NEWBIE QUESTION: Server currently unavailable

New to Graylog Community? READ-ME FIRST Guides
1

Hello dear Helpers, I am new to Graylog and took this servers from another guy, but I cannot ask him about this. Can you help me figure out how to fix the problem, what do I need to do? Please write for newbies not for professionals. I can also provide more information if you need anything. Thanks in advance! Martina

Screenshot 2026-07-01 135621
Screenshot 2026-07-01 1356211056×799 108 KB

We are experiencing problems connecting to the Graylog server running on http://log.willi-graf.local/api/. Please verify that the server is healthy and working correctly.

You will be automatically redirected to the previous page once we can connect to the server.

Do you need a hand? We can help you.

This is the last response we received from the server:

Error message

Request has been terminated
Possible causes: the network is offline, Origin is not allowed by Access-Control-Allow-Origin, the page is being unloaded, etc.

2

Hello @martl

Is the service running, check by using ‘sudo systemctl status graylog-server’. Is there anything within the log file (/var/log/graylog-server/server.log) that gives any indication of there being a problem, try restarting the service and then tailing the log file to see where the issue is occurring. sudo tail -400f /var/log/graylog-server/server.log

3

Service was running. Looks to me as if the license is missing. How can I add a license?

After restarting I had this output:

2026-07-07T11:45:00.558+02:00 INFO [Server] SIGNAL received. Shutting down.
2026-07-07T11:45:00.604+02:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2026-07-07T11:45:00.605+02:00 INFO [GracefulShutdown] Graceful shutdown initiated.
2026-07-07T11:45:00.606+02:00 INFO [GracefulShutdown] Node status: [Halting [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2026-07-07T11:45:04.616+02:00 INFO [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb52258f9bdc41fe770d087> [Syslog UDP].
2026-07-07T11:45:04.637+02:00 INFO [InputSetupService] Input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb52258f9bdc41fe770d087> closed. Took [20ms]
2026-07-07T11:45:04.637+02:00 INFO [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb563caf9bdc41fe7712f1f> [Syslog UDP].
2026-07-07T11:45:04.653+02:00 INFO [InputSetupService] Input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb563caf9bdc41fe7712f1f> closed. Took [15ms]
2026-07-07T11:45:04.653+02:00 INFO [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb557aef9bdc41fe7711e08> [Syslog UDP].
2026-07-07T11:45:04.672+02:00 INFO [InputSetupService] Input <org.graylog2.inputs.syslog.udp.SyslogUDPInput.5fb557aef9bdc41fe7711e08> closed. Took [18ms]
2026-07-07T11:45:04.705+02:00 INFO [Buffers] Waiting until all buffers are empty.
2026-07-07T11:45:04.709+02:00 INFO [Buffers] All buffers are empty. Continuing.
2026-07-07T11:45:05.139+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] complete, took <0ms>.
2026-07-07T11:45:05.140+02:00 INFO [GracefulShutdownService] Running graceful shutdown for <2> shutdown hooks
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ClusterHealthCheckThread] complete, took <0ms>.
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexerClusterCheckerThread] complete, took <0ms>.
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2026-07-07T11:45:05.140+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRetentionThread] complete, took <0ms>.
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRotationThread] complete, took <0ms>.
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.VersionCheckThread] complete, took <0ms>.
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ThrottleStateUpdaterThread] complete, took <0ms>.
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2026-07-07T11:45:05.141+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.142+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2026-07-07T11:45:05.142+02:00 INFO [GracefulShutdownService] Initiate shutdown for
2026-07-07T11:45:05.142+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.events.ClusterEventCleanupPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.142+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2026-07-07T11:45:05.142+02:00 INFO [GracefulShutdownService] Finished shutdown for , took 0 ms
2026-07-07T11:45:05.142+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.142+02:00 INFO [GracefulShutdownService] Initiate shutdown for
2026-07-07T11:45:05.142+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.TrafficCounterCalculator] complete, took <0ms>.
2026-07-07T11:45:05.143+02:00 INFO [GracefulShutdownService] Finished shutdown for , took 0 ms
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] complete, took <0ms>.
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2026-07-07T11:45:05.143+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog2.periodical.ESVersionCheckPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.144+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2026-07-07T11:45:05.144+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] complete, took <0ms>.
