Problems when opening the "field message"

Graylog Central (peer support)
1

problems when opening the “field - message - Quick Values for message”, I get the following message:
Could not load quick values
Loading quick values failed with status: Error: cannot GET http://10.29.XX.XX:9000/api/search/universal/relative/terms?query=source%3A10.29.XX.XX\%2F10.29.XX.XX&range=172800&field=message&order=message%3Adesc&size=50&stacked_fields= (500)

2

what version of Graylog did you use? What Version of Elasticsearch?

3

Graylog version 2.4
Elasticsearch version 2.3.1
mongo version 2.6.10

4

that might work if you update your Elasticsearch to the lates 2.x release (might be 2.4.5) or update to the latest 5.x release.

AFAIK this should be solved after that. You could also check your Graylog server.log for error when you press that field.

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.