Can't see restored indices

Hi, I’m using Graylog 2.4.6. When i restore an index with a specific date, i can see it’s name in stream page’s used indices list.

But when i try using time selector to see messages in that index, nothing shows up.

Yes i checked that they are open or not, they are open, and i can see them all in restored_ index set.

I have recalculated restored_ index set, graylog_ index set but nothing have changed. Then i restarted elasticsearch and graylog services, but again nothing happened.

Could you help me with this?

With restoring you index sets, was your retention strategy set to close then you opened them? or did you migrate/import your indices to this Graylog server?
Do you see anything in your log files?

Recently i have changed some index settings then i figured out that logs are coming with period difference. I mean, if i want to restore 1 January, i must restore 16 january.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.