Dashboards migration from 3.1 to 3.2

nix-power · May 10, 2021, 8:53pm

Based on Issue with Dashboard after upgrading from 3.1 to 3.2

I have exactly the same error while migrating from 3.1.4 to 3.2.6-1:

Could not retrieve dashboards
Fetching dashboards failed with status: Error: cannot GET http://serverip:9000/api/views/dashboards?query=&page=1&per_page=10&sort=title&order=asc (500)

As suggested in original topic by Konrad Merz i have opened “views” collection from mongodb and searched for “interval” key. It has the the following unit sets in all collection:

"field": "timestamp",
                "type": "time",
                "config": {
                  "interval": {
                    "type": "auto",
                    "scaling": 0.5
                  }
               }

 "field": "timestamp",
                "type": "time",
                "config": {
                  "interval": {
                    "type": "auto",
                    "scaling": 1
                  }
                }
              }

"field": "timestamp",
                "type": "time",
                "config": {
                  "interval": {
                    "type": "timeunit",
                    "value": 1,
                    "unit": "days"

Nothing with “null” or any other possible incompatible character.
I would really appreciate any clue that could help me to fix it.
I can share the whole JSON file with “views” collection. I am in the process of migration graylog from
2.5 ->> 3.1 → 3.2 to 4.0.6
I can not delete dashboards as we have many of them and users use them very often.

