Graylog - Duplicate Messages

Good afternoon!

Is there a problem with duplicate messages in graylog?
I am using version 2.4.0-beta 3
Here’s what happens in my graylog:

2017-12-26 17: 48: 21,674 israel
26/12 19:48:13 INFO ConnectionTelephony.java:686 [Thread-326434] Agent 30381: pause 1 [IP 10.0.8.204]

2017-12-26 17: 48: 21,674 israel
26/12 19:48:13 INFO ConnectionTelephony.java:686 [Thread-326434] Agent 30381: pause 1 [IP 10.0.8.204]

Does anyone know how to fix this error?

It highly depends on your configuration - but that might be exactly what you had configured.

I would assume you have multiple streams and multiple index sets configured. Those streams are configured to show the same message and are using different index sets for storage.

The double message is only shown for the user “admin” and the universal search on all messages.

Graylog does not make any kind of de-duplication on messages, if you route a message in multiple streams with different index sets the result might be duplicated messages.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.