Cannot login Graylog on Browser

Hello Guys,

When i start Graylog on “127.0.0.1”, it is running. But if i change it as “192.168.2.30:9000” i ve got a problem.

it says:

The following services are not running: {FAILED=[JerseyService [FAILED]]

my config is:

###############
#HTTP settings
###############

####HTTP bind address

#The network interface used by the Graylog HTTP interface.

#This network interface must be accessible by all Graylog nodes in the cluster and by all clients
#using the Graylog web interface.

#If the port is omitted, Graylog will use port 9000 by default.

#Default: 127.0.0.1:9000
http_bind_address = 192.168.2.30:9000
#http_bind_address = [2001:db8::1]:9000

i need to change the IP cause i need to use pfsense and i need to enter this ip to pfsense.

Thanks for now guys!

Hello && Welcome

That error your shown could be a couple things. Is it possible to show the whole logs?

Here is some checks you may want to do.

  1. In /etc/host file make sure its set something like this
127.0.0.1     localhost localhost.localdomain localhost4 localhost4.localdomain4
::1           localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.2.30  some_hostname
  1. Check firewall
  2. Did you restart graylog service and Tail -f /var/log/graylog-server/server.log ?

To see the rest of the log files perhaps during the tail command would be nice

When you execute systemctl status graylog-server what do you see?

EDIT: Have you tried to set your http_external_uri = ?

Hello gsmith. Thanks for your welcome and appreciate for your answer. :slight_smile:

Here is my “host.conf”

# The "order" line is only used by old versions of the C library.
order hosts,bind
multi on

here is a part my “server.log”:

