GrayLog5.1 Active: activating (auto-restart)

pichit · August 31, 2023, 7:15am

Help me to resolved server.conf

infomation single node deploy detail as below:
###################333
ubuntu@ubuntu22:~$ sudo systemctl status graylog-server.service
● graylog-server.service - Graylog server
Loaded: loaded (/lib/systemd/system/graylog-server.service; enabled; preset: enabled)
Active: activating (auto-restart) (Result: exit-code) since Thu 2023-08-31 14:06:29 +07; 4s ago
Docs: http://docs.graylog.org/
Process: 17105 ExecStart=/usr/share/graylog-server/bin/graylog-server (code=exited, status=1/FAILURE)
Main PID: 17105 (code=exited, status=1/FAILURE)
CPU: 3.244s

#####################################################
ubuntu@ubuntu22:~$ sudo systemctl status elasticsearch.service
● elasticsearch.service - Elasticsearch
Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; preset: enabled)
Active: active (running) since Thu 2023-08-31 12:35:08 +07; 1h 33min ago
Docs: https://www.elastic.co
Main PID: 1191 (java)
Tasks: 75 (limit: 19041)
Memory: 5.8G
CPU: 1min 45.732s
CGroup: /system.slice/elasticsearch.service
├─1191 /usr/share/elasticsearch/jdk/bin/java -Xshare:auto -Des.networkaddress.cache.ttl=60 -Des.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.headless=true →
└─1587 /usr/share/elasticsearch/modules/x-pack-ml/platform/linux-x86_64/bin/controller

Aug 31 19:32:11 ubuntu22 systemd[1]: Starting Elasticsearch…
Aug 31 12:35:08 ubuntu22 systemd[1]: Started Elasticsearch.
lines 1-14/14 (END)

####################
ubuntu@ubuntu22:~$ sudo systemctl status mongod
● mongod.service - MongoDB Database Server
Loaded: loaded (/lib/systemd/system/mongod.service; enabled; preset: enabled)
Active: active (running) since Thu 2023-08-31 19:32:11 +07; 5h 22min left
Docs: https://docs.mongodb.org/manual
Main PID: 1193 (mongod)
Memory: 81.9M
CPU: 34.471s
CGroup: /system.slice/mongod.service
└─1193 /usr/bin/mongod --config /etc/mongod.conf

Aug 31 19:32:11 ubuntu22 systemd[1]: Started MongoDB Database Server.
Aug 31 12:34:20 ubuntu22 mongod[1193]: {“t”:{“$date”:“2023-08-31T05:34:20.817Z”},“s”:“I”, “c”:“CONTROL”, “id”:7484500, “ctx”:“main”,“msg”:"Environment variable MONGODB_CONFIG_OVERRIDE_NOFORK == 1, >
lines 1-12/12 (END)

ubuntu@ubuntu22:~$ sudo systemctl status opensearch.service
● opensearch.service - OpenSearch
Loaded: loaded (/lib/systemd/system/opensearch.service; enabled; preset: enabled)
Active: active (running) since Thu 2023-08-31 12:35:03 +07; 1h 35min ago
Docs: https://opensearch.org/
Main PID: 858 (java)
Tasks: 109 (limit: 19041)
Memory: 1.1G
CPU: 2min 12.572s
CGroup: /system.slice/opensearch.service
└─858 /usr/share/opensearch/jdk/bin/java -Xshare:auto -Dopensearch.networkaddress.cache.ttl=60 -Dopensearch.networkaddress.cache.negative.ttl=10 -XX:+AlwaysPreTouch -Xss1m -Djava.awt.hea>

Aug 31 12:33:52 ubuntu22 systemd[1]: Starting OpenSearch…
Aug 31 12:34:08 ubuntu22 systemd-entrypoint[858]: WARNING: A terminally deprecated method in java.lang.System has been called
Aug 31 12:34:08 ubuntu22 systemd-entrypoint[858]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.OpenSearch (file:/usr/share/opensearch/lib/opensearch-2.9.0.jar)
Aug 31 12:34:08 ubuntu22 systemd-entrypoint[858]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.OpenSearch
Aug 31 12:34:08 ubuntu22 systemd-entrypoint[858]: WARNING: System::setSecurityManager will be removed in a future release
Aug 31 12:34:15 ubuntu22 systemd-entrypoint[858]: WARNING: A terminally deprecated method in java.lang.System has been called
Aug 31 12:34:15 ubuntu22 systemd-entrypoint[858]: WARNING: System::setSecurityManager has been called by org.opensearch.bootstrap.Security (file:/usr/share/opensearch/lib/opensearch-2.9.0.jar)
Aug 31 12:34:15 ubuntu22 systemd-entrypoint[858]: WARNING: Please consider reporting this to the maintainers of org.opensearch.bootstrap.Security
Aug 31 12:34:15 ubuntu22 systemd-entrypoint[858]: WARNING: System::setSecurityManager will be removed in a future release
Aug 31 12:35:03 ubuntu22 systemd[1]: Started OpenSearch.
…skipping…

