Migrate 3.1 to 3.2, loading don't stop

[Arethusa]

Hello,

I do the upgrade to 3.2, but… I did not do the curl manipulation “BEFORE” restart, so it’s my fault!

And of course, I have a problem ^^

The loading never finishes:

however, my dashboard looks ok:

But not visualisable because loading don’t want finish:

So now, I try to do the Curl:

[root@elasticsearch ~]# curl -s localhost:9200/_cat/aliases/*_deflector?h=index
gl-events_3
graylog_1
soc_0
gl-system-events_3

For the 3 fist, it’s ok:

curl -s -X PUT --data '{"properties":{"gl2_accounted_message_size":{"type": "long"}}}' -H Content-Type:application/json localhost:9200/gl-events_3/_mapping/message
curl -s -X PUT --data '{"properties":{"gl2_accounted_message_size":{"type": "long"}}}' -H Content-Type:application/json localhost:9200/gl-system-events_3/_mapping/message
curl -s -X PUT --data '{"properties":{"gl2_accounted_message_size":{"type": "long"}}}' -H Content-Type:application/json localhost:9200/soc_0/_mapping/message

But for the last “graylog_1”:

[root@elasticsearch ~]# curl -s -X PUT --data '{"properties":{"gl2_accounted_message_size":{"type": "long"}}}' -H Content-Type:application/json localhost:9200/graylog_1/_mapping/message
{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"mapper [gl2_accounted_message_size] of different type, current_type [keyword], merged_type [long]"}],"type":"illegal_argument_exception","reason":"mapper [gl2_accounted_message_size] of different type, current_type [keyword], merged_type [long]"},"status":400}

I try this to:

[root@elasticsearch ~]# for index in `curl -s localhost:9200/_cat/aliases/*_deflector?h=index`; do curl -s -X PUT --data '{"properties":{"gl2_accounted_message_size":{"type": "long"}}}' -H Content-Type:application/json localhost:9200/$index/_mapping/message ; done
{"acknowledged":true}{"error":{"root_cause":[{"type":"illegal_argument_exception","reason":"mapper [gl2_accounted_message_size] of different type, current_type [keyword], merged_type [long]"}],"type":"illegal_argument_exception","reason":"mapper [gl2_accounted_message_size] of different type, current_type [keyword], merged_type [long]"},"status":400}{"acknowledged":true}{"acknowledged":true}

This is my Index:

The data is not very important if I can’t fix it, I will drop Index, but If it’s recoverable, that can be good too.

Thank you.

[Arethusa]

Hi, I forget log :

2020-02-06T09:57:30.033+01:00 INFO  [InputStateListener] Input [GELF UDP/5d2c7abdd9bdea0cf65f1aa1] is now RUNNING
2020-02-06T09:57:30.047+01:00 INFO  [InputStateListener] Input [GELF UDP/5ce3eaf5d9bdea2195fd5924] is now RUNNING
2020-02-06T09:57:30.057+01:00 INFO  [InputStateListener] Input [GELF UDP/5ce3edd8d9bdea2195fd5c56] is now RUNNING
2020-02-06T10:02:03.219+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records
2020-02-06T10:07:03.179+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records
2020-02-06T10:12:03.190+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records
2020-02-06T10:17:03.177+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records
2020-02-06T10:22:03.180+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records
2020-02-06T10:27:03.196+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records

Thank you.

[shoothub]

Have you tried clean firefox browser profile (firefox -P) or another browser? Adblock Plus extension can also block some scripts. I have similar problem after upgrade to 3.2, clean profile helped for me.

[konrad (Konrad Merz)]

Hi @Arethusa,

Since you had a 500 response that means you had a server error. Did you see somewhere a stacktrace in you serverlog? Or do you get

2020-02-06T10:27:03.196+01:00 WARN  [LicenseChecker] License violation - Detected irregular traffic records

Per request?

[Arethusa]

Hello shoothud, good idea, but I try to disable adblock,user IE and reset Firefox, I have the same result.

Hello Konrad, when I do ctrl+F5, that don’t create new logs on server.log.

Thank you.

edit : The License violation appear each 5 minutes.

[konrad (Konrad Merz)]

@Arethusa is your enterprise plugin uptodate with your graylog version? It must have the same version otherwise it could produce such errors.

[Arethusa]

So… Yes, I do:

yum install graylog-server graylog-enterprise-plugins graylog-integrations-plugins graylog-enterprise-integrations-plugins

And problem looks fix ! Thank you ! I always forget that …

Howerver, on this page for 3.2

https://docs.graylog.org/en/3.2/pages/enterprise/setup.html#rpm

We have 3.1 link, (I have some graylog without internet, so I have to DO manually)

I have to do some other tests, but looks good.

Thank you very much.

[konrad (Konrad Merz)]

Thanks! I will try to make some documentation fixes through the day. I will add it!