Gryalog Server Startup Error

Graylog Central (peer support)
1

I have a graylog instance that since restarting the service is suddenly unable to start and continues in a loop with the following error messages that I am unsure of where to go next with.

2024-10-23T08:40:16.435-06:00 ERROR [CmdLineTool] Startup error:
com.google.inject.CreationException: Unable to create injector, see the following errors:

at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
while locating X509TrustManager

Learn more:
ERROR_INJECTING_CONSTRUCTOR · google/guice Wiki · GitHub
Caused by: NullPointerException
at java.base/Hashtable.put(Unknown Source)
at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at java.base/KeyStore.setCertificateEntry(Unknown Source)
at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
at java.base/Optional.map(Unknown Source)
at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.GUICE$TRAMPOLINE()
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.apply()
at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
at ConstructorInjector.provision(ConstructorInjector.java:114)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at FactoryProxy.get(FactoryProxy.java:60)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
at Guice.createInjector(Guice.java:87)
at Guice.createInjector(Guice.java:69)
at Guice.createInjector(Guice.java:59)
at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
at CmdLineTool.doRun(CmdLineTool.java:338)
at CmdLineTool.run(CmdLineTool.java:270)
at Main.main(Main.java:55)

at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
_ for 1st parameter
at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
at OkHttpClientProvider.(OkHttpClientProvider.java:75)
_ for 5th parameter
at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
while locating OkHttpClientProvider
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
while locating okhttp3.OkHttpClient

Caused by: NullPointerException
at java.base/Hashtable.put(Unknown Source)
at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at java.base/KeyStore.setCertificateEntry(Unknown Source)
at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
at java.base/Optional.map(Unknown Source)
at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.GUICE$TRAMPOLINE()
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.apply()
at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
at ConstructorInjector.provision(ConstructorInjector.java:114)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at FactoryProxy.get(FactoryProxy.java:60)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at BoundProviderFactory.get(BoundProviderFactory.java:58)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
at Guice.createInjector(Guice.java:87)
at Guice.createInjector(Guice.java:69)
at Guice.createInjector(Guice.java:59)
at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
at CmdLineTool.doRun(CmdLineTool.java:338)
at CmdLineTool.run(CmdLineTool.java:270)
at Main.main(Main.java:55)

at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
_ for 1st parameter
at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
at OkHttpClientProvider.(OkHttpClientProvider.java:75)
_ for 5th parameter
at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
while locating OkHttpClientProvider
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
at VersionProbe.(VersionProbe.java:74)
_ for 2nd parameter
at ElasticsearchVersionProvider.(ElasticsearchVersionProvider.java:53)
_ for 3rd parameter
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:47)
while locating ElasticsearchVersionProvider

Caused by: NullPointerException
at java.base/Hashtable.put(Unknown Source)
at PKCS12KeyStoreSpi$IgnoresCaseHashtable.put(Unknown Source)
at PKCS12KeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at AdaptingKeyStoreSpi.engineSetCertificateEntry(Unknown Source)
at java.base/KeyStore.setCertificateEntry(Unknown Source)
at CaTruststoreImpl.filterOutPrivateKey(CaTruststoreImpl.java:74)
at java.base/Optional.map(Unknown Source)
at CaTruststoreImpl.getTrustStore(CaTruststoreImpl.java:57)
at CustomCAX509TrustManager.refresh(CustomCAX509TrustManager.java:58)
at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:45)
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.GUICE$TRAMPOLINE()
at CustomCAX509TrustManager$$FastClassByGuice$$190f633.apply()
at DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82)
at ConstructorInjector.provision(ConstructorInjector.java:114)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at FactoryProxy.get(FactoryProxy.java:60)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at BoundProviderFactory.get(BoundProviderFactory.java:58)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at SingleParameterInjector.inject(SingleParameterInjector.java:40)
at SingleParameterInjector.getAll(SingleParameterInjector.java:60)
at ConstructorInjector.provision(ConstructorInjector.java:113)
at ConstructorInjector.construct(ConstructorInjector.java:91)
at ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300)
at ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
at SingletonScope$1.get(SingletonScope.java:169)
at InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45)
at InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213)
at InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186)
at InternalInjectorCreator.build(InternalInjectorCreator.java:113)
at Guice.createInjector(Guice.java:87)
at Guice.createInjector(Guice.java:69)
at Guice.createInjector(Guice.java:59)
at ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287)
at ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193)
at ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179)
at ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152)
at CmdLineTool.doRun(CmdLineTool.java:338)
at CmdLineTool.run(CmdLineTool.java:270)
at Main.main(Main.java:55)

