I have the samequestion as in this post: Deleted Messages - Indices
I do not have an explication why this number is varying around ~8000
I do not have a script that is deleting messages or somthing like that.
This is the defaul index set.
I have another index set that is on 0 deleted messages:
Is somehow graylog is indexing documents and than is updating them again, maybe to remove .
I am just saying,
When I put “Pause messaging Processing” on every node, it does not show deleting messages anymore, so, the graylog nodes must doing something.
Graylog 2.4 with ES 2.4 .