Graylog web P9000 ERR_CONNECTION_REFUSED!

[mbahaa (Mohamed Bahaa)]

Dears,

i’m stuck in this issue since a week & unfortunately can’t overcome it till now! the web interface of graylog isn’t accessible till the moment & below snap shaws that port 9000 isn’t open till now

below is my /etc/graylog/server/server.conf
https://pastebin.com/y8102jVg

[root@Syslog_Trial ~]# netstat -ltn
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN
tcp6 0 0 :::9200 :::* LISTEN
tcp6 0 0 :::9300 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 ::1:25 :::* LISTEN
tcp6 0 0 127.0.0.1:9000 :::* LISTEN

[jochen]

@mbahaa

below is my /etc/graylog/server/server.conf

That’s not the configuration file being used or you didn’t restart Graylog after changing it.

It looks like Graylog is listening on the local loopback interface (127.0.0.1) on port 9000/tcp.

[mbahaa (Mohamed Bahaa)]

i’d reset the service after re-edit he below lines & i can get now the web page but i get the authentication error in the web page:

[root@Syslog_Trial ~]# cat /etc/graylog/server/server.conf | grep 10.39.224
rest_listen_uri = http://10.39.224.10:9000/api/
#rest_transport_uri = http://10.39.224.10:9000/api/
web_listen_uri = http://10.39.224.10:9000/
web_endpoint_uri =http://10.39.224.10:9000/

Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN
tcp6 0 0 :::9200 :::* LISTEN
tcp6 0 0 :::9300 :::* LISTEN
tcp6 0 0 :::22 :::* LISTEN
tcp6 0 0 ::1:25 :::* LISTEN
tcp6 0 0 10.39.224.10:9000 :::* LISTEN

[jochen]

The web_endpoint_uri setting has to point to the Graylog REST API (see rest_listen_uri and rest_transport_uri).

http://docs.graylog.org/en/2.3/pages/configuration/web_interface.html

[mbahaa (Mohamed Bahaa)]

@jochen

ransport_uri).

Thanks jochen for your tremendous efforts & support.

issue solved & i’m now working on receiving the syslog messages on the input that i create

if faced another issue i’ll create a new case post