#######################3
root@ubuntu22:/etc/graylog/server# cat server.conf | egrep -v “^\s*(#|$)”
path=c:\\docs\\doc1
is_master = true
node_id_file = /etc/graylog/server/node-id
password_secret = jqYVJIEu2vl3XzHDdbgFkqjcarPj7ovrLnZ8imygsM17mHBjkrewZ8BgBk7HGi2abc8GYLOuccg8kTlNMfYq2HWF051NAis3
root_username = admin
root_password_sha2 = b9e61378dab32c8c3b162614e6f95ca1aab3fb400db55fe8f3f330ed2e1ea857
root_timezone = UTC
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
http_bind_address = 192.168.100.187:9000
http_publish_uri = http://$http_bind_address/
Default: $http_publish_uri
http_enable_cors = true
http_enable_gzip = true
http_max_header_size = 8192
http_thread_pool_size = 16
http_enable_tls = false
http_tls_cert_file = /path/to/graylog.crt
http_tls_key_file = /path/to/graylog.key
http_tls_key_password = luj5iQ97BCoBj1UYr0SdJtsEuVnDFYzIm7diMyhCUaJtBIc03xSbkqjSl2jN1aSvdyvhFoUs14G2YrlYjue4deqQ6kWxJpww
stream_aware_field_types=false
trusted_proxies = 127.0.0.1/32, 0:0:0:0:0:0:0:1/128
Default: http://172.0.0.1:9200
elasticsearch_connect_timeout = 10s
elasticsearch_socket_timeout = 60s
elasticsearch_idle_timeout = -1s
elasticsearch_max_total_connections = 200
elasticsearch_max_total_connections_per_route = 20
elasticsearch_max_retries = 2
elasticsearch_discovery_enabled = false
elasticsearch_discovery_filter = rack:42
elasticsearch_discovery_frequency = 30s
elasticsearch_discovery_default_scheme = http
elasticsearch_compression_enabled = false
elasticsearch_use_expect_continue = true
rotation_strategy = count !
elasticsearch_max_time_per_index = 4d !
elasticsearch_max_size_per_index = 1073741824 !
elasticsearch_max_docs_per_index = 20000000 !
elasticsearch_max_number_of_indices = 20 !
retention_strategy = delete !
elasticsearch_index_prefix = graylog !!
elasticsearch_template_name = graylog-internal !!
elasticsearch_analyzer = standard !!
elasticsearch_shards = 4 !!
elasticsearch_replicas = 0 !!
disable_index_optimization = false !!
index_optimization_max_num_segments = 1 !!
elasticsearch_disable_version_check = true
allow_leading_wildcard_searches = false
allow_highlighting = false
Default: 1h
elasticsearch_request_timeout = 1m
elasticsearch_index_optimization_timeout = 1h
elasticsearch_index_optimization_jobs = 10
index_ranges_cleanup_interval = 1h
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
outputbuffer_processor_keep_alive_time = 5000
outputbuffer_processor_threads_core_pool_size = 3
outputbuffer_processor_threads_max_pool_size = 30
udp_recvbuffer_sizes = 1048576
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
message_journal_max_age = 12h
message_journal_max_size = 5gb
message_journal_flush_age = 1m
message_journal_flush_interval = 1000000
message_journal_segment_age = 1h
message_journal_segment_size = 100mb
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
integrations_scripts_dir = /usr/share/graylog-server/scripts

