New Ubuntu install - initial setup prompting to configure opensearch?

I just completed following the instructions to install Graylog 5.2 on a new Ubuntu server with Opensearch and Mongodb.

Upon connecting to the webpage, it opens “Graylog Initial Setup” and wants me to implement a “Data Node” - with an error, “No data nodes have been found.”

Graylog /var/log/graylog-server/server.log reports this error, repeating.

2024-05-16T14:01:01.117Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: unexpected end of stream on http://127.0.0.1:9200/… - \n not found: limit=0 content=….
2024-05-16T14:01:01.118Z INFO [VersionProbe] OpenSearch/Elasticsearch is not available. Retry #1

I’ve tried stopping and restarting services to no avail.

2. Describe your environment:

  • OS Information:

Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal

  • Package Version:
    dpkg -l | grep -E “.(elasticsearch|graylog|mongo).”
    ii graylog-5.2-repository 1-2 all Package to install Graylog 5.2 GPG key and repository
    ii graylog-enterprise 5.2.7-1 amd64 Graylog Enterprise Server
    ii mongodb-database-tools 100.9.4 amd64 mongodb-database-tools package provides tools for working with the MongoDB server:
    hi mongodb-mongosh 2.2.5 amd64 MongoDB Shell CLI REPL Package
    hi mongodb-org 7.0.9 amd64 MongoDB open source document-oriented database system (metapackage)
    hi mongodb-org-database 7.0.9 amd64 MongoDB open source document-oriented database system (metapackage)
    ii mongodb-org-database-tools-extra 7.0.9 amd64 Extra MongoDB database tools
    hi mongodb-org-mongos 7.0.9 amd64 MongoDB sharded cluster query router
    hi mongodb-org-server 7.0.9 amd64 MongoDB database server
    ii mongodb-org-shell 7.0.9 amd64 MongoDB shell client
    hi mongodb-org-tools 7.0.9 amd64 MongoDB tools

  • Service logs, configurations, and environment variables:
    relevant portions of config file.
    is_leader = true
    node_id_file = /etc/graylog/server/node-id
    password_secret =12D3XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXv0BY-
    root_username = ADMIN
    root_password_sha2 =9cXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX692 -
    bin_dir = /usr/share/graylog-server/bin
    data_dir = /var/lib/graylog-server
    plugin_dir = /usr/share/graylog-server/plugin
    http_bind_address = 10.1.0.13:9000
    http_publish_uri = http://10.1.0.13:9000/
    stream_aware_field_types=false
    disabled_retention_strategies = none
    allow_leading_wildcard_searches = false
    allow_highlighting = false
    field_value_suggestion_mode = on
    output_batch_size = 500
    output_flush_interval = 1
    output_fault_count_threshold = 5
    output_fault_penalty_seconds = 30
    processbuffer_processors = 5
    outputbuffer_processors = 3
    processor_wait_strategy = blocking
    ring_size = 65536
    inputbuffer_ring_size = 65536
    inputbuffer_processors = 2
    inputbuffer_wait_strategy = blocking
    message_journal_enabled = true
    message_journal_dir = /var/lib/graylog-server/journal
    lb_recognition_period_seconds = 3
    mongodb_uri = mongodb://localhost/graylog
    mongodb_max_connections = 1000
    integrations_scripts_dir = /usr/share/graylog-server/scripts

3. What steps have you already taken to try and solve the problem?
Google, stop/restart services, check config file.

4. How can the community help?
advise how to solve the problem?

Hey @brannen

try commenting out the line

http_publish_uri = http://10.1.0.13:9000/

By chance did you leave OpenSearch Config file default?

network.host: 127.0.0.1

Thanks @gsmith - I commented out the publish_uri like you said. I don’t know where the Opensearch Config file is, so I assume it’s default.

I restated the server with systemctl - still getting the same webpage, with these additional error messages.

There was an error fetching the data nodes: There was an error fetching a resource: undefined. Additional information: Not available

There was an error fetching the certificate authority: There was an error fetching a resource: undefined. Additional information: Not available

There was an error fetching the renewal policy: There was an error fetching a resource: undefined. Additional information: Not available

Clicked on “resume startup”, which said it would cause the config to fail back to using Opensearch instance on localhost:9200.

Got error:

Could not resume startup

Resuming startup failed with error: FetchError: There was an error fetching a resource: undefined. Additional information: Not available

Hey @brannen

Where are you see this error at?

Addition steps.
Check the status of " OpenSearch, Graylog and MongoDb"
Check OpenSearch logs for any errors or warnings.

If possible can you show you OpenSearch Config file?

I looked for the OpenSearch config file. I don’t know where it is.

when I go to the http page.

then click on “resume startup” and get message:
image

then get a pop up in bottom right of browser.
image

Its the connection between Graylog and OpenSearch.

What does you OpenSearch configuration look like?

Where can I find the opensearch configuration file?

From this step here