Graylog Investigation indices and streams question

Graylog Central (peer support)
1

1. Describe your incident:

As we reverted from Graylog Enterprise to Graylog open we see that there are some Indices and streams present that are not doing anything and seem to be bound toe Graylog ENterprise.

This are streams and Indices called (All) Graylog Investigation Events and Graylog Investigation Messages.

2. Describe your environment:

  • Rocky linux 8

  • Graylog Open 6.0.14

3. What steps have you already taken to try and solve the problem?

Nothing Yet

4. How can the community help?

Can those Indices (that are empty) and Streams bto be safely removed?

2

Safe to remove - these are not used in GL Open.

1 Like
3

Thanks for the clarification @patrickmann