On my three node setup two nodes arent processing messages. When i access them directly there is no pipeline processor in them showing this error:
ERROR: No active message processor!
How to enable them?
Part of my messages is not being processed in pipelines 
How did you install Graylog on these nodes?
What’s the configuration of these Graylog nodes?
What’s in the logs of these Graylog nodes?
Standard repository installation
Config similar on both:
is_master = false
node_id_file = /etc/graylog/server/node-id
password_secret = secret
root_username = admin
root_password_sha2 = secret
root_timezone = secret
plugin_dir = /data/graylog/plugin
rest_listen_uri = http://10.151.70.141:12900/api/
rest_transport_uri = http://10.151.70.141:12900/api/
web_enable = true
web_listen_uri = http://10.151.70.141:9000/
web_endpoint_uri = http://10.151.70.141:12900/api/
elasticsearch_hosts = http://elastic1:9200,http://elastic2:9200,http://elastic3:9200,http://elastic4:9200,http://elastic5:9200
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = true
allow_highlighting = false
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /data/graylog-server/journal
message_journal_max_age = 3h
message_journal_max_size = 50gb
lb_recognition_period_seconds = 3
stale_master_timeout = 2000
mongodb_uri = mongodb://user:pass@graylog1:27017,graylog2:27017,graylog3:27017/graylog?replicaSet=graylogRS
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
content_packs_dir = /data/graylog/contentpacks
content_packs_auto_load = grok-patterns.json
proxied_requests_thread_pool_size = 32
versionchecks=false
nothing connected to pipeline in server log
Please provide all the information I’ve asked for. Otherwise we’re unable to help you.
Graylog 2.3.2+3df951e on localhost (Oracle Corporation 1.8.0_131 on Linux 3.10.0-514.26.2.el7.x86_64)
rpm -Uvh https://packages.graylog2.org/repo/packages/graylog-2.3-repository_latest.rpm
yum install graylog-server
Can You specify which part of log are You interested in? Need to get rid of sensitive data
There is no ERROR type message in server log, I cant see any exceptions too
Everything from the first startup of Graylog.
Which plugins (with exact version string) are installed in your Graylog nodes?
You can check this in the web interface at System / Nodes / Details.
On the slave nodes:
This node has not any installed plugins.
On master node:
Anonymous Usage Statistics 2.3.2 Graylog, Inc. A plugin for collecting anonymous usages statistics about Graylog nodes and clusters. Website
Collector 2.3.2 Graylog, Inc. Collectors plugin Website
Elastic Beats Input 2.3.2 Graylog, Inc. Input plugin for Elastic Beats (Beats/Lumberjack protocol). Website
Enterprise Integration Plugin 2.3.2 Graylog, Inc Provides basic integration with Graylog Enterprise Website
MapWidgetPlugin 2.3.2 Graylog, Inc. Map widget for Graylog Website
Pipeline Processor Plugin 2.3.2 Graylog, Inc Pluggable pipeline processing framework Website
seems like this is the problem.
Had an error in plugin path. Fix + restart solved problems. Thx for help
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