2022-01-27T06:14:05.223+03:00 INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {}
2022-01-27T06:14:05.634+03:00 INFO  [CmdLineTool] Loaded plugin: AWS plugins 4.2.5 [org.graylog.aws.AWSPlugin]
2022-01-27T06:14:05.635+03:00 INFO  [CmdLineTool] Loaded plugin: Enterprise Integrations 4.2.5 [org.graylog.enterprise.integrations.EnterpriseIntegrationsPlugin]
2022-01-27T06:14:05.636+03:00 INFO  [CmdLineTool] Loaded plugin: Integrations 4.2.5 [org.graylog.integrations.IntegrationsPlugin]
2022-01-27T06:14:05.636+03:00 INFO  [CmdLineTool] Loaded plugin: Collector 4.2.5 [org.graylog.plugins.collector.CollectorPlugin]
2022-01-27T06:14:05.637+03:00 INFO  [CmdLineTool] Loaded plugin: Graylog Enterprise 4.2.5 [org.graylog.plugins.enterprise.EnterprisePlugin]
2022-01-27T06:14:05.637+03:00 INFO  [CmdLineTool] Loaded plugin: Graylog Enterprise (ES6 Support) 4.2.5 [org.graylog.plugins.enterprise.org.graylog.plugins.enterprise.es6.EnterpriseES6Plugin]
2022-01-27T06:14:05.638+03:00 INFO  [CmdLineTool] Loaded plugin: Graylog Enterprise (ES7 Support) 4.2.5 [org.graylog.plugins.enterprise.org.graylog.plugins.enterprise.es7.EnterpriseES7Plugin]
2022-01-27T06:14:05.638+03:00 INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 4.2.5 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2022-01-27T06:14:05.638+03:00 INFO  [CmdLineTool] Loaded plugin: Elasticsearch 6 Support 4.2.5+59802bf [org.graylog.storage.elasticsearch6.Elasticsearch6Plugin]
2022-01-27T06:14:05.638+03:00 INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 4.2.5+59802bf [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2022-01-27T06:14:05.657+03:00 INFO  [CmdLineTool] Running with JVM arguments: -Xms2g -Xmx2g -XX:NewRatio=1 -XX:+ResizeTLAB -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2022-01-27T06:14:05.733+03:00 INFO  [Version] HV000001: Hibernate Validator null
2022-01-27T06:14:07.691+03:00 INFO  [InputBufferImpl] Message journal is enabled.
2022-01-27T06:14:07.705+03:00 INFO  [NodeId] Node ID: 9f62d983-c0ad-4fee-84af-99bf2c761aae
2022-01-27T06:14:07.849+03:00 INFO  [LogManager] Loading logs.
2022-01-27T06:14:07.885+03:00 INFO  [LogManager] Logs loading complete.
2022-01-27T06:14:07.887+03:00 INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2022-01-27T06:14:07.914+03:00 INFO  [cluster] Cluster created with settings {hosts=[localhost:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout='30000 ms', maxWaitQueueSize=5000}
2022-01-27T06:14:07.959+03:00 INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2022-01-27T06:14:07.983+03:00 INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:289}] to localhost:27017
2022-01-27T06:14:07.990+03:00 INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[4, 0, 27]}, minWireVersion=0, maxWireVersion=7, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=6382686}
2022-01-27T06:14:08.004+03:00 INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:290}] to localhost:27017
2022-01-27T06:14:08.160+03:00 INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2022-01-27T06:14:08.323+03:00 INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running v7.10.2
2022-01-27T06:14:09.039+03:00 INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2022-01-27T06:14:09.105+03:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2022-01-27T06:14:09.113+03:00 INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2022-01-27T06:14:09.139+03:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2022-01-27T06:14:09.155+03:00 INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:291}] to localhost:27017
2022-01-27T06:14:09.168+03:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2022-01-27T06:14:09.189+03:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2022-01-27T06:14:09.215+03:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2022-01-27T06:14:09.852+03:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2022-01-27T06:14:09.856+03:00 INFO  [ServerBootstrap] Graylog server 4.2.5+59802bf starting up
2022-01-27T06:14:09.856+03:00 INFO  [ServerBootstrap] JRE: Private Build 1.8.0_312 on Linux 5.13.0-27-generic
2022-01-27T06:14:09.857+03:00 INFO  [ServerBootstrap] Deployment: deb
2022-01-27T06:14:09.857+03:00 INFO  [ServerBootstrap] OS: Ubuntu 20.04.3 LTS (focal)
2022-01-27T06:14:09.857+03:00 INFO  [ServerBootstrap] Arch: amd64
2022-01-27T06:14:09.988+03:00 INFO  [PeriodicalsService] Starting 37 periodicals ...
2022-01-27T06:14:09.988+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2022-01-27T06:14:10.005+03:00 INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:292}] to localhost:27017
2022-01-27T06:14:10.006+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2022-01-27T06:14:10.012+03:00 INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.AlertScannerThread] periodical. Not configured to run on this node.
2022-01-27T06:14:10.012+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2022-01-27T06:14:10.024+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2022-01-27T06:14:10.026+03:00 INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2022-01-27T06:14:10.026+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2022-01-27T06:14:10.026+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2022-01-27T06:14:10.027+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2022-01-27T06:14:10.027+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2022-01-27T06:14:10.027+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2022-01-27T06:14:10.027+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2022-01-27T06:14:10.030+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2022-01-27T06:14:10.030+03:00 INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2022-01-27T06:14:10.032+03:00 INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2022-01-27T06:14:10.032+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
2022-01-27T06:14:10.032+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
2022-01-27T06:14:10.033+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2022-01-27T06:14:10.036+03:00 INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2022-01-27T06:14:10.040+03:00 INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:294}] to localhost:27017
2022-01-27T06:14:10.039+03:00 INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:293}] to localhost:27017
2022-01-27T06:14:10.162+03:00 INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
2022-01-27T06:14:10.162+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
2022-01-27T06:14:10.163+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2022-01-27T06:14:10.175+03:00 INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [3600s].
2022-01-27T06:14:10.176+03:00 INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2022-01-27T06:14:10.176+03:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2022-01-27T06:14:10.177+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2022-01-27T06:14:10.178+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2022-01-27T06:14:10.179+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2022-01-27T06:14:10.180+03:00 INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2022-01-27T06:14:10.180+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2022-01-27T06:14:10.182+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.forwarder.ForwarderStatePeriodical] periodical in [0s], polling every [15s].
2022-01-27T06:14:10.182+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.license.LicenseManagerPeriodical] periodical in [0s], polling every [300s].
2022-01-27T06:14:10.182+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.license.LicenseReportPeriodical] periodical in [300s], polling every [3600s].
2022-01-27T06:14:10.182+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.license.StagedLicenseInstallerPeriodical] periodical, running forever.
2022-01-27T06:14:10.216+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.auditlog.mongodb.MongoAuditLogPeriodical] periodical in [0s], polling every [3600s].
2022-01-27T06:14:10.236+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.report.scheduler.ReportPeriodical] periodical in [120s], polling every [60s].
2022-01-27T06:14:10.236+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical] periodical in [60s], polling every [180s].
2022-01-27T06:14:10.236+03:00 ERROR [MongoAuditLogPeriodical] Not running cleanup for auditlog entries in MongoDB because there is no valid license.
2022-01-27T06:14:10.243+03:00 INFO  [Periodicals] Starting [org.graylog.plugins.files.CleanupPeriodical] periodical in [0s], polling every [86400s].
