<https://lh3.googleusercontent.com/-1sW8Wn_W8qc/WFAmtzmNe2I/AAAAAAAAtUk/SYghaYB-1z4Taz6IjVmjUZLNh1lUhbMWgCLcB/s1600/Screen%2BShot%2B2016-12-13%2Bat%2B10.44.30%2BAM.png> I can see that this is being ingested on a 'deleted_input'. See attached screenshot.
Any clue on why this is happening and how I can move out of a 'deleted_input'? On Tuesday, December 13, 2016 at 10:16:37 AM UTC-6, Jason Close wrote: > > I'm trying to play around with some of the marketplace stuff, and I've > found a problem. > > I have created a Syslog UDP input on a particular port, and have named it > 'IIS'. > > I let it run, and it was working great. > > I then deleted it, and later came back and recreated that same input. > > Now, I cannot get data to show up when I query the received messages for > that input, no matter the time range. > > Is it possible that something is not getting properly updated or deleted > within the config of Graylog that tells it which input buffer to look in? > > I looked at the old 'gl2_source_input' identifier, as well as the new one, > and they are indeed different. But with 1k EPS coming in for that input, I > should definitely see immediate data. > > How can we determine what kind of bug this is? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/aaa637e9-ecbf-4568-87d3-a12681c3015b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
