Issues with Viewing Logs

Graylog Central (peer support)
1

I used the prebuilt Oracle VM from the website to install and run. I got my Windows computer set up to push the windows logs to the Graylog Server, but when i try to view them after awhile i get the error:

While retrieving data for this widget, the following error(s) occurred:

  • Connection refused (Connection refused).

The server.log says ERROR [Messages] Caught exception during bulk indexing: io.searchbox.client.config.exception.CouldNotConnectException: Could not connect to http://127.0.0.1:9200, (retrying attempt #40)

link to the server.log, server.conf, graylog.log, and elasticsearch.yml https://gist.github.com/ColtonKeller89/14195054ec4e5b85d4b11d7ba53e49b7

The ports for Elastic i checked it is using port 9200, and graylog is using the default port of 9000. It seems to work sometimes for awhile and then just stops working.

Let me know if there is any other information i can provide, i’m been a hot minute since i have worked with and in Linux

2

he @ColtonKeller89

did you checked if Elasticsearch is still running? Because this message indicate that it is not.

Jan

3

I will look into that and verify, im curious as to why it is just randomly stopping though. It will work for about an hour, and then i will have to restart the graylog service and it seems to work again for awhile

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.