2022-01-27T06:14:10.278+03:00 INFO  [LookupTableService] Data Adapter watchlist-mongo/61dd620a00068a3a063580b6 [@7818acd5] STARTING
2022-01-27T06:14:10.324+03:00 INFO  [LookupTableService] Data Adapter watchlist-mongo/61dd620a00068a3a063580b6 [@7818acd5] RUNNING
2022-01-27T06:14:10.400+03:00 INFO  [LookupTableService] Cache watchlist-cache/61dd620a00068a3a063580b8 [@425277cc] STARTING
2022-01-27T06:14:10.401+03:00 INFO  [LookupTableService] Cache watchlist-cache/61dd620a00068a3a063580b8 [@425277cc] RUNNING
2022-01-27T06:14:10.418+03:00 INFO  [LookupTableService] Starting lookup table watchlist/61dd620b00068a3a063580ba [@1d4a26bd] using cache watchlist-cache/61dd620a00068a3a063580b8 [@425277cc], data adapter watchlist-mongo/61dd620a00068a3a063580b6 [@7818acd5]
2022-01-27T06:14:13.896+03:00 INFO  [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2022-01-27T06:14:13.896+03:00 INFO  [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2022-01-27T06:14:13.898+03:00 INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Failed [LB:DEAD]
2022-01-27T06:14:13.898+03:00 ERROR [InputSetupService] Not starting any inputs because lifecycle is: Failed [LB:DEAD]
2022-01-27T06:14:13.937+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2022-01-27T06:14:13.937+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] complete, took <0ms>.
2022-01-27T06:14:13.937+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2022-01-27T06:14:13.937+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ClusterHealthCheckThread] complete, took <0ms>.
2022-01-27T06:14:13.937+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexerClusterCheckerThread] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRetentionThread] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRotationThread] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.VersionCheckThread] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ThrottleStateUpdaterThread] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventCleanupPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.TrafficCounterCalculator] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.938+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ESVersionCheckPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.forwarder.ForwarderStatePeriodical].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.forwarder.ForwarderStatePeriodical] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.license.LicenseManagerPeriodical].
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.license.LicenseManagerPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.939+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.license.LicenseReportPeriodical].
2022-01-27T06:14:13.940+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.license.LicenseReportPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.943+03:00 INFO  [GracefulShutdownService] Running graceful shutdown for <2> shutdown hooks
2022-01-27T06:14:13.946+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.report.scheduler.ReportPeriodical].
2022-01-27T06:14:13.946+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.report.scheduler.ReportPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.947+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical].
2022-01-27T06:14:13.948+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.951+03:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.files.CleanupPeriodical].
2022-01-27T06:14:13.951+03:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.files.CleanupPeriodical] complete, took <0ms>.
2022-01-27T06:14:13.952+03:00 INFO  [GracefulShutdownService] Initiate shutdown for <JobWorkerPool>
2022-01-27T06:14:13.953+03:00 INFO  [GracefulShutdownService] Finished shutdown for <JobWorkerPool>, took 0 ms
2022-01-27T06:14:13.966+03:00 INFO  [LogManager] Shutting down.
2022-01-27T06:14:13.976+03:00 INFO  [GracefulShutdownService] Initiate shutdown for <BrowserDriverService>
2022-01-27T06:14:13.976+03:00 INFO  [GracefulShutdownService] Finished shutdown for <BrowserDriverService>, took 0 ms
2022-01-27T06:14:13.981+03:00 INFO  [LookupTableService] Cache watchlist-cache/61dd620a00068a3a063580b8 [@425277cc] STOPPING, was RUNNING
2022-01-27T06:14:13.983+03:00 INFO  [LookupDataAdapterRefreshService] Stopping 0 jobs
2022-01-27T06:14:13.984+03:00 INFO  [LookupTableService] Data Adapter watchlist-mongo/61dd620a00068a3a063580b6 [@7818acd5] STOPPING, was RUNNING
2022-01-27T06:14:14.007+03:00 INFO  [LookupTableService] Data Adapter watchlist-mongo/61dd620a00068a3a063580b6 [@7818acd5] TERMINATED, was STOPPING
2022-01-27T06:14:14.007+03:00 INFO  [LookupTableService] Cache watchlist-cache/61dd620a00068a3a063580b8 [@425277cc] TERMINATED, was STOPPING
2022-01-27T06:14:14.010+03:00 INFO  [LogManager] Shutdown complete.
2022-01-27T06:14:14.019+03:00 INFO  [LocalKafkaMessageQueueReader] Stopping.
2022-01-27T06:14:14.029+03:00 INFO  [Buffers] Waiting until [INPUT, PROCESS, OUTPUT] buffers are empty.
2022-01-27T06:14:14.032+03:00 INFO  [Buffers] All buffers are empty. Continuing.
2022-01-27T06:14:14.033+03:00 INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2022-01-27T06:14:16.897+03:00 INFO  [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2022-01-27T06:14:16.898+03:00 INFO  [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2022-01-27T06:14:16.899+03:00 INFO  [ServiceManagerListener] Services are now stopped.
2022-01-27T06:14:16.899+03:00 ERROR [ServerBootstrap] Graylog startup failed. Exiting. Exception was:
java.lang.IllegalStateException: Expected to be healthy after starting. The following services are not running: {FAILED=[JerseyService [FAILED]]}
	at com.google.common.util.concurrent.ServiceManager$ServiceManagerState.checkHealthy(ServiceManager.java:773) ~[graylog.jar:?]
	at com.google.common.util.concurrent.ServiceManager$ServiceManagerState.awaitHealthy(ServiceManager.java:585) ~[graylog.jar:?]
	at com.google.common.util.concurrent.ServiceManager.awaitHealthy(ServiceManager.java:316) ~[graylog.jar:?]
	at org.graylog2.bootstrap.ServerBootstrap.startCommand(ServerBootstrap.java:167) [graylog.jar:?]
	at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:295) [graylog.jar:?]
	at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
	Suppressed: com.google.common.util.concurrent.ServiceManager$FailedService: JerseyService [FAILED]
	Caused by: java.net.BindException: Cannot assign requested address
		at sun.nio.ch.Net.bind0(Native Method) ~[?:1.8.0_312]
		at sun.nio.ch.Net.bind(Net.java:461) ~[?:1.8.0_312]
		at sun.nio.ch.Net.bind(Net.java:453) ~[?:1.8.0_312]
		at sun.nio.ch.ServerSocketChannelImpl.bind(ServerSocketChannelImpl.java:222) ~[?:1.8.0_312]
		at sun.nio.ch.ServerSocketAdaptor.bind(ServerSocketAdaptor.java:85) ~[?:1.8.0_312]
		at org.glassfish.grizzly.nio.transport.TCPNIOBindingHandler.bindToChannelAndAddress(TCPNIOBindingHandler.java:107) ~[graylog.jar:?]
		at org.glassfish.grizzly.nio.transport.TCPNIOBindingHandler.bind(TCPNIOBindingHandler.java:64) ~[graylog.jar:?]
		at org.glassfish.grizzly.nio.transport.TCPNIOTransport.bind(TCPNIOTransport.java:215) ~[graylog.jar:?]
		at org.glassfish.grizzly.nio.transport.TCPNIOTransport.bind(TCPNIOTransport.java:195) ~[graylog.jar:?]
		at org.glassfish.grizzly.nio.transport.TCPNIOTransport.bind(TCPNIOTransport.java:186) ~[graylog.jar:?]
		at org.glassfish.grizzly.http.server.NetworkListener.start(NetworkListener.java:711) ~[graylog.jar:?]
		at org.glassfish.grizzly.http.server.HttpServer.start(HttpServer.java:256) ~[graylog.jar:?]
		at org.graylog2.shared.initializers.JerseyService.startUpApi(JerseyService.java:202) ~[graylog.jar:?]
		at org.graylog2.shared.initializers.JerseyService.startUp(JerseyService.java:156) ~[graylog.jar:?]
		at com.google.common.util.concurrent.AbstractIdleService$DelegateService$1.run(AbstractIdleService.java:62) ~[graylog.jar:?]
		at com.google.common.util.concurrent.Callables$4.run(Callables.java:119) ~[graylog.jar:?]
		at java.lang.Thread.run(Thread.java:748) ~[?:1.8.0_312]
2022-01-27T06:14:16.904+03:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2022-01-27T06:14:16.905+03:00 INFO  [Server] SIGNAL received. Shutting down.
2022-01-27T06:14:16.912+03:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2022-01-27T06:14:16.913+03:00 INFO  [GracefulShutdown] Graceful shutdown initiated.
2022-01-27T06:14:16.913+03:00 INFO  [GracefulShutdown] Node status: [Halting [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2022-01-27T06:14:20.915+03:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2022-01-27T06:14:20.916+03:00 INFO  [GracefulShutdown] Goodbye.

