Suspect that something may be amiss. Google’d, checked docs, etc. For example, take any of the ‘out of the box’ content packs - install one. They create (amongst other things) table, cache adapters and data adapters. On the flip side, if you try to delete/uninstall the content pack - it appears that something doesn’t happen correctly - because the server logs will fill, fast and hard with a metric ton of warning messages. Even more interesting is that any lookup table that [apparently] was created after that content pack was installed and removed prior to trying to remove the content pack - is now “stuck”. eg: you remove that lookup table (no log issues/errors) but when you try to remove the content pack, that other lookup table now adds even more fury to the logging action occurring with the server log.
Noticed another interesting side effect - one can ?“double install”? the same content pack… Would think that you could only have one “version” of a content pack installed.
Have a suspicion that when a lookup table/cache adapter/data adapter is removed from graylog - that it’s still “stuck” inside mongodb (at least from what can be gleaned of how things work). If that’s correct, how does one clean that up? How is this process expected to work? Unfortunately, there’s simply not enough information in the graylog documentation. Hoping someone’s been down this path previously and has some good pointers on how to correct - short of uninstall and re-install.
Thanks!