# Configured Extractors disappearing **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [August 25, 2022, 5:51pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463 "2022-08-25T17:51:27Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![knobbysideup](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@knobbysideup](https://community.graylog.org/u/knobbysideup)\ **Post date:** [August 25, 2022, 5:51pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/1 "2022-08-25T17:51:27Z")
Graylog server version 4.3.5. Recently upgraded from 4.2 making note of config changes in the changelog. Today I added a grok extractor on one of my inputs. It was in place and doing what it is supposed to do. Then when I went to add another, my first seems to have disappeared. “Maybe I didn’t save properly from a tab” I thought to myself. So I added my second extractor. That extractor is also working properly. Go back to the extractors page. Neither is present. I re-add under different names, and now the original two show up again. If I navigate away, however, now the new extractor has also disappeared from the list. Of note is that despite not showing up in the extractor list (unless I add another extractor, but then all new extractors disappear again when navigating away from the page), the extractors continue to function, pulling the fields that I need. I’ve tried stopping and restarting both graylog-server and mongod and still have the problem. I have no idea what is going on here. Please help! ---
**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\ **Post date:** [August 25, 2022, 7:48pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/2 "2022-08-25T19:48:50Z")
Random guess - Graylog has cached parts in the web browser. Shift-f5 usually reloads the tab and clears cache… 🤞 ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [August 25, 2022, 10:13pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/3 "2022-08-25T22:13:26Z")
Hello, Agree /w @tmacgbay also you could try using a different browser. ---
**Author:** ![knobbysideup](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@knobbysideup](https://community.graylog.org/u/knobbysideup)\ **Post date:** [August 26, 2022, 12:17pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/4 "2022-08-26T12:17:42Z")
I tried incognito, and also a different browser. I also used my phone, and used different login accounts. The problem persists with all of these things. It certainly doesn’t look to be browser related. Sort and Export options also do not show the new extractors. What else could this be on the server end? Today I may try the kludge to get the full display, export, delete everything, then import. If that doesn’t work, I guess downgrade to 4.2.9 (again). ---
**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\ **Post date:** [August 26, 2022, 2:07pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/5 "2022-08-26T14:07:08Z")
Strange - Anything unique about your installation? Anything in the Graylog Server logs worth noting? ---
**Author:** ![knobbysideup](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@knobbysideup](https://community.graylog.org/u/knobbysideup)\ **Post date:** [August 26, 2022, 2:56pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/6 "2022-08-26T14:56:47Z")
Nothing in the logs is standing out. Earlier today I created a random extractor for a different stream, and that one seems to be OK. I noticed that the stream for the disappearing extractors were not shared with anybody, so I made it everyone/view, then re-created the extractor. The problem persists. ---
**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\ **Post date:** [August 26, 2022, 4:53pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/7 "2022-08-26T16:53:50Z")
How about Mongo logs? tail –f /var/log/mongodb/mongod.log Graylog keeps settings in there… cross my fingers on both hands this time and hope we find something… ---
**Author:** ![knobbysideup](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@knobbysideup](https://community.graylog.org/u/knobbysideup)\ **Post date:** [August 26, 2022, 7:15pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/8 "2022-08-26T19:15:03Z")
I figured it out. I’m dumb. I was adding the extractors to the wrong input. Graylog was figuring out the correct one and placinig my extractors there. Hence the reason I would see them immediately and then they would ‘disappear’. Graylog was showing me the place that I actually placed the extractors, and I just now realized the title for that page was different. Thanks all for looking into this with me! Sometimes it just takes a few different sets of eyes before I have my aha! moment. It did not even occur to me that my vpn stuff (the thing I was writing the extractor for) was on the firewall input, not my general rsyslog input. What made it not obvious is the list extractors on both are nearly identical. I will rename the extractors for the firewall input to give me those cues going forward. ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [August 26, 2022, 9:36pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/9 "2022-08-26T21:36:19Z")
> [@knobbysideup](#): > > I figured it out. I’m dumb. > > I was adding the extractors to the wrong input. Graylog was figuring out the correct one and placinig my extractors there. Hence the reason I would see them immediately and then they would ‘disappear’. Graylog was showing me the place that I actually placed the extractors, and I just now realized the title for that page was different. 😆 I’ve been there, glad you resolved your issue. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [September 9, 2022, 9:36pm UTC](https://community.graylog.org/t/configured-extractors-disappearing/25463/10 "2022-09-09T21:36:41Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.