3 errors

======================
Full classname legend:

AdaptingKeyStoreSpi: “org.bouncycastle.jcajce.provider.keystore.util.AdaptingKeyStoreSpi”
BoundProviderFactory: “com.google.inject.internal.BoundProviderFactory”
CaTruststoreImpl: “org.graylog.security.certutil.CaTruststoreImpl”
CmdLineTool: “org.graylog2.bootstrap.CmdLineTool”
ConstructorBindingImpl$Factory: “com.google.inject.internal.ConstructorBindingImpl$Factory”
ConstructorInjector: “com.google.inject.internal.ConstructorInjector”
CustomCAX509TrustManager: “org.graylog2.security.CustomCAX509TrustManager”
CustomCAX509TrustManager$$FastClassByGuice$$190f633: “org.graylog2.security.CustomCAX509TrustManager$$FastClassByGuice$$190f633”
DefaultConstructionProxyFactory$FastClassProxy: “com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy”
ElasticsearchVersionProvider: “org.graylog2.storage.providers.ElasticsearchVersionProvider”
FactoryProxy: “com.google.inject.internal.FactoryProxy”
Guice: “com.google.inject.Guice”
InternalFactoryToProviderAdapter: “com.google.inject.internal.InternalFactoryToProviderAdapter”
InternalInjectorCreator: “com.google.inject.internal.InternalInjectorCreator”
KeyStore: “java.security.KeyStore”
Main: “org.graylog2.bootstrap.Main”
OkHttpClientProvider: “org.graylog2.shared.bindings.providers.OkHttpClientProvider”
PKCS12KeyStoreSpi: “org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi”
PKCS12KeyStoreSpi$IgnoresCaseHashtable: “org.bouncycastle.jcajce.provider.keystore.pkcs12.PKCS12KeyStoreSpi$IgnoresCaseHashtable”
ProviderToInternalFactoryAdapter: “com.google.inject.internal.ProviderToInternalFactoryAdapter”
ServerBootstrap: “org.graylog2.bootstrap.ServerBootstrap”
ServerPreflightChecksModule: “org.graylog2.bootstrap.preflight.ServerPreflightChecksModule”
SingleParameterInjector: “com.google.inject.internal.SingleParameterInjector”
SingletonScope$1: “com.google.inject.internal.SingletonScope$1”
TrustManagerAndSocketFactoryProvider: “org.graylog2.security.TrustManagerAndSocketFactoryProvider”
VersionProbe: “org.graylog2.storage.versionprobe.VersionProbe”
X509TrustManager: “javax.net.ssl.X509TrustManager”

End of classname legend:

at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) ~[graylog.jar:?]
at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) ~[graylog.jar:?]
at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) ~[graylog.jar:?]
at com.google.inject.Guice.createInjector(Guice.java:87) ~[graylog.jar:?]
at com.google.inject.Guice.createInjector(Guice.java:69) ~[graylog.jar:?]
at com.google.inject.Guice.createInjector(Guice.java:59) ~[graylog.jar:?]
at org.graylog2.bootstrap.ServerBootstrap.getPreflightInjector(ServerBootstrap.java:287) ~[graylog.jar:?]
at org.graylog2.bootstrap.ServerBootstrap.runPreflightWeb(ServerBootstrap.java:193) ~[graylog.jar:?]
at org.graylog2.bootstrap.ServerBootstrap.runPreFlightChecks(ServerBootstrap.java:179) ~[graylog.jar:?]
at org.graylog2.bootstrap.ServerBootstrap.beforeInjectorCreation(ServerBootstrap.java:152) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.doRun(CmdLineTool.java:338) ~[graylog.jar:?]
at org.graylog2.bootstrap.CmdLineTool.run(CmdLineTool.java:270) [graylog.jar:?]
at org.graylog2.bootstrap.Main.main(Main.java:55) [graylog.jar:?]
2

I have tried to find more info on this but have not found anything yet, is this a known issue or problem that has been seen before:

