Unable to access web console (connection refused)

Graylog Central (peer support)
1

Hi!

First time Graylog user and having issues getting to the web interface.

I am hosting the Graylog server in a private subnet on a public cloud. I have added this server as a WireGuard peer as well.

I am able to ping my server from a device another device connected to WireGuard. I am not able to curl or telnet http://192.168.100.3:9000

– Some info –

  • Graylog server IP = 10.20.3.2
  • WireGuard peer IP = 192.168.100.3
  • The HTTP settings in server.conf:
  • http_bind_address = 0.0.0.0:9000
  • OS Information: Ubuntu 22.04.5 LTS
  • mongodb, graylog-server, and graylog-datanode are all actively running (via systemctl status)
  • Running the latest Graylog version
sudo netstat -tnlp | grep :9000
tcp6       0      0 :::9000                 :::*                    LISTEN      5546/java

/var/log/graylog-server/server.log (output shown below - excluded the part that shows the crews)

2025-01-22T19:30:18.180Z INFO  [IndexerDiscoveryProvider] No indexer hosts configured, using fallback http://127.0.0.1:9200
2025-01-22T19:30:18.644Z INFO  [ServerBootstrap] Running 2 migrations...
2025-01-22T19:30:18.678Z INFO  [ServerBootstrap] Fresh installation detected, starting configuration webserver
2025-01-22T19:30:18.684Z INFO  [PeriodicalsService] Starting 3 periodicals ...
2025-01-22T19:30:18.689Z INFO  [Periodicals] Starting [org.graylog2.bootstrap.preflight.GraylogCertificateProvisioningPeriodical] periodical in [2s], polling every [2s].
2025-01-22T19:30:18.690Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2025-01-22T19:30:18.694Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2025-01-22T19:30:19.347Z INFO  [Version] HV000001: Hibernate Validator null
2025-01-22T19:30:19.641Z INFO  [NetworkListener] Started listener bound to [0.0.0.0:9000]
2025-01-22T19:30:19.643Z INFO  [HttpServer] [HttpServer] Started.
2025-01-22T19:30:19.646Z INFO  [PreflightJerseyService]

I can’t think of anything else that might be relevant at the moment, so thank you in advance!

2

Can you curl to the ip_address:9000 from the command line of the server its running on? If you can then its probably graylog is not the issue and its just a networking issue.

3

I forgot I had tried that earlier.

curl localhost:9000
You cannot access this resource, missing authorization header!

Edit: I should also mention that I am using the Data Node and not Open Search.