# Inputs dont run but I recive messages

**URL:** <https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235>\
**Category:** Graylog Central (peer support)\
**Created:** [January 11, 2023, 1:54pm UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235 "2023-01-11T13:54:23Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Marvin1](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@Marvin1](https://community.graylog.org/u/Marvin1)\
**Post date:** [January 11, 2023, 1:54pm UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235/1 "2023-01-11T13:54:23Z")

</div>

Hey Guys, I have a Problem and dont know what to do next.  
All inputs are set to 0 running, but logs still arrive.  
Also I don’t see any information about my node anymore.  
everything has worked wonderfully until today. Without anyone has changed anything, Graylog no longer wants to.  
When I try to open /system/node I get the error message that there are problems with the certificate  
But there are no Logs and on the WebUI I saw the Inputs starting and Running

Graylog Open 5.0.2  
Elasticsearch 7.10.2  
MongoDB 6.0.3  
on Debian 10

I enabled SSL for this Node  
The certificate chain (not self sight) is in the trust store and it worked properly until now  
The config of Elastic and Graylog is correct  
I receive Logs from the inputs  
I can access the API  
Elastic can communicate with Graylog  
The certificate is up to date  
I also restarted everything in the correct order

I hope anyone can tell me what to do…  
Greetings

 ![Screenshot (17)](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/e/ec420f5ca9f2b6e1cc4f3712ca7df6571f0a93b7.jpeg)  
 ![Screenshot (18)](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/6/60413492db6e544182f9a090756f0e6b0bd76e97.jpeg)  
 ![Screenshot (19)](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/4/4a6a5308b11f870f9a3318d46c07132888cbe30c.jpeg)  
 ![Screenshot (21)](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/1/1deb7b5a924572ca9dc6735b2588f5d8614fadef.jpeg)

---

<div class="post-metadata">

**Author:** ![Marvin1](https://avatars.discourse-cdn.com/v4/letter/m/ecb155/32.png) [@Marvin1](https://community.graylog.org/u/Marvin1)\
**Post date:** [January 11, 2023, 4:23pm UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235/2 "2023-01-11T16:23:12Z")

</div>

To solve this problem on Debian search the truststore

```auto
 sudo find / -name cacerts

```

My output  
/usr/lib/jvm/java-11-openjdk-amd64/lib/security/cacerts  
/usr/lib/jvm/jdk-17/lib/security/cacerts  
/usr/share/graylog-server/jvm/lib/security/cacerts  
/usr/share/elasticsearch/jdk/lib/security/cacerts  
/etc/default/cacerts  
/etc/ssl/certs/java/cacerts  
/opt/jdk17/lib/security/cacerts

then put your certificate chain to Elastic and Graylog

```auto
 sudo keytool -import -keystore /path/to/truststore -file /path/to/certs

```

Now it`s running

---

<div class="post-metadata">

**Author:** ![ihe](https://avatars.discourse-cdn.com/v4/letter/i/a88e57/32.png) [@ihe](https://community.graylog.org/u/ihe)\
**Post date:** [January 11, 2023, 9:26pm UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235/3 "2023-01-11T21:26:44Z")

</div>

hi @Marvin1  
great you got it running and posted the solution! 🙂

---

<div class="post-metadata">

**Author:** ![dscryber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/dscryber/32/14178_2.png) [@dscryber](https://community.graylog.org/u/dscryber)\
**Post date:** [January 17, 2023, 2:32am UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235/4 "2023-01-17T02:32:35Z")

</div>

Thanks, @Marvin1 for posting your solution. This is greatly appreciated!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [January 31, 2023, 2:33am UTC](https://community.graylog.org/t/inputs-dont-run-but-i-recive-messages/27235/5 "2023-01-31T02:33:19Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
