# An input has failed to start

**URL:** <https://community.graylog.org/t/an-input-has-failed-to-start/5988>\
**Category:** Graylog Central (peer support)\
**Created:** [July 16, 2018, 8:52am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988 "2018-07-16T08:52:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![lehackermagic](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@lehackermagic](https://community.graylog.org/u/lehackermagic)\
**Post date:** [July 16, 2018, 8:52am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/1 "2018-07-16T08:52:09Z")

</div>

Hi team.  
I’m just setup graylog on ubuntu 16.04 LTS. I’m trying to configure rsyslog to send message to graylog server but since 5 days i have this message :  
" An input has failed to start (triggered 5 days ago)  
Input 5b46180c4ca37128433020e1 has failed to start on node 63185a3f-4b06-4234-af25-0a7ca9870caa for this reason: »Permission non accordée.«. This means that you are unable to receive any messages from this input. This is mostly an indication for a misconfiguration or an error. You can click here to solve this."

Can somebody help me

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/7/73cb1c52fe96bd163330d29890c1577a6e093618.png)

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [July 16, 2018, 9:00am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/2 "2018-07-16T09:00:44Z")

</div>

Check the logs of your Graylog node(s):  
[http://docs.graylog.org/en/2.4/pages/configuration/file\_location.html](http://docs.graylog.org/en/2.4/pages/configuration/file_location.html)

---

<div class="post-metadata">

**Author:** ![lehackermagic](https://avatars.discourse-cdn.com/v4/letter/l/977dab/32.png) [@lehackermagic](https://community.graylog.org/u/lehackermagic)\
**Post date:** [July 16, 2018, 9:19am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/3 "2018-07-16T09:19:43Z")

</div>

I find this message in my log

Couldn’t read cluster health for indices [graylog\_\*] (Could not connect to [http://127.0.0.1:9200](http://127.0.0.1:9200))

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [July 16, 2018, 9:39am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/4 "2018-07-16T09:39:42Z")

</div>

That’s an unrelated error message but you might also want to check the logs of your Elasticsearch node.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [July 16, 2018, 10:08am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/5 "2018-07-16T10:08:19Z")

</div>

did you tried to ‘remove’ the message by click on the _x_ in the upper right corner of the message?

Some messages will not disappear and need to be active removed. Others stay only until the reason for the message is resolved.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 30, 2018, 10:23am UTC](https://community.graylog.org/t/an-input-has-failed-to-start/5988/6 "2018-07-30T10:23:13Z")

</div>

Closed on July 30, 2018, 10:23am UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.