##########################################
ubuntu@ubuntu22:~$ sudo dpkg -l | grep -E “.(elasticsearch|graylog|mongo).”
ii elasticsearch 7.17.12 amd64 Distributed RESTful search engine built for the cloud
ii graylog-5.1-repository 1-2 all Package to install Graylog 5.1 GPG key and repository
rc graylog-enterprise 5.1.4-1 amd64 Graylog Enterprise Server
ii graylog-server 5.1.4-1 amd64 Graylog server
ii mongodb-database-tools 100.8.0 amd64 mongodb-database-tools package provides tools for working with the MongoDB server:
hi mongodb-mongosh 1.10.6 amd64 MongoDB Shell CLI REPL Package
hi mongodb-org 7.0.0 amd64 MongoDB open source document-oriented database system (metapackage)
hi mongodb-org-database 7.0.0 amd64 MongoDB open source document-oriented database system (metapackage)
ii mongodb-org-database-tools-extra 7.0.0 amd64 Extra MongoDB database tools
hi mongodb-org-mongos 7.0.0 amd64 MongoDB sharded cluster query router
hi mongodb-org-server 7.0.0 amd64 MongoDB database server
ii mongodb-org-shell 7.0.0 amd64 MongoDB shell client
hi mongodb-org-tools 7.0.0 amd64 MongoDB tools

drewmiranda-gl · August 31, 2023, 4:26pm

If i understand, you are saying that Graylog server either will not start, or exits immediately after starting?

Can you share your server.log? See Default file locations

pichit · September 11, 2023, 10:26am

yes, I can resolved service start as your recommend to get server.log.
something else has problem about configuration.
Why the “graylog-server.service” has up and down?
I’ll export log for and reply again.

thank you @drewmiranda-gl

pichit · September 11, 2023, 10:45am

Requested by:
1 : IndexFieldTypePollerAdapterProvider.(IndexFieldTypePollerAdapterProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:64)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider> was bound.

Did you mean?
StreamsForFieldRetriever bound at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:55)

SearchVersion annotated with interface DetectedSearchVersion bound at ElasticsearchModule.configure(ElasticsearchModule.java:30)

SearchVersion annotated with @Named("elasticsearch_version") bound at NamedConfigParametersModule.registerParameters(NamedConfigParametersModule.java:80)

Requested by:
1 : StreamsForFieldRetrieverProvider.(StreamsForFieldRetrieverProvider.java:33)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:55)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider> was bound.

Did you mean?
IndicesAdapter bound at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:57)

SearchVersion annotated with interface DetectedSearchVersion bound at ElasticsearchModule.configure(ElasticsearchModule.java:30)

SearchVersion annotated with @Named("elasticsearch_version") bound at NamedConfigParametersModule.registerParameters(NamedConfigParametersModule.java:80)

Requested by:
1 : IndicesAdapterProvider.(IndicesAdapterProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:57)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider> was bound.

Requested by:
1 : MessagesAdapterProvider.(MessagesAdapterProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:61)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider> was bound.

Did you mean?
MultiChunkResultRetriever bound at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:59)

SearchVersion annotated with interface DetectedSearchVersion bound at ElasticsearchModule.configure(ElasticsearchModule.java:30)

SearchVersion annotated with @Named("elasticsearch_version") bound at NamedConfigParametersModule.registerParameters(NamedConfigParametersModule.java:80)

Requested by:
1 : MultiChunkResultRetrieverProvider.(MultiChunkResultRetrieverProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:59)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider> was bound.

Did you mean?
SearchesAdapter bound at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:58)

SearchVersion annotated with interface DetectedSearchVersion bound at ElasticsearchModule.configure(ElasticsearchModule.java:30)

SearchVersion annotated with @Named("elasticsearch_version") bound at NamedConfigParametersModule.registerParameters(NamedConfigParametersModule.java:80)

Requested by:
1 : SearchesAdapterProvider.(SearchesAdapterProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:58)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

[Guice/MissingImplementation]: No implementation for Map<SearchVersion, Provider<V20170607164210_MigrateReopenedIndicesToAliases$ClusterState>> was bound.

Did you mean?
V20170607164210_MigrateReopenedIndicesToAliases$ClusterState bound at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:66)

SearchVersion annotated with interface DetectedSearchVersion bound at ElasticsearchModule.configure(ElasticsearchModule.java:30)

SearchVersion annotated with @Named("elasticsearch_version") bound at NamedConfigParametersModule.registerParameters(NamedConfigParametersModule.java:80)

Requested by:
1 : V20170607164210_MigrateReopenedIndicesToAliasesClusterStateAdapterProvider.(V20170607164210_MigrateReopenedIndicesToAliasesClusterStateAdapterProvider.java:31)
_ for 2nd parameter
at VersionAwareStorageModule.configure(VersionAwareStorageModule.java:66)

Learn more:
MISSING_IMPLEMENTATION · google/guice Wiki · GitHub

16 errors

======================
Full classname legend:

