# GELF HTTP send address **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [February 17, 2020, 5:02pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011 "2020-02-17T17:02:04Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 17, 2020, 5:02pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/1 "2020-02-17T17:02:04Z")
Hello, New to Graylog 🙂 🙂 Trying to send GELF HTTP using CURL over port 5555. Set up: Graylog server is installed on 10.0.0.237:9000 Local machine (source of message): 10.0.0.85. Tried creating an input but it wont accept port 9000 so I changed it to port 5555. Documentation says to use [http://graylog/example.org:](http://graylog/example.org:)[port number]/gelf. I am not sure where to get the url (other than the destination ip address) and I cant send over port 9000. Any help is appreciated. Thanks… ---
**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\ **Post date:** [February 18, 2020, 9:22am UTC](https://community.graylog.org/t/gelf-http-send-address/14011/2 "2020-02-18T09:22:26Z")
You probably misunderstand how to create proper Input: 1. Every Input should use it’s own port 2. Don’t try to use port 9000 for input, as it’s a port, where listen graylog web interface 3. GELF HTTP Input need own port, by default it is 12201 4. Proper URL for GELF HTTP is `http://graylog.example.com:PORT/gelf` or you can also use IP `http://10.0.0.237:PORT/gelf` 5. Check that your firewall don’t block your PORT used in GELF HTTP Input from local machine to graylog server I think, documentation is clear, how to use curl: [https://docs.graylog.org/en/3.2/pages/gelf.html#sending-gelf-messages-via-http-using-curl](https://docs.graylog.org/en/3.2/pages/gelf.html#sending-gelf-messages-via-http-using-curl) ---
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 19, 2020, 6:02am UTC](https://community.graylog.org/t/gelf-http-send-address/14011/3 "2020-02-19T06:02:52Z")
Thanks! I tried the sending messages using curl as said in the instructions and I get the following: ![Screenshot from 2020-02-18 23-46-51](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/1f73092b8e130c6ddbd665c94c96ba2590c46f22.png) I then checked the status of elastic search and got the following: ![Screenshot from 2020-02-18 23-59-01](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/d/d72a7494b1115ef169297a85e489fd4603d83474.png) Any help? ---
**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\ **Post date:** [February 19, 2020, 7:07am UTC](https://community.graylog.org/t/gelf-http-send-address/14011/4 "2020-02-19T07:07:08Z")
Your Elastic Search database crashed, so check elastic log file to find the reason. Due to crashed elastic db, graylog couldn’t show anything and return error 500. ---
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 19, 2020, 4:34pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/5 "2020-02-19T16:34:23Z")
Hello, when I opened the log file using nano, here is what I found. I am new to this so dont really wanna mess up anything. Any ideas on the best way to fix this? ![Screenshot from 2020-02-19 10-31-43](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/1fb8274a79acd755b2a4495835fc032026b711eb.png) I just scrolled down to the very end of the file. thanks. ---
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 19, 2020, 6:08pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/6 "2020-02-19T18:08:42Z")
I also gathered from one of the forums that the JAVA\_HOME path might not be set correctly. When I try to access the configuration file at etc/default/elasticsearch , I get a “Permission Denied” error. Not sure how to go about it… ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [February 20, 2020, 5:19am UTC](https://community.graylog.org/t/gelf-http-send-address/14011/7 "2020-02-20T05:19:07Z")
@judel5 How did you install Graylog on your device? Could you give us a little more info about your environment? ---
**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\ **Post date:** [February 20, 2020, 7:17am UTC](https://community.graylog.org/t/gelf-http-send-address/14011/8 "2020-02-20T07:17:09Z")
Hi @judel5, did use follow official documentation to install Elastic Search? Because I see in your log file that x-pack modules were loaded, which can cause problems with graylog. Graylog recommend to install OSS version of elastic search packages (elasticsearch-oss) without x-pack extentions: [https://docs.graylog.org/en/3.2/pages/installation/os/ubuntu.html#elasticsearch](https://docs.graylog.org/en/3.2/pages/installation/os/ubuntu.html#elasticsearch) Check your installed version: dpkg -l |grep -i elastic ---
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 24, 2020, 3:48pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/9 "2020-02-24T15:48:47Z")
Hi, The device is a dell desktop with intel core i5. I believe it is about 250GB and 4GB ram. The OS is Ubuntu 19.04. Thanks ---
**Author:** ![judel5](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@judel5](https://community.graylog.org/u/judel5)\ **Post date:** [February 24, 2020, 3:50pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/10 "2020-02-24T15:50:12Z")
Thanks. So at this point does it make sense to reinstall or is there a fix that I can apply? I’lll check the exact version when I get home later today. Thanks, Jude ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [March 9, 2020, 3:50pm UTC](https://community.graylog.org/t/gelf-http-send-address/14011/11 "2020-03-09T15:50:12Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.