# Unable to view web interface

**URL:** <https://community.graylog.org/t/unable-to-view-web-interface/10269>\
**Category:** Graylog Central (peer support)\
**Created:** [May 6, 2019, 8:38am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269 "2019-05-06T08:38:40Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sargu79](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/sargu79/32/715_2.png) [@Sargu79](https://community.graylog.org/u/Sargu79)\
**Post date:** [May 6, 2019, 8:38am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/1 "2019-05-06T08:38:40Z")

</div>

Hi , i have recently tried installing graylog 3.0.2 on a centos 7.6. The installation was successful. However , i am unable to view the web interface when accessed behind a nginx. The web interface is directly viewable using the server’s ip in the browser without any issue. I am not seeing any errors in the server.log (graylog log). Is there anything else to be done? I am not sure , ver 3.x seem to be a lil different, seeking some advice here thanks

> Blockquote2019-05-06T16:33:41.307+08:00 INFO [JerseyService] Enabling CORS for HTTP endpoint  
> 2019-05-06T16:34:00.714+08:00 INFO [NetworkListener] Started listener bound to [10.0.0.114:9000]  
> 2019-05-06T16:34:00.715+08:00 INFO [HttpServer] [HttpServer] Started.  
> 2019-05-06T16:34:00.716+08:00 INFO [JerseyService] Started REST API at \<10.0.0.114:9000\>  
> 2019-05-06T16:34:00.717+08:00 INFO [ServiceManagerListener] Services are healthy  
> 2019-05-06T16:34:00.717+08:00 INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]  
> 2019-05-06T16:34:00.717+08:00 INFO [ServerBootstrap] Services started, startup times in ms: {GracefulShutdownService [RUNNING]=2, BufferSynchronizerService [RUNNING]=3, InputSetupService [RUNNING]=5, OutputSetupService [RUNNING]=9, KafkaJournal [RUNNING]=10, JournalReader [RUNNING]=14, EtagService [RUNNING]=15, ConfigurationEtagService [RUNNING]=16, StreamCacheService [RUNNING]=36, LookupTableService [RUNNING]=39, PeriodicalsService [RUNNING]=69, JerseyService [RUNNING]=19720}  
> 2019-05-06T16:34:00.724+08:00 INFO [ServerBootstrap] Graylog server up and running.

---

<div class="post-metadata">

**Author:** ![macko003](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/macko003/32/3175_2.png) [@macko003](https://community.graylog.org/u/macko003)\
**Post date:** [May 6, 2019, 1:32pm UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/2 "2019-05-06T13:32:24Z")

</div>

check netstat -ntlp | grep 9000  
if you have a listening port, you can check the ip traffic with tcpdump, to be sure GL gets your package from your browser

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [May 6, 2019, 9:17pm UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/3 "2019-05-06T21:17:29Z")

</div>

2 posts were split to a new topic: [Graylog 3 in subdirectory](https://community.graylog.org/t/graylog-3-in-subdirectory/10293)

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [May 6, 2019, 9:16pm UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/5 "2019-05-06T21:16:46Z")

</div>

you left no information about your setup. So I can only point to the documentation

[http://docs.graylog.org/en/3.0/pages/configuration/web\_interface.html#nginx](http://docs.graylog.org/en/3.0/pages/configuration/web_interface.html#nginx)

Did you configured your Nginx correctly?

---

<div class="post-metadata">

**Author:** ![Sargu79](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/sargu79/32/715_2.png) [@Sargu79](https://community.graylog.org/u/Sargu79)\
**Post date:** [May 7, 2019, 4:36am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/6 "2019-05-07T04:36:29Z")

</div>

Hi Jan,

Yes the nginx seems correct . this works well with the earlier version of graylog 2.x  
below is my current nginx config for the 3.0 version which i mention here

> [@jan](#):
>
> you left no information about your setup. So I can only point to the documentation
> 
> [http://docs.graylog.org/en/3.0/pages/configuration/web\_interface.html#nginx](http://docs.graylog.org/en/3.0/pages/configuration/web_interface.html#nginx)
> 
> Did you configured your Nginx correctly?

and below is the graylog config

[root@115graylog ~]# grep -v “#” /etc/graylog/server/server.conf

is\_master = true

node\_id\_file = /etc/graylog/server/node-id

password\_secret = xxxxx

root\_password\_sha2 = xxxxxx

root\_email = “[sysad@domain.com](mailto:sysad@domain.com)”

root\_timezone = Etc/GMT-8

bin\_dir = /usr/share/graylog-server/bin

data\_dir = /var/lib/graylog-server

plugin\_dir = /usr/share/graylog-server/plugin

http\_bind\_address = 10.0.0.114:9000

http\_publish\_uri = [http://10.0.0.114:9000/](http://10.0.0.114:9000/)

rotation\_strategy = count

elasticsearch\_max\_docs\_per\_index = 20000000

elasticsearch\_max\_number\_of\_indices = 20

retention\_strategy = delete  
elasticsearch\_shards = 1  
elasticsearch\_replicas = 0  
elasticsearch\_index\_prefix = graylog  
allow\_leading\_wildcard\_searches = false

