there is nothing obvious that stands out
2023-09-06T09:34:29.477-04:00 INFO [GracefulShutdown] Goodbye.
2023-09-06T09:34:29.478-04:00 INFO [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-09-06T09:34:29.478-04:00 INFO [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2023-09-06T09:34:29.480-04:00 INFO [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2023-09-06T09:34:29.481-04:00 INFO [LocalKafkaMessageQueueReader] Stopping.
2023-09-06T09:34:29.483-04:00 INFO [LogManager] Shutting down.
2023-09-06T09:34:29.488-04:00 INFO [LookupDataAdapterRefreshService] Stopping 0 jobs
2023-09-06T09:34:29.501-04:00 INFO [LogManager] Shutdown complete.
2023-09-06T09:34:29.518-04:00 INFO [NetworkListener] Stopped listener bound to [127.0.0.1:9000]
2023-09-06T09:34:32.479-04:00 INFO [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2023-09-06T09:34:32.480-04:00 INFO [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-09-06T09:34:32.481-04:00 INFO [ServiceManagerListener] Services are now stopped.
2023-09-06T09:34:34.066-04:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-06T09:34:34.760-04:00 INFO [CmdLineTool] Loaded plugin: AWS plugins 5.1.5 [org.graylog.aws.AWSPlugin]
2023-09-06T09:34:34.762-04:00 INFO [CmdLineTool] Loaded plugin: Integrations 5.1.5 [org.graylog.integrations.IntegrationsPlugin]
2023-09-06T09:34:34.763-04:00 INFO [CmdLineTool] Loaded plugin: Collector 5.1.5 [org.graylog.plugins.collector.CollectorPlugin]
2023-09-06T09:34:34.763-04:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.1.5+993cd0f [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-09-06T09:34:34.764-04:00 INFO [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.1.5+993cd0f [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-09-06T09:34:34.764-04:00 INFO [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.1.5+993cd0f [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-09-06T09:34:34.786-04:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-09-06T09:34:34.990-04:00 INFO [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.8.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "5.10.0-25-amd64"}, "platform": "Java/Eclipse Adoptium/17.0.8+7"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@5f117b3d]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-06T09:34:34.995-04:00 INFO [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.8.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "5.10.0-25-amd64"}, "platform": "Java/Eclipse Adoptium/17.0.8+7"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@5f117b3d]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-06T09:34:35.000-04:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=17, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=24430668}
2023-09-06T09:34:35.124-04:00 INFO [MongoDBPreflightCheck] Connected to MongoDB version 6.0.9
2023-09-06T09:34:35.442-04:00 INFO [FilePersistedNodeIdProvider] Node ID: 598835e4-daf2-4d43-9865-581655c4f8d5
2023-09-06T09:34:35.721-04:00 INFO [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <OpenSearch:2.9.0>
2023-09-06T09:34:35.855-04:00 INFO [Version] HV000001: Hibernate Validator null
2023-09-06T09:34:38.026-04:00 INFO [InputBufferImpl] Message journal is enabled.
2023-09-06T09:34:38.039-04:00 INFO [FilePersistedNodeIdProvider] Node ID: 598835e4-daf2-4d43-9865-581655c4f8d5
2023-09-06T09:34:38.180-04:00 INFO [LogManager] Loading logs.
2023-09-06T09:34:38.245-04:00 INFO [LogManager] Logs loading complete.