ClusterAdapter: “org.graylog2.indexer.cluster.ClusterAdapter”
ClusterAdapterProvider: “org.graylog2.storage.providers.ClusterAdapterProvider”
CountsAdapter: “org.graylog2.indexer.counts.CountsAdapter”
CountsAdapterProvider: “org.graylog2.storage.providers.CountsAdapterProvider”
DetectedSearchVersion: “org.graylog2.storage.DetectedSearchVersion”
ElasticsearchBackendProvider: “org.graylog2.storage.providers.ElasticsearchBackendProvider”
ElasticsearchModule: “org.graylog2.bindings.ElasticsearchModule”
ExportBackend: “org.graylog.plugins.views.search.export.ExportBackend”
ExportBackendProvider: “org.graylog.plugins.views.providers.ExportBackendProvider”
GeneratedQueryContext: “org.graylog.plugins.views.search.engine.GeneratedQueryContext”
IndexFieldTypePollerAdapter: “org.graylog2.indexer.fieldtypes.IndexFieldTypePollerAdapter”
IndexFieldTypePollerAdapterProvider: “org.graylog2.storage.providers.IndexFieldTypePollerAdapterProvider”
IndexToolsAdapter: “org.graylog2.indexer.IndexToolsAdapter”
IndexToolsAdapterProvider: “org.graylog2.storage.providers.IndexToolsAdapterProvider”
IndicesAdapter: “org.graylog2.indexer.indices.IndicesAdapter”
IndicesAdapterProvider: “org.graylog2.storage.providers.IndicesAdapterProvider”
MessagesAdapter: “org.graylog2.indexer.messages.MessagesAdapter”
MessagesAdapterProvider: “org.graylog2.storage.providers.MessagesAdapterProvider”
MoreSearchAdapter: “org.graylog.events.search.MoreSearchAdapter”
MoreSearchAdapterProvider: “org.graylog2.storage.providers.MoreSearchAdapterProvider”
MultiChunkResultRetriever: “org.graylog2.indexer.results.MultiChunkResultRetriever”
MultiChunkResultRetrieverProvider: “org.graylog2.storage.providers.MultiChunkResultRetrieverProvider”
Named: “com.google.inject.name.Named”
NamedConfigParametersModule: “com.github.joschi.jadconfig.guice.NamedConfigParametersModule”
NodeAdapter: “org.graylog2.indexer.cluster.NodeAdapter”
NodeAdapterProvider: “org.graylog2.storage.providers.NodeAdapterProvider”
Provider: “javax.inject.Provider”
QueryBackend: “org.graylog.plugins.views.search.engine.QueryBackend”
QuerySuggestionsProvider: “org.graylog.plugins.views.providers.QuerySuggestionsProvider”
QuerySuggestionsService: “org.graylog.plugins.views.search.engine.QuerySuggestionsService”
SearchVersion: “org.graylog2.storage.SearchVersion”
SearchesAdapter: “org.graylog2.indexer.searches.SearchesAdapter”
SearchesAdapterProvider: “org.graylog2.storage.providers.SearchesAdapterProvider”
StreamsForFieldRetriever: “org.graylog2.indexer.fieldtypes.streamfiltered.esadapters.StreamsForFieldRetriever”
StreamsForFieldRetrieverProvider: “org.graylog2.storage.providers.StreamsForFieldRetrieverProvider”
V20170607164210_MigrateReopenedIndicesToAliases$ClusterState: “org.graylog2.migrations.V20170607164210_MigrateReopenedIndicesToAliases$ClusterState”
V20170607164210_MigrateReopenedIndicesToAliasesClusterStateAdapterProvider: “org.graylog2.storage.providers.V20170607164210_MigrateReopenedIndicesToAliasesClusterStateAdapterProvider”
V20200730000000_AddGl2MessageIdFieldAliasForEvents$ElasticsearchAdapter: “org.graylog.plugins.views.migrations.V20200730000000_AddGl2MessageIdFieldAliasForEvents$ElasticsearchAdapter”
V20200730000000_AddGl2MessageIdFieldAliasForEventsElasticsearchAdapterProvider: “org.graylog2.storage.providers.V20200730000000_AddGl2MessageIdFieldAliasForEventsElasticsearchAdapterProvider”
VersionAwareStorageModule: “org.graylog2.storage.VersionAwareStorageModule”
ViewsBindings: “org.graylog.plugins.views.ViewsBindings”

