# Graylog Updating Search Results

**URL:** <https://community.graylog.org/t/graylog-updating-search-results/5496>\
**Category:** Graylog Central (peer support)\
**Created:** [June 6, 2018, 2:35pm UTC](https://community.graylog.org/t/graylog-updating-search-results/5496 "2018-06-06T14:35:29Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 6, 2018, 2:35pm UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/1 "2018-06-06T14:35:29Z")

</div>

Graylog is getting stuck when i want to see messages from inputs. It worked fine untill one moment when the “Update Search Results” pop-up showed up and stayed there forever.  
The dashboards are updating fine

I’m running:  
MongoDB version 3.05  
Graylog version 2.2.3  
Elasticsearch version 2.3.1

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [June 6, 2018, 2:36pm UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/2 "2018-06-06T14:36:39Z")

</div>

Check the logs of your Graylog and Elasticsearch node(s).  
➡ [http://docs.graylog.org/en/2.4/pages/configuration/file\_location.html](http://docs.graylog.org/en/2.4/pages/configuration/file_location.html)

---

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 7, 2018, 8:09am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/3 "2018-06-07T08:09:05Z")

</div>

i think the problem started from here  
2018-06-05T20:50:23.891+03:00 WARN [SearchResource] Unable to execute search: all shards failed  
but i can’t figure anything from those logs. Elasticsearch seems fine, it looks like it receives all the messages but i can’t display those messages from the web interface. It gets stuck with the updating search results while my dashboards are updating using the messages received

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [June 7, 2018, 8:20am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/4 "2018-06-07T08:20:11Z")

</div>

> [@Piciu](#):
>
> but i can’t figure anything from those logs.

Unfortunately, we can’t either if you don’t share the logs.

---

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 7, 2018, 8:41am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/5 "2018-06-07T08:41:26Z")

</div>

how can i send you all those logs because i can’t post more the 32000 characters ? Do you want a link to a file containing all those logs ?

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [June 7, 2018, 8:41am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/6 "2018-06-07T08:41:56Z")

</div>

You can use a pastebin service such as [https://gist.github.com](https://gist.github.com) or [https://0bin.net](https://0bin.net) and share the link.

---

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 7, 2018, 9:03am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/7 "2018-06-07T09:03:34Z")

</div>

[https://0bin.net/paste/p-TtiQlFp95Y84-v#+jhnpzVF6Mxw0nSNhYomy0pk4dahENVtOxynTcbiwvM](https://0bin.net/paste/p-TtiQlFp95Y84-v#+jhnpzVF6Mxw0nSNhYomy0pk4dahENVtOxynTcbiwvM)

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [June 7, 2018, 9:14am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/8 "2018-06-07T09:14:36Z")

</div>

MongoDB is regularly not reachable and Elasticsearch has some problems with the indices.

Check the logs of MongoDB and Elasticsearch for details.

---

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 7, 2018, 10:46am UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/9 "2018-06-07T10:46:28Z")

</div>

MongoDB logs:  
[https://0bin.net/paste/8884c0a+I2t3Dvw1#AaEY-PC+rSB7TYxhx0cwlA1rzsI530NgUruidJgPKz+](https://0bin.net/paste/8884c0a+I2t3Dvw1#AaEY-PC+rSB7TYxhx0cwlA1rzsI530NgUruidJgPKz+)  
Elasticsearch logs:  
[https://0bin.net/paste/C+dhn-PXXTng1pgI#AsP8iOF2FlwGawkpfb5YyVbg5DSo8cmJSdQpgR9UzfG](https://0bin.net/paste/C+dhn-PXXTng1pgI#AsP8iOF2FlwGawkpfb5YyVbg5DSo8cmJSdQpgR9UzfG)

They seem fine, as i said before messages are coming to Elasticsearch only that Graylog can’t upload search results. Do you know if anyone had this problem before ?

---

<div class="post-metadata">

**Author:** ![Piciu](https://avatars.discourse-cdn.com/v4/letter/p/f07891/32.png) [@Piciu](https://community.graylog.org/u/Piciu)\
**Post date:** [June 7, 2018, 3:24pm UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/10 "2018-06-07T15:24:55Z")

</div>

And one more detail. This started to happen right after I had many messages in graylog and I could not see results starting with page 50 or something like that.  
I’m running the Graylog,Elasticsearch and MongoDb inside a Ubuntu 16.04.3 VMware machine.  
Is there a storage configuration that I need to make ? I didn’t find anything about that anywhere

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 21, 2018, 3:24pm UTC](https://community.graylog.org/t/graylog-updating-search-results/5496/11 "2018-06-21T15:24:56Z")

</div>

Closed on June 21, 2018, 3:24pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
