# Graylog System Events index not respecting Field Type Refresh Interval setting

**URL:** <https://community.graylog.org/t/graylog-system-events-index-not-respecting-field-type-refresh-interval-setting/36262>\
**Category:** Graylog Central (peer support)\
**Created:** [August 27, 2025, 10:54am UTC](https://community.graylog.org/t/graylog-system-events-index-not-respecting-field-type-refresh-interval-setting/36262 "2025-08-27T10:54:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RyanWilkie](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/ryanwilkie/32/18219_2.png) [@RyanWilkie](https://community.graylog.org/u/RyanWilkie)\
**Post date:** [August 27, 2025, 10:54am UTC](https://community.graylog.org/t/graylog-system-events-index-not-respecting-field-type-refresh-interval-setting/36262/1 "2025-08-27T10:54:06Z")

</div>

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.  
**Don’t forget to select tags to help index your topic!**

**1. Describe your incident:**

I recently changed our AWS OpenSearch to use or2 instance type. These require a minimum 10s refresh interval on indexes. I have updated all the “Field Type Refresh Interval” settings to respect this. However, the “Graylog System Events“ index is not respecting it’s setting of “60s”

**2. Describe your environment:**

- OS Information: Rocky 9/Docker

- Package Version: Graylog 6.3.2+667aca0

- Service logs, configurations, and environment variables:

```bash
	Suppressed: org.graylog.shaded.opensearch2.org.opensearch.client.ResponseException: method [PUT], host [https:// *****.es.amazonaws.com], URI [/_template/gl-system-events-template?master_timeout=30s], status line [HTTP/1.1 400 Bad Request]
{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"invalid index.refresh_interval [1s]: cannot be smaller than cluster.minimum.index.refresh_interval [10s]"}],"type":"illegal_argument_exception","reason":"invalid index.refresh_interval [1s]: cannot be smaller than cluster.minimum.index.refresh_interval [10s]"},"status":400}   

```

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/0/a/0a93d7dfaa25770c6347a5740ab965fcc86ddecc.png)

**3. What steps have you already taken to try and solve the problem?**

- Manually updated the existing indices and template in OS. Graylog always just writes all the settings to the template anyway
- Had a quick look through the graylog code to see if this is hard-coded somewhere. Didn’t find anything.
- I have several other indexes which are rotating correctly and using the respective refresh interval in its settings.

**4. How can the community help?**

**Helpful Posting Tips:** [Tips for Posting Questions that Get Answers](https://community.graylog.org/t/tips-for-posting-questions-that-get-answers/21828) [Hold down CTRL and link on link to open tips documents in a separate tab]

---

<div class="post-metadata">

**Author:** ![RyanWilkie](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/ryanwilkie/32/18219_2.png) [@RyanWilkie](https://community.graylog.org/u/RyanWilkie)\
**Post date:** [September 1, 2025, 11:57am UTC](https://community.graylog.org/t/graylog-system-events-index-not-respecting-field-type-refresh-interval-setting/36262/2 "2025-09-01T11:57:18Z")

</div>

I found this issue on GitHub - [Make Elastic indices "refresh\_interval" setting configurable - or at least with a sensible default · Issue #7800 · Graylog2/graylog2-server · GitHub](https://github.com/Graylog2/graylog2-server/issues/7800)

The 1s interval is hard-coded in graylog. I shall close this post and attempt to find a solution on the GitHub issue.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 15, 2025, 11:57am UTC](https://community.graylog.org/t/graylog-system-events-index-not-respecting-field-type-refresh-interval-setting/36262/3 "2025-09-15T11:57:22Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.