Unable to perform search query Index

Graylog Central (peer support)
1

Error Message:

Unable to perform search query Index not found for query: graylog_25. Try recalculating your index ranges.

Details:

  • Index not found for query: graylog_25. Try recalculating your index ranges.

Search status code:

500

Search response:

cannot GET http://:9000/api/search/universal/relative?query=%2A&range=300&limit=150&sort=timestamp%3Adesc (500)

What I did?
I manually deleted the indices in elasticsearch data location(filesystem).

Why I did?
I was facing some space issue and the graylog webpage wasn’t responding.
After clearing some 2Gigs of diskspace graylog was responsive. I deleted the indices in system>indices>default indes set>maintenance.

Please help me out to arrrive at a solution

2

did you recalculate the index range?

3

yes, I did. I found an option to recalculate the index in maintenance but it was in vain.
Even, I checked for the messages after bouncing graylog server.

Do I need to alter mongodb? If so, how? I have very limited knowledge in mongo

4

Did you check your Graylog server.log or Elasticsaerch logfile for errors?