2024-10-29T18:25:46.745Z ERROR [CmdLineTool] Startup error:
com.google.inject.CreationException: Unable to create injector, see the following errors:

at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
while locating X509TrustManager
…
at Main.main(Main.java:55)
…
2) Guice/ErrorInjectingConstructor: NullPointerException
at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
_ for 1st parameter
at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
at OkHttpClientProvider.(OkHttpClientProvider.java:75)
_ for 5th parameter
at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
while locating OkHttpClientProvider
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
while locating okhttp3.OkHttpClient
…
at Main.main(Main.java:55)
…
3) Guice/ErrorInjectingConstructor: NullPointerException
at CustomCAX509TrustManager.(CustomCAX509TrustManager.java:42)
while locating CustomCAX509TrustManager
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:44)
at TrustManagerAndSocketFactoryProvider.(TrustManagerAndSocketFactoryProvider.java:37)
_ for 1st parameter
at TrustManagerAndSocketFactoryProvider.class(TrustManagerAndSocketFactoryProvider.java:37)
at OkHttpClientProvider.(OkHttpClientProvider.java:75)
_ for 5th parameter
at OkHttpClientProvider.class(OkHttpClientProvider.java:59)
while locating OkHttpClientProvider
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:46)
at VersionProbe.(VersionProbe.java:74)
_ for 2nd parameter
at ElasticsearchVersionProvider.(ElasticsearchVersionProvider.java:53)
_ for 3rd parameter
at ServerPreflightChecksModule.configure(ServerPreflightChecksModule.java:47)
while locating ElasticsearchVersionProvider
…
at Main.main(Main.java:55)
…
3 errors

3

Hello @jrudd,

Has TLS been enabled within your Graylog cluster?

Best,
Ned

4

Good morning,
I have not set that up yet but have been planning on it as last time I started to the services wouldn’t start even though it looked like everything was as it should be. Does the new version rely on that and I missed that note?

I had this in the config when I had tried previously with the real names versus this sanitized version:

GRAYLOG_JAVA_OPTS:
-Djavax.net.ssl.trustStore=/etc/graylog/server/cacerts.jks

OpenSearch:
server.ssl.enabled: true
server.ssl.certificate: /opt/graylog/tls/Graylog.pem
server.ssl.key: /opt/graylog/tls/graylogkey.pem
opensearch.hosts [“https://host1fqdn:9200”,“https://host2qdn:9200”,“https://host3fqdn:9200”,“https://host4fqdn:9200”]
opensearch.ssl.certificateAuthorities: /opt/graylog/tls/CH-CA01.pem
server.ssl.supportedProtocols: [‘TLSv1.2’, ‘TLSv1.3’]
opensearch.ssl.verificationMode: full

Graylog:

http_publish_uri = https://hostnamefqdn:9000
http_enable_tls = true
http_tls_cert_file = /opt/graylog/tls/Graylog.pem
http_tls_key_file = /opt/graylog/tls/graylogkey.pem
http_tls_key_password = passphrase…
elasticsearch.hosts https://host1fqdn:9200,https://host2qdn:9200,https://host3fqdn:9200,https://host4fqdn:9200

5

And since this restart none of these options are set within the Opensearch.yml or server.conf, there is no longer any reference to TLS/SSL?

6

That is correct, I had just updated the version of Graylog. I have since been digging deeper this morning and built another environment entirely to play with and am finding it seems to be something in my Mongo DB… Ugh

I can start Graylog if I connect to the new blank mongo Graylog instance but if I go back to the replicaset that shows it is happy as far as a replset instance goes I get the failure to start.

7

Is an rs.status() run from the Mongo primary indicating no issue with the replica set?

Strange the error relates to a keystore, any changes to the JVM?

