I had been using Graylog 3.2.4 in docker and updated to the latest version of 3.3.0-1 via docker image as mentioned in Graylog Docker Image.
I have had my data dump taken from MongoDB before the upgrade and restored it in the latest version. I noticed a few errors and corrected them by deleting the old collection related to index_names and index_field_types from the MongoDB. However, my dashboard widget and data are not getting updated in the database.
I changed the query(earlier it was working without slashes but after some searching, I figured I have to input /.*text_to_search.*/ for wildcards to work) string in my dashboard and saved it. It was working fine on the interface as in the screenshot below:
When I visited the API browser and looked for the Dashboards, I am getting the correct results with api:
/api/dashboards?page=1&per_page=50&sort=title&order=asc
Response Body
{
“total”: 6,
“page”: 1,
“per_page”: 50,
“count”: 0,
“views”: [
{
…
However, when I checked the legacy dashboard APIs for widget details, there was no data.
/api/legacy/dashboards
Response Body
{
“total”: 0,
“dashboards”:
}
Earlier it was showing the older dashboards which I had in my Graylog 3.2.4 version of Docker but after editing the dashboards there were no changes in them through the API. I guess the API is fetching data from the MongoDB for legacy/dashboard API while for dashboards API, it retrieves from Elasticsearch.
How would I update my new dashboard data in MongoDB?
As I need the count to be used in my application, thus API has to be getting the actual figures.
Also, the highlighted search does not work in the new version even when I have in the Graylog configuration:
allow_highlighting = true
Kindly provide the fix for that as well.
Thank you!