Thank you for the added info. I’ll look at closer when I get time from Graylog GO . Real quick, last time I seen this was from this post sum it up it elastic Couldn't point deflector to a new index org.graylog2.indexer.ElasticsearchException elasticsearch couldn't point deflector to a new index - #2 by tmacgbay