Can't see restored indices

Graylog Central (peer support)
1

Hi, I’m using Graylog 2.4.6. When i restore an index with a specific date, i can see it’s name in stream page’s used indices list.

But when i try using time selector to see messages in that index, nothing shows up.

Yes i checked that they are open or not, they are open, and i can see them all in restored_ index set.

I have recalculated restored_ index set, graylog_ index set but nothing have changed. Then i restarted elasticsearch and graylog services, but again nothing happened.

Could you help me with this?

2

@ithfdemir
Hello,
With restoring you index sets, was your retention strategy set to close then you opened them? or did you migrate/import your indices to this Graylog server?
Do you see anything in your log files?

3

Recently i have changed some index settings then i figured out that logs are coming with period difference. I mean, if i want to restore 1 January, i must restore 16 january.

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.