Yes I can login the Web UI and I don’t have any problem with others pages. The only issue is with this API call.
I’ve checked if hotsname were used somewhere to replace them with IP addresses to not have any problem with hostname resolution.
First I’ve found mongodb_uri = mongodb://localhost/graylog.
So I set mongodb_uri = mongodb://127.0.0.1/graylog.
(It may be not part of the solution because in /etc/hosts there is by default 127.0.0.1 localhost)
Then I’ve found the elasticsearch_hosts.
It was commented but it says by default it’s http://127.0.0.1:9200
I uncommented it to force it to http://127.0.0.1:9200.
Finally I restarted Graylog to apply this 2 settings.
And it works!
But it’s strange, if I revert those settings it’s still work…
Maybe it’s also stored somewhere in MongoDB (I didn’ find where).
In my 2nd Graylog I use TLS and I’ve found a typo in javax.net.ssl.trustStore (I typed “ss” instead of “ssl”…).
It’s really hard to find the root cause of this issue.
It can be many things, and logs don’t help, they only say “timeout”.
And I don’t understand why this specific page acts diffrently than other pages.