# Not able to send GELF http message **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [March 22, 2018, 8:53am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674 "2018-03-22T08:53:36Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Yannick](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/yannick/32/2012_2.png) [@Yannick](https://community.graylog.org/u/Yannick)\ **Post date:** [March 22, 2018, 8:53am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674/1 "2018-03-22T08:53:36Z")
I’m testing out graylog with a docker image (docker linux containers on a Windows computer). I followed the docker setup from the documentation and I’m simply using the docker compose exemple. I’m using : graylog 2.4.0 elasticsearch 5.6.3 mongo 3 I have made an input GELF TCP on the main node (I also tried with Global) with all parameters by default on port 12201 (which is accessible from outside docker) : > bind\_address: > 0.0.0.0 > decompress\_size\_limit: > 8388608 > max\_message\_size: > 2097152 > override\_source: > > port: > 12201 > recv\_buffer\_size: > 1048576 > tcp\_keepalive: > false > tls\_cert\_file: > > tls\_client\_auth: > disabled > tls\_client\_auth\_cert\_file: > > tls\_enable: > false > tls\_key\_file: > > tls\_key\_password: > > * * * > > use\_null\_delimiter: > true And then I send a curl message : > curl -X POST -H ‘Content-Type: application/json’ -d ‘{ “version”: “1.1”, “host”: “[example.org](http://example.org)”, “short\_message”: “A short message”, “level”: 5, “\_some\_info”: “foo” }’ ‘[http://localhost:12201/gelf](http://localhost:12201/gelf)’ All I get is this : > % Total % Received % Xferd Average Speed Time Time Time Current > Dload Upload Total Spent Left Speed > 100 112 0 0 100 112 0 9 0:00:12 0:00:11 0:00:01 0 That I can only stop with ctrl+c. I also tried with Postman, I never get a response and I have to cancel the request. ---
**Author:** ![Yannick](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/yannick/32/2012_2.png) [@Yannick](https://community.graylog.org/u/Yannick)\ **Post date:** [March 22, 2018, 9:32am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674/2 "2018-03-22T09:32:23Z")
When canceling the request I have this appearing in the logs : > 2018-03-22 08:47:47,735 ERROR: org.graylog2.shared.buffers.processors.DecodingProcessor - Unable to decode raw message RawMessage{id=b234ff90-2dad-11e8-ad8b-0242ac130004, journalOffset=6, codec=gelf, payloadSize=365, timestamp=2018-03-22T08:47:47.721Z, remoteAddress=/172.19.0.1:39410} on input \<5ab295be08813b0001fe49fb\>. > 2018-03-22 08:47:47,735 ERROR: org.graylog2.shared.buffers.processors.DecodingProcessor - Error processing message RawMessage{id=b234ff90-2dad-11e8-ad8b-0242ac130004, journalOffset=6, codec=gelf, payloadSize=365, timestamp=2018-03-22T08:47:47.721Z, remoteAddress=/172.19.0.1:39410} > com.fasterxml.jackson.core.JsonParseException: Unrecognized token ‘POST’: was expecting (‘true’, ‘false’ or ‘null’) > at [Source: POST /gelf HTTP/1.1 > Content-Type: application/json > cache-control: no-cache > Postman-Token: 60f43043-6d8e-4131-b60f-cfbf39f23ca6 > User-Agent: PostmanRuntime/7.1.1 > Accept: _/_ > Host: 127.0.0.1:12201 > accept-encoding: gzip, deflate > content-length: 86 > Connection: keep-alive > {“short\_message”:“Hello there”, “host”:“[example.org](http://example.org)”, “facility”:“test”, “\_foo”:“bar”}; line: 1, column: 5] > at com.fasterxml.jackson.core.JsonParser.\_constructError(JsonParser.java:1702) ~[graylog.jar:?] > at com.fasterxml.jackson.core.base.ParserMinimalBase.\_reportError(ParserMinimalBase.java:558) ~[graylog.jar:?] > at com.fasterxml.jackson.core.json.ReaderBasedJsonParser.\_reportInvalidToken(ReaderBasedJsonParser.java:2839) ~[graylog.jar:?] > at com.fasterxml.jackson.core.json.ReaderBasedJsonParser.\_handleOddValue(ReaderBasedJsonParser.java:1903) ~[graylog.jar:?] > at com.fasterxml.jackson.core.json.ReaderBasedJsonParser.nextToken(ReaderBasedJsonParser.java:749) ~[graylog.jar:?] > at com.fasterxml.jackson.databind.ObjectMapper.\_initForReading(ObjectMapper.java:3850) ~[graylog.jar:?] > at com.fasterxml.jackson.databind.ObjectMapper.\_readMapAndClose(ObjectMapper.java:3799) ~[graylog.jar:?] > at com.fasterxml.jackson.databind.ObjectMapper.readTree(ObjectMapper.java:2397) ~[graylog.jar:?] > at org.graylog2.inputs.codecs.GelfCodec.decode(GelfCodec.java:127) ~[graylog.jar:?] > at org.graylog2.shared.buffers.processors.DecodingProcessor.processMessage(DecodingProcessor.java:150) ~[graylog.jar:?] > at org.graylog2.shared.buffers.processors.DecodingProcessor.onEvent(DecodingProcessor.java:91) [graylog.jar:?] > at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:74) [graylog.jar:?] > at org.graylog2.shared.buffers.processors.ProcessBufferProcessor.onEvent(ProcessBufferProcessor.java:42) [graylog.jar:?] > at com.lmax.disruptor.WorkProcessor.run(WorkProcessor.java:143) [graylog.jar:?] > at com.codahale.metrics.InstrumentedThreadFactory$InstrumentedRunnable.run(InstrumentedThreadFactory.java:66) [graylog.jar:?] > at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_151] ---
**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\ **Post date:** [March 22, 2018, 9:34am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674/3 "2018-03-22T09:34:34Z")
> [@Yannick](#): > > I have made an input GELF TCP Maybe you should try a GELF HTTP input. 🤔 ---
**Author:** ![Yannick](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/yannick/32/2012_2.png) [@Yannick](https://community.graylog.org/u/Yannick)\ **Post date:** [March 22, 2018, 9:36am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674/4 "2018-03-22T09:36:24Z")
Well I pretty much imagined it was probably something stupid like that… Thank you very much ! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [April 5, 2018, 9:36am UTC](https://community.graylog.org/t/not-able-to-send-gelf-http-message/4674/5 "2018-04-05T09:36:42Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.