How to recover not indexed messages after recovery from elasticsearch read-only

Graylog Central (peer support)
1

My elasticsearch was entered read-only mode, because of disk space problem. I could recover it from failure by executing following request:

curl -XPUT -H "Content-Type: application/json" https://localhost:9200/_all/_settings -d 
'{"index.blocks.read_only_allow_delete": null}'

Now new messages are ok, but some messages are lost during this failure. Can you show me a way to rebuild the index for those lost message and recover them?

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.