End of classname legend:

    at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:568) ~[graylog.jar:?]
    at com.google.inject.internal.InternalInjectorCreator.initializeStatically(InternalInjectorCreator.java:163) ~[graylog.jar:?]
    at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:110) ~[graylog.jar:?]
    at com.google.inject.Guice.createInjector(Guice.java:87) ~[graylog.jar:?]
    at org.graylog2.shared.bindings.GuiceInjectorHolder.createInjector(GuiceInjectorHolder.java:34) ~[graylog.jar:?]
    at org.graylog2.bootstrap.CmdLineTool.setupInjector(CmdLineTool.java:505) ~[graylog.jar:?]
    at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:305) ~[graylog.jar:?]
    at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
    at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]

2023-09-11T17:01:27.574+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-11T17:01:28.263+07:00 WARN [PluginLoader] Plugin directory /plugin does not exist, not loading plugins.
2023-09-11T17:01:28.273+07:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.1.4+6fa2de3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-09-11T17:01:28.296+07:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-09-11T17:01:28.495+07:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.8.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.8+7”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@168cd36b]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-11T17:01:28.498+07:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.8.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.8+7”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@168cd36b]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-11T17:01:28.511+07:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-09-11T17:01:28.517+07:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=21, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=21480092}
2023-09-11T17:01:28.588+07:00 INFO [MongoDBPreflightCheck] Connected to MongoDB version 7.0.0
2023-09-11T17:01:28.910+07:00 INFO [FilePersistedNodeIdProvider] Node ID: b56f0a88-3828-4e2b-94fd-62ad013ed335
2023-09-11T17:01:29.206+07:00 INFO [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version Elasticsearch:7.17.12
2023-09-11T17:01:29.381+07:00 INFO [Version] HV000001: Hibernate Validator null
2023-09-11T17:40:40.749+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-11T17:40:47.332+07:00 WARN [PluginLoader] Plugin directory /plugin does not exist, not loading plugins.
2023-09-11T17:40:47.545+07:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.1.4+6fa2de3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-09-11T17:40:47.636+07:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-09-11T17:40:48.537+07:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.8.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.8+7”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@408e96d9]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-11T17:40:48.545+07:00 INFO [client] MongoClient with metadata {“driver”: {“name”: “mongo-java-driver|legacy”, “version”: “4.8.1”}, “os”: {“type”: “Linux”, “name”: “Linux”, “architecture”: “amd64”, “version”: “5.19.0-46-generic”}, “platform”: “Java/Eclipse Adoptium/17.0.8+7”} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=, codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, CollectionCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@408e96d9]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName=‘null’, serverSelector=‘null’, clusterListeners=‘’, serverSelectionTimeout=‘30000 ms’, localThreshold=‘30000 ms’}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=, maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners=‘’, serverMonitorListeners=‘’}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName=‘null’, compressorList=, uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-09-11T17:40:48.602+07:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-09-11T17:40:48.675+07:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=21, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=35259758}
2023-09-11T17:40:48.877+07:00 INFO [MongoDBPreflightCheck] Connected to MongoDB version 7.0.0
2023-09-11T17:40:50.308+07:00 INFO [FilePersistedNodeIdProvider] Node ID: b56f0a88-3828-4e2b-94fd-62ad013ed335
2023-09-11T17:40:54.655+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:40:54.657+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #1
2023-09-11T17:40:59.659+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:40:59.660+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #2
2023-09-11T17:41:04.662+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:04.663+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #3
2023-09-11T17:41:09.665+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:09.665+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #4
2023-09-11T17:41:14.667+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:14.668+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #5
2023-09-11T17:41:19.670+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:19.671+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #6
2023-09-11T17:41:24.672+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:24.673+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #7
2023-09-11T17:41:29.676+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:29.676+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #8
2023-09-11T17:41:34.686+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:34.687+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #9
2023-09-11T17:41:39.699+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:39.699+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #10
2023-09-11T17:41:44.710+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:44.711+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #11
2023-09-11T17:41:49.722+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:49.722+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #12
2023-09-11T17:41:54.724+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:54.725+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #13
2023-09-11T17:41:59.727+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:41:59.728+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #14
2023-09-11T17:42:04.729+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:42:04.730+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #15
2023-09-11T17:42:09.732+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:42:09.733+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #16
2023-09-11T17:42:14.735+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:42:14.736+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #17
2023-09-11T17:42:19.737+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:42:19.738+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #18
2023-09-11T17:42:24.740+07:00 ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-09-11T17:42:24.741+07:00 INFO [VersionProbe] Elasticsearch is not available. Retry #19
2023-09-11T17:42:31.026+07:00 INFO [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version OpenSearch:2.9.0
2023-09-11T17:42:38.587+07:00 INFO [Version] HV000001: Hibernate Validator null
root@ubuntu22:/var/log/graylog-server# systemctl status gr
graphical.target graylog-server.service grub-common.service grub-initrd-fallback.service
root@ubuntu22:/var/log/graylog-server# systemctl status graylog-server.service
● graylog-server.service - Graylog server
Loaded: loaded (/lib/systemd/system/graylog-server.service; enabled; preset: enabled)
Active: active (running) since Tue 2023-09-12 00:38:16 +07; 6h left
Docs: http://docs.graylog.org/
Main PID: 1179 (graylog-server)
Tasks: 33 (limit: 19041)
Memory: 380.4M
CPU: 17.497s
CGroup: /system.slice/graylog-server.service
├─1179 /bin/sh /usr/share/graylog-server/bin/graylog-server
└─1230 /usr/share/graylog-server/jvm/bin/java -Xms1g -Xmx1g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -jar -Dlog4j.configurationFile=file:///e>

