No new data in database about elsa HOT 1 OPEN

The same problem here.

Fixed by commenting in fags(fow-control) and restating syslog-ng:
log { source(s_network); source(s_realtime); rewrite(r_host); rewrite(r_cisco_program); rewrite(r_snare); rewrite(r_from_pipes); rewrite(r_pipes); parser(p_db); rewrite(r_extracted_host); ###FILTER_UNPARSED###log { filter(f_unclassified); rewrite(r_unparsed); destination(d_unclassified); flags(final); }; log { destination(d_elsa); }; log { destination(d_debug); }; #flags(flow-control); };

Actually after few days tweaking syslog-ng, I see DB is indexing data but returns no results, only error:
`query: SELECT CONCAT(SUBSTR(type, 1, 4), "_", id) AS name, start AS start_int, FROM_UNIXTIME(start) AS start,
end AS end_int, FROM_UNIXTIME(end) AS end, type, last_id-first_id AS records, index_schema
FROM syslog.indexes WHERE type="temporary" OR (type="permanent" AND ISNULL(locked_by)) OR type="realtime" ORDER BY start
values:

• ERROR [2017/03/10 10:37:34] /usr/local/elsa/web/lib/SyncMysql.pm (64) SyncMysql::query 26472 [undef]
  Query: SELECT CONCAT(SUBSTR(type, 1, 4), "_", id) AS name, start AS start_int, FROM_UNIXTIME(start) AS start,
  end AS end_int, FROM_UNIXTIME(end) AS end, type, last_id-first_id AS records, index_schema
  FROM syslog.indexes WHERE type="temporary" OR (type="permanent" AND ISNULL(locked_by)) OR type="realtime" ORDER BY start with values got error JSON text must be an object or array (but found number, string, true, false or null, use allow_nonref to allow this) at /usr/local/elsa/web/lib/Utils.pm line 264.
• ERROR [2017/03/10 10:37:34] /usr/local/elsa/web/lib/Utils.pm (274) Utils::ANON 26472 [undef]
  No indexes, rv: 0
  `

Before I disabled archive, at east searching from archive (archive:1) worked.

from elsa.