Request Assistance – Graylog Data Node Not Connecting

Graylog Central (peer support)
1

graylog_error_post
graylog_error_post1051×304 133 KB

Hello Graylog Community,

I am setting up Graylog 6.1 in a Docker environment, but I am facing an issue where the Data Node is not available, and Graylog keeps retrying to connect.

I have been troubleshooting for a while but haven’t been able to resolve the issue. I would really appreciate any guidance on what might be causing this problem and how I can fix it.

My Setup:**

  • Graylog Version: 6.1
  • Installation Type: Docker
  • Graylog Data Node: Yes
  • OpenSearch Installed: :cross_mark: No
  • Operating System: Ubuntu 22.04 (running Docker)
  • Docker & Docker-Compose Installed: :white_check_mark: Yes

Issue Description:**

  • When I check the Graylog logs, I repeatedly see the following error:

org.graylog2.configuration.IndexerDiscoveryProvider - Datanode is not available. Retry #XX

  • The Graylog UI shows “No Data Nodes Found”
  • Running docker ps shows that the Graylog container is running
  • The Data Node appears to be running but is not recognized by Graylog

Steps I Have Taken to Troubleshoot:**

  1. Checked running containers with docker ps
  • Graylog is running :white_check_mark:
  • Data Node is running :white_check_mark:
  1. Restarted Graylog Data Node (docker restart <container-id>)
  • :cross_mark: No effect
  1. Checked Graylog Logs (docker logs -f <graylog-container-id>)
  • The error keeps repeating
  1. Checked Open Ports in the Container with:

netstat -tulnp

  • The Data Node port is listening, but Graylog is not connecting
  1. Restarted the entire Graylog stack:
    docker-compose down && docker-compose up -d
  • :cross_mark: Still no data node detected
  1. Checked the Graylog UI for Data Nodes
  • It shows “No Data Nodes Found”

Request for Help – My Questions:**

  1. Why is Graylog not detecting the Data Node?
  2. Do I need OpenSearch, or can I run Graylog with just the built-in Data Node?
  3. **Is there a specific configuration I need to check in docker-compose.yml?
  4. Are there additional logs I should check to find the root cause?

I would really appreciate any suggestions or guidance from the community.

Thanks in advance for your help!

2

So a couple really important things need to be able to happen. Can datanode talk to mongodb database over network, and is datanode configured to talk to mongo.

What bind and publish uri is set in datanode and is the graylog able to talk to that address.