allow\_highlighting = false

elasticsearch\_analyzer = standard

output\_batch\_size = 500

output\_flush\_interval = 1

output\_fault\_count\_threshold = 5  
output\_fault\_penalty\_seconds = 30

processbuffer\_processors = 5  
outputbuffer\_processors = 3

processor\_wait\_strategy = blocking

ring\_size = 65536

inputbuffer\_ring\_size = 65536  
inputbuffer\_processors = 2  
inputbuffer\_wait\_strategy = blocking

message\_journal\_enabled = true

message\_journal\_dir = /var/lib/graylog-server/journal

lb\_recognition\_period\_seconds = 3

mongodb\_uri = mongodb://localhost/graylog

mongodb\_max\_connections = 1000

mongodb\_threads\_allowed\_to\_block\_multiplier = 5

proxied\_requests\_thread\_pool\_size = 32

verified port 9000 is listening on the graylog host

[root@115graylog ~]# netstat -ntlp|grep 9000  
tcp6 0 0 10.0.0.114:9000 :::\* LISTEN 5123/java  
[root@115graylog ~]#

---

<div class="post-metadata">

**Author:** ![Sargu79](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/sargu79/32/715_2.png) [@Sargu79](https://community.graylog.org/u/Sargu79)\
**Post date:** [May 7, 2019, 6:31am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/7 "2019-05-07T06:31:49Z")

</div>

I have verified that traffic do comes in my graylog server at port 9000 when i launch the URL in a browser ([graylog.domain.com](http://graylog.domain.com)) but no output in screen

[root@115graylog ~]# tcpdump port 9000  
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode  
listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes  
14:30:02.948040 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [S], seq 3309343323, win 29200, options [mss 1460,sackOK,TS val 2429331687 ecr 0,nop,wscale 9], length 0  
14:30:02.948083 IP 115graylog.cslistener \> 10.0.0.140.6172: Flags [S.], seq 397150523, ack 3309343324, win 28960, options [mss 1460,sackOK,TS val 81044134 ecr 2429331687,nop,wscale 7], length 0  
14:30:02.948258 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [.], ack 1, win 58, options [nop,nop,TS val 2429331687 ecr 81044134], length 0  
14:30:02.948341 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [P.], seq 1:1305, ack 1, win 58, options [nop,nop,TS val 2429331687 ecr 81044134], length 1304  
14:30:02.948347 IP 115graylog.cslistener \> 10.0.0.140.6172: Flags [.], ack 1305, win 247, options [nop,nop,TS val 81044134 ecr 2429331687], length 0  
14:30:02.958179 IP 115graylog.cslistener \> 10.0.0.140.6172: Flags [P.], seq 1:1583, ack 1305, win 247, options [nop,nop,TS val 81044144 ecr 2429331687], length 1582  
14:30:02.958383 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [.], ack 1583, win 64, options [nop,nop,TS val 2429331697 ecr 81044144], length 0  
14:30:02.958441 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [F.], seq 1305, ack 1583, win 64, options [nop,nop,TS val 2429331697 ecr 81044144], length 0  
14:30:02.958628 IP 115graylog.cslistener \> 10.0.0.140.6172: Flags [F.], seq 1583, ack 1306, win 247, options [nop,nop,TS val 81044144 ecr 2429331697], length 0  
14:30:02.958752 IP 10.0.0.140.6172 \> 115graylog.cslistener: Flags [.], ack 1584, win 64, options [nop,nop,TS val 2429331698 ecr 81044144], length 0  
14:30:03.072796 IP 10.0.0.140.6174 \> 115graylog.cslistener: Flags [S], seq 1077001035, win 29200, options [mss 1460,sackOK,TS val 2429331812 ecr 0,nop,wscale 9], length 0  
14:30:03.072868 IP 115graylog.cslistener \> 10.0.0.140.6174: Flags [S.], seq 2852087950, ack 1077001036, win 28960, options [mss 1460,sackOK,TS val 81044259 ecr 2429331812,nop,wscale 7], length 0  
14:30:03.072895 IP 10.0.0.140.6176 \> 115graylog.cslistener: Flags [S], seq 1624516433, win 29200, options [mss 1460,sackOK,TS val 2429331812 ecr 0,nop,wscale 9], length 0  
14:30:03.072901 IP 115graylog.cslistener \> 10.0.0.140.6176: Flags [S.], seq 4291491596, ack 1624516434, win 28960, options [mss 1

---

<div class="post-metadata">

**Author:** ![Sargu79](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/sargu79/32/715_2.png) [@Sargu79](https://community.graylog.org/u/Sargu79)\
**Post date:** [May 7, 2019, 8:00am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/8 "2019-05-07T08:00:47Z")

</div>

i have fixed the issue and turns out to be the this line in my nginx ;

earlier i had it “proxy\_set\_header X-Graylog-Server-URL https://$server\_name/api/;”

and i have fixed it by removing the /api/ and leaving it with just “proxy\_set\_header X-Graylog-Server-URL https://$server\_name/;”

thank so much!  
btw pls forgive me for the poor formating on the logs/config posted here. i am not too sure abt the proper formatting options here. i will read on that and write better the next time. thanks again !! i will regard this thread as ‘CLOSED’. Have a nice day guys 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 21, 2019, 8:13am UTC](https://community.graylog.org/t/unable-to-view-web-interface/10269/9 "2019-05-21T08:13:54Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
