# Couldn't find index

**URL:** <https://community.graylog.org/t/couldnt-find-index/12740>\
**Category:** Graylog Central (peer support)\
**Created:** [November 13, 2019, 4:02am UTC](https://community.graylog.org/t/couldnt-find-index/12740 "2019-11-13T04:02:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![tharu85](https://avatars.discourse-cdn.com/v4/letter/t/e95f7d/32.png) [@tharu85](https://community.graylog.org/u/tharu85)\
**Post date:** [November 13, 2019, 4:02am UTC](https://community.graylog.org/t/couldnt-find-index/12740/1 "2019-11-13T04:02:02Z")

</div>

Hi,

I have a working graylog server with 2 elastic node which configured as a cluster.

Few days back I got following error  
“ERROR [MessageCountRotationStrategy] Unknown index, cannot perform rotation  
org.graylog2.indexer.IndexNotFoundException: Couldn’t find index graylog\_3034”

and currently no logs were write to elasticsearch cluster. all logs in buffer are dropping

below are the proper log file for references

2019-11-13T08:58:35.565+05:30 ERROR [MessageCountRotationStrategy] Unknown index, cannot perform rotation  
org.graylog2.indexer.IndexNotFoundException: Couldn’t find index graylog\_3034  
at org.graylog2.indexer.indices.Indices.numberOfMessages(Indices.java:192) ~[graylog.jar:?]  
at org.graylog2.indexer.rotation.strategies.MessageCountRotationStrategy.shouldRotate(MessageCountRotationStrategy.java:66) ~[graylog.jar:?]  
at org.graylog2.indexer.rotation.strategies.MessageCountRotationStrategy.shouldRotate(MessageCountRotationStrategy.java:34) ~[graylog.jar:?]  
at org.graylog2.indexer.rotation.strategies.AbstractRotationStrategy.rotate(AbstractRotationStrategy.java:65) ~[graylog.jar:?]  
at org.graylog2.periodical.IndexRotationThread.checkForRotation(IndexRotationThread.java:113) ~[graylog.jar:?]  
at org.graylog2.periodical.IndexRotationThread.lambda$doRun$0(IndexRotationThread.java:77) ~[graylog.jar:?]  
at java.lang.Iterable.forEach(Iterable.java:75) [?:1.8.0\_232]  
at org.graylog2.periodical.IndexRotationThread.doRun(IndexRotationThread.java:73) [graylog.jar:?]  
at org.graylog2.plugin.periodical.Periodical.run(Periodical.java:77) [graylog.jar:?]  
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0\_232]  
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0\_232]  
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) [?:1.8.0\_232]  
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) [?:1.8.0\_232]  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0\_232]  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0\_232]  
at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_232]

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [November 13, 2019, 11:23am UTC](https://community.graylog.org/t/couldnt-find-index/12740/2 "2019-11-13T11:23:25Z")

</div>

it looks like graylog has in the configuration (mongodb) the information that the current index is `graylog_3034` but that us not present in elasticsearch anymore.

could you run a manual index rotation? `System > indices > index name > maintenance > rotate active write index`

Does that help?

---

<div class="post-metadata">

**Author:** ![tharu85](https://avatars.discourse-cdn.com/v4/letter/t/e95f7d/32.png) [@tharu85](https://community.graylog.org/u/tharu85)\
**Post date:** [November 13, 2019, 11:25am UTC](https://community.graylog.org/t/couldnt-find-index/12740/3 "2019-11-13T11:25:35Z")

</div>

I just delete the last index which is graylog\_3034 and restart the graylog server. Issue has been resolved

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [November 27, 2019, 11:37am UTC](https://community.graylog.org/t/couldnt-find-index/12740/4 "2019-11-27T11:37:54Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.