Null indexSetId after Upgrade

Graylog Central (peer support)
1

I am receiving “Null indexSetId” after upgrading from 2.1.3 to 2.3.2. In the logs I also see the following. Can someone let me know where to set this or what I can do?

Could not apply filter [StreamMatcher] on message <c49f6991-dc77-11e7-85b6-0a206782e8c1>:
java.lang.IllegalStateException: index set must not be null! (stream id=59ca6783a9b2c7b48b3d13ca

Alerts are going out but Search and Streams UI are completely inaccessible. I tried to rollback but that did not work at all.

2

I deleted all of the Streams and Stream Rules out of the mongodb and ran a recalculate and it’s working fine now.

More info, what seems to have happened is that some streams did not get the “index_set_id” added in their definition in the Streams Collection in mongo. Here is a bad one:

{
    "_id" : ObjectId("5a1d6bb2a9b2c72984e24dc0"),
    "creator_user_id" : "admin",
    "matching_type" : "AND",
    "description" : "EU2 Queue Prod",
    "created_at" : ISODate("2017-11-28T13:59:14.546Z"),
    "disabled" : false,
    "title" : "EU2 Queue Prod",
    "content_pack" : null
}

I was able to add the values in and restore the streams:

{
    "_id" : ObjectId("5a1d6bb2a9b2c72984e24dc0"),
    "creator_user_id" : "admin",
    "index_set_id" : "59bb08b469d42f3bcfa6f18e",
    "matching_type" : "AND",
    "description" : "EU2 Queue Prod",
    "created_at" : ISODate("2017-11-28T13:59:14.546Z"),
    "disabled" : false,
    "title" : "EU2 Queue Prod",
    "content_pack" : null
}
3

did you update the following path?

2.1.3 - > 2.2.3 -> 2.3.2

than this might be a bug in the update, if not you did an unsupported way of Upgrading.

4

I did not follow that path, is there someplace I should have checked that would tell me upgrading directly to 2.3.2 from 2.1.3 is not supported?

5

This should work but unless you provide the logs of your Graylog nodes from directly after the upgrade, we have no way in finding out why it didn’t work in your case.

6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.