And here is my “server.conf”:

############################
# GRAYLOG CONFIGURATION FILE
############################
#
# This is the Graylog configuration file. The file has to use ISO 8859-1/Latin-1 character encoding.
# Characters that cannot be directly represented in this encoding can be written using Unicode escapes
# as defined in https://docs.oracle.com/javase/specs/jls/se8/html/jls-3.html#jls-3.3, using the \u prefix.
# For example, \u002c.
#
# * Entries are generally expected to be a single line of the form, one of the following:
#
# propertyName=propertyValue
# propertyName:propertyValue
#
# * White space that appears between the property name and property value is ignored,
#   so the following are equivalent:
#
# name=Stephen
# name = Stephen
#
# * White space at the beginning of the line is also ignored.
#
# * Lines that start with the comment characters ! or # are ignored. Blank lines are also ignored.
#
# * The property value is generally terminated by the end of the line. White space following the
#   property value is not ignored, and is treated as part of the property value.
#
# * A property value can span several lines if each line is terminated by a backslash (‘\’) character.
#   For example:
#
# targetCities=\
#         Detroit,\
#         Chicago,\
#         Los Angeles
#
#   This is equivalent to targetCities=Detroit,Chicago,Los Angeles (white space at the beginning of lines is ignored).
#
# * The characters newline, carriage return, and tab can be inserted with characters \n, \r, and \t, respectively.
#
# * The backslash character must be escaped as a double backslash. For example:
#
# path=c:\\docs\\doc1
#