nix-power · May 11, 2021, 5:31pm

This is the log file of the first start up of master node migrated to 3,2

2021-05-11T17:27:24.271Z INFO  [CmdLineTool] Loaded plugin: Splunk Output 0.4.0 [com.graylog.splunk.output.SplunkOutputPlugin]
2021-05-11T17:27:24.272Z INFO  [CmdLineTool] Loaded plugin: AlertManager Callback 1.2.1 [de.gdata.mobilelab.alertmanagercallback.AlertManagerAlarmCallback]
2021-05-11T17:27:24.272Z INFO  [CmdLineTool] Loaded plugin: GraylogPluginDatadog 1.0.0 [io.underdog.GraylogPluginDatadogPlugin]
2021-05-11T17:27:24.272Z INFO  [CmdLineTool] Loaded plugin: Aggregates 2.4.0 [org.graylog.plugins.aggregates.AggregatesPlugin]
2021-05-11T17:27:24.273Z INFO  [CmdLineTool] Loaded plugin: Internal Metrics Prometheus Reporter 3.0.0 [org.graylog.plugins.metrics.prometheus.MetricsPrometheusReporterMetaData]
2021-05-11T17:27:24.480Z INFO  [CmdLineTool] Running with JVM arguments: -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -XX:NewRatio=1 -XX:MaxMetaspaceSize=256m -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Xms10363m -Xmx10363m -XX:NewRatio=1 -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Dlog4j.configurationFile=/usr/share/graylog/data/config/log4j2.xml -Djava.library.path=/usr/share/graylog/lib/sigar/ -Dgraylog2.installation_source=docker
2021-05-11T17:27:24.626Z INFO  [Version] HV000001: Hibernate Validator null
2021-05-11T17:27:26.200Z INFO  [InputBufferImpl] Message journal is enabled.
2021-05-11T17:27:26.220Z INFO  [NodeId] Node ID: e70205fc-d014-495c-a194-f00919cd9ce7
2021-05-11T17:27:26.357Z INFO  [LogManager] Loading logs.
2021-05-11T17:27:26.417Z WARN  [Log] Found a corrupted index file, /usr/share/graylog/data/journal/messagejournal-0/00000000001444959543.index, deleting and rebuilding index...
2021-05-11T17:27:27.769Z INFO  [LogManager] Logs loading complete.
2021-05-11T17:27:27.771Z INFO  [KafkaJournal] Initialized Kafka based journal at /usr/share/graylog/data/journal
2021-05-11T17:27:27.787Z INFO  [cluster] Cluster created with settings {hosts=[172.31.208.140:27217, 172.31.224.243:27217, 172.31.240.16:27217], mode=MULTIPLE, requiredClusterType=REPLICA_SET, serverSelectionTimeout='30000 ms', maxWaitQueueSize=5000, requiredReplicaSetName='rs01'}
2021-05-11T17:27:27.787Z INFO  [cluster] Adding discovered server 172.31.208.140:27217 to client view of cluster
2021-05-11T17:27:27.805Z INFO  [cluster] Adding discovered server 172.31.224.243:27217 to client view of cluster
2021-05-11T17:27:27.806Z INFO  [cluster] Adding discovered server 172.31.240.16:27217 to client view of cluster
2021-05-11T17:27:27.842Z INFO  [cluster] No server chosen by com.mongodb.Mongo$4@49c1e294 from cluster description ClusterDescription{type=REPLICA_SET, connectionMode=MULTIPLE, serverDescriptions=[ServerDescription{address=172.31.208.140:27217, type=UNKNOWN, state=CONNECTING}, ServerDescription{address=172.31.224.243:27217, type=UNKNOWN, state=CONNECTING}, ServerDescription{address=172.31.240.16:27217, type=UNKNOWN, state=CONNECTING}]}. Waiting for 30000 ms before timing out
2021-05-11T17:27:27.967Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:7}] to 172.31.224.243:27217
2021-05-11T17:27:27.970Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:15}] to 172.31.208.140:27217
2021-05-11T17:27:27.972Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:3}] to 172.31.240.16:27217
2021-05-11T17:27:27.975Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=172.31.240.16:27217, type=REPLICA_SET_SECONDARY, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 6, 21]}, minWireVersion=0, maxWireVersion=6, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=2324141, setName='rs01', canonicalAddress=172.31.240.16:27217, hosts=[172.31.208.140:27217], passives=[172.31.224.243:27217, 172.31.240.16:27217], arbiters=[], primary='172.31.208.140:27217', tagSet=TagSet{[]}, electionId=null, setVersion=3, lastWriteDate=Tue May 11 17:27:20 UTC 2021, lastUpdateTimeNanos=425419964863561}
2021-05-11T17:27:27.978Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=172.31.224.243:27217, type=REPLICA_SET_SECONDARY, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 6, 21]}, minWireVersion=0, maxWireVersion=6, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=3969201, setName='rs01', canonicalAddress=172.31.224.243:27217, hosts=[172.31.208.140:27217], passives=[172.31.224.243:27217, 172.31.240.16:27217], arbiters=[], primary='172.31.208.140:27217', tagSet=TagSet{[]}, electionId=null, setVersion=3, lastWriteDate=Tue May 11 17:27:20 UTC 2021, lastUpdateTimeNanos=425419962408516}
2021-05-11T17:27:27.978Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=172.31.208.140:27217, type=REPLICA_SET_PRIMARY, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 6, 21]}, minWireVersion=0, maxWireVersion=6, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=3427923, setName='rs01', canonicalAddress=172.31.208.140:27217, hosts=[172.31.208.140:27217], passives=[172.31.224.243:27217, 172.31.240.16:27217], arbiters=[], primary='172.31.208.140:27217', tagSet=TagSet{[]}, electionId=7fffffff0000000000000001, setVersion=3, lastWriteDate=Tue May 11 17:27:20 UTC 2021, lastUpdateTimeNanos=425419963615420}
2021-05-11T17:27:27.979Z INFO  [cluster] Setting max election id to 7fffffff0000000000000001 from replica set primary 172.31.208.140:27217
2021-05-11T17:27:27.979Z INFO  [cluster] Setting max set version to 3 from replica set primary 172.31.208.140:27217
2021-05-11T17:27:27.979Z INFO  [cluster] Discovered replica set primary 172.31.208.140:27217
2021-05-11T17:27:28.001Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:16}] to 172.31.208.140:27217
2021-05-11T17:27:28.143Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <16384> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2021-05-11T17:27:28.272Z INFO  [AbstractJestClient] Setting server pool to a list of 1 servers: [http://127.0.0.1:9200]
