Having suffered corruption in my one-node Graylog setup due to full disk, I’ve had to delete indices and journal, recalculate index ranges and what have you. Fortunately I’ve found answers to most issues online but this: Is it possible on command line to easily establish which index in the default index set is active (so that I don’t repeat my mistake and delete that one too 
)?
Am I correct in guessing that I can’t see that status from the output of
curl http://localhost:9200/_cat/indices
he @DavDav
the active write index has the alias graylog_deflector that allows you to determine if this the current active one. In addition the highest number of indices should be the active one.
1 Like
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.