# Null indexSetId after Upgrade

**URL:** <https://community.graylog.org/t/null-indexsetid-after-upgrade/3438>\
**Category:** Graylog Central (peer support)\
**Created:** [December 9, 2017, 12:31am UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438 "2017-12-09T00:31:15Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![tweeks2](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tweeks2/32/1381_2.png) [@tweeks2](https://community.graylog.org/u/tweeks2)\
**Post date:** [December 9, 2017, 12:31am UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/1 "2017-12-09T00:31:16Z")

</div>

I am receiving “Null indexSetId” after upgrading from 2.1.3 to 2.3.2. In the logs I also see the following. Can someone let me know where to set this or what I can do?

```
Could not apply filter [StreamMatcher] on message <c49f6991-dc77-11e7-85b6-0a206782e8c1>:
java.lang.IllegalStateException: index set must not be null! (stream id=59ca6783a9b2c7b48b3d13ca

```

Alerts are going out but Search and Streams UI are completely inaccessible. I tried to rollback but that did not work at all.

---

<div class="post-metadata">

**Author:** ![tweeks2](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tweeks2/32/1381_2.png) [@tweeks2](https://community.graylog.org/u/tweeks2)\
**Post date:** [December 9, 2017, 1:44am UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/2 "2017-12-09T01:44:20Z")

</div>

I deleted all of the Streams and Stream Rules out of the mongodb and ran a recalculate and it’s working fine now.

More info, what seems to have happened is that some streams did not get the “index\_set\_id” added in their definition in the Streams Collection in mongo. Here is a bad one:

```
{
    "_id" : ObjectId("5a1d6bb2a9b2c72984e24dc0"),
    "creator_user_id" : "admin",
    "matching_type" : "AND",
    "description" : "EU2 Queue Prod",
    "created_at" : ISODate("2017-11-28T13:59:14.546Z"),
    "disabled" : false,
    "title" : "EU2 Queue Prod",
    "content_pack" : null
}

```

I was able to add the values in and restore the streams:

```
{
    "_id" : ObjectId("5a1d6bb2a9b2c72984e24dc0"),
    "creator_user_id" : "admin",
    "index_set_id" : "59bb08b469d42f3bcfa6f18e",
    "matching_type" : "AND",
    "description" : "EU2 Queue Prod",
    "created_at" : ISODate("2017-11-28T13:59:14.546Z"),
    "disabled" : false,
    "title" : "EU2 Queue Prod",
    "content_pack" : null
}
```

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [December 11, 2017, 9:00am UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/3 "2017-12-11T09:00:15Z")

</div>

did you update the following path?

2.1.3 - \> 2.2.3 -\> 2.3.2

than this might be a bug in the update, if not you did an unsupported way of Upgrading.

---

<div class="post-metadata">

**Author:** ![tweeks2](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tweeks2/32/1381_2.png) [@tweeks2](https://community.graylog.org/u/tweeks2)\
**Post date:** [December 11, 2017, 2:30pm UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/4 "2017-12-11T14:30:07Z")

</div>

I did not follow that path, is there someplace I should have checked that would tell me upgrading directly to 2.3.2 from 2.1.3 is not supported?

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [December 11, 2017, 2:55pm UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/5 "2017-12-11T14:55:03Z")

</div>

> [@tweeks2](#):
>
> upgrading directly to 2.3.2 from 2.1.3 is not supported?

This _should_ work but unless you provide the logs of your Graylog nodes from directly after the upgrade, we have no way in finding out why it didn’t work in your case.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [December 25, 2017, 2:55pm UTC](https://community.graylog.org/t/null-indexsetid-after-upgrade/3438/6 "2017-12-25T14:55:51Z")

</div>

Closed on December 25, 2017, 2:55pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.