Graylog server up and running but web-interface not showing up


(Yue Xx) #1

I am new to Graylog, I am installing graylog 2 on centos 7, and I couldn’t get graylog2 web interface showing up in my browser.
For the graylog 2 log file, if I restart graylog server I got this:

[y.xiang@NJ-GL2 graylog-server]$ sudo tail -f /var/log/graylog-server/server.log
2017-06-16T11:38:05.913-04:00 INFO  [NetworkListener] Started listener bound to [10.10.60.122:12900]
2017-06-16T11:38:05.914-04:00 INFO  [HttpServer] [HttpServer] Started.
2017-06-16T11:38:05.915-04:00 INFO  [JerseyService] Started REST API at  http: //10.10.60.122:12900/
2017-06-16T11:38:08.442-04:00 INFO  [NetworkListener] Started listener bound to [10.10.60.122:9000]
2017-06-16T11:38:08.442-04:00 INFO  [HttpServer] [HttpServer-1] Started.
2017-06-16T11:38:08.443-04:00 INFO  [JerseyService] Started Web Interface at http: //10.10.60.122:9000/>
2017-06-16T11:38:08.443-04:00 INFO  [ServiceManagerListener] Services are healthy
2017-06-16T11:38:08.444-04:00 INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2017-06-16T11:38:08.445-04:00 INFO  [ServerBootstrap] Services started, startup times in ms: {OutputSetupService [RUNNING]=3, BufferSynchronizerService [RUNNING]=5, KafkaJournal [RUNNING]=8, JournalReader [RUNNING]=8, InputSetupService [RUNNING]=8, ConfigurationEtagService [RUNNING]=12, StreamCacheService [RUNNING]=39, PeriodicalsService [RUNNING]=73, IndexerSetupService [RUNNING]=3230, JerseyService [RUNNING]=13343}
2017-06-16T11:38:08.452-04:00 INFO  [ServerBootstrap] Graylog server up and running.
^C[y.xiang@NJ-GL2 graylog-server]$ clear
[y.xiang@NJ-GL2 graylog-server]$ sudo tail -f /var/log/graylog-server/server.log
2017-06-16T11:38:08.442-04:00 INFO  [NetworkListener] Started listener bound to [10.10.60.122:9000]
2017-06-16T11:38:08.442-04:00 INFO  [HttpServer] [HttpServer-1] Started.
2017-06-16T11:38:08.443-04:00 INFO  [JerseyService] Started Web Interface at http: //10.10.60.122:9000/
2017-06-16T11:38:08.443-04:00 INFO  [ServiceManagerListener] Services are healthy
2017-06-16T11:38:08.444-04:00 INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2017-06-16T11:38:08.445-04:00 INFO  [ServerBootstrap] Services started, startup times in ms: {OutputSetupService [RUNNING]=3, BufferSynchronizerService [RUNNING]=5, KafkaJournal [RUNNING]=8, JournalReader [RUNNING]=8, InputSetupService [RUNNING]=8, ConfigurationEtagService [RUNNING]=12, StreamCacheService [RUNNING]=39, PeriodicalsService [RUNNING]=73, IndexerSetupService [RUNNING]=3230, JerseyService [RUNNING]=13343}
2017-06-16T11:38:08.452-04:00 INFO  [ServerBootstrap] Graylog server up and running.
2017-06-16T11:40:37.482-04:00 INFO  [Server] SIGNAL received. Shutting down.
2017-06-16T11:40:37.485-04:00 INFO  [GracefulShutdown] Graceful shutdown initiated.
2017-06-16T11:40:37.485-04:00 INFO  [GracefulShutdown] Node status: [Halting [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2017-06-16T11:40:41.492-04:00 INFO  [Buffers] Waiting until all buffers are empty.
2017-06-16T11:40:41.494-04:00 INFO  [Buffers] All buffers are empty. Continuing.
2017-06-16T11:40:41.494-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] stopping ...
2017-06-16T11:40:41.494-04:00 INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2017-06-16T11:40:41.495-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.AlertScannerThread].
2017-06-16T11:40:41.495-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.AlertScannerThread] complete, took <0ms>.
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] complete, took <0ms>.
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ClusterHealthCheckThread] complete, took <0ms>.
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexerClusterCheckerThread] complete, took <0ms>.
2017-06-16T11:40:41.496-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRetentionThread] complete, took <0ms>.
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRotationThread] complete, took <0ms>.
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.VersionCheckThread] complete, took <0ms>.
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2017-06-16T11:40:41.497-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ThrottleStateUpdaterThread] complete, took <0ms>.
