Alert events not trigger since graceful shutdown

The incident:

Hi! Since I executed graceful restart in my graylog clúster, alert events stop triggered.

My environment:
3 graylog nodes + 3 elasticsearch nodes, each one of them with RHEL 8.2
Graylog version: 3.2
Elasticsearch version: 6.8
MongoDB version: 4.2


Evidence of graceful shutdown

Las alert I received (before shutdown).

I don’t believe in coincidences.

I’ve already re open gl-events IndexSet.

Any help will be appreciate.

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

Hello @ale_sabat

From the first screenshot i see [NO_MASTER], this would be a configuration, network, service issue.

I personal would start to make sure all services ( ES, Mongo & Graylog) are running without errors or warnings.
If all node/service are fine then I would check configruations on all Graylog config file to ensure they are correct

And last, check Firewalls/ SELinux/AppArmor for blocking network connecions.

If all the above is good, then dig in to the log files Elasticsearch/Graylog and MongoDb. and post your finding here if you can.

Here are some post you can check out


This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.