Hi there!
I’ve got a weird issue and hope to find some help/support here.
I am running a graylog 3.2.2 installation on a kubernetes cluster and all is working fine so far. If i try to search message:error i get my results, but if i try to search something like NOT message:error or message: error i get an error as follows:
We are experiencing problems connecting to the Graylog server running on htt://EXT.ERN.AL.IP/api/. Please verify that the server is healthy and working correctly.
You will be automatically redirected to the previous page once we can connect to the server.
Do you need a hand? We can help you.
Less details
This is the last response we received from the server:Error message
Request has been terminated
Possible causes: the network is offline, Origin is not allowed by Access-Control-Allow-Origin, the page is being unloaded, etc.
Original Request
POST http://EXT.ERN.AL.IP/api/cluster/metrics/multiple
Status code
undefined
Full error message
Error: Request has been terminated
Possible causes: the network is offline, Origin is not allowed by Access-Control-Allow-Origin, the page is being unloaded, etc.
I am using the following config, behind a traefik installation and not setting X-Graylog-Server-URL. http_external_uri/EXT.ERN.AL.IP is set to the external ip address of the laodbalancer in front.
apiVersion: v1
kind: ConfigMap
metadata:
name: graylog-config
namespace: logging
labels:
app: graylog
data:
graylog.conf: |-
is_master = true
password_secret = 84RBTcgMkN2vz45aeXzahPh0iJZxxu
node_id_file = /usr/share/graylog/data/config/node-id
plugin_dir = /usr/share/graylog/plugin
http_bind_address = 0.0.0.0:9000
http_external_uri = http://EXT.ERN.AL.IP/
elasticsearch_hosts = http://elasticsearch:9200/
allow_leading_wildcard_searches = false
allow_highlighting = false
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /usr/share/graylog/data/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://mongodb:27017/graylog
mongodb_max_connections = 100
mongodb_threads_allowed_to_block_multiplier = 5
content_packs_loader_enabled = true
content_packs_dir = /usr/share/graylog/data/contentpacks
content_packs_auto_load = grok-patterns.json
proxied_requests_thread_pool_size = 32
[EDIT]
For example the follwing URL is accessible from the client browser:
htt*://EXT.ERN.AL.IP/api/views/fields
[/EDIT]
Maybe somebody has an idea on whats going wrong?
Thanks in advance!