2017-06-16T11:40:41.498-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2017-06-16T11:40:41.498-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventPeriodical] complete, took <0ms>.
2017-06-16T11:40:41.498-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2017-06-16T11:40:41.501-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventCleanupPeriodical] complete, took <0ms>.
2017-06-16T11:40:41.502-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2017-06-16T11:40:41.502-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical] complete, took <0ms>.
2017-06-16T11:40:41.502-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.usagestatistics.UsageStatsNodePeriodical].
2017-06-16T11:40:41.503-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.usagestatistics.UsageStatsNodePeriodical] complete, took <0ms>.
2017-06-16T11:40:41.504-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.usagestatistics.UsageStatsClusterPeriodical].
2017-06-16T11:40:41.505-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.usagestatistics.UsageStatsClusterPeriodical] complete, took <0ms>.
2017-06-16T11:40:41.505-04:00 INFO  [PeriodicalsService] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2017-06-16T11:40:41.506-04:00 INFO  [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] complete, took <0ms>.
2017-06-16T11:40:41.509-04:00 INFO  [GracefulShutdown] Goodbye.
2017-06-16T11:40:41.510-04:00 INFO  [JournalReader] Stopping.
2017-06-16T11:40:41.510-04:00 INFO  [JerseyService] Shutting down HTTP listener at http: //10.10.60.122:12900/>
2017-06-16T11:40:41.514-04:00 INFO  [LogManager] Shutting down.
2017-06-16T11:40:41.537-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] stopped
2017-06-16T11:40:41.537-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] closing ...
2017-06-16T11:40:41.550-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] closed
2017-06-16T11:40:41.561-04:00 INFO  [LogManager] Shutdown complete.
2017-06-16T11:40:41.576-04:00 INFO  [NetworkListener] Stopped listener bound to [10.10.60.122:12900]
2017-06-16T11:40:41.576-04:00 INFO  [JerseyService] Shutting down HTTP listener at http: //10.10.60.122:9000/>
2017-06-16T11:40:41.584-04:00 INFO  [NetworkListener] Stopped listener bound to [10.10.60.122:9000]
2017-06-16T11:40:41.585-04:00 INFO  [ServiceManagerListener] Services are now stopped.
2017-06-16T11:40:45.192-04:00 INFO  [CmdLineTool] Loaded plugin: Elastic Beats Input 2.2.3 [org.graylog.plugins.beats.BeatsInputPlugin]
2017-06-16T11:40:45.194-04:00 INFO  [CmdLineTool] Loaded plugin: Collector 2.2.3 [org.graylog.plugins.collector.CollectorPlugin]
2017-06-16T11:40:45.195-04:00 INFO  [CmdLineTool] Loaded plugin: Enterprise Integration Plugin 2.2.3 [org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin]
2017-06-16T11:40:45.196-04:00 INFO  [CmdLineTool] Loaded plugin: MapWidgetPlugin 2.2.3 [org.graylog.plugins.map.MapWidgetPlugin]
2017-06-16T11:40:45.207-04:00 INFO  [CmdLineTool] Loaded plugin: Pipeline Processor Plugin 2.2.3 [org.graylog.plugins.pipelineprocessor.ProcessorPlugin]
2017-06-16T11:40:45.207-04:00 INFO  [CmdLineTool] Loaded plugin: Anonymous Usage Statistics 2.2.3 [org.graylog.plugins.usagestatistics.UsageStatsPlugin]
2017-06-16T11:40:45.479-04:00 INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=rpm
2017-06-16T11:40:45.725-04:00 INFO  [Version] HV000001: Hibernate Validator null
2017-06-16T11:40:48.209-04:00 INFO  [InputBufferImpl] Message journal is enabled.
2017-06-16T11:40:48.236-04:00 INFO  [NodeId] Node ID: c6740bc5-c488-48d8-ba71-3468825865dd
2017-06-16T11:40:48.476-04:00 INFO  [LogManager] Loading logs.
2017-06-16T11:40:48.537-04:00 INFO  [LogManager] Logs loading complete.
2017-06-16T11:40:48.537-04:00 INFO  [KafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2017-06-16T11:40:48.555-04:00 INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2017-06-16T11:40:48.577-04:00 INFO  [cluster] Cluster created with settings {hosts=[localhost:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout='30000 ms', maxWaitQueueSize=5000}
2017-06-16T11:40:48.630-04:00 INFO  [cluster] No server chosen by ReadPreferenceServerSelector{readPreference=primary} from cluster description ClusterDescription{type=UNKNOWN, connectionMode=SINGLE, serverDescriptions=[ServerDescription{address=localhost:27017, type=UNKNOWN, state=CONNECTING}]}. Waiting for 30000 ms before timing out
