No logs after update to Graylog 4.2.8

[gsmith]

Hello,

@NEO-AMiGA

WARN [ProxiedResource] Unable to call http://192.168.44.92:9000/api/system on node <d4137266-8358-41f5-9f7e-901f208850a1>: timeout

If the firewall & Selinux is disabled and the permission on Graylog Directory is correct this could be a DNS issue. Depending on this environment check the /etc/hosts & hostname is set.

Here is other members with the same Warning.

• WARN [ProxiedResource] Unable to call http - #7 by harishpal2090

• Graylog server unable to connect to its own API · Issue #8543 · Graylog2/graylog2-server · GitHub

@NEO-AMiGA

curl -i http://192.168.44.92:9000/api/system
HTTP/1.1 401 Unauthorized
WWW-Authenticate: Basic realm="Graylog Server"
X-Graylog-Node-ID: d4137266-8358-41f5-9f7e-901f208850a1
X-Runtime-Microseconds: 350
Content-Length: 0

The Curl command is not correct. You set the Elasticsearch.yml file with 127.0.0.1
It should have been.

curl -i http://127.0.0.1:9200/api/system

You should of see something like this

HTTP/1.1 200 OK
X-Graylog-Node-ID: ac7773b1-403d-4d3d-acc7-98a779140854
X-Runtime-Microseconds: 8838
Content-Type: application/json

Here are some examples you could try to resolve the Warning issue.

[root@graylog ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.44.92graylog.domain.com

[root@graylog ~]# cat /etc/hostname
graylog.domain.com
[root@graylog ~]#

cluster.name: graylog
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 127.0.0.1 OR 0.0.0.0 OR  192.168.44.92
http.port: 9200
action.auto_create_index: false
discovery.type: single-node

Side Note: If you use the Host IP Address make sure you adjust graylog.conf.