Hi, I want to access Elasticsearch instance with Kibana. But I cannot do it because, elasticsearch_hosts property in graylog.conf file is http://127.0.0.1:9200. When I try to change IP address with server IP address and save the configuration file, it returns to http://127.0.0.1:9200 after graylog-ctl reconfigure command execution.
How can I change Elasticsearch IP address permanently?
By default, Elasticsearch should be listening on the (first) IP address of the virtual machine running the OVA.
You could check this with the following command:
# sudo lsof -i :9200
This being said, the OVA isn’t supposed to be customizable in every dimension. If you want a customizable Graylog setup, you’ll have to install it using another installation method (e. g. using the operating system packages or the Chef/Puppet/Ansible modules).