2021-05-11T17:27:28.273Z INFO  [JestClientFactory] Using multi thread/connection supporting pooling connection manager
2021-05-11T17:27:28.316Z INFO  [JestClientFactory] Using custom ObjectMapper instance
2021-05-11T17:27:28.316Z INFO  [JestClientFactory] Node Discovery disabled...
2021-05-11T17:27:28.316Z INFO  [JestClientFactory] Idle connection reaping disabled...
2021-05-11T17:27:28.316Z INFO  [JestClientFactory] Authentication cache set for preemptive authentication
2021-05-11T17:27:28.632Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <262144> and wait strategy <BlockingWaitStrategy>.
2021-05-11T17:27:28.878Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:28.895Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <262144> and wait strategy <BlockingWaitStrategy>.
2021-05-11T17:27:28.971Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.054Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.122Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.185Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.248Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.307Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.365Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.422Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.476Z WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2021-05-11T17:27:29.793Z INFO  [ServerBootstrap] Graylog server 3.2.5+b0d3334 starting up
2021-05-11T17:27:29.793Z INFO  [ServerBootstrap] JRE: Oracle Corporation 1.8.0_252 on Linux 5.4.0-1047-aws
2021-05-11T17:27:29.793Z INFO  [ServerBootstrap] Deployment: docker
2021-05-11T17:27:29.793Z INFO  [ServerBootstrap] OS: Debian GNU/Linux 10 (buster) (debian)
2021-05-11T17:27:29.793Z INFO  [ServerBootstrap] Arch: amd64
2021-05-11T17:27:29.812Z INFO  [PeriodicalsService] Starting 32 periodicals ...
2021-05-11T17:27:29.812Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2021-05-11T17:27:29.849Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:19}] to 172.31.208.140:27217
2021-05-11T17:27:29.852Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:18}] to 172.31.208.140:27217
2021-05-11T17:27:29.853Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:17}] to 172.31.208.140:27217
2021-05-11T17:27:29.853Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2021-05-11T17:27:29.854Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.AlertScannerThread] periodical. Not configured to run on this node.
2021-05-11T17:27:29.854Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2021-05-11T17:27:29.854Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2021-05-11T17:27:29.854Z INFO  [Periodicals] Starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical, running forever.
2021-05-11T17:27:29.855Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2021-05-11T17:27:29.855Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2021-05-11T17:27:29.855Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2021-05-11T17:27:29.856Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2021-05-11T17:27:29.856Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2021-05-11T17:27:29.857Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2021-05-11T17:27:29.857Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2021-05-11T17:27:29.858Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2021-05-11T17:27:29.858Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2021-05-11T17:27:29.860Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
2021-05-11T17:27:29.860Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
2021-05-11T17:27:29.860Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2021-05-11T17:27:29.864Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2021-05-11T17:27:29.878Z WARN  [LookupTableService] Unable to load data adapter abuse-ch-ransomware-domains of type abuse-ch-ransom, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.878Z WARN  [LookupTableService] Unable to load data adapter otx-api-ip of type otx-api, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.878Z WARN  [LookupTableService] Unable to load data adapter abuse-ch-ransomware-ip of type abuse-ch-ransom, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.879Z WARN  [LookupTableService] Unable to load data adapter whois of type whois, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.879Z WARN  [LookupTableService] Unable to load data adapter spamhaus-drop of type spamhaus-edrop, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.879Z WARN  [LookupTableService] Unable to load data adapter otx-api-domain of type otx-api, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.879Z WARN  [LookupTableService] Unable to load data adapter tor-exit-node of type torexitnode, missing a factory. Is a required plugin missing?
2021-05-11T17:27:29.894Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:20}] to 172.31.208.140:27217
2021-05-11T17:27:29.896Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:21}] to 172.31.208.140:27217
2021-05-11T17:27:29.899Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:22}] to 172.31.208.140:27217
2021-05-11T17:27:29.901Z INFO  [connection] Opened connection [connectionId{localValue:11, serverValue:23}] to 172.31.208.140:27217
2021-05-11T17:27:29.907Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
2021-05-11T17:27:29.907Z INFO  [Periodicals] Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
2021-05-11T17:27:29.925Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.LdapGroupMappingMigration] periodical. Not configured to run on this node.
2021-05-11T17:27:29.926Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexFailuresPeriodical] periodical, running forever.
2021-05-11T17:27:29.927Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2021-05-11T17:27:29.927Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [3600s].
