# Query does not support max\_determinized states

**URL:** <https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485>\
**Category:** Graylog Central (peer support)\
**Created:** [July 23, 2020, 7:24am UTC](https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485 "2020-07-23T07:24:15Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mohd](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Mohd](https://community.graylog.org/u/Mohd)\
**Post date:** [July 23, 2020, 7:24am UTC](https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485/1 "2020-07-23T07:24:16Z")

</div>

Hi There,  
I am doing POC on Graylog to consolidate the logs files in a cluster environment. Could you please help me out here to send the application log files(It’s a text file) to Graylog server as I am getting the following error.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/9500477bda183b6b283d77aa70382d5805dc1f45.png)

2020-07-22T16:36:31.414+04:00 ERROR [IndexerClusterCheckerThread] Uncaught exception in periodical  
java.lang.IllegalArgumentException: Cat response did not contain a JSON Array  
at io.searchbox.core.Cat.parseResponseBody(Cat.java:61) ~[graylog.jar:?]  
at io.searchbox.action.AbstractAction.createNewElasticSearchResult(AbstractAction.java:71) ~[graylog.jar:?]  
at io.searchbox.core.Cat.createNewElasticSearchResult(Cat.java:44) ~[graylog.jar:?]  
at io.searchbox.core.Cat.createNewElasticSearchResult(Cat.java:16) ~[graylog.jar:?]  
at io.searchbox.client.http.JestHttpClient.deserializeResponse(JestHttpClient.java:212) ~[graylog.jar:?]  
at io.searchbox.client.http.JestHttpClient.execute(JestHttpClient.java:88) ~[graylog.jar:?]  
at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:49) ~[graylog.jar:?]  
at org.graylog2.indexer.cluster.jest.JestUtils.execute(JestUtils.java:65) ~[graylog.jar:?]  
at org.graylog2.indexer.cluster.Cluster.catNodes(Cluster.java:128) ~[graylog.jar:?]  
at org.graylog2.indexer.cluster.Cluster.getFileDescriptorStats(Cluster.java:133) ~[graylog.jar:?]  
at org.graylog2.periodical.IndexerClusterCheckerThread.checkOpenFiles(IndexerClusterCheckerThread.java:73) ~[graylog.jar:?]  
at org.graylog2.periodical.IndexerClusterCheckerThread.doRun(IndexerClusterCheckerThread.java:62) ~[graylog.jar:?]  
at org.graylog2.plugin.periodical.Periodical.run(Periodical.java:77) [graylog.jar:?]  
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0\_252]  
at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) [?:1.8.0\_252]  
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180) [?:1.8.0\_252]  
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294) [?:1.8.0\_252]  
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0\_252]  
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0\_252]  
at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_252]

We have installed following versions of Graylag and its prerequisites libraries.

1. elasticsearch-5.0.0.rpm
2. filebeat-7.8.0-x86\_64.rpm
3. graylog-enterprise-integrations-plugins-3.3.2-1.noarch.rpm
4. graylog-enterprise-plugins-3.3.2-1.noarch.rpm
5. graylog-integrations-plugins-3.3.2-1.noarch.rpm
6. graylog-server-3.3.2-1.noarch.rpm
7. graylog-sidecar-1.0.2-1.x86\_64.rpm
8. mongodb-org-server-4.2.8-1.el7.x86\_64.rpm

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [July 24, 2020, 7:56am UTC](https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485/2 "2020-07-24T07:56:45Z")

</div>

you should really upgrade to elasticsearch 6.x - the latest release. It is very likely that the next version of Graylog will drop ES5 support and you would need to make the elasticsearch upgrade …

It might be that this feature is not working in this very old and EOL elasticsearch version.

---

<div class="post-metadata">

**Author:** ![Mohd](https://avatars.discourse-cdn.com/v4/letter/m/57b2e6/32.png) [@Mohd](https://community.graylog.org/u/Mohd)\
**Post date:** [July 26, 2020, 6:18am UTC](https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485/3 "2020-07-26T06:18:43Z")

</div>

Thanks Jan for the quick responses 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [August 9, 2020, 6:18am UTC](https://community.graylog.org/t/query-does-not-support-max-determinized-states/16485/4 "2020-08-09T06:18:46Z")

</div>

Closed on August 9, 2020, 6:18am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.