Sep 12 00:38:16 ubuntu22 systemd[1]: Started Graylog server.
…skipping…
● graylog-server.service - Graylog server
Loaded: loaded (/lib/systemd/system/graylog-server.service; enabled; preset: enabled)
Active: active (running) since Tue 2023-09-12 00:38:16 +07; 6h left
Docs: http://docs.graylog.org/
Main PID: 1179 (graylog-server)
Tasks: 33 (limit: 19041)
Memory: 380.4M
CPU: 17.497s
CGroup: /system.slice/graylog-server.service
├─1179 /bin/sh /usr/share/graylog-server/bin/graylog-server
└─1230 /usr/share/graylog-server/jvm/bin/java -Xms1g -Xmx1g -server -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -jar -Dlog4j.configurationFile=file:///e>

pichit · September 11, 2023, 10:50am

2023-09-10T11:44:24.284+07:00 ERROR [CmdLineTool] Invalid configuration

pichit · September 11, 2023, 11:09am

mongod.conf and log

drewmiranda-gl · September 11, 2023, 2:10pm

I believe this error is where its stopping:

Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.

I noticed in your graylog server.conf you don’t have elasticsearch_hosts declared. This is ok as long as Elasticsearch/OpenSearch is reachable from graylog-server via 127.0.0.1:9200 (TCP)

I also see you are using elasticsearch 7.17.12. This is unfortunately an unsupported version. The latest supported version is 7.10.2.

Regarding

MISSING_IMPLEMENTATION · google/guice

I’ve typically seen this when the plugin directory either does not exist or is in accessible. I do see you have the default value for plugin_dir. Can you confirm this directory exists, and that there are no custom plugins in the directory?

Here is an example of what mine looks like with graylog 5.1:

drew@hplap:/usr/share/graylog-server/plugin$ ls -l
total 330884
-rw-r--r-- 1 root root  25006055 Sep  6 11:26 graylog-plugin-aws-5.1.5.jar
-rw-r--r-- 1 root root  11947211 Sep  6 11:26 graylog-plugin-collector-5.1.5.jar
-rw-r--r-- 1 root root 133783773 Sep  6 11:26 graylog-plugin-enterprise-5.1.5.jar
-rw-r--r-- 1 root root     17619 Sep  6 11:26 graylog-plugin-enterprise-es7-5.1.5.jar
-rw-r--r-- 1 root root  69223340 Sep  6 11:26 graylog-plugin-enterprise-integrations-5.1.5.jar
-rw-r--r-- 1 root root     17597 Sep  6 11:26 graylog-plugin-enterprise-os2-5.1.5.jar
-rw-r--r-- 1 root root  38051485 Sep  6 11:26 graylog-plugin-integrations-5.1.5.jar
-rw-r--r-- 1 root root  29882634 Sep  6 11:26 graylog-storage-elasticsearch7-5.1.5.jar
-rw-r--r-- 1 root root  30878716 Sep  6 11:26 graylog-storage-opensearch2-5.1.5.jar