2017-06-16T11:40:48.651-04:00 INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:277}] to localhost:27017
2017-06-16T11:40:48.653-04:00 INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 2, 14]}, minWireVersion=0, maxWireVersion=4, maxDocumentSize=16777216, roundTripTimeNanos=580271}
2017-06-16T11:40:48.661-04:00 INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:278}] to localhost:27017
2017-06-16T11:40:49.028-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] version[2.4.4], pid[4291], build[fcbb46d/2017-01-03T11:33:16Z]
2017-06-16T11:40:49.028-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] initializing ...
2017-06-16T11:40:49.035-04:00 INFO  [plugins] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] modules [], plugins [graylog-monitor], sites []
2017-06-16T11:40:50.709-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] initialized
2017-06-16T11:40:50.786-04:00 INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2017-06-16T11:40:52.541-04:00 INFO  [RulesEngineProvider] No static rules file loaded.
2017-06-16T11:40:52.841-04:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2017-06-16T11:40:52.848-04:00 INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2017-06-16T11:40:52.927-04:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2017-06-16T11:40:52.999-04:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2017-06-16T11:40:53.063-04:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2017-06-16T11:40:53.119-04:00 WARN  [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2017-06-16T11:40:53.856-04:00 INFO  [ServerBootstrap] Graylog server 2.2.3+7adc951 starting up
2017-06-16T11:40:53.857-04:00 INFO  [ServerBootstrap] JRE: Oracle Corporation 1.8.0_131 on Linux 3.10.0-514.21.1.el7.x86_64
2017-06-16T11:40:53.857-04:00 INFO  [ServerBootstrap] Deployment: rpm
2017-06-16T11:40:53.857-04:00 INFO  [ServerBootstrap] OS: CentOS Linux 7 (Core) (centos)
2017-06-16T11:40:53.857-04:00 INFO  [ServerBootstrap] Arch: amd64
2017-06-16T11:40:53.861-04:00 WARN  [DeadEventLoggingListener] Received unhandled event of type <org.graylog2.plugin.lifecycles.Lifecycle> from event bus <AsyncEventBus{graylog-eventbus}>
2017-06-16T11:40:53.887-04:00 INFO  [PeriodicalsService] Starting 26 periodicals ...
2017-06-16T11:40:53.887-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2017-06-16T11:40:53.890-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.AlertScannerThread] periodical in [10s], polling every [60s].
2017-06-16T11:40:53.895-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] starting ...
2017-06-16T11:40:53.895-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2017-06-16T11:40:53.898-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2017-06-16T11:40:53.899-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical, running forever.
2017-06-16T11:40:53.900-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2017-06-16T11:40:53.900-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2017-06-16T11:40:53.900-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2017-06-16T11:40:53.901-04:00 INFO  [IndexRetentionThread] Elasticsearch cluster not available, skipping index retention checks.
2017-06-16T11:40:53.901-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2017-06-16T11:40:53.902-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2017-06-16T11:40:53.902-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2017-06-16T11:40:53.903-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2017-06-16T11:40:53.903-04:00 INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2017-06-16T11:40:53.904-04:00 INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2017-06-16T11:40:53.904-04:00 INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:279}] to localhost:27017
2017-06-16T11:40:53.907-04:00 INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:281}] to localhost:27017
2017-06-16T11:40:53.907-04:00 INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:280}] to localhost:27017
2017-06-16T11:40:53.911-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
