# Graylog not starting via HTTPS **URL:** \ **Category:** Graylog Central (peer support)\ **Tags:** elastic\ **Created:** [November 17, 2022, 3:38am UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572 "2022-11-17T03:38:00Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 3:38am UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/1 "2022-11-17T03:38:00Z")
**1. Describe your incident:** My dashboard is not being loaded in HTTPS at port 9000 **2. Describe your environment:** - OS Information: Operating System: Ubuntu 22.04.1 LTS Kernel: Linux 5.17.0-1020-oem Architecture: x86-64 - Package Version: Graylog 4.1, mongoDB 4.4 - Service logs, configurations, and environment variables: systemctl status from graylog (issued): graylog-server[79052]: 23:41:38.322 [main] ERROR org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: unexpected end of stream on \*http:// 192.168. 15.168: 9200/… - \n not found: limit=0 content=…. /etc/graylog/server/server.conf: elasticsearch\_hosts = http ://user:pw@192. 168. 15.168: 9200 (user pw differente from this print) password\_secret = j2tB(…)G8iv root\_password\_sha2 = 8(…)fd http\_bind\_address = 0.0.0.0:9000 opensearch\_dashboards.yml: server.host: 0.0.0.0 server.port: 443 opensearch.hosts: \*htt ps://1 92.168.15.16 8:9 200 opensearch.ssl.verificationMode: certificate Root CA imported with successfull: Command:keytool -importcert -keystore /etc/graylog/server/certs/cacerts -storepass changeit -alias root\_ca -file /etc/graylog/server/certs/root-ca.pem Alias name: root\_ca Creation Date: Nov 16 from 2022 Entry type: trustedCertEntry Owner: L=California, O=Wazuh, OU=Wazuh Issuer: L=California, O=Wazuh, OU=Wazuh Serial number: 3(…)3 Valid from: Wed Nov 16 11:58:18 EDT 2022 until: Sat Nov 13 11:58:18 EDT 2032 Certificate Fingerprints: SHA1: A0:…:34 SHA256: 88:…:3A: 0B:…F3 Signature Algorithm Name: SHA256withRSA Subject Public Key Algorithm: 2048-bit RSA key Version: 3 Extensions: #1: ObjectId: 2.5.29.35 Criticality=false AuthorityKeyIdentifier [ KeyIdentifier [ 0000: 96 … 6F …xU.C…A…to 0010: 4E … N%… 🇧🇷 🇧🇷 #2: ObjectId: 2.5.29.19 Criticality=true BasicConstraints:[ CA:true PathLen: no limit 🇧🇷 #3: ObjectId: 2.5.29.14 Criticality=false SubjectKeyIdentifier [ KeyIdentifier [ 0000: 96 … 6F …xU.C…A…to 0010: 4E … N%… 🇧🇷 🇧🇷 /etc/default/graylog-server (line to gralyog uses the ssl certificate): GRAYLOG\_SERVER\_JAVA\_OPTS=“$GRAYLOG\_SERVER\_JAVA\_OPTS -Dlog4j2.formatMsgNoLookups=true -Djavax.net.ssl.trustStore=/etc/graylog/server/certs/cacerts -Djavax.net.ssl.trustStorePassword=changeit” **3. What steps have you already taken to try and solve the problem?** Restart the graylog service and validate the config, with the correct setup, the graylog cannot start the service to open GUI (even with status running), the htt ps://i p:920 0 does not load the GUI and service has the status: ERROR org.graylog2.storage.versionprobe.VersionProbe - Unable to retrieve version from Elasticsearch node: unexpected end of stream on \*htt p:/ /192 .1 68.15.16 8:9200/… - \n not found: limit=0 content=… **4. How can the community help?** Please, kidnly help me to evaluate what is wrong in this configuration between wazhu and gralyog to uses SSL for HTTPS. Thank you and Best Regards, ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 3:44am UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/2 "2022-11-17T03:44:43Z")
![](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f77ea65d1f8055760efe056bd78341eafc3bc58d.png) ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 3:54am UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/3 "2022-11-17T03:54:11Z")
![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/c/c4783e340491590c10dc754248d5669be4d2d4a4.png) ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 3:57am UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/4 "2022-11-17T03:57:07Z")
![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/19e4a71dabfd92a0408f7ddd273f8707f83daac4.png) ---
**Author:** ![m\_mlk](https://avatars.discourse-cdn.com/v4/letter/m/bbe5ce/32.png) [@m\_mlk](https://community.graylog.org/u/m_mlk)\ **Post date:** [November 17, 2022, 4:47pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/5 "2022-11-17T16:47:38Z")
I had a similar issue in the past. To fix it, I edited /etc/graylog/server/server.conf and added: `elasticsearch_version = 7` Then restarted Graylog. I assume that your GL server can reach ES. Do the files `/etc/wazuh-dashboard/certs/dashboard-key.pem` and `/etc/wazuh-dashboard/certs/dashboard.pem` have the right permissions for the graylog user to read them? If you accept a suggestion, install and configure nginx as a reverse proxy and access GL on port 80 or 443. Makes things easier… HTH ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 5:52pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/7 "2022-11-17T17:52:14Z")
Hi m\_mlk Thank you for your sugestion, I will not perform at this time, while I need to finish this install at least. Regarding your fix, does not worked for me, see that I’ve edit the file with version proposed ![3](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/d/d2e551805ff816e5f386c99190b6c2ecf950c360.png) Also see that certs has the readle chmod values 444 for root, users and everyone: (I’ll sent in trailling below) But even do, system is not found by Graylog after a restart (I’ll sent in trailling below) Thank you for your help. ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 5:52pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/8 "2022-11-17T17:52:25Z")
![2](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/5/54d96f02dc1a2857b9f93ec272d029459e82c44d.png) ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 5:52pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/9 "2022-11-17T17:52:45Z")
![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f877aef68c83c9677af66c596d83d72cf8fdad41.png) ---
**Author:** ![JobMendes](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jobmendes/32/13449_2.png) [@JobMendes](https://community.graylog.org/u/JobMendes)\ **Post date:** [November 17, 2022, 6:11pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/10 "2022-11-17T18:11:29Z")
I Found the fix guys, is totally simples. Just edit the /etc/graylog/server/server.conf at the elasticsearch\_hosts from http to https from elasticsearch\_hosts = http://:@:9200 to elasticsearch\_hosts = https://:@:9200 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/487f08c0950f63d29cd3989689f869f69ec7f563.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [December 1, 2022, 6:12pm UTC](https://community.graylog.org/t/graylog-not-starting-via-https/26572/11 "2022-12-01T18:12:00Z")
Closed on December 1, 2022, 6:12pm UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.