Indexing errors are reported and somehow handled.
Even if current Graylog logs is filled with MapperParsingException errors, the "Indexer failures" dashboard under "Overview" isn't reporting any failures.
Steps to Reproduce (for bugs)
Can really say, just noticed something was wrong on Monday morning.
Message Processing stopped
The text was updated successfully, but these errors were encountered:
I believe that we encountered the same issue last week.
It turned out that one of the Elasticsearch nodes was misconfigured and had thrown an OOM exception in response to a heavy query. This caused the bulkindex to fail.
The failure of the bulkindex seems to have permanently blocked processing.