Problem is I can’t find that setting. The documentation only talks about the web interface, but that seems to have changed. I searched the Configurations site with strg + f for “fail” with no result.
Version: Graylog 5.1.5
To my understanding there should be (as of ~ Aug 4, 2022) an option to enable storing messages where indexing failed. But I can’t find any hint of that in my Graylog. Is it an Enterprise feature?
Edit:
I guess almost, Operations seems to be another type of paid plan If I understand this correctly.