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] complete, took <0ms>.
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob] complete, took <0ms>.
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp] complete, took <0ms>.
2026-07-07T11:45:05.148+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] complete, took <0ms>.
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.license.LicenseManagerPeriodical].
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.license.LicenseManagerPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.license.LicenseReportPeriodical].
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.license.LicenseReportPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.report.scheduler.ReportPeriodical].
2026-07-07T11:45:05.149+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.report.scheduler.ReportPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.150+02:00 INFO [PeriodicalsService] Shutting down periodical [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical].
2026-07-07T11:45:05.150+02:00 INFO [PeriodicalsService] Shutdown of periodical [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical] complete, took <0ms>.
2026-07-07T11:45:05.150+02:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2026-07-07T11:45:05.150+02:00 INFO [GracefulShutdown] Goodbye.
2026-07-07T11:45:05.154+02:00 INFO [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2026-07-07T11:45:05.163+02:00 INFO [LogManager] Shutting down.
2026-07-07T11:45:05.163+02:00 INFO [LookupDataAdapterRefreshService] Stopping 0 jobs
2026-07-07T11:45:05.206+02:00 INFO [LogManager] Shutdown complete.
2026-07-07T11:45:05.230+02:00 INFO [JournalReader] Stopping.
2026-07-07T11:45:05.620+02:00 INFO [ServiceManagerListener] Services are now stopped.
2026-07-07T11:45:08.475+02:00 INFO [CmdLineTool] Loaded plugin: AWS plugins 4.0.17 [org.graylog.aws.AWSPlugin]
2026-07-07T11:45:08.479+02:00 INFO [CmdLineTool] Loaded plugin: Enterprise Integrations 4.0.17 [org.graylog.enterprise.integrations.EnterpriseIntegrationsPlugin]
2026-07-07T11:45:08.479+02:00 INFO [CmdLineTool] Loaded plugin: Integrations 4.0.17 [org.graylog.integrations.IntegrationsPlugin]
2026-07-07T11:45:08.480+02:00 INFO [CmdLineTool] Loaded plugin: Collector 4.0.17 [org.graylog.plugins.collector.CollectorPlugin]
2026-07-07T11:45:08.481+02:00 INFO [CmdLineTool] Loaded plugin: Graylog Enterprise 4.0.17 [org.graylog.plugins.enterprise.EnterprisePlugin]
2026-07-07T11:45:08.482+02:00 INFO [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 4.0.17 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2026-07-07T11:45:08.483+02:00 INFO [CmdLineTool] Loaded plugin: Elasticsearch 6 Support 4.0.17+d0c5b22 [org.graylog.storage.elasticsearch6.Elasticsearch6Plugin]
2026-07-07T11:45:08.483+02:00 INFO [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 4.0.17+d0c5b22 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2026-07-07T11:45:08.766+02:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2026-07-07T11:45:09.270+02:00 INFO [Version] HV000001: Hibernate Validator null
2026-07-07T11:45:13.591+02:00 INFO [InputBufferImpl] Message journal is enabled.
2026-07-07T11:45:13.612+02:00 INFO [NodeId] Node ID: 7ab30499-0eb1-48a9-b113-179f777a1e5b
2026-07-07T11:45:13.840+02:00 INFO [LogManager] Loading logs.
2026-07-07T11:45:13.906+02:00 INFO [LogManager] Logs loading complete.
2026-07-07T11:45:13.911+02:00 INFO [KafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2026-07-07T11:45:13.941+02:00 INFO [cluster] Cluster created with settings {hosts=[localhost:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout=‘30000 ms’, maxWaitQueueSize=5000}
2026-07-07T11:45:13.996+02:00 INFO [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2026-07-07T11:45:14.033+02:00 INFO [connection] Opened connection [connectionId{localValue:1, serverValue:13}] to localhost:27017
2026-07-07T11:45:14.041+02:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[4, 2, 24]}, minWireVersion=0, maxWireVersion=8, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=4967768}
2026-07-07T11:45:14.061+02:00 INFO [connection] Opened connection [connectionId{localValue:2, serverValue:14}] to localhost:27017
2026-07-07T11:45:14.308+02:00 INFO [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy , running 2 parallel message handlers.
2026-07-07T11:45:14.913+02:00 INFO [ElasticsearchVersionProvider] Elasticsearch cluster is running v7.10.2
2026-07-07T11:45:15.737+02:00 INFO [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy .
2026-07-07T11:45:16.184+02:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2026-07-07T11:45:16.197+02:00 INFO [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy .
2026-07-07T11:45:16.204+02:00 INFO [connection] Opened connection [connectionId{localValue:3, serverValue:15}] to localhost:27017
2026-07-07T11:45:16.239+02:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2026-07-07T11:45:16.277+02:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2026-07-07T11:45:16.312+02:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2026-07-07T11:45:16.347+02:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
