Graylog installation issue in Ubuntu server 18.04

[monico (Monico Briseno)]

Hey there. I have a graylog installation issue in Ubuntu Server 18.04

I followed different graylog software installation procedure available on the web. But, neither of them help me to be successful with it. In the following lines you will find the software I installed and its status related with the graylog software and the graylog software configuration file in the Ubuntu server.

Prerequisites software installed

############### Mongo status #######

sudo systemctl status mongod
● mongod.service - MongoDB Database Server
Loaded: loaded (/lib/systemd/system/mongod.service; enabled; vendor preset: e
Active: active (running) since Thu 2021-03-25 19:48:42 UTC; 2 weeks 6 days ag

Main PID: 29581 (mongod)
CGroup: /system.slice/mongod.service
└─29581 /usr/bin/mongod --config /etc/mongod.conf

elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2021-04-13 19:11:12 UTC; 1 day 20h ago

Main PID: 28618 (java)
Tasks: 99 (limit: 4915)
CGroup: /system.slice/elasticsearch.service
├─28618 /usr/bin/java -Xms1g -Xmx1g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupanc
└─28743 /usr/share/elasticsearch/modules/x-pack-ml/platform/linux-x86_64/bin/controller

Apr 13 19:11:12 hpserver1 systemd[1]: Started Elasticsearch.
Apr 13 19:11:12 hpserver1 elasticsearch[28618]: warning: Falling back to java on path. This behavior is deprecated. Specify JAVA_HOME

#######Graylog configuration file ###########

This graylog configuration file has the:

password_secret and root_password_sha2

According with the graylog documentation website

graylog server error message

sudo systemctl status graylog-server
[sudo] password for josemb:
● graylog-server.service - Graylog server
Loaded: loaded (/usr/lib/systemd/system/graylog-server.service; enabled; vend
Active: activating (auto-restart) (Result: exit-code) since Thu 2021-04-15 15

Process: 31312 ExecStart=/usr/share/graylog-server/bin/graylog-server (code=ex
Main PID: 31312 (code=exited, status=1/FAILURE)

I googled the graylog software error but, I didn’t found nothing help me to fix it. I looked it in the graylog forum. But, I didn’t find ideas how to fix it, as well.

Any comments are welcome !

[gsmith]

@monico
Hello and Welcome,
I’m not seeing anything that would help troubleshoot your issue.
If you could post your Graylog ( server.conf ) file it would be apperciated in solving your issue,
Also the full error message from your graylog server. If you could “tail -f” graylog log file when you restart graylog service that would be great.
Maybe tell more about what you see or dont see.
What kinda of installation are you using ( Docker, RPM, APT, OVA, etc…)?
What instruction you are using, maybe give a link from that site.
Did you see any errors/warnings in your Elasticsearch and MongDb log files?

Please also use the structured format.
And if your unsure what to post maybe this link will help.

https://community.graylog.org/t/community-guidelines/6649#details

Thanks