8

Correct, It has been driving me nuts since repl shows good too but something is up there as you also noted with the security portion called out with no changes there and would be happy to do whats needed to fix that part but can’t seem to find what or where.

rs1 [primary] graylog> rs.status()
{
set: ‘rs1’,
date: ISODate(‘2024-10-30T18:44:28.883Z’),
myState: 1,
term: Long(‘24’),
syncSourceHost: ‘’,
syncSourceId: -1,
heartbeatIntervalMillis: Long(‘2000’),
majorityVoteCount: 2,
writeMajorityCount: 2,
votingMembersCount: 3,
writableVotingMembersCount: 3,
optimes: {
lastCommittedOpTime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
lastCommittedWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
readConcernMajorityOpTime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
appliedOpTime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
durableOpTime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
lastAppliedWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastDurableWallTime: ISODate(‘2024-10-30T18:44:19.658Z’)
},
lastStableRecoveryTimestamp: Timestamp({ t: 1730313849, i: 1 }),
electionCandidateMetrics: {
lastElectionReason: ‘electionTimeout’,
lastElectionDate: ISODate(‘2024-10-29T17:25:57.534Z’),
electionTerm: Long(‘24’),
lastCommittedOpTimeAtElection: { ts: Timestamp({ t: 0, i: 0 }), t: Long(‘-1’) },
lastSeenOpTimeAtElection: { ts: Timestamp({ t: 1729825641, i: 1 }), t: Long(‘23’) },
numVotesNeeded: 2,
priorityAtElection: 1,
electionTimeoutMillis: Long(‘10000’),
numCatchUpOps: Long(‘0’),
newTermStartDate: ISODate(‘2024-10-29T17:25:57.543Z’),
wMajorityWriteAvailabilityDate: ISODate(‘2024-10-29T17:25:57.561Z’)
},
members: [
{
_id: 0,
name: ‘host1ip:27017’,
health: 1,
state: 2,
stateStr: ‘SECONDARY’,
uptime: 4327,
optime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
optimeDurable: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
optimeDate: ISODate(‘2024-10-30T18:44:19.000Z’),
optimeDurableDate: ISODate(‘2024-10-30T18:44:19.000Z’),
lastAppliedWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastDurableWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastHeartbeat: ISODate(‘2024-10-30T18:44:27.702Z’),
lastHeartbeatRecv: ISODate(‘2024-10-30T18:44:28.373Z’),
pingMs: Long(‘0’),
lastHeartbeatMessage: ‘’,
syncSourceHost: ‘10.100.70.131:27017’,
syncSourceId: 2,
infoMessage: ‘’,
configVersion: 5,
configTerm: 24
},
{
_id: 1,
name: ‘host2ip:27017’,
health: 1,
state: 2,
stateStr: ‘SECONDARY’,
uptime: 91116,
optime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
optimeDurable: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
optimeDate: ISODate(‘2024-10-30T18:44:19.000Z’),
optimeDurableDate: ISODate(‘2024-10-30T18:44:19.000Z’),
lastAppliedWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastDurableWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastHeartbeat: ISODate(‘2024-10-30T18:44:28.438Z’),
lastHeartbeatRecv: ISODate(‘2024-10-30T18:44:28.470Z’),
pingMs: Long(‘0’),
lastHeartbeatMessage: ‘’,
syncSourceHost: ‘10.100.70.131:27017’,
syncSourceId: 2,
infoMessage: ‘’,
configVersion: 5,
configTerm: 24
},
{
_id: 2,
name: ‘host3ip:27017’,
health: 1,
state: 1,
stateStr: ‘PRIMARY’,
uptime: 91125,
optime: { ts: Timestamp({ t: 1730313859, i: 1 }), t: Long(‘24’) },
optimeDate: ISODate(‘2024-10-30T18:44:19.000Z’),
lastAppliedWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
lastDurableWallTime: ISODate(‘2024-10-30T18:44:19.658Z’),
syncSourceHost: ‘’,
syncSourceId: -1,
infoMessage: ‘’,
electionTime: Timestamp({ t: 1730222757, i: 1 }),
electionDate: ISODate(‘2024-10-29T17:25:57.000Z’),
configVersion: 5,
configTerm: 24,
self: true,
lastHeartbeatMessage: ‘’
}
],
ok: 1,
‘$clusterTime’: {
clusterTime: Timestamp({ t: 1730313859, i: 1 }),
signature: {
hash: Binary.createFromBase64(‘AAAAAAAAAAAAAAAAAAAAAAAAAAA=’, 0),
keyId: Long(‘0’)
}
},
operationTime: Timestamp({ t: 1730313859, i: 1 })
}
rs1 [primary] graylog>

9

Would you mind sharing your server.conf and opnesearch.yml, also is this ‘-Djavax.net.ssl.trustStore=/etc/graylog/server/cacerts.jks’ still within your jvm options?