Threat intel plugin causes Private Net Lookup Error

Graylog Central (peer support)
1

Graylog 4.0.1

I have been trying to resolve and issue where I am seeing the following repeated every few seconds in my Graylog server log:

2021-01-15T15:43:32.984-05:00 ERROR [PrivateNetLookupFunction] Could not run private net lookup for IP [-]: '-' is not an IP string literal.

I pulled out the graylog-plugin-threatintel-4.0.1.jar file and restarted the server service and the ERROR goes away.

What is interesting is I am not currently using ThreatIntel and the error happens while the plugin is disabled on the Configurations page. Odd.

I would like to use it … eventually… has anyone seen this before?

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.