1. Describe your incident: We have many alarms. When I want to open the Edit Event Definition page to make changes on one of these alarms, the page stays like this and I cannot view the alarm content. I can’t search for the alarm under the alarms page either. the page is not updating. this page n…

Are there any changes to the system that were made before this issue happened? I would start looking at Graylog logs to see what that is telling me - post up relevant parts using the </> forum tool to make it readable. There are a bunch of basic command lines here that will will give you some dia…

We didn’t make any changes. We made changes to fix the problem. tail -f /var/log/graylog-server/server.log Caused by: ElasticsearchException[Elasticsearch exception [type=search_phase_execution_exception, reason=all shards failed]]; nested: ElasticsearchException[Elasticsearch exception [type=ille…

[image] rabia: Caused by: ElasticsearchException[Elasticsearch exception [type=search_phase_execution_exception, reason=all shards failed That immediately points to Elasticsearch having issues - if all shards are failing Graylog is going to be pretty unhappy. There are some starting command…

when i update graylog server i check elastic version but i didn’t check healty status. Now we have elastic healty problem. Page not loading due to database? (elastik or mongodb) curl -XGET http://localhost:9200/_cluster/allocation/explain?pretty { "error" : { "root_cause" : [ { …

Also try: curl -XGET http://localhost:9200/_cluster/health?pretty=true and maybe just list out the indices: curl -XGET http://localhost:9200/_cat/indices?pretty

maybe our problem is due to mongodb curl -XGET http://localhost:9200/_cluster/health?pretty=true { "cluster_name" : "graylog", "status" : "green", "timed_out" : false, "number_of_nodes" : 1, "number_of_data_nodes" : 1, "active_primary_shards" : 242, "active_shards" : 242, "relocati…

What makes you say MongoDB? Have you looked in the logs there? Is there anything else coming up in the Graylog logs? what are your graylog conf file settings?

I didn’t change anything. If the alert information is pulling from the database, the problem is elastic or mongo. The page opened in some alarms does not load on other pages. Our config file has been the same for a long time, there is no change. systemctl status graylog-server graylog-server.serv…

I am having the same problem myself, logs are looking the same on my infra also, I can’t seem to load 4th alert page and when I try to edit the alert definition that is on the 4th page from a saved link it fails to load.

Edit Event Definition page not show

Graylog Central (peer support)

tmacgbay (Tmacgbay) April 13, 2022, 4:50pm 11

Here is an example someone posted a while back about having an issue in alerts. It shows the log sample that points to it that you can search for but unfortunately it doesn’t go into how to pull it out of Mongo. More searching might show how to do that…

Topic		Replies	Views
Remove Alert definitions without UI Graylog Central (peer support)	2	716	November 10, 2021
IOEXception when checking alerts Graylog Central (peer support)	4	326	January 15, 2024
Issue with send data to graylog Graylog Central (peer support) elastic	4	1168	March 31, 2022
Elasticsearch exception reason=all shards failed Graylog Central (peer support)	19	12617	October 5, 2021
Cannot load graylog web interface from fresh install Graylog Central (peer support)	26	6780	March 22, 2023

Edit Event Definition page not show

Related topics