Graylog2 / Graylog2/graylog2-server

"Indexer failures" page not helpful

Open
#10,368 0 comments 2 reactions 0 assignees View on GitHub
bug triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

The information displayed on the "Indexer failures" page is not helpful for identifying the error.

## Expected Behavior
Provide information of the source of the message that caused the index failure, e.g. IP, source (hostname), message body, etc.

## Current Behavior
Currently "Index" and "Letter ID" are shown. Because the faulty message is not stored in Elasticsearch (or anywhere else), those two fields are completely pointless.

## Possible Solution
Provide information of the source of the message that caused the index failure, e.g. IP, source (hostname), message body, etc.

## Steps to Reproduce (for bugs)
Provoke _any_ index failure. Check if the information on the "Indexer failures" page is helpful to track down the error.

## Context
I sometimes get index failures, e.g. because of misconfigured hosts that send fields that are reserved in Elasticsearch (e.g. "_version"). At the moment there is no easy way to track down the root cause. As a workaround I use Pipelines/Rules to write more debug info into the logs.

## Your Environment
* Graylog Version: 4.0.5
* Java Version: Open JDK 8
* Elasticsearch Version: 7.8.1
* MongoDB Version: 3.6
* Operating System: Ubuntu 20.04LTS
* Browser version: Chrome

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.