I have installed the ova in my VMware environement and the system is(was) running fine. Now I wish to receive (syslog) messages from an other vlan where there is no routing to my VM. I installed a second network interface with a fixed IP address and now I can ping to the host en from the host to the graylog VM.
When I now try to connect to the webinterface (port 80) I get:
Server currently unavailable
We are experiencing problems connecting to the Graylog server running on http://192.168.17.74:9000/api/ . Please verify that the server is healthy and working correctly.
You will be automatically redirected to the previous page once we can connect to the serve
I walked trough the FAQ and the manual and besides the fact the config files are NOT in the place where they said I can’t find a solution for this.
What are the IP addresses of your two interfaces? I guess you’ll have to change your rest_listen_uri in the server.conf to the wildcard 0.0.0.0 for Graylog to listen on all interfaces. But remember to set rest_transport_uri to an ip address or hostname that your other Graylog nodes can reach
PS: I hope I got this right: The second interface is on your Graylog host, correct?
the question you need to answer before anybody can help:
Do you want to visit the Web interface on both VLANs or did you want to send in data on both VLANs?
The first is not possible with the OVA and you need to build a custom setup that enables you to make the needed configuration. For the second you do not need to have the Web interface reachable - just configure your inputs to listen globally and the ports will be reachable on all configured network interfaces.
Graylog would just need a restart after you have added additional interfaces.
I did the changes for the listen now with the graylog-ctl and they work (as expected) but for the nginx changes I tried set-external-ip but this is not working.
I also think that with the OVA the configuration possibilities are rather low. Since I use the OVA for a POC I don’t consider this as a real problem.