Defector index issue

Graylog Central (peer support)
1

Hi,

I’m seening this messages continualy:

Deflector exists as an index and is not an alias. (triggered in 2 minutes)

The deflector is meant to be an alias but exists as an index. Multiple failures of infrastructure can lead to this. Your messages are still indexed but searches and all maintenance tasks will fail or produce incorrect results. It is strongly recommend that you act as soon as possible.

I’ve done this for fix but nothing result:

  • Stop graylog
  • Stop mongodb
  • Delete index "deflector
  • Star mongo
  • Star graylog

I have this error…can you help me, please?

Graylog v3.2.2+2f9a628

Elasticsearch version

“version” : {
“number” : “7.6.1”,
“build_flavor” : “default”,
“build_type” : “deb”,
“build_snapshot” : false,
“lucene_version” : “8.4.0”,
“minimum_wire_compatibility_version” : “6.8.0”,
“minimum_index_compatibility_version” : “6.0.0-beta1”

Regards

2

he @santi

we have covered that in the docs

https://docs.graylog.org/en/3.2/pages/faq.html#how-do-i-fix-the-deflector-exists-as-an-index-and-is-not-an-alias-error-message

3

Ok, but I’ve configured (add line) this line within file elasticsearch.yml

action.auto_create_index: .watches,.triggered_watches,.watcher-history-*

This this I’ve fixed the issue.

Regards
Santi

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.