Unable to write audit log entry because there is no valid license

Dear all ,

We are getting below error, And we have already allowed api.graylog.com on port 443 kindly suggest what could be a root cause.

tail -f /var/log/graylog-server/server.log
2020-03-09T13:05:41.165+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2020-03-09T13:05:41.191+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2020-03-09T13:05:58.529+05:30 ERROR [AuditLogger] Unable to write audit log entry because there is no valid license.
2020-03-09T13:05:59.270+05:30 ERROR [AuditLogger] Unable to

Please find API connectivity detail.

curl -v https://api.graylog.com/report

  • Trying 52.72.103.164…
  • TCP_NODELAY set
  • Connected to api.graylog.com (52.72.103.164) port 443 (#0)
  • ALPN, offering h2
  • ALPN, offering http/1.1
  • successfully set certificate verify locations:
  • CAfile: /etc/ssl/certs/ca-certificates.crt
    CApath: /etc/ssl/certs
  • TLSv1.3 (OUT), TLS handshake, Client hello (1):
  • TLSv1.3 (IN), TLS handshake, Server hello (2):
  • TLSv1.2 (IN), TLS handshake, Certificate (11):
  • TLSv1.2 (IN), TLS handshake, Server key exchange (12):
  • TLSv1.2 (IN), TLS handshake, Server finished (14):
  • TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
  • TLSv1.2 (OUT), TLS change cipher, Client hello (1):
  • TLSv1.2 (OUT), TLS handshake, Finished (20):
  • TLSv1.2 (IN), TLS handshake, Finished (20):

he @AnkitS

the entry is given because you have installed the Graylog enterprise plugins, but have not installed an enterprise license.

That is the only reason for this message.

Hello jan,

We have already created enterprise licence using graylog cluster ID and attached on the graylog dashboard. Still getting error.

he @AnkitS

what did you see on Enterprise > License is the license displayed their without any errors?

Error :- Graylog licences violation detected remote check have failed too many times

then Graylog is not able to connect to the Graylog Backoffice. I guess that you have enable https with a custom java keystore?

Or you need to use a proxy for the connection to the outside?

Hello ,

We had not enabled https with a custom java keystore.

Sorry we are getting error at enterprise > license below

“violation detected this cluster is not covered by the license”

the cluster id you have used for the license is not the cluster id of you cluster.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.