2017-06-16T11:40:53.912-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
2017-06-16T11:40:53.912-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2017-06-16T11:40:53.914-04:00 INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:282}] to localhost:27017
2017-06-16T11:40:53.917-04:00 INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:283}] to localhost:27017
2017-06-16T11:40:53.918-04:00 INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:285}] to localhost:27017
2017-06-16T11:40:53.919-04:00 INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:284}] to localhost:27017
2017-06-16T11:40:53.948-04:00 INFO  [IndexerClusterCheckerThread] Indexer not fully initialized yet. Skipping periodic cluster check.
2017-06-16T11:40:53.951-04:00 INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
2017-06-16T11:40:53.951-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.AlarmCallbacksMigrationPeriodical] periodical, running forever.
2017-06-16T11:40:53.951-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
2017-06-16T11:40:53.955-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.LdapGroupMappingMigration] periodical, running forever.
2017-06-16T11:40:53.955-04:00 INFO  [Periodicals] Starting [org.graylog2.periodical.IndexFailuresPeriodical] periodical, running forever.
2017-06-16T11:40:53.958-04:00 INFO  [Periodicals] Starting [org.graylog.plugins.usagestatistics.UsageStatsNodePeriodical] periodical in [300s], polling every [21600s].
2017-06-16T11:40:53.958-04:00 INFO  [Periodicals] Starting [org.graylog.plugins.usagestatistics.UsageStatsClusterPeriodical] periodical in [300s], polling every [21600s].
2017-06-16T11:40:53.960-04:00 INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2017-06-16T11:40:53.960-04:00 INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2017-06-16T11:40:53.963-04:00 INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2017-06-16T11:40:54.007-04:00 INFO  [transport] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] publish_address {10.10.60.122:9350}, bound_addresses {10.10.60.122:9350}
2017-06-16T11:40:54.013-04:00 INFO  [discovery] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] graylog/JE25UuHKSRChj4qyRkPeBQ
2017-06-16T11:40:54.026-04:00 INFO  [V20161130141500_DefaultStreamRecalcIndexRanges] Cluster not connected yet, delaying migration until it is reachable.
2017-06-16T11:40:54.471-04:00 INFO  [JerseyService] Enabling CORS for HTTP endpoint
2017-06-16T11:40:57.017-04:00 WARN  [discovery] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] waited for 3s and no initial state was set by the discovery
2017-06-16T11:40:57.017-04:00 INFO  [node] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] started
2017-06-16T11:40:57.106-04:00 INFO  [service] [graylog-c6740bc5-c488-48d8-ba71-3468825865dd] detected_master {Remy LeBeau}{pdWGs9RzSPuxpf5LVSZytg}{127.0.0.1}{127.0.0.1:9300}, added {{Remy LeBeau}{pdWGs9RzSPuxpf5LVSZytg}{127.0.0.1}{127.0.0.1:9300},}, reason: zen-disco-receive(from master [{Remy LeBeau}{pdWGs9RzSPuxpf5LVSZytg}{127.0.0.1}{127.0.0.1:9300}])
2017-06-16T11:41:05.087-04:00 INFO  [NetworkListener] Started listener bound to [10.10.60.122:12900]
2017-06-16T11:41:05.089-04:00 INFO  [HttpServer] [HttpServer] Started.
2017-06-16T11:41:05.089-04:00 INFO  [JerseyService] Started REST API at http: //10.10.60.122:12900/>
2017-06-16T11:41:07.674-04:00 INFO  [NetworkListener] Started listener bound to [10.10.60.122:9000]
2017-06-16T11:41:07.674-04:00 INFO  [HttpServer] [HttpServer-1] Started.
2017-06-16T11:41:07.674-04:00 INFO  [JerseyService] Started Web Interface at http: //10.10.60.122:9000/>
2017-06-16T11:41:07.675-04:00 INFO  [ServiceManagerListener] Services are healthy
2017-06-16T11:41:07.676-04:00 INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2017-06-16T11:41:07.676-04:00 INFO  [ServerBootstrap] Services started, startup times in ms: {BufferSynchronizerService [RUNNING]=2, OutputSetupService [RUNNING]=3, JournalReader [RUNNING]=6, InputSetupService [RUNNING]=7, ConfigurationEtagService [RUNNING]=7, KafkaJournal [RUNNING]=16, StreamCacheService [RUNNING]=41, PeriodicalsService [RUNNING]=80, IndexerSetupService [RUNNING]=3229, JerseyService [RUNNING]=13789}
2017-06-16T11:41:07.684-04:00 INFO  [ServerBootstrap] Graylog server up and running.