2026-07-07T11:45:17.634+02:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2026-07-07T11:45:17.637+02:00 INFO [ServerBootstrap] Graylog server 4.0.17+d0c5b22 starting up
2026-07-07T11:45:17.637+02:00 INFO [ServerBootstrap] JRE: Debian 11.0.31 on Linux 5.10.0-39-amd64
2026-07-07T11:45:17.637+02:00 INFO [ServerBootstrap] Deployment: deb
2026-07-07T11:45:17.637+02:00 INFO [ServerBootstrap] OS: Debian GNU/Linux 11 (bullseye) (debian)
2026-07-07T11:45:17.638+02:00 INFO [ServerBootstrap] Arch: amd64
2026-07-07T11:45:17.670+02:00 INFO [PeriodicalsService] Starting 36 periodicals …
2026-07-07T11:45:17.679+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2026-07-07T11:45:17.686+02:00 INFO [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2026-07-07T11:45:17.687+02:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.AlertScannerThread] periodical. Not configured to run on this node.
2026-07-07T11:45:17.688+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2026-07-07T11:45:17.691+02:00 INFO [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2026-07-07T11:45:17.692+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2026-07-07T11:45:17.695+02:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2026-07-07T11:45:17.696+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2026-07-07T11:45:17.701+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2026-07-07T11:45:17.702+02:00 INFO [connection] Opened connection [connectionId{localValue:4, serverValue:16}] to localhost:27017
2026-07-07T11:45:17.712+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2026-07-07T11:45:17.716+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2026-07-07T11:45:17.717+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2026-07-07T11:45:17.718+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2026-07-07T11:45:17.722+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2026-07-07T11:45:17.726+02:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2026-07-07T11:45:17.727+02:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2026-07-07T11:45:17.728+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
2026-07-07T11:45:17.728+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
2026-07-07T11:45:17.733+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2026-07-07T11:45:17.734+02:00 INFO [connection] Opened connection [connectionId{localValue:8, serverValue:19}] to localhost:27017
2026-07-07T11:45:17.734+02:00 INFO [connection] Opened connection [connectionId{localValue:5, serverValue:17}] to localhost:27017
2026-07-07T11:45:17.734+02:00 INFO [connection] Opened connection [connectionId{localValue:7, serverValue:20}] to localhost:27017
2026-07-07T11:45:17.735+02:00 INFO [connection] Opened connection [connectionId{localValue:6, serverValue:18}] to localhost:27017
2026-07-07T11:45:17.737+02:00 INFO [connection] Opened connection [connectionId{localValue:10, serverValue:22}] to localhost:27017
2026-07-07T11:45:17.739+02:00 INFO [connection] Opened connection [connectionId{localValue:9, serverValue:21}] to localhost:27017
2026-07-07T11:45:17.742+02:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
2026-07-07T11:45:17.742+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
2026-07-07T11:45:17.743+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexFailuresPeriodical] periodical, running forever.
2026-07-07T11:45:17.746+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2026-07-07T11:45:17.746+02:00 INFO [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [3600s].
2026-07-07T11:45:17.748+02:00 INFO [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2026-07-07T11:45:17.748+02:00 INFO [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2026-07-07T11:45:17.753+02:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2026-07-07T11:45:17.757+02:00 INFO [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2026-07-07T11:45:17.765+02:00 INFO [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2026-07-07T11:45:17.783+02:00 INFO [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2026-07-07T11:45:17.784+02:00 INFO [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2026-07-07T11:45:18.086+02:00 INFO [Periodicals] Starting [org.graylog.plugins.license.LicenseManagerPeriodical] periodical in [0s], polling every [300s].
2026-07-07T11:45:18.087+02:00 INFO [Periodicals] Starting [org.graylog.plugins.license.LicenseReportPeriodical] periodical in [300s], polling every [3600s].
2026-07-07T11:45:18.087+02:00 INFO [Periodicals] Starting [org.graylog.plugins.license.StagedLicenseInstallerPeriodical] periodical, running forever.
2026-07-07T11:45:18.089+02:00 INFO [Periodicals] Starting [org.graylog.plugins.auditlog.mongodb.MongoAuditLogPeriodical] periodical in [0s], polling every [3600s].
2026-07-07T11:45:18.089+02:00 INFO [Periodicals] Starting [org.graylog.plugins.report.scheduler.ReportPeriodical] periodical in [120s], polling every [60s].
2026-07-07T11:45:18.090+02:00 INFO [Periodicals] Starting [org.graylog.plugins.report.service.ChromeDriverCleanupPeriodical] periodical in [60s], polling every [180s].
2026-07-07T11:45:18.094+02:00 ERROR [MongoAuditLogPeriodical] Not running cleanup for auditlog entries in MongoDB because there is no valid license.
