > 2016-11-23_04:51:30.13483 2016-11-23 05:51:30,134 ERROR: > org.graylog2.indexer.rotation.strategies.AbstractRotationStrategy - Cannot > perform rotation at this moment. > 2016-11-23_04:51:40.13652 2016-11-23 05:51:40,136 ERROR: > org.graylog2.indexer.rotation.strategies.MessageCountRotationStrategy - > Unknown index, cannot perform rotation > 2016-11-23_04:51:40.13654 org.graylog2.indexer.IndexNotFoundException: > Couldn't find index graylog_0 > > > We tried to manually cycling the deflector, but it didn't help: > curl -XPOST *http://127.0.0.1:9000/api/system/deflector/cycle* > <http://127.0.0.1:9000/api/system/deflector/cycle> > > Multiple reboots were performed, but the situation is the same. We don't > care about the previous data, but would just like to get the server up and > running. > > Please assist. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/e3d23263-cd0c-4e33-a73a-42bf766752b0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
