Alert events not trigger since graceful shutdown

Graylog Central (peer support)
1

The incident:

Hi! Since I executed graceful restart in my graylog clúster, alert events stop triggered.

My environment:
3 graylog nodes + 3 elasticsearch nodes, each one of them with RHEL 8.2
Graylog version: 3.2
Elasticsearch version: 6.8
MongoDB version: 4.2

Logs

Evidence of graceful shutdown

imagen
imagen915×563 182 KB

Las alert I received (before shutdown).

imagen
imagen1767×304 46.6 KB

I don’t believe in coincidences.

I’ve already re open gl-events IndexSet.

Any help will be appreciate.

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hello @ale_sabat

From the first screenshot i see [NO_MASTER], this would be a configuration, network, service issue.

I personal would start to make sure all services ( ES, Mongo & Graylog) are running without errors or warnings.
If all node/service are fine then I would check configruations on all Graylog config file to ensure they are correct

And last, check Firewalls/ SELinux/AppArmor for blocking network connecions.

If all the above is good, then dig in to the log files Elasticsearch/Graylog and MongoDb. and post your finding here if you can.

Here are some post you can check out

2 Likes
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.