2021-05-11T17:27:30.025Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2021-05-11T17:27:30.026Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2021-05-11T17:27:30.026Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2021-05-11T17:27:30.028Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2021-05-11T17:27:30.029Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2021-05-11T17:27:30.029Z INFO  [PeriodicalsService] Not starting [org.graylog.plugins.metrics.prometheus.PushGatewayPeriodical] periodical. Not configured to run on this node.
2021-05-11T17:27:30.029Z INFO  [Periodicals] Starting [org.graylog.plugins.aggregates.report.AggregatesReport] periodical in [0s], polling every [60s].
2021-05-11T17:27:30.031Z INFO  [Periodicals] Starting [org.graylog.plugins.aggregates.maintenance.AggregatesMaintenance] periodical in [0s], polling every [60s].
2021-05-11T17:27:30.067Z INFO  [LookupTableService] Cache spamhaus-e-drop-cache/5b4468c7fef8f765d012f867 [@633939ed] STARTING
2021-05-11T17:27:30.070Z INFO  [LookupTableService] Cache spamhaus-e-drop-cache/5b4468c7fef8f765d012f867 [@633939ed] RUNNING
2021-05-11T17:27:30.069Z INFO  [LookupTableService] Cache otx-api-ip-cache/5b4468c7fef8f765d012f868 [@1b5796f3] STARTING
2021-05-11T17:27:30.070Z INFO  [LookupTableService] Cache otx-api-ip-cache/5b4468c7fef8f765d012f868 [@1b5796f3] RUNNING
2021-05-11T17:27:30.070Z INFO  [LookupTableService] Cache threat-intel-uncached-adapters/5b4468c7fef8f765d012f869 [@5d3d129b] STARTING
2021-05-11T17:27:30.071Z INFO  [LookupTableService] Cache threat-intel-uncached-adapters/5b4468c7fef8f765d012f869 [@5d3d129b] RUNNING
2021-05-11T17:27:30.079Z INFO  [LookupTableService] Cache whois-cache/5b4468c7fef8f765d012f86a [@3ddcc454] STARTING
2021-05-11T17:27:30.079Z INFO  [LookupTableService] Cache whois-cache/5b4468c7fef8f765d012f86a [@3ddcc454] RUNNING
2021-05-11T17:27:30.080Z INFO  [LookupTableService] Cache otx-api-domain-cache/5b4468c7fef8f765d012f86b [@12d417e8] STARTING
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table otx-api-ip is referencing a missing data adapter 5b4468c7fef8f765d012f86e, check if it started properly.
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table whois is referencing a missing data adapter 5b4468c7fef8f765d012f870, check if it started properly.
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table tor-exit-node-list is referencing a missing data adapter 5b4468c7fef8f765d012f873, check if it started properly.
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table otx-api-domain is referencing a missing data adapter 5b4468c7fef8f765d012f872, check if it started properly.
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table abuse-ch-ransomware-domains is referencing a missing data adapter 5b4468c7fef8f765d012f86d, check if it started properly.
2021-05-11T17:27:30.083Z WARN  [LookupTableService] Lookup table spamhaus-drop is referencing a missing data adapter 5b4468c7fef8f765d012f871, check if it started properly.
2021-05-11T17:27:30.084Z WARN  [LookupTableService] Lookup table abuse-ch-ransomware-ip is referencing a missing data adapter 5b4468c7fef8f765d012f86f, check if it started properly.
2021-05-11T17:27:30.081Z INFO  [LookupTableService] Cache otx-api-domain-cache/5b4468c7fef8f765d012f86b [@12d417e8] RUNNING
2021-05-11T17:27:30.175Z ERROR [IndexerClusterCheckerThread] Error while trying to check Elasticsearch disk usage.Details: null
2021-05-11T17:27:30.233Z INFO  [JerseyService] Enabling CORS for HTTP endpoint
2021-05-11T17:27:30.256Z ERROR [MigrationHelpers] Invalid role 'Views Manager', fixing it.
2021-05-11T17:27:30.256Z INFO  [MigrationHelpers] Views Manager role is missing or invalid, re-adding it as a built-in role.
2021-05-11T17:27:30.318Z INFO  [V20190127111728_MigrateWidgetFormatSettings] Migration completed. 0 views where migrated.
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.353Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.358Z WARN  [LegacyAlertConditionMigrator] Couldn't migrate unknown legacy alert condition type: Aggregates Alert
2021-05-11T17:27:30.388Z INFO  [V20191121145100_FixDefaultGrokPatterns] Migrating default Grok Pattern 'COMMONAPACHELOG'.
2021-05-11T17:27:31.198Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df1109>
2021-05-11T17:27:31.208Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df110d>
2021-05-11T17:27:31.210Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df1114>
2021-05-11T17:27:31.211Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df1118>
2021-05-11T17:27:31.213Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df111e>
2021-05-11T17:27:31.214Z INFO  [V20200102140000_UnifyEventSeriesId] Unified series Id for EventDefinition <6098728414f7870012df1122>
2021-05-11T17:27:50.162Z INFO  [NetworkListener] Started listener bound to [0.0.0.0:9000]
2021-05-11T17:27:50.163Z INFO  [HttpServer] [HttpServer] Started.
2021-05-11T17:27:50.163Z INFO  [JerseyService] Started REST API at <0.0.0.0:9000>
2021-05-11T17:27:50.164Z INFO  [ServiceManagerListener] Services are healthy
2021-05-11T17:27:50.164Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2021-05-11T17:27:50.164Z INFO  [ServerBootstrap] Services started, startup times in ms: {JobSchedulerService [RUNNING]=9, OutputSetupService [RUNNING]=12, GracefulShutdownService [RUNNING]=13, JournalReader [RUNNING]=13, InputSetupService [RUNNING]=14, BufferSynchronizerService [RUNNING]=16, EtagService [RUNNING]=20, UrlWhitelistService [RUNNING]=20, KafkaJournal [RUNNING]=22, MongoDBProcessingStatusRecorderService [RUNNING]=30, StreamCacheService [RUNNING]=138, PeriodicalsService [RUNNING]=221, LookupTableService [RUNNING]=273, JerseyService [RUNNING]=20352}
2021-05-11T17:27:50.169Z INFO  [ServerBootstrap] Graylog server up and running.
2021-05-11T17:27:50.213Z INFO  [InputStateListener] Input [Beats (deprecated)/58a571e7987563045eefd6ec] is now STARTING
2021-05-11T17:27:50.215Z INFO  [InputStateListener] Input [GELF TCP/5b5de9ffe7927a57f2244095] is now STARTING
2021-05-11T17:27:50.216Z INFO  [InputStateListener] Input [GELF TCP/5aa27087e7927a74c50aa6de] is now STARTING
