Graylog and Gmail

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
I am trying to integrate gmail into graylog. I already integrated google workspace and it worked fine. Now that I’m integrating gmail, I keep getting this error:

[BigQueryService] Exception Occurred while deleting tables older than checkpoint timeNot found: Dataset gray-111333:gmail_dataset (real data changed).
[GmailClient] Exception Occurred while listing Available Tables in BigQuery Not found: Dataset gray-111333:gmail_dataset

No logs are reported.

I’m following these instructions:
https://docs.graylog.org/docs/google-input
And using the same project I used for the Google Workspace integration. The workspace works fine.

It’s not clear what

2. Describe your environment:

  • OS Information:
    Debian 10

  • Package Version:
    Graylog 4.2.4+b643d2b

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?
I’ve tried changing the configuration and adding only the numbers for the ID, using the service account number, using my full account number, none of these work.

4. How can the community help?
Help me understand if there is something missing in the integration, or what the error message might mean.

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

Hello,

Are you using the same input for your workspace as your Gmail?

I’m not to familiar with Graylog Gmail Input configurations, It seams the dataset gray-111333 cant be found. Have you check elasticsearch?

Example:

curl -XGET http://localhost:9200/_cat/shards

Have you tried to manually rotate your Index?

Hey,

Are you using the same input for your workspace as your Gmail?

No, it is a separate input in graylog, same project in Google Cloud.

I’m not to familiar with Graylog Gmail Input configurations, It seams the dataset gray-111333 cant be found. Have you check elasticsearch?

I’m a ittle confused with this message. That dataset the project id in google cloud console. I’m not sure were elasticsearch would come in since it won’t even call it in the API.

curl -XGET http://localhost:9200/_cat/shards`

I’m new to graylog, so I tired this but I’m not sure what I’m supposed here.

Have you tried to manually rotate your Index?

I don’t think this would help since it seems like the problem is with the API: it seems like the project can’t be found on the Google side.

Hello,
Sorry for the delay I was on vacation.

It seams some where you used to have a data set called gray-111333 Now elasticsearch cant find it.

For example my data set looks like this, it called graylog_1461

Here is the rest of them.

I was suggesting to rotate you index manually to see it that could clear it up. If you no longer have that dataset then this would not matter.

Using this command.

curl -XGET http://localhost:9200/_cat/shards

I was hoping you could see your dataset, if it exists at all. Here is an example of mine.

I’m just referring to the error shown above.

EDIT: Quick question, are these logs from your Graylog server side or your Google side?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.