We have a single instance of Graylog 2.4 Enterprise. We are noticing some log entries of a stale host show up in our Web UI every day . We have verified the device in question does not exist anymore, yet for some reason Graylog keeps showing 3 or 4 static logs coming from this source device every day. The content of the log messages is same every time. So It’s as if Graylog is ingesting the logs of that decommissioned device into itself in a loop with the most current timestamp.
Tracing back, we noticed it is tied to graylog upgrade we did few months back. The logs appear to be there since the day system was upgraded. Is there a way to clear this stale host from the database ?