# GELF HTTP is not getting messages

**URL:** <https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655>\
**Category:** Graylog Central (peer support)\
**Created:** [May 28, 2020, 8:21am UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655 "2020-05-28T08:21:40Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![aragon](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@aragon](https://community.graylog.org/u/aragon)\
**Post date:** [May 28, 2020, 8:21am UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655/1 "2020-05-28T08:21:41Z")

</div>

Hi folks,  
I have installed Graylog using a docker compose file.

```
version: '3.2'

services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.8.2
    ports:
      - "9200:9200"
    environment:
      ES_JAVA_OPTS: "-Xms512m -Xmx512m"
    networks:
      - graylog

  mongo:
    image: mongo:4.0
    networks:
      - graylog

  graylog:
    image: graylog/graylog:3.1
    ports:
      - "9000:9000"
      - "12201:12201/udp"
      - "1514:1514"
    environment:
      GRAYLOG_HTTP_EXTERNAL_URI: "http://my-server-ip:9000/"
    networks:
      - graylog
    depends_on:
      - elasticsearch
      - mongo

networks:
  graylog:
    driver: bridge

```

I’m facing an issue when I run a curl command.  
curl -X POST -H ‘Content-Type: application/json’ -d ‘{ “version”: “1.1”, “host”: “[test.com](http://test.com)”, “short\_message”: “A short message”, “level”: 5, “\_some\_info”: “foo” }’ '[http://my-server-ip:12201/gelf](http://my-server-ip:12201/gelf)

Error which I’m getting is  
curl: (7) Failed to connect to my-server-ip port 12201: Connection refused.

I have 2 inputs running in my Graylog server.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/96e93b3e334be7352f430e4023ad28eb6287c62e.png)

I have searched similar issues in the community. But it didn’t solve my issue.  
I’m I missing something or is there any issue in configuration?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [May 28, 2020, 12:01pm UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655/2 "2020-05-28T12:01:49Z")

</div>

you are missing some minimal configuration settings in your Graylog environment variables …

But the questin is, did you want to ingest via http or via UDP?

---

<div class="post-metadata">

**Author:** ![aragon](https://avatars.discourse-cdn.com/v4/letter/a/919ad9/32.png) [@aragon](https://community.graylog.org/u/aragon)\
**Post date:** [May 28, 2020, 1:41pm UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655/3 "2020-05-28T13:41:44Z")

</div>

I would like to use http instead of UDP. I got messages from UDP input connection. Do I need to add something ?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 2, 2020, 11:12am UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655/4 "2020-06-02T11:12:58Z")

</div>

if you like to have http on the configured port you should not only forward UDP in your docker configuration …

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 16, 2020, 11:21am UTC](https://community.graylog.org/t/gelf-http-is-not-getting-messages/15655/5 "2020-06-16T11:21:41Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.