Show no log info but graylog get data

Hi
I have just install graylog for the first time today.
It running on Ubuntu server 20.04 with latest update and disable firewall.
That I have install is
Java 11.0.13
MongoDB 5.0.6
Elasticsearch 7.10.2
Graylog 4.2.6

I did follow this guide and I have got it running
How to Install Graylog Server on Ubuntu 20.04 (linoxide.com)

That I want to use Graylog is to log my pfSense server and later add Grafana but right now I just want to get Graylog to work.
I have login to my pfSense 2.5.2 and in

Status>System logs>Settings

I have enable remote logging and att my IP address and Port to Graylog server.

I then create a input (Syslog UDP) with the Port I have in pfSense.
I can see in Throughput / Metrics it receive alot of info.

But when I go to Search I get just error

While retrieving data for this widget, the following error(s) occurred:

  • Elasticsearch exception [type=cluster_block_exception, reason=blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized];].

I then trying to see what error it say with

http://192.168.1.7:9200/_all/_settings

I get

{“error”:{“root_cause”:[{“type”:“master_not_discovered_exception”,“reason”:null}],“type”:“master_not_discovered_exception”,“reason”:null},“status”:503}

And when I look inside the Graylog server log I see

ERROR [Messages] Caught exception during bulk indexing: MasterNotDiscoveredException{message=Cluster has not elected a master., errorDetails=}, retrying (attempt #18).

Graylog is new to me so I’n not sure what to do?

/UPDATE

I think I did find the problem :slight_smile:

In my elasticsearch.yml I did have to add

discovery.type: single-node

Now it looks like it working :slight_smile:

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.