# Ubuntu install tutorial: connection reset

**URL:** <https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062>\
**Category:** Graylog Central (peer support)\
**Created:** [June 24, 2020, 1:35pm UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062 "2020-06-24T13:35:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![the-flo](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@the-flo](https://community.graylog.org/u/the-flo)\
**Post date:** [June 24, 2020, 1:35pm UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062/1 "2020-06-24T13:35:39Z")

</div>

Hey folks!

Just setup a new vagrant machine to do the [ubuntu installation tutorial](https://docs.graylog.org/en/3.2/pages/installation/os/ubuntu.html):

- ubuntu 16.04
- 4 gb RAM

All settings default, except the ones mentioned in the tutorial.  
All 3 services (mongo, elastic, graylog) are running.

I’m able to access the virtual machine’s apache via browser: 192.168.56.105.  
But **I’m not able to access the graylog interface** on 192.168.56.105:9009.

I changed graylog’s port (for debugging) to 9009, because I’ve set the VM’s fpm pool as well as fastcgi listening to 127.0.0.1:9000.

**syslog**

- elasticsearch[8223]: warning: Falling back to java on path. This behavior is deprecated. Specify JAVA\_HOME
- puppet-agent[1281]: Could not request certificate: Failed to open TCP connection to puppet:8140 (getaddrinfo: Temporary failure in name resolution)

**graylog server.log**

- ERROR [IndexFieldTypePollerPeriodical] Couldn’t update field types for index set \<Default index set
- Caused by: org.apache.http.conn.HttpHostConnectException: Connect to 127.0.0.1:9200 [/127.0.0.1] failed: Connection refused (Connection refused)
- ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
- ERROR [Cluster] Couldn’t read cluster health for indices [graylog\ __, gl-events\__ , gl-system-events\_\*] (Could not connect to [http://127.0.0.1:9200](http://127.0.0.1:9200))
- Why 9200? What’s the problem? (Port 9200 is elasticsearch…)

---

<div class="post-metadata">

**Author:** ![Karlis](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/karlis/32/4798_2.png) [@Karlis](https://community.graylog.org/u/Karlis)\
**Post date:** [June 25, 2020, 6:38am UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062/2 "2020-06-25T06:38:20Z")

</div>

You should go trough this  
[https://docs.graylog.org/en/3.2/pages/configuration/server.conf.html](https://docs.graylog.org/en/3.2/pages/configuration/server.conf.html)

---

<div class="post-metadata">

**Author:** ![the-flo](https://avatars.discourse-cdn.com/v4/letter/t/b9e5f3/32.png) [@the-flo](https://community.graylog.org/u/the-flo)\
**Post date:** [June 25, 2020, 7:32am UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062/3 "2020-06-25T07:32:02Z")

</div>

Okay, but all settings are default and good to go (I think); it’s a clean small setup, just 1 machine, 1 local elasticsearch node, 1 local graylog server (like the tutorial).

I don’t have a clue what’s wrong…

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 25, 2020, 8:08am UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062/4 "2020-06-25T08:08:56Z")

</div>

he @the-flo

without any shared configurations, it is hard to tell what the problem is.

But Graylog needs to connect to Elasticsearch, because that is holding the DATA. Means that is the place where Graylog ingest the messages after processing. If that is not listening to 127.0.0.1 on the default port 9200.

For the connection to Graylog from the outside you should check the `http_*` settings and read (and not only guess) what they are for.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 9, 2020, 8:23am UTC](https://community.graylog.org/t/ubuntu-install-tutorial-connection-reset/16062/5 "2020-07-09T08:23:13Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.