We're using 2.1 OVA and ran out of space. Due to a lack of knowledge all the index directories under /var/opt/graylog/data/elasticsearch/graylog/nodes/0/indices/graylog_0 were deleted. We now only have _state in there, before there were three directories 0, 1 & 3.
We can't go to System\Indices and when choosing Search we get: Error Message:Unable to execute searchException:org.elasticsearch.action.search.SearchPhaseExecutionException The log under /var/log/graylog/server/current shows: 2016-11-23_04:51:30.13483 2016-11-23 05:51:30,134 ERROR: org.graylog2.indexer.rotation.strategies.AbstractRotationStrategy - Cannot perform rotation at this moment. 2016-11-23_04:51:40.13652 2016-11-23 05:51:40,136 ERROR: org.graylog2.indexer.rotation.strategies.MessageCountRotationStrategy - Unknown index, cannot perform rotation 2016-11-23_04:51:40.13654 org.graylog2.indexer.IndexNotFoundException: Couldn't find index graylog_0 We tried to manually cycling the deflector, but it didn't help: curl -XPOST *http://127.0.0.1:9000/api/system/deflector/cycle* <http://127.0.0.1:9000/api/system/deflector/cycle> Multiple reboots were performed, but the situation is the same. We don't care about the previous data, but would just like to get the server up and running. Please assist. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/bdb903be-8b9d-4606-9734-a78001e3aaa0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
