# Collected documents(logs) are getting deleted in index **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [November 15, 2023, 2:59pm UTC](https://community.graylog.org/t/collected-documents-logs-are-getting-deleted-in-index/30685 "2023-11-15T14:59:38Z")\ **Posts on this page:** 1\ **Showing post:** 7
**Author:** ![patrickmann](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/patrickmann/32/9091_2.png) [@patrickmann](https://community.graylog.org/u/patrickmann)\ **Post date:** [November 16, 2023, 1:40pm UTC](https://community.graylog.org/t/collected-documents-logs-are-getting-deleted-in-index/30685/7 "2023-11-16T13:40:06Z")
Strange. Need more information to figure this out. Right now it’s just guesswork. You pasted settings for the global index set defaults `rotation_strategy` and `elasticsearch_max_time_per_index`. How are the actual indices configured? Are there other errors in the log? Check your ES cluster health as described in related thread: > [@Remove the enterprise and restart : crash with error on gl\_failures index](https://community.graylog.org/t/remove-the-enterprise-and-restart-crash-with-error-on-gl-failures-index/26524/2): > > Hello Can I ask what packages you removed? and as for the error/s WARN [Indices] Couldn't create index gl-failures\_0. Error: No index template provider found for type 'failures' ERROR [IndexRotationThread] Couldn't point deflector to a new index java.lang.RuntimeException: Could not create new target index \. Have you tried check the health, indices, etc… of elasticsearch using cURL? check’s examples Dangling indices curl -X GET http://es\_node:9200/\_dangling?pretty Check c… --- _[View the full topic](https://community.graylog.org/t/collected-documents-logs-are-getting-deleted-in-index/30685)._