The configuration for graylog is ;

rest_listen_uri = http:// 10.10.60.122:12900
web_listen_uri = http:// 10.10.60.122:9000/
elasticsearch_shards = 1
elasticsearch_replicas = 0
elasticsearch_cluster_name = graylog
elasticsearch_http_enabled = false

elasticsearch_network_host = 10.10.60.122
elasticsearch_network_bind_host = 10.10.60.122

(I changed the format of ip since new user is not allowed to put up more than 2 address)

Graylog Version:
graylog2
Elasticsearch Version:
2.4.5
MongoDB Version:
3.2.14
Operating System:
centos 7
Browser version:
chrome
Any help is appreciated !!


Graylog web interface
(Jochen) #2

How are you trying to access the web interface?
What’s the output of the following commands:

$ curl -i http://10.10.60.122:9000/
$ curl -i -H 'Accept: application/json' http://10.10.60.122:12900/

You can circumvent this by properly formatting your text snippets:

```
Text
```

(Yue Xx) #3

Thanks for your reply Jochen, I got Failed connect XXX Connection refused for both cases


(Jochen) #4

Make sure that no packet filter or firewall is blocking access to these ports.


(Yue Xx) #5

Hi Jochen, thank you so much for the reply, while I check this, do you mind answer my question posted here Graylog/elastic search ip address configuration files set up ? I am really confused about those uri set-ups.
Thanks a lot !!!


(Yue Xx) #6

I restart the server and I got:

HTTP/1.1 200 OK
X-Graylog-Node-ID: db4bf93e-dd54-4864-aef6-d5cfc9d618fc
X-UA-Compatible: IE=edge
Content-Type: text/html
Date: Mon, 19 Jun 2017 13:55:49 GMT
Content-Length: 1290

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="robots" content="noindex, nofollow">
    <meta charset="UTF-8">
    <title>Graylog Web Interface</title>
    <link rel="shortcut icon" href="/assets/favicon.png">

  </head>
  <body>
    <script src="/config.js"></script>
    <script src="/assets/vendor.js"></script>

    <script src="/assets/polyfill.35e28e4da7743596569a.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.pipelineprocessor.ProcessorPlugin/plugin.org.graylog.plugins.pipelineprocessor.PipelineProcessorPlugin.0cbe11128085ed745b77.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.map.MapWidgetPlugin/plugin.org.graylog.plugins.map.MapWidgetPlugin.5011f2ebff35ef956f1b.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin/plugin.org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin.3e5ff59c400f972516bd.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.collector.CollectorPlugin/plugin.org.graylog.plugins.collector.CollectorPlugin.13edb0af11e27a17b001.js"></script>

    <script src="/assets/app.35e28e4da7743596569a.js"></script>

  </body>
</html>

(Jochen) #7

Please post the output of both commands.

Additionally, please try to properly format your text snippets by using triple back ticks:

```
TEXT
```

(Yue Xx) #8

So for command curl -i http://10.10.60.122:9000/ I got :

HTTP/1.1 200 OK
X-Graylog-Node-ID: db4bf93e-dd54-4864-aef6-d5cfc9d618fc
X-UA-Compatible: IE=edge
Content-Type: text/html
Date: Mon, 19 Jun 2017 14:16:14 GMT
Content-Length: 1290

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="robots" content="noindex, nofollow">
    <meta charset="UTF-8">
    <title>Graylog Web Interface</title>
    <link rel="shortcut icon" href="/assets/favicon.png">

  </head>
  <body>
    <script src="/config.js"></script>
    <script src="/assets/vendor.js"></script>

    <script src="/assets/polyfill.35e28e4da7743596569a.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.pipelineprocessor.ProcessorPlugin/plugin.org.graylog.plugins.pipelineprocessor.PipelineProcessorPlugin.0cbe11128085ed745b77.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.map.MapWidgetPlugin/plugin.org.graylog.plugins.map.MapWidgetPlugin.5011f2ebff35ef956f1b.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin/plugin.org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin.3e5ff59c400f972516bd.js"></script>

    <script src="/assets/plugin/org.graylog.plugins.collector.CollectorPlugin/plugin.org.graylog.plugins.collector.CollectorPlugin.13edb0af11e27a17b001.js"></script>

    <script src="/assets/app.35e28e4da7743596569a.js"></script>

  </body>
</html>

For command curl -i -H ‘Accept: application/json’ http://10.10.60.122:12900/ I got:

curl: (7) Failed connect to 10.10.60.122:12900; Connection refused

Thanks !!


(Jochen) #9

Well, the Graylog REST API on http://10.10.60.122:12900 isn’t running.

Either your configuration is wrong or there’s still some packet filter blocking access to that interface.


(Yue Xx) #10

Hi Jochen, how can i check if there’s some packet filter blocking ? I disabled all firewalls and when I have this command:
sudo nmap -sT -O localhost

I got this:

Starting Nmap 6.40 ( http://nmap.org ) at 2017-06-19 11:15 EDT
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00013s latency).
Other addresses for localhost (not scanned): 127.0.0.1
Not shown: 996 closed ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
631/tcp open ipp
9200/tcp open wap-wsp
Device type: general purpose
Running: Linux 3.X
OS CPE: cpe:/o:linux:linux_kernel:3
OS details: Linux 3.7 - 3.9
Network Distance: 0 hops

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 2.10 seconds


(Jochen) #11

Please contact the administrators of your server and/or the network administrators of your company for that.

As you can see from the output of your nmap run, neither port 9000/tcp nor 12900/tcp is open.


(system) #12

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.