Updated Ubuntu, web access now down

Graylog Central (peer support)
1

Hi :slight_smile:

I seemed to have screwed up a bit, a little while go I ran a Ubuntu update without getting a snapshot, now the web interface is down. Im still getting email alerts, so its receiving and processing logs it seems. Everything was working fine before i did this.

Any tips on where I shall begin? Im having allot of connection refused in the log.

Here is the full log Upload Files | Free File Upload and Transfer Up To 10 GB

Ubuntu 18.04, graylog 3.2. Installed with official guide.

This is the updates i did:

Blockquote
Start-Date: 2020-05-20 07:39:05
Commandline: apt upgrade
Requested-By: graylog (1000)
Install: linux-image-4.15.0-101-generic:amd64 (4.15.0-101.102, automatic), libnetplan0:amd64 (0.99-0ubuntu3~18.04.1, automatic), linux-headers-4.15.0-101:amd64 (4.15.0-101.102, automatic), linux-headers-4.15.0-101-generic:amd64 (4.15.0-101.102, automatic), linux-modules-4.15.0-101-generic:amd64 (4.15.0-101.102, automatic), linux-modules-extra-4.15.0-101-generic:amd64 (4.15.0-101.102, automatic)
Upgrade: libdevmapper1.02.1:amd64 (2:1.02.145-4.1ubuntu3.18.04.2, 2:1.02.145-4.1ubuntu3.18.04.3), liblvm2cmd2.02:amd64 (2.02.176-4.1ubuntu3.18.04.2, 2.02.176-4.1ubuntu3.18.04.3), dmsetup:amd64 (2:1.02.145-4.1ubuntu3.18.04.2, 2:1.02.145-4.1ubuntu3.18.04.3), netplan.io:amd64 (0.98-0ubuntu1~18.04.1, 0.99-0ubuntu3~18.04.1), libisccfg160:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), update-manager-core:amd64 (1:18.04.11.10, 1:18.04.11.12), linux-headers-generic:amd64 (4.15.0.99.89, 4.15.0.101.91), mongodb-org-mongos:amd64 (4.0.17, 4.0.18), mongodb-org-tools:amd64 (4.0.17, 4.0.18), libsystemd0:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), linux-image-generic:amd64 (4.15.0.99.89, 4.15.0.101.91), libkmod2:amd64 (24-1ubuntu3.2, 24-1ubuntu3.4), libirs160:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), bind9-host:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), libdevmapper-event1.02.1:amd64 (2:1.02.145-4.1ubuntu3.18.04.2, 2:1.02.145-4.1ubuntu3.18.04.3), open-iscsi:amd64 (2.0.874-5ubuntu2.7, 2.0.874-5ubuntu2.9), dnsutils:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), open-vm-tools:amd64 (2:11.0.1-2ubuntu0.18.04.2, 2:11.0.5-4ubuntu0.18.04.1), dmeventd:amd64 (2:1.02.145-4.1ubuntu3.18.04.2, 2:1.02.145-4.1ubuntu3.18.04.3), lvm2:amd64 (2.02.176-4.1ubuntu3.18.04.2, 2.02.176-4.1ubuntu3.18.04.3), libisc169:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), udev:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), kmod:amd64 (24-1ubuntu3.2, 24-1ubuntu3.4), libudev1:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), nplan:amd64 (0.98-0ubuntu1~18.04.1, 0.99-0ubuntu3~18.04.1), mongodb-org-shell:amd64 (4.0.17, 4.0.18), libisc-export169:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), python3-update-manager:amd64 (1:18.04.11.10, 1:18.04.11.12), liblvm2app2.2:amd64 (2.02.176-4.1ubuntu3.18.04.2, 2.02.176-4.1ubuntu3.18.04.3), systemd-sysv:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), liblwres160:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), libpam-systemd:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), distro-info-data:amd64 (0.37ubuntu0.6, 0.37ubuntu0.7), systemd:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), libdns-export1100:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), sosreport:amd64 (3.9-1ubuntu0.18.04.1, 3.9-1ubuntu0.18.04.3), libnss-systemd:amd64 (237-3ubuntu10.39, 237-3ubuntu10.40), libisccc160:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), elasticsearch-oss:amd64 (6.8.7, 6.8.9), mongodb-org:amd64 (4.0.17, 4.0.18), libbind9-160:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), libdns1100:amd64 (1:9.11.3+dfsg-1ubuntu1.11, 1:9.11.3+dfsg-1ubuntu1.12), mongodb-org-server:amd64 (4.0.17, 4.0.18), graylog-server:amd64 (3.2.4-1, 3.2.5-1), linux-generic:amd64 (4.15.0.99.89, 4.15.0.101.91), tzdata:amd64 (2019c-0ubuntu0.18.04, 2020a-0ubuntu0.18.04), lxcfs:amd64 (3.0.3-0ubuntu1~18.04.1, 3.0.3-0ubuntu1~18.04.2)
End-Date: 2020-05-20 07:41:57

Blockquote
● graylog-server.service - Graylog server
Loaded: loaded (/usr/lib/systemd/system/graylog-server.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2020-05-20 07:48:50 UTC; 5 days ago
Docs: http://docs.graylog.org/
Main PID: 932 (graylog-server)
Tasks: 124 (limit: 2318)
CGroup: /system.slice/graylog-server.service
├─ 932 /bin/sh /usr/share/graylog-server/bin/graylog-server
└─1412 /usr/bin/java -Xms1g -Xmx1g -XX:NewRatio=1 -server -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:-OmitStackTraceInFastThrow -XX:+UseParNewGC -jar -
May 20 07:48:50 jfhnlasl1 systemd[1]: Started Graylog server.

2

he @tvalberg

did you checked if you have maybe now a firewall rule that blocks you? Or that you had a proxy running that is not started automatically?

3

Ohh wow, that was easier than expected. I am using a simple iptables rules to allow only SSh and web ports. But didnt consider ufw being enabled by update. In any case disabling ufw was the trick.

Now time to do that snapshot haha.

Thanks Jan :slight_smile:

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.