# Missing messages on graylog

**URL:** <https://community.graylog.org/t/missing-messages-on-graylog/30964>\
**Category:** Graylog Central (peer support)\
**Created:** [December 14, 2023, 2:16pm UTC](https://community.graylog.org/t/missing-messages-on-graylog/30964 "2023-12-14T14:16:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![alexmagh](https://avatars.discourse-cdn.com/v4/letter/a/b9bd4f/32.png) [@alexmagh](https://community.graylog.org/u/alexmagh)\
**Post date:** [December 14, 2023, 2:16pm UTC](https://community.graylog.org/t/missing-messages-on-graylog/30964/1 "2023-12-14T14:16:10Z")

</div>

Hi,

**1. Describe your incident:**

Client send logs with rsyslog to the concentrator. Logs on concentrator and on client are exactly the same. There is no issue between client-\>server.  
However, when i’ll go on graylog, there are missing messages.  
For example, this is one message in a log file present on the concentrator:

2023-10-02 10:23:03,951|pool-1-thread-18|INFO |EvaluationServiceByDossierWorker|eval-dossier-312||XXX|2023||eval-dossier-312|Fin evaluation par dossier : 081157518 (en 0.001 s)

This message is also present on graylog:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/4/5/45f43a6081f871309b7f3feccc5eba4fc0653d80.png)

There are other messages following exactly the same pattern, but they are not present on graylog.

**2. Describe your environment:**  
1 log concentrator: CentOS7  
a cluster of 3 graylog server: CentOS7  
a cluster of 3 elasticsearch: CentOS7

**4. How can the community help?**

Has anyone in the community encountered this problem?  
Can you give me some research directions?

Thanks,  
Regards,

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [December 16, 2023, 3:04am UTC](https://community.graylog.org/t/missing-messages-on-graylog/30964/2 "2023-12-16T03:04:53Z")

</div>

Hey @alexmagh

Not sure, if the logs are the same format and some are missing using “log concentrator”. Maybe check elasticsearch/opensearch log files. Only time I didnt receive log/s was the Date/Time were incorrect so I didnt see it right away. Or the input was incorrect for the types of logs it was receiving.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [December 30, 2023, 3:05am UTC](https://community.graylog.org/t/missing-messages-on-graylog/30964/3 "2023-12-30T03:05:23Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
