i am stumbling through this forum for weeks but just can not figure out what exactly my problem is! Before i start telling about my problem, here is my setup:
Single vServer, Ubuntu 20.04 hosted on my esxi Cluster Version 6.7.
vServer: 8GB RAM, 4 vCPUs, 150GB HDD, 1 NIC
Graylog: Graylog server 4.0.2, Deployment: deb
JRE: Private Build 1.8.0_275 on Linux 5.4.0-65-generic
Let’s assume that it’s ip address is 10.100.100.100 and the hostname is bgraylog.
i have created a certificate with our microsoft ca for this host. Then i imported it to the locations i set in the graylog config file. I also did the JVM thing from the graylog guide to install an HTTPS certificate.
When i go to the https website from graylog, sometimes i just show an error, sometimes i can logon and click some masks before the error appears. I even did it to get LDAP binding working via the webinterface.
We are experiencing problems connecting to the Graylog server running on https: serveraddress :9000/api/ . Please verify that the server is healthy and working correctly.
You will be automatically redirected to the previous page once we can connect to the server.
In the webinterface my connection is marked as “secure” and i also validated, that hostnames and ip addresses are “alternative names” in the certificate.
I installed graylog by following the ubuntu installation guide from graylog docs, i am not using any proxy.
I set the following options in the server.conf:
http_bind_address = 10.100.100.100:9000
rest_enable_tls = true
rest_enable_cors = true
rest_tls_cert_file = /etc/graylog/server/certificates/bgraylog.cer
rest_tls_key_file = /etc/graylog/server/certificates/bgraylog_unsec.key
http_enable_cors = true
http_enable_tls = true
http_tls_cert_file = /etc/graylog/server/certificates/bgraylog.cer
http_tls_key_file = /etc/graylog/server/certificates/bgraylog_unsec.key
elasticsearch_hosts = http://10.100.100.100:9200
netstat -tulpn is showing the Ports 9000, 9200, 9300 LISTENING on 10.100.100.100
The graylog-serverlogfile is showing, that the server is up and running, all services started and running. The only WARN i get is something like:
GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
but i dont think that this is playing a big role in this error case.
Now my question: What am i missing out? Is there a way to get some info on “where” the server is stumbling and crashing? By not getting any logs to this error i dont know what i am missing.
Help is highly appreciated!!
PS: please let me know if i forgot any information! <3