Hey everyone, we receive following error in Graylog: “Error in Deflector exists as an index and is not an alias. (triggered an hour ago)
The deflector is meant to be an alias but exists as an index. Multiple failures of infrastructure can lead to this. Your messages are still indexed but searches and all maintenance tasks will fail or produce incorrect results”.
Also, under System/Overview in log this is replicating “There is no index target to point to. Creating one now”.
We are running Elasticsearch 1.7.3, Mongodb 3.4.15, and Graylog-Server 2.3.2 on Ubuntu Server 16.04. All is running on same server.
We already tried to stop graylog service, running curl -X DELETE ‘http://127.0.0.1:9200/graylog_deflector’ and restarting service but no avail.
Also this from Local Inputs - Syslog UDP Traffic (yes, we modified rsyslog.conf for binding address and changed port 5140):
This is our first Graylog server so I am new at this. Any help will be greatly appreciated. Hope to get over this hurdle soon. It’s getting really late here.