Post-disaster restore working almost properly

Graylog Central (peer support)
1

After a disaster I did loose the elasticsearch data. It was not criticial though.

To reinstall Graylog again, I used the helm chart. Mongodb replicaset was installed previously and manually and recovered its backup, so I didn’t loose the config.
Graylog and elasticsearch was installed by the chart itself.
Since the elasticsearch hostnames changed, I updated manually the rs.config.hosts in mongodb.

Everything seems to work properly with one exception.
I am getting the notification of the alerts but for some reason, when reaching mygraylog.local/alerts, the UI is stuck in ‘Loading events information…’
Although if I click on ‘Event definitions’ or ‘Notifications’ they are shown properly.

I do not see anything strange in the logs :-/

I guess it is due the restore, but not sure where or what to look for.
Any clue?

The graylog version is Graylog 4.2.3, elasticsearch 7.10.2 and mongodb
3.6.23. Everything was working flawlessly before the incident.

Thanks in advance.

2

Hey @colegatron

What does the logs show when loading events? Might be a clue in there what its doing that .

EDIT: I see you stated nothing in the logs but can you “tail” your log file while the Web UI is loading?

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.