2026-07-07T11:45:59.850+02:00 INFO [JerseyService] Started REST API at <127.0.0.1:9000>
2026-07-07T11:45:59.852+02:00 INFO [ServiceManagerListener] Services are healthy
2026-07-07T11:45:59.853+02:00 INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2026-07-07T11:45:59.856+02:00 INFO [ServerBootstrap] Services started, startup times in ms: {KafkaJournal [RUNNING]=11, InputSetupService [RUNNING]=11, UrlWhitelistService [RUNNING]=11, JournalReader [RUNNING]=11, BufferSynchronizerService [RUNNING]=14, GracefulShutdownService [RUNNING]=15, ConfigurationEtagService [RUNNING]=21, UserSessionTerminationService [RUNNING]=26, OutputSetupService [RUNNING]=27, EtagService [RUNNING]=27, JobSchedulerService [RUNNING]=28, MongoDBProcessingStatusRecorderService [RUNNING]=50, LookupTableService [RUNNING]=64, StreamCacheService [RUNNING]=91, PeriodicalsService [RUNNING]=434, JerseyService [RUNNING]=42182}
2026-07-07T11:45:59.862+02:00 INFO [ServerBootstrap] Graylog server up and running.
2026-07-07T11:45:59.863+02:00 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2026-07-07T11:45:59.903+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb563caf9bdc41fe7712f1f] is now STARTING
2026-07-07T11:45:59.907+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb52258f9bdc41fe770d087] is now STARTING
2026-07-07T11:45:59.910+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb557aef9bdc41fe7711e08] is now STARTING
2026-07-07T11:46:00.184+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x8a5b9fd6, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.184+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x932c0e9e, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.186+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xb8381a7c, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.186+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xde2f5c13, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.186+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x28e3bd4a, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.184+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xba87686c, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.184+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x07c44f63, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.187+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x4c53a415, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.190+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xa8d10ca1, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.192+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x8de04533, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.190+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x24a501ec, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.192+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x094dfce0, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.192+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xcceb8da8, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xe3ed4a1f, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x676f566a, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.195+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x9319ad48, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.195+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x45fb6e33, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.192+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xab3433fb, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x7ea4ed47, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x3955a01b, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x908248fd, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.193+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-switches, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xcbaa1366, L:/0:0:0:0:0:0:0:0%0:5142]) should be 262144 but is 425984.
2026-07-07T11:46:00.192+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-infra, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0x7a667669, L:/0:0:0:0:0:0:0:0%0:5140]) should be 262144 but is 425984.
2026-07-07T11:46:00.200+02:00 WARN [UdpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogUDPInput{title=syslog-unifi, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=7ab30499-0eb1-48a9-b113-179f777a1e5b} (channel [id: 0xe93d3a01, L:/0:0:0:0:0:0:0:0%0:5141]) should be 262144 but is 425984.
2026-07-07T11:46:00.200+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb563caf9bdc41fe7712f1f] is now RUNNING
2026-07-07T11:46:00.205+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb52258f9bdc41fe770d087] is now RUNNING
2026-07-07T11:46:00.209+02:00 INFO [InputStateListener] Input [Syslog UDP/5fb557aef9bdc41fe7711e08] is now RUNNING

4

Hey @martl,

That error is misleading, it should still run without a license and it does appear to be doing so as preflight completes and the inputs are running.

Can you get to the Graylog login page by using the IP 10.0.0.8 instead of the DNS name?

Also worth noting that the version of Graylog be used here is very old and would benefit from being upgraded.