2023-09-06T09:34:38.250-04:00 INFO [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-09-06T09:34:38.260-04:00 INFO [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.8.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "5.10.0-25-amd64"}, "platform": "Java/Eclipse Adoptium/17.0.8+7"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@5f117b3d]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-06T09:34:38.261-04:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=17, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1925984}
2023-09-06T09:34:38.262-04:00 INFO [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.8.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "5.10.0-25-amd64"}, "platform": "Java/Eclipse Adoptium/17.0.8+7"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@5f117b3d]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-06T09:34:38.444-04:00 INFO [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-09-06T09:34:38.672-04:00 INFO [ElasticsearchVersionProvider] Elasticsearch cluster is running OpenSearch:2.9.0
2023-09-06T09:34:39.199-04:00 INFO [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-09-06T09:34:39.283-04:00 INFO [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-09-06T09:34:40.626-04:00 INFO [DbEntitiesScanner] 16 entities have been scanned and added to DB Entity Catalog, it took 1.098 s
2023-09-06T09:34:40.869-04:00 INFO [ServerBootstrap] Graylog server 5.1.5+993cd0f starting up
2023-09-06T09:34:40.870-04:00 INFO [ServerBootstrap] JRE: Eclipse Adoptium 17.0.8 on Linux 5.10.0-25-amd64
2023-09-06T09:34:40.871-04:00 INFO [ServerBootstrap] Deployment: deb
2023-09-06T09:34:40.871-04:00 INFO [ServerBootstrap] OS: Debian GNU/Linux 11 (bullseye) (debian)
2023-09-06T09:34:40.871-04:00 INFO [ServerBootstrap] Arch: amd64
2023-09-06T09:34:40.979-04:00 INFO [ServerBootstrap] Running 54 migrations...
2023-09-06T09:34:41.887-04:00 INFO [PeriodicalsService] Starting 26 periodicals ...
2023-09-06T09:34:41.890-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.903-04:00 INFO [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-09-06T09:34:41.911-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.915-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-09-06T09:34:41.917-04:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-09-06T09:34:41.917-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-09-06T09:34:41.919-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-09-06T09:34:41.924-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-09-06T09:34:41.926-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-09-06T09:34:41.927-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.930-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-09-06T09:34:41.933-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-09-06T09:34:41.934-04:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.935-04:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-09-06T09:34:41.942-04:00 INFO [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-09-06T09:34:41.951-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-09-06T09:34:41.953-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.961-04:00 INFO [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-09-06T09:34:41.964-04:00 INFO [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-09-06T09:34:41.966-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-09-06T09:34:41.967-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-09-06T09:34:41.968-04:00 INFO [Periodicals] Starting [org.graylog2.telemetry.cluster.TelemetryClusterInfoPeriodical] periodical in [0s], polling every [540s].
2023-09-06T09:34:41.969-04:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-09-06T09:34:41.970-04:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-09-06T09:34:41.971-04:00 INFO [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-09-06T09:34:41.973-04:00 INFO [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-09-06T09:34:41.973-04:00 INFO [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-09-06T09:34:43.539-04:00 INFO [NetworkListener] Started listener bound to [127.0.0.1:9000]
2023-09-06T09:34:43.541-04:00 INFO [HttpServer] [HttpServer] Started.
2023-09-06T09:34:43.562-04:00 INFO [JerseyService] Started REST API at <127.0.0.1:9000>
2023-09-06T09:34:43.563-04:00 INFO [ServiceManagerListener] Services are healthy
2023-09-06T09:34:43.564-04:00 INFO [ServerBootstrap] Services started, startup times in ms: {UserSessionTerminationService [RUNNING]=0, GracefulShutdownService [RUNNING]=0, LocalKafkaMessageQueueWriter [RUNNING]=0, InputSetupService [RUNNING]=0, UrlWhitelistService [RUNNING]=1, FailureHandlingService [RUNNING]=1, EtagService [RUNNING]=3, PrometheusExporter [RUNNING]=3, BufferSynchronizerService [RUNNING]=4, ConfigurationEtagService [RUNNING]=4, OutputSetupService [RUNNING]=4, LocalKafkaJournal [RUNNING]=7, GeoIpDbFileChangeMonitorService [RUNNING]=7, MongoDBProcessingStatusRecorderService [RUNNING]=8, LocalKafkaMessageQueueReader [RUNNING]=8, JobSchedulerService [RUNNING]=10, StreamCacheService [RUNNING]=14, LookupTableService [RUNNING]=26, PeriodicalsService [RUNNING]=87, JerseyService [RUNNING]=1675}
2023-09-06T09:34:43.569-04:00 INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-09-06T09:34:43.571-04:00 INFO [ServerBootstrap] Graylog server up and running.
dimitrib@graylog-srv01:/var/log/graylog-server$