RalfThomas
(Ralf Thomas)
December 8, 2021, 1:39pm
1
Hello,
we use OLD Graylog
2. Describe your environment:
OS Information:
2.4
Now the Server is empty
We get the message Deflector is pointing to [graylog_729], not the newest one: [graylog_730]. Re-pointing.
But the HEAP Size is ok. We make more in an other Problem in History.
How can we fix this Deflector ?
Greets
RAlf
Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]
gsmith
(GSmith)
December 8, 2021, 10:50pm
2
Hello,
This post may help.
Hello. I’m running Graylog 3.1.0 on a test system, and last Friday, apparently, it’s run into problems trying to rotate its indices. It is still showing the problem, here’s a sample from the current log (server.log):
2019-09-09T08:22:22.890+02:00 WARN [IndexRotationThread] Deflector is pointing to [firewall-1_10], not the newest one: [firewall-1_11]. Re-pointing.
2019-09-09T08:22:22.902+02:00 ERROR [IndexRotationThread] Couldn’t point deflector to a new index
org.graylog2.indexer.Elasticsear…
EDIT: I also found this for you.
opened 11:14AM - 04 Apr 19 UTC
closed 12:07PM - 04 Apr 19 UTC
My graylog instance got stuck with the error:
```
2019-04-04 11:08:15,021 WA… RN : org.graylog2.periodical.IndexRotationThread - Deflector is pointing to [graylog_151], not the newest one: [graylog_152]. Re-pointing.
2019-04-04 11:08:15,048 ERROR: org.graylog2.periodical.IndexRotationThread - Couldn't point deflector to a new index
org.graylog2.indexer.ElasticsearchException: Couldn't switch alias graylog_deflector from index graylog_151 to index graylog_152
blocked by: [FORBIDDEN/12/index read-only / allow delete (api)];
at org.graylog2.indexer.cluster.jest.JestUtils.specificException(JestUtils.java:98) ~[graylog.jar:?]
at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:57) ~[graylog.jar:?]
at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:62) ~[graylog.jar:?]
at org.graylog2.indexer.indices.Indices.cycleAlias(Indices.java:655) ~[graylog.jar:?]
at org.graylog2.indexer.MongoIndexSet.pointTo(MongoIndexSet.java:357) ~[graylog.jar:?]
at org.graylog2.periodical.IndexRotationThread.checkAndRepair(IndexRotationThread.java:166) ~[graylog.jar:?]
at org.graylog2.periodical.IndexRotationThread.lambda$doRun$0(IndexRotationThread.java:76) ~[graylog.jar:?]
at java.lang.Iterable.forEach(Iterable.java:75) [?:1.8.0_212]
at org.graylog2.periodical.IndexRotationThread.doRun(IndexRotationThread.java:73) [graylog.jar:?]
at org.graylog2.plugin.periodical.Periodical.run(Periodical.java:77) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_212]
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0_212]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) [?:1.8.0_212]
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) [?:1.8.0_212]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_212]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_212]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_212]
```
## Expected Behavior
Working graylog
## Current Behavior
It got stuck and not indexing new messages
## Possible Solution
Fix it!
## Steps to Reproduce (for bugs)
1. Launch graylog 3.0.1
2. Wait
## Your Environment
* Graylog Version: 3.0.1 `https://hub.docker.com/r/graylog2/graylog/tags`
* Elasticsearch Version: `docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.2`
* MongoDB Version: `mongo:3.6`
* Operating System: Ubuntu 18.04
And as @jan stated in this post I quote.
Your Elasticsearch made the index read-only - the reason for that can be found in the elasticsearch log. But I guess because of missing available space …
RalfThomas
(Ralf Thomas)
December 9, 2021, 8:13am
3
RalfThomas:
, not the newe
Hello, thank you. Yes i see this topic. But where i have to write
curl -X PUT “localhost:9200/_all/_settings?pretty” -H ‘Content-Type: application/json’ -d’
{
“index.blocks.read_only_allow_delete”: null
}
’
Which file ? This is not what i really see in that post.
Greets
Ralf
gsmith
(GSmith)
December 9, 2021, 10:42pm
4
Hello @RalfThomas
You might want to read this topic. I believe it will help you understand or perhaps enlighten you.
RalfThomas
(Ralf Thomas)
December 10, 2021, 9:59am
5
ok i can install this. But in which file i put
curl -X PUT “localhost:9200/_all/_settings?pretty” -H ‘Content-Type: application/json’ -d’
{
“index.blocks.read_only_allow_delete”: null
}
’
gsmith
(GSmith)
December 10, 2021, 10:37pm
6
Hello
My apologies what file are you referring to?
system
(system)
Closed
December 24, 2021, 10:37pm
7
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.