# If you are running more than one instances of Graylog server you have to select one of these
# instances as master. The master will perform some periodical tasks that non-masters won't perform.
is_master = true

# The auto-generated node ID will be stored in this file and read after restarts. It is a good idea
# to use an absolute file path here if you are starting Graylog server from init scripts or similar.
node_id_file = /etc/graylog/server/node-id

# You MUST set a secret to secure/pepper the stored user passwords here. Use at least 64 characters.
# Generate one by using for example: pwgen -N 1 -s 96
# ATTENTION: This value must be the same on all Graylog nodes in the cluster.
# Changing this value after installation will render all user sessions and encrypted values in the database invalid. (e.g. encrypted access tokens)
password_secret = <I DELETED IT>

# The default root user is named 'admin'
#root_username = admin

# You MUST specify a hash password for the root user (which you only need to initially set up the
	# system and in case you lose connectivity to your authentication backend)
# This password cannot be changed using the API or via the web interface. If you need to change it,
# modify it in this file.
# Create one by using for example: echo -n yourpassword | shasum -a 256
# and put the resulting hash value into the following line
root_password_sha2 = <I DELETED IT>

# The email address of the root user.
# Default is empty
#root_email = ""

# The time zone setting of the root user. See http://www.joda.org/joda-time/timezones.html for a list of valid time zones.
# Default is UTC
root_timezone = UTC
# Set the bin directory here (relative or absolute)
# This directory contains binaries that are used by the Graylog server.
# Default: bin
bin_dir = /usr/share/graylog-server/bin

# Set the data directory here (relative or absolute)
# This directory is used to store Graylog server state.
# Default: data
data_dir = /var/lib/graylog-server

# Set plugin directory here (relative or absolute)
plugin_dir = /usr/share/graylog-server/plugin

###############
# HTTP settings
###############

#### HTTP bind address
#
# The network interface used by the Graylog HTTP interface.
#
# This network interface must be accessible by all Graylog nodes in the cluster and by all clients
# using the Graylog web interface.
#
# If the port is omitted, Graylog will use port 9000 by default.
#
# Default: 127.0.0.1:9000
http_bind_address = 192.168.2.30:9000
#http_bind_address = [2001:db8::1]:9000

#### HTTP publish URI
#
# The HTTP URI of this Graylog node which is used to communicate with the other Graylog nodes in the cluster and by all
# clients using the Graylog web interface.
#
# The URI will be published in the cluster discovery APIs, so that other Graylog nodes will be able to find and connect to this Graylog node.
#
# This configuration setting has to be used if this Graylog node is available on another network interface than $http_bind_address,
# for example if the machine has multiple network interfaces or is behind a NAT gateway.
#
# If $http_bind_address contains a wildcard IPv4 address (0.0.0.0), the first non-loopback IPv4 address of this machine will be used.
# This configuration setting *must not* contain a wildcard address!
#
# Default: http://$http_bind_address/
#http_publish_uri = https://192.168.2.30:9000

