# No messages at all **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [March 23, 2018, 1:05pm UTC](https://community.graylog.org/t/no-messages-at-all/4718 "2018-03-23T13:05:56Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 1:05pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/1 "2018-03-23T13:05:56Z")
I just have installed a new plain graylog server on CentOS 7.4 (selinux and firewall disabled) based on the documentation here: [http://docs.graylog.org/en/2.4/pages/installation/os/centos.html](http://docs.graylog.org/en/2.4/pages/installation/os/centos.html) I configured a plaintext input to send syslogs by test to create the correct extractor. - With tcpdump I can see incoming messages, - I see the messages in the messagejournal log - The Default Index (System/Indices) set says: 1 Index 12,657 documents, 6.1MB - The input shows incoming messages But when I click in the Inputs on the input to Show received messages, it lasts forever and shows nothing!!! When I click on “Manage extractors”/“Getting started”/Load Message" I get only the error: Input did not return a recent message. When I search all messages with star (enabled wildcard search in server.conf), nothing is returned. Nothing in the logs. No error, or anything else. Based on the logs everything should be fine! WHERE ARE ALL THESE MESSAGES!!! Sorry, but I’m quite angry. I hoped so that graylog is a professional product which works out of the box as expected, but I spendt the last hours in troubleshooting, although I had to do something completely different. ---
**Author:** ![edmundo](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/edmundo/32/2161_2.png) [@edmundo](https://community.graylog.org/u/edmundo)\ **Post date:** [March 23, 2018, 1:43pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/2 "2018-03-23T13:43:22Z")
Hi Roland, I would start by checking the date and time on both the Graylog server and the server sending messages to Graylog, since wrong times may sometimes set “wrong” timestamps either in the past or future that may not show up in searches. You could also try looking for those messages by using an [absolute timerange](http://docs.graylog.org/en/2.4/pages/queries.html#absolute-time-frame-selector) and being quite generous with both from and to time ranges. In case that doesn’t help, please share with us example messages you are sending to Graylog, as well as Graylog and ES logs that appear while those messages are being sent to the server. In that way we have more information to be able to help with the issue you are experiencing. Cheers, Edmundo ---
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 1:45pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/3 "2018-03-23T13:45:56Z")
Hello Time is correct. All systems synchronize against the same ntp server. Also checked time zones. All CET (Europe/Zurich) ---
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 1:52pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/4 "2018-03-23T13:52:47Z")
Also tried absolute time range from 1.1.2010 to 1.1.2020 No result. The messages I get (tcpdump) is (one sample): \<134\>Mar 23 14:51:58 filterlog: 61,0,em1,match,pass,out,4,0x0,64,0,0,DF,6,tcp,60,192.168.200.108,192.168.200.120,55544,10051,0,S,2185290946,65228,mss;nop;wscale;sackOK;TS 14:52:00.304608 IP vm-tbk-fw-06.tbk.local.syslog \> vm-tbk-log-01.tbk.ch.personal-agent: SYSLOG local0.info, length: 175 ---
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 2:07pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/5 "2018-03-23T14:07:46Z")
Opend Browser Console an got the follwoing javascript error when go to System/Inputs and click on show received inputs: [Sorry, I would like to give you the trace but Your system says: New Users are allowed only to send two Links in a post], and uploading a text file is also not allowed! ---
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 2:11pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/6 "2018-03-23T14:11:20Z")
Below the graylog serverlog for running about 10min. Tried to open received messages from a input, tried to search with absolute time frame: I would like to attach or paste the log file but AGAIN YOU SYSTEM SAYS: Sorry, new users can only mention 2 users in a post. Sorry, new users can only put 2 links in a post. How should I provide any logs or traces? ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [March 23, 2018, 2:23pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/7 "2018-03-23T14:23:17Z")
> [@roli8200](#): > > How should I provide any logs or traces? - Properly format the text snippets: [Creating and highlighting code blocks - GitHub Docs](https://help.github.com/articles/creating-and-highlighting-code-blocks/) - Any PasteBin service: - [https://gist.github.com](https://gist.github.com) - [https://0bin.net](https://0bin.net) ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [March 23, 2018, 2:24pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/8 "2018-03-23T14:24:21Z")
> [@roli8200](#): > > ```plaintext > <134>Mar 23 14:51:58 filterlog: 61,0,em1,match,pass,out,4,0x0,64,0,0,DF,6,tcp,60,192.168.200.108,192.168.200.120,55544,10051,0,S,2185290946,65228,mss;nop;wscale;sackOK;TS > 14:52:00.304608 IP vm-tbk-fw-06.tbk.local.syslog > vm-tbk-log-01.tbk.ch.personal-agent: SYSLOG local0.info, length: 175 > > ``` There’s no timezone information in this message timestamp, so Graylog will assume it’s in UTC. ---
**Author:** ![roli8200](https://avatars.discourse-cdn.com/v4/letter/r/94ad74/32.png) [@roli8200](https://community.graylog.org/u/roli8200)\ **Post date:** [March 23, 2018, 3:07pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/9 "2018-03-23T15:07:34Z")
Just tried it with the ovf appliance. Same result. I think I stop this experiment here. Seems not to make sense to spend another lot of time just to get it initially running. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [April 6, 2018, 3:07pm UTC](https://community.graylog.org/t/no-messages-at-all/4718/10 "2018-04-06T15:07:53Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.