Elasticsearch:8.4.0 and graylog:5.1.1

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
while adding the xpack.security.enabled=true for elasticsearch . i am able to connect to elasticsearch with username and password, but if I am setting username , password and host for graylog its throwing me an error below.

2024-07-30 23:07:12,922 INFO : org.graylog2.plugin.system.FilePersistedNodeIdProvider - No node ID file found. Generated: 3ca7a757-8ec4-4539-9c0c-347a051f0462
2024-07-30 23:07:13,073 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: Failed to connect to elasticsearch/192.168.176.2:9200. - Connection refused.
2024-07-30 23:07:13,074 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #1
2024-07-30 23:07:18,076 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: Failed to connect to elasticsearch/192.168.176.2:9200. - Connection refused.
2024-07-30 23:07:18,076 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #2
2024-07-30 23:07:23,078 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: Failed to connect to elasticsearch/192.168.176.2:9200. - Connection refused.
2024-07-30 23:07:23,078 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #3
2024-07-30 23:07:38,120 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: Connect timed out. - Connect timed out.
2024-07-30 23:07:

2. Describe your environment:

  • OS Information:

  • Package Version:

  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?

4. How can the community help?

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Hey @balarimpy

Did you set up TLS?

I seen another issue here

3

@gsmith No, I have just set up the xpack.security.enable=true

2024-07-31 03:55:04,972 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #101
2024-07-31 03:55:09,977 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node elasticsearch:9200: Error response: type: security_exception - reason: missing authentication credentials for REST request [/]
2024-07-31 03:55:09,977 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #102
2024-07-31 03:55:14,984 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node elasticsearch:9200: Error response: type: security_exception - reason: missing authentication credentials for REST request [/]
2024-07-31 03:55:14,984 INFO : org.graylog2.storage.versionprobe.VersionProbe - Elasticsearch is not available. Retry #103
2024-07-31 03:55:19,987 ERROR: org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node elasticsearch:9200: Error response: type: security_exception - reason: missing authentication credentials for REST request [/]
2024-07-3

4

By chance does it work without

 xpack.security.enable=true ?
5

Yes, elasticsearch is working with configured username and password, but graylog shows above errors

6

You may want to look at the documentation here

You will notice the configuration file show this:

plugins.security.disabled: true

Or in your case with Elasticsearch it should be

xpack.security.enable=false

I think that is your issue.

7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.