Inquiry about the Graylog Web Nodes unknown status

Graylog Central (peer support)
1

The node is a single node, and both the Web Interface and Elasticsearch states are enabled, enabling Elasticsearch queries. However, when you navigate to the Node menu, the status of the node appears unknown and the status below is displayed. Is there anything else I should check? I’d like your advice.

There is 1 active node
328a95f4 / Unknown
System information is currently unavailable.

Could not get JVM information
Getting JVM information for node ‘328a95f4-2ef7-460c-b6c3-0a5c32eae078’ failed: Error: cannot GET https://xxx.xxx.xxx.xxx:9000/api/cluster/328a95f4-2ef7-460c-b6c3-0a5c32eae078/jvm (500)

Error getting data
We had trouble fetching some data required to build this page, so here is a picture instead.
Error: cannot GET https://xxx.xxx.xxx.xxx:9000/api/cluster/328a95f4-2ef7-460c-b6c3-0a5c32eae078/jvm (500)
Check your Graylog logs for more information.

2

@JaeiL what version of Graylog are you running?

3

The Graylog version is 2.4.3.

4

Hey

Looks like you have certificates, this could cause that issue. You can check if it is the certificate causing this issue very easily.

Comment out the following lines in you Graylog configuration and restart the service.

### To enable HTTPS ####
rest_enable_tls = true
rest_tls_cert_file = /etc/graylog/graylog-certificate.pem
rest_tls_key_file = /etc/graylog/graylog-key.pem
rest_tls_key_password = secret
web_enable_tls = true
web_tls_cert_file = /etc/graylog/graylog-certificate.pem
web_tls_key_file = /etc/graylog/graylog-key.pem
web_tls_key_password = secret

You should be able to logon with you FQDN/IP Address using http.

http://your-server-ip:9000/

If that works without any issue, Then I would look into you certificates.

If you can not and the issue persist then we would need to see you configuration files also.

5

2.4.3 is a very old version. Upgrade to a current version if possible.

1 Like
6

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.