{"action":"opened","issue":{"url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/1463","labels_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/1463/labels{/name}","comments_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/1463/comments","events_url":"https://api.github.com/repos/Graylog2/graylog2-server/issues/1463/events","html_url":"https://github.com/Graylog2/graylog2-server/issues/1463","id":109801197,"number":1463,"title":"Index ranges handling still not working correctly, no data returned for absolute search times - See #1409","user":{"login":"drewmmiranda","id":12700525,"avatar_url":"https://avatars.githubusercontent.com/u/12700525?v=3","gravatar_id":"","url":"https://api.github.com/users/drewmmiranda","html_url":"https://github.com/drewmmiranda","followers_url":"https://api.github.com/users/drewmmiranda/followers","following_url":"https://api.github.com/users/drewmmiranda/following{/other_user}","gists_url":"https://api.github.com/users/drewmmiranda/gists{/gist_id}","starred_url":"https://api.github.com/users/drewmmiranda/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/drewmmiranda/subscriptions","organizations_url":"https://api.github.com/users/drewmmiranda/orgs","repos_url":"https://api.github.com/users/drewmmiranda/repos","events_url":"https://api.github.com/users/drewmmiranda/events{/privacy}","received_events_url":"https://api.github.com/users/drewmmiranda/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-10-05T13:56:11Z","updated_at":"2015-10-05T13:56:11Z","closed_at":null,"body":"Summary: New indices are not properly indexed to allow absolute time value searches\r\n\r\nI previously thought this happened only when retention was run and the oldest index is deleted, but I increased by maximum indicies value and the bug still occurs anytime a new index is created.\r\n\r\n### Test Case ###\r\n1. Graylog server has reached the maximum number of messages that the active index can hold\r\n2. Cycled deflector from <gl2cluster_95> to <gl2cluster_96>\r\n3. Index ranges recalculated at this time\r\n4. Absolute time range search for messages inside of the new index time range are not found. (I incorrectly though keyword time searches worked, but they do not)\r\n5. The last available time range that can be searched with absolute time value is exactly right before the timestamp when the index rolled over to a new index.\r\n\r\n### Log Data ###\r\n````\r\n2015-10-01 16:48:43.396 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tCycled deflector from <gl2cluster_95> to <gl2cluster_96>\r\n2015-10-01 16:48:43.488 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tSystemJob <2f58c001-6886-11e5-bd72-0050568e386c> [org.graylog2.indexer.ranges.CreateNewSingleIndexRangeJob] finished in 95ms.\r\n2015-10-01 16:48:44.618 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tSystemJob <2f5871e0-6886-11e5-bd72-0050568e386c> [org.graylog2.indexer.ranges.CreateNewSingleIndexRangeJob] finished in 1226ms.\r\n2015-10-01 16:49:13.588 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tFlushed and set <gl2cluster_95> to read-only.\r\n015-10-01 16:49:13.599 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tOptimizing index <gl2cluster_95>.\r\n2015-10-01 16:49:13.601 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tSystemJob <2f58c000-6886-11e5-bd72-0050568e386c> [org.graylog2.indexer.SetIndexReadOnlyJob] finished in 208ms.\r\n2015-10-01 16:55:11.963 -05:00\t 624db1f1-aa4c-4161-88a4-84772961ee43\tSystemJob <4159f8f0-6886-11e5-bd72-0050568e386c> [org.graylog2.indexer.indices.jobs.OptimizeIndexJob] finished in 358363ms.\r\n````"}}