I see in graylog error log:
2018-02-12T08:29:13.059-06:00 ERROR [Messages] Failed to index  messages. Please check the index error log in your web interface for the reason. Error: failure in bulk execution:
: index [graylog_205], type [message], id [17c10ea1-1001-11e8-a12a-0eba063f8ad6], message [MapperParsingException[failed to parse [received_at]]; nested: IllegalArgumentException[Invalid format: “2018-02-12 14:28:02 UTC” is malformed at " 14:28:02 UTC"];]
I want to find source of that messages and edit extractors to parse date in right way. But when i find by specified message id “17c10ea1-1001-11e8-a12a-0eba063f8ad6” in specified graylog index “graylog_205” it is no find any message. (sure thing i think because they was not indexed). How i can find at least by which input message come? From which source?