2021-05-11T17:27:50.217Z INFO  [InputStateListener] Input [Beats (deprecated)/586a099e6420ff045948837a] is now STARTING
2021-05-11T17:27:50.219Z INFO  [InputStateListener] Input [Beats (deprecated)/5a12c921fef8f719ec16065a] is now STARTING
2021-05-11T17:27:50.221Z INFO  [InputStateListener] Input [Beats (deprecated)/5891a5243a393a38aabe3946] is now STARTING
2021-05-11T17:27:50.222Z INFO  [InputStateListener] Input [Beats (deprecated)/5cea44e4afbc9636900ecb2c] is now STARTING
2021-05-11T17:27:50.272Z INFO  [InputStateListener] Input [Beats (deprecated)/5cea44e4afbc9636900ecb2c] is now RUNNING
2021-05-11T17:27:50.274Z INFO  [InputStateListener] Input [Beats (deprecated)/5891a5243a393a38aabe3946] is now RUNNING
2021-05-11T17:27:50.276Z INFO  [InputStateListener] Input [GELF TCP/5aa27087e7927a74c50aa6de] is now RUNNING
2021-05-11T17:27:50.277Z INFO  [InputStateListener] Input [Beats (deprecated)/58a571e7987563045eefd6ec] is now RUNNING
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input BeatsInput{title=MY beats, type=org.graylog.plugins.beats.BeatsInput, nodeId=null} (channel [id: 0x8a62bd46, L:/0:0:0:0:0:0:0:0%0:12905]) should be 12582912 but is 25165824.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input GELFTCPInput{title=Fluentd-GELF, type=org.graylog2.inputs.gelf.tcp.GELFTCPInput, nodeId=null} (channel [id: 0xde0315be, L:/0:0:0:0:0:0:0:0%0:12201]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input GELFTCPInput{title=saltstack_events, type=org.graylog2.inputs.gelf.tcp.GELFTCPInput, nodeId=null} (channel [id: 0x57068bc3, L:/0:0:0:0:0:0:0:0%0:12901]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input BeatsInput{title=beats, type=org.graylog.plugins.beats.BeatsInput, nodeId=null} (channel [id: 0xf19ad236, L:/0:0:0:0:0:0:0:0%0:12902]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input BeatsInput{title=beats prx, type=org.graylog.plugins.beats.BeatsInput, nodeId=null} (channel [id: 0xaf014ac2, L:/0:0:0:0:0:0:0:0%0:12904]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input BeatsInput{title=beats netProbe, type=org.graylog.plugins.beats.BeatsInput, nodeId=null} (channel [id: 0x7c991d3a, L:/0:0:0:0:0:0:0:0%0:12906]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.278Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input BeatsInput{title=beats netsec, type=org.graylog.plugins.beats.BeatsInput, nodeId=null} (channel [id: 0x9a6d48ac, L:/0:0:0:0:0:0:0:0%0:12903]) should be 1048576 but is 2097152.
2021-05-11T17:27:50.279Z INFO  [InputStateListener] Input [GELF TCP/5b5de9ffe7927a57f2244095] is now RUNNING
2021-05-11T17:27:50.281Z INFO  [InputStateListener] Input [Beats (deprecated)/5a12c921fef8f719ec16065a] is now RUNNING
2021-05-11T17:27:50.282Z INFO  [InputStateListener] Input [Beats (deprecated)/586a099e6420ff045948837a] is now RUNNING
2021-05-11T17:27:58.871Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 1.3.6.1.4.1.18060.0.0.1
2021-05-11T17:27:58.871Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.7
2021-05-11T17:27:58.872Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.2
2021-05-11T17:27:58.872Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.18
2021-05-11T17:27:58.872Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 1.2.840.113556.1.4.319
2021-05-11T17:27:58.873Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.3
2021-05-11T17:27:58.873Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.10.1
2021-05-11T17:27:58.874Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 1.2.840.113556.1.4.473
2021-05-11T17:27:58.874Z INFO  [DefaultLdapCodecService] Registered pre-bundled control factory: 1.2.840.113556.1.4.474
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.18060.0.0.1
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.7
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.2
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.18
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.319
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.3
2021-05-11T17:27:58.875Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.10.1
2021-05-11T17:27:58.876Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.42.2.27.8.5.1
2021-05-11T17:27:58.876Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.9
2021-05-11T17:27:58.876Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 2.16.840.1.113730.3.4.10
2021-05-11T17:27:58.877Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.9.1.3
2021-05-11T17:27:58.877Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.9.1.4
2021-05-11T17:27:58.877Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.9.1.1
2021-05-11T17:27:58.878Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.3.6.1.4.1.4203.1.9.1.2
2021-05-11T17:27:58.878Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.473
2021-05-11T17:27:58.878Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.474
2021-05-11T17:27:58.878Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.841
2021-05-11T17:27:58.879Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.417
2021-05-11T17:27:58.879Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.1413
2021-05-11T17:27:58.880Z INFO  [CodecFactoryUtil] Registered pre-bundled control factory: 1.2.840.113556.1.4.528
2021-05-11T17:27:58.881Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.1.8
2021-05-11T17:27:58.881Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.18060.0.1.8
2021-05-11T17:27:58.882Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.18060.0.1.3
2021-05-11T17:27:58.882Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.18060.0.1.6
2021-05-11T17:27:58.883Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.18060.0.1.5
2021-05-11T17:27:58.884Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.4203.1.11.1
2021-05-11T17:27:58.885Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.4203.1.11.3
2021-05-11T17:27:58.885Z INFO  [CodecFactoryUtil] Registered pre-bundled extended operation factory: 1.3.6.1.4.1.1466.20037