#### External Graylog URI
#
# The public URI of Graylog which will be used by the Graylog web interface to communicate with the Graylog REST API.
#
# The external Graylog URI usually has to be specified, if Graylog is running behind a reverse proxy or load-balancer
# and it will be used to generate URLs addressing entities in the Graylog REST API (see $http_bind_address).
#
# When using Graylog Collector, this URI will be used to receive heartbeat messages and must be accessible for all collectors.
#
# This setting can be overriden on a per-request basis with the "X-Graylog-Server-URL" HTTP request header.
#
# Default: $http_publish_uri
#http_external_uri = http://192.168.2.30:9000/

#### Enable CORS headers for HTTP interface
#
# This allows browsers to make Cross-Origin requests from any origin.
# This is disabled for security reasons and typically only needed if running graylog
# with a separate server for frontend development.
#
# Default: false
#http_enable_cors = true

#### Enable GZIP support for HTTP interface
#
# This compresses API responses and therefore helps to reduce
# overall round trip times. This is enabled by default. Uncomment the next line to disable it.
#http_enable_gzip = false

# The maximum size of the HTTP request headers in bytes.
#http_max_header_size = 8192

# The size of the thread pool used exclusively for serving the HTTP interface.
#http_thread_pool_size = 16

################
# HTTPS settings
################

#### Enable HTTPS support for the HTTP interface
#
# This secures the communication with the HTTP interface with TLS to prevent request forgery and eavesdropping.
#
# Default: false
#http_enable_tls = true

# The X.509 certificate chain file in PEM format to use for securing the HTTP interface.
#http_tls_cert_file = /path/to/graylog.crt

# The PKCS#8 private key file in PEM format to use for securing the HTTP interface.
#http_tls_key_file = /path/to/graylog.key

# The password to unlock the private key used for securing the HTTP interface.
#http_tls_key_password = secret


# Comma separated list of trusted proxies that are allowed to set the client address with X-Forwarded-For
# header. May be subnets, or hosts.
#trusted_proxies = 127.0.0.1/32, 0:0:0:0:0:0:0:1/128



Thank you for your answer SIR! :slight_smile:

Hello,
This issue looks like it coming from the host file. Graylog cant use the IP Address because it does not know 192.168.2.30, if that makes sense. It knows you home address ( 127.0.0.1) because it default that way. So to resolve this, either configure your host file with the IP ADDESS 192.168.2.30 OR add your Graylog server address to the DNS Server.

EDIT: What Linux flavor are you using for Graylog?

This is the wrong file, Its the /etc/hosts file. Like I showed you above.

root# vi /etc/hosts

Hello gsmith,

I found the file as you told me and i changed it like this:

127.0.0.1	localhost
127.0.1.1	ubuntu
192.168.2.30	graylog.abc.com

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

And i still got the same error :frowning:

I am using Ubuntu 20.04.

Hello,

Did you restart your network service after that? Or perhaps a server reboot?
Also do you have a static IP address, or are you running a DHCP server in your environment?
So you have a FQDN? this would indicate you have Domain controllers, is this correct?
If not I would have gone with…

127.0.0.1      localhost
192.168.2.30 localhost

So to sum it up, your error as shown below.

Suppressed: com.google.common.util.concurrent.ServiceManager$FailedService: JerseyService [FAILED]
	Caused by: java.net.BindException: Cannot assign requested address

I would make sure I have a static IP Address
Next
Host file should be like you have it.

127.0.0.1	localhost
192.168.2.30	graylog.abc.com

If your running DNS server within you environment then make sure you have a reverse lookup in the DNS server. Its also called a pointer record or PTR.
To find out more then what Graylog is showing in the log files.

root # journalctl

But this 99.9 % has to do with Graylog not knowing that specific IP address. I could be wrong.

Double check your Graylog configuration, making sure there is no spaces, etc…

EDIT: I forgot to tell you, check make sure you don’t have something else listening on port 9000

netstat -tulpen | grep 9000

I ve solved it :))

Man! I was mad. I worked so much on it and i lost my vision.

i enter ubuntu’s ip and solved :))

Sorry i annoy you but learned many things from you. Thanks a lot!

@Khozzmic Nice, glad you resolved it.

No worries were here to help. Sometimes its the simple things that we over look.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.