Unable to perform search query Index

Error Message:

Unable to perform search query Index not found for query: graylog_25. Try recalculating your index ranges.

Details:

  • Index not found for query: graylog_25. Try recalculating your index ranges.

Search status code:

500

Search response:

cannot GET http://:9000/api/search/universal/relative?query=%2A&range=300&limit=150&sort=timestamp%3Adesc (500)

What I did?
I manually deleted the indices in elasticsearch data location(filesystem).

Why I did?
I was facing some space issue and the graylog webpage wasn’t responding.
After clearing some 2Gigs of diskspace graylog was responsive. I deleted the indices in system>indices>default indes set>maintenance.

Please help me out to arrrive at a solution

did you recalculate the index range?

yes, I did. I found an option to recalculate the index in maintenance but it was in vain.
Even, I checked for the messages after bouncing graylog server.

Do I need to alter mongodb? If so, how? I have very limited knowledge in mongo

Did you check your Graylog server.log or Elasticsaerch logfile for errors?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.