nix-power · May 11, 2021, 5:37pm

And this is what i see in Debug console on “Dashboards” page

nix-power · May 11, 2021, 6:14pm

Here is a JSON file of ‘views’ collection

nix-power · May 12, 2021, 11:54pm

I have found the issue ( for whoever it could be interesting ). After deep analyzing of widgets in dashboards and multiple attempts to play with mongo dump/restore i have found out the following:
Several of my pre-3.2.x dashboards had issues that prevented Graylog from upgrading them to 3.2 successfully:

In several widgets in relative range appeared “0” (meaning search in all messages available in elastic), This setting is not working good with 3.2.x and further. Just remove/reconfigure the widgets before an upgrade
In one or two other widgets was configuration ambiguity: i.e search interval was defined as 17200, but grouping interval has been defined to something like month or year, meaning being bigger than whole search
After fixing these inconsistencies all dashboard successfully migrated by Graylog in 3.2

system · May 26, 2021, 11:54pm

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Solution to Dashboard issue after 3.2 upgrade Graylog Central (peer support)	3	1069	April 15, 2020
Still experiencing Dashboard issue after 3.2 upgrade Graylog Central (peer support)	12	1062	August 28, 2020
Lost All dashboards after upgrade from 3.1.x to 3.3.5 Graylog Central (peer support)	5	667	October 1, 2020
All dashboards lost after upgrade from 3.1.x to 3.2.1 Graylog Central (peer support)	10	1155	March 2, 2020
All dashboards and Search Queries lost after to 3.2.1 Graylog Central (peer support)	4	839	March 2, 2020

Dashboards migration from 3.1 to 3.2

Related Topics