pichit · September 13, 2023, 2:19am

I get it, and downgrade Elasticsearch to version 7.10.2
the service error detail as below.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,251 main ERROR Unable to invoke factory method in class org.apache.logging.log4j.core.appender.RollingFileAppender for element RollingFile: java.lang.IllegalStateExc>
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.findFactoryMethod(PluginBuilder.java:235)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.plugins.util.PluginBuilder.build(PluginBuilder.java:135)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.createPluginObject(AbstractConfiguration.java:959)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:899)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.createConfiguration(AbstractConfiguration.java:891)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.doConfigure(AbstractConfiguration.java:514)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.initialize(AbstractConfiguration.java:238)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.config.AbstractConfiguration.start(AbstractConfiguration.java:250)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.LoggerContext.setConfiguration(LoggerContext.java:547)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.apache.logging.log4j.core.LoggerContext.start(LoggerContext.java:263)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:236)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.common.logging.LogConfigurator.configure(LogConfigurator.java:129)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:354)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.cli.Command.main(Command.java:90)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92)
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,252 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,252 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,253 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,253 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,253 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,253 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,254 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,254 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,254 main ERROR Null object returned for RollingFile in Appenders.
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,255 main ERROR Unable to locate appender “rolling” for logger config “root”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,255 main ERROR Unable to locate appender “rolling_old” for logger config “root”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,255 main ERROR Unable to locate appender “index_indexing_slowlog_rolling_old” for logger config “index.indexing.slowlog.index”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,256 main ERROR Unable to locate appender “index_indexing_slowlog_rolling” for logger config “index.indexing.slowlog.index”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,256 main ERROR Unable to locate appender “audit_rolling” for logger config “org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,256 main ERROR Unable to locate appender “index_search_slowlog_rolling_old” for logger config “index.search.slowlog”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,257 main ERROR Unable to locate appender “index_search_slowlog_rolling” for logger config “index.search.slowlog”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,257 main ERROR Unable to locate appender “deprecation_rolling_old” for logger config “org.elasticsearch.deprecation”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: 2023-09-13 09:10:05,257 main ERROR Unable to locate appender “deprecation_rolling” for logger config “org.elasticsearch.deprecation”
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: uncaught exception in thread [main]
Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: java.lang.IllegalStateException: Unable to access ‘path.logs’ (/usr/share/elasticsearch/logs)

This line; how to change log folder. by default /var/log/elasticsearch/…log’;

Sep 13 09:10:05 ubuntu22 systemd-entrypoint[6050]: Likely root cause: java.nio.file.AccessDeniedException: /usr/share/elasticsearch/logs

pichit · September 13, 2023, 9:47am

2023-09-13T16:39:51.328+07:00 INFO [MongoDBPreflightCheck] MongoDB is not available. Retry #790
2023-09-13T16:39:53.328+07:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-09-13T16:40:23.328+07:00 INFO [MongoDBPreflightCheck] MongoDB is not available. Retry #791
2023-09-13T16:40:25.329+07:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-09-13T16:40:55.028+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:40:55.411+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:41:06.728+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:41:07.116+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:41:18.447+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:41:18.833+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:41:30.220+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:41:30.604+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:41:42.110+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:41:42.540+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:43:39.264+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:43:52.483+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:44:04.174+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:44:04.552+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:44:15.933+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:44:16.315+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:44:27.711+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:44:28.121+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:44:39.495+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:44:39.910+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:44:51.153+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:44:51.531+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:45:02.906+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:45:03.285+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:45:14.676+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:45:15.056+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:45:26.402+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:45:26.783+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:45:38.166+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:45:38.558+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:45:49.916+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:45:50.300+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:46:01.714+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:46:02.088+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:46:13.395+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:46:13.776+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:46:25.157+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:46:25.535+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more
2023-09-13T16:46:36.929+07:00 INFO [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[cloud_inputs=on, scripting_api_preview=on, search_filter=on, preflight_web=off]}
2023-09-13T16:46:37.311+07:00 ERROR [CmdLineTool] Invalid configuration
com.github.joschi.jadconfig.ParameterException: Couldn’t convert value for parameter “max_index_retention_period”
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:136) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.process(JadConfig.java:101) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.processConfiguration(CmdLineTool.java:480) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:281) [graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:259) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:45) [graylog.jar:?]
Caused by: com.github.joschi.jadconfig.ParameterException: Couldn’t convert value “none” to Period object.
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:133) ~[graylog.jar:?]
at com.github.joschi.jadconfig.jodatime.converters.PeriodConverter.convertFrom(PeriodConverter.java:26) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.convertStringValue(JadConfig.java:179) ~[graylog.jar:?]
at com.github.joschi.jadconfig.JadConfig.processClassFields(JadConfig.java:134) ~[graylog.jar:?]
… 5 more

