Local Setup with Docker Compose does not accept logs

Graylog Central (peer support)
, ,
1

Hey there!

1. Describe your incident:

I’ve followed the tutorial to get Graylog up and running using the Docker Compose set-up. I’m able to access the dashboard, and I created an HTTP GELF input

image
image804×598 8.95 KB

On the same computer, when I try to send logs to the server, I face the following error:

socket hang up

Here is the request I use:

curl --request POST \
  --url http://127.0.0.1:12201/gelf \
  --header 'authorization: Basic e3tIVk5fU0VSVl9VU0VSfX06e3tIVk5fU0VSVl9QQVNTfX0=' \
  --header 'content-type: application/json' \
  --data '{
  "version": "1.1",
  "host": "example.org",
  "short_message": "A short message that helps you identify what is going on",
  "full_message": "Backtrace here\n\nmore stuff",
  "level": 1,
  "_user_id": 9001,
  "_some_info": "foo",
  "_some_env_var": "bar"
}'

2. Describe your environment:

  • OS Information: Windows 11, docker on WSL (Ubuntu 24.04)

  • Package Version: 7.0

  • Service logs, configurations, and environment variables:

    environment:
      GRAYLOG_NODE_ID_FILE: "/usr/share/graylog/data/data/node-id"
      # GRAYLOG_DATANODE_PASSWORD_SECRET and GRAYLOG_PASSWORD_SECRET MUST be the same value
      GRAYLOG_PASSWORD_SECRET: "${GRAYLOG_PASSWORD_SECRET:?Please configure GRAYLOG_PASSWORD_SECRET in the .env file}"
      GRAYLOG_ROOT_PASSWORD_SHA2: "${GRAYLOG_ROOT_PASSWORD_SHA2:?Please configure GRAYLOG_ROOT_PASSWORD_SHA2 in the .env file}"
      GRAYLOG_HTTP_BIND_ADDRESS: "0.0.0.0:9000"
      GRAYLOG_HTTP_EXTERNAL_URI: "http://localhost:9000/"
      GRAYLOG_MONGODB_URI: "mongodb://mongodb:27017/graylog"

3. What steps have you already taken to try and solve the problem?

I’ve tried with different ports, checked for potential firewall issues on the containers, also on Ubuntu. I did try to log into the container to use curl but the error did persist.

4. How can the community help?

I’m running out of idea on how to make that work, so I’d like tips or hints to make that works!

2

Hey @Killy,

Start with a simple TCP raw input, try the below and see if it gets ingested.

echo '{"version": 1.1,"host":"tester","short_message":"dest message","destination_ip":"52.21.21.203"}' | nc -tw 0 localhost 12201