Missing default stream "FAILURES_STREAM"

[xeiss]

Current Behavior

On the Search tab go to fields (left sidebar) -> click on one field -> "Change field type"
New window opens ... after few secounds (without clicking on something) the page reloads to following error:
"Loading component failed: c is undefined"
Also a red error box appears with:

Loading stream failed with status: FetchError: There was an error fetching a resource: . Additional information: Stream <000000000000000000000004> not found!

In Browser Network Debug you see, that the browser tries to get the /api/streams/000000000000000000000004 - but server return 404.

I tried to create the Stream manually, but I can't create a stream with the hardcoded stream id, not even with api. So I can't workaround that missing stream.

Expected Behavior

All needed default/system streams should be created at startup if necessary. (Works already for me with an older version with "All events" (000000000000000000000002) or "All system events" (000000000000000000000003))

Possible Solution

Check and create if necessary the missing system stream 000000000000000000000004 when master node starts.

Context

I migrated already from many previous versions.

Your Environment

• Graylog Version: 5.2.2+8eab621
• Java Version: openjdk 17.0.9
• OpenSearch Version: 2.5.0
• MongoDB Version: 5.0.23
• Operating System: Debian 11
• Browser version: Firefox / Chrome

[kroepke]

Sounds like the field type editor is pulling in the failure stream but that doesn't exist for non-commercial clusters.