pichit · September 13, 2023, 9:49am

[2023-09-12T09:23:24,413][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [ubuntu22] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: ElasticsearchException[failed to bind service]; nested: IndexFormatTooNewException[Format version is not supported (resource SimpleFSIndexInput(path=“/var/lib/elasticsearch/nodes/0/_state/_56.cfs”) [slice=_56.fdt]): 4 (needs to be between 1 and 3)];
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.10.2.jar:7.10.2]
Caused by: org.elasticsearch.ElasticsearchException: failed to bind service
at org.elasticsearch.node.Node.(Node.java:729) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.2.jar:7.10.2]
… 6 more
Caused by: org.apache.lucene.index.IndexFormatTooNewException: Format version is not supported (resource SimpleFSIndexInput(path=“/var/lib/elasticsearch/nodes/0/_state/_56.cfs”) [slice=_56.fdt]): 4 (needs to be between 1 and 3)
at org.apache.lucene.codecs.CodecUtil.checkHeaderNoMagic(CodecUtil.java:216) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.codecs.CodecUtil.checkHeader(CodecUtil.java:198) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.codecs.CodecUtil.checkIndexHeader(CodecUtil.java:255) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.codecs.compressing.CompressingStoredFieldsReader.(CompressingStoredFieldsReader.java:130) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.codecs.compressing.CompressingStoredFieldsFormat.fieldsReader(CompressingStoredFieldsFormat.java:123) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.codecs.lucene87.Lucene87StoredFieldsFormat.fieldsReader(Lucene87StoredFieldsFormat.java:131) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.SegmentCoreReaders.(SegmentCoreReaders.java:127) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.SegmentReader.(SegmentReader.java:83) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.StandardDirectoryReader$1.doBody(StandardDirectoryReader.java:66) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.StandardDirectoryReader$1.doBody(StandardDirectoryReader.java:58) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.SegmentInfos$FindSegmentsFile.run(SegmentInfos.java:720) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.StandardDirectoryReader.open(StandardDirectoryReader.java:81) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.apache.lucene.index.DirectoryReader.open(DirectoryReader.java:63) ~[lucene-core-8.7.0.jar:8.7.0 2dc63e901c60cda27ef3b744bc554f1481b3b067 - atrisharma - 2020-10-29 19:35:28]
at org.elasticsearch.gateway.PersistedClusterStateService.nodeMetadata(PersistedClusterStateService.java:267) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.env.NodeEnvironment.loadNodeMetadata(NodeEnvironment.java:409) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.env.NodeEnvironment.(NodeEnvironment.java:330) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.node.Node.(Node.java:362) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.node.Node.(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap$5.(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.2.jar:7.10.2]
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.2.jar:7.10.2]

drewmiranda-gl · September 13, 2023, 2:53pm

[MongoDBPreflightCheck] MongoDB is not available.

Can you validate that mongod is installing, configured, and running?

By default graylog will try to connect to mongo on 127.0.0.1:27017

You can also test connecting to mongo using mongosh (for mongo 5 and 6, you may need to install separately) or mongo (for mongo 4 and earlier)

example:

mongosh --eval "db.version()" --quiet

pichit · September 14, 2023, 3:49am

mongoDB failed.
Sep 14 10:43:28 ubuntu22 systemd[1]: Started MongoDB Database Server.
Sep 14 10:43:28 ubuntu22 systemd[1]: mongod.service: Main process exited, code=dumped, status=4/ILL
Sep 14 10:43:28 ubuntu22 systemd[1]: mongod.service: Failed with result ‘core-dump’

pichit · September 14, 2023, 3:50am

I’ll graylog, opensearch and Mongo. (remove elasticsearch)

system · September 28, 2023, 3:50am

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Graylog start erorr Graylog Central (peer support)	3	398	September 20, 2022
Graylog can't active Graylog Central (peer support)	6	3325	April 2, 2018
Graylog-server.service failed Graylog Central (peer support)	9	11547	August 6, 2020
Graylog service active but application not running Graylog Central (peer support)	4	831	December 7, 2022
Graylog-server.service fails to start / no logs Graylog Central (peer support)	3	6061	January 6, 2021

GrayLog5.1 Active: activating (auto-restart)

====================== Full classname legend:

End of classname legend:

Related Topics

======================
Full classname legend: