Graylog2 / graylog2-server

Free and open log management
https://www.graylog.org
Other
7.33k stars 1.06k forks source link

Reinstalling a content pack doesn't restore messages #7242

Open Tastyep opened 4 years ago

Tastyep commented 4 years ago

The problem I encounter is that if I uninstall and then reinstall the same content pack, messages are not preserved while this used to be the case IIRC.

Expected Behavior

I expect that messages would be reassigned to their dedicated stream when reinstalling the content pack.

Current Behavior

The streams are recreated empty. The index still contains the messages.

Steps to Reproduce (for bugs)

  1. Install your content pack (which defines a stream)
  2. Have logs available in that stream
  3. Uninstall the content pack
  4. Reinstall the same content pack
  5. Check the stream content

Context

We have a postman collection that we use for configuring Graylog through its API. One of the operations is to remove the current content pack and install the new one. Doing this in production now means that we will not be able to access anterior logs anymore.

Your Environment

kmerz commented 4 years ago

Hello Tastype,

thanks for your input.

This will not be possible in a near future since we create a new id for the stream when creating the content pack and since we can't change a messages stream without reindexing the messages we are not able to fix that in the moment.

We will leave the bug open for a future reference.