at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) ~[?:1.8.0_282]
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) ~[?:1.8.0_282]
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) ~[?:1.8.0_282]
at java.net.Socket.connect(Socket.java:607) ~[?:1.8.0_282]
at com.mongodb.internal.connection.SocketStreamHelper.initialize(SocketStreamHelper.java:64) ~[graylog.jar:?]
at com.mongodb.internal.connection.SocketStream.initializeSocket(SocketStream.java:79) ~[graylog.jar:?]
at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:65) ~[graylog.jar:?]
⊠3 more
2021-04-29T05:48:53.286Z INFO [connection] Opened connection [connectionId{localValue:15, serverValue:1}] to localhost:27017
2021-04-29T05:48:53.287Z INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[4, 0, 24]}, minWireVersion=0, maxWireVersion=7, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=306404}
2021-04-29T05:51:21.452Z INFO [CmdLineTool] Loaded plugin: AWS plugins 4.0.6 [org.graylog.aws.AWSPlugin]
2021-04-29T05:51:21.457Z INFO [CmdLineTool] Loaded plugin: Collector 4.0.6 [org.graylog.plugins.collector.CollectorPlugin]
2021-04-29T05:51:21.458Z INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 4.0.6 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2021-04-29T05:51:21.458Z INFO [CmdLineTool] Loaded plugin: Elasticsearch 6 Support 4.0.6+40b7be5 [org.graylog.storage.elasticsearch6.Elasticsearch6Plugin]
2021-04-29T05:51:21.460Z INFO [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 4.0.6+40b7be5 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2021-04-29T05:51:21.917Z INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2021-04-29T05:51:22.435Z INFO [Version] HV000001: Hibernate Validator null
2021-04-29T05:51:28.764Z INFO [InputBufferImpl] Message journal is enabled.
2021-04-29T05:51:28.793Z INFO [NodeId] Node ID: a55e7341-b246-45e0-9aa9-963b7832aaca
2021-04-29T05:51:29.285Z INFO [LogManager] Loading logs.
2021-04-29T05:51:29.321Z WARN [Log] Found a corrupted index file, /var/lib/graylog-server/journal/messagejournal-0/00000000000000000000.index, deleting and rebuilding indexâŠ
2021-04-29T05:51:29.362Z INFO [LogManager] Logs loading complete.
2021-04-29T05:51:29.368Z INFO [KafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2021-04-29T05:51:29.415Z INFO [cluster] Cluster created with settings {hosts=[localhost:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout=â30000 msâ, maxWaitQueueSize=5000}
2021-04-29T05:51:29.487Z INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2021-04-29T05:51:29.542Z INFO [connection] Opened connection [connectionId{localValue:1, serverValue:3}] to localhost:27017
2021-04-29T05:51:29.551Z INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[4, 0, 24]}, minWireVersion=0, maxWireVersion=7, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=7460950}
2021-04-29T05:51:29.577Z INFO [connection] Opened connection [connectionId{localValue:2, serverValue:4}] to localhost:27017
2021-04-29T05:51:29.970Z INFO [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy , running 2 parallel message handlers.
@kesifalaraskey
Hello,
Is graylog service not starting or are you unable to log into Graylog web interface?
Those logs dont really show me what the problem is. Some more details would be helpful.
Thanks
ubuntu@ip-172-31-42-22:~$ netstat -nptl
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
Looks like Graylog service is running. Sorry Iâm not familiar with AWS elasticsearch.
Only suggetion I could give you is check you firewall make sure the correct ports are opened and look through MongoDb, Elasticsearch and Graylog server log files. Maybe something in there can tell you the problem. If you could post where you got your instruction from and how you configured you graylog configuration file. Someone here might be able to help you further.
If your unsure what to post take a look at this.
