Web gui connection same network

from my graylog linux host i can connect with firefox with localhost:9000 or 127.0.0.1:9000 and 10.233.0.16:9000. Remotely (same network) I connect via ssh but I don’t connect to the web interface

Debian GNU/Linux 11 (bullseye)
elasticsearch-oss 7.10.2
graylog-server 4.3.12-1
mongodb-org 5.0.15

/etc/graylog/server/server.conf
cat /etc/graylog/server/server.conf | egrep -v “^\s*(#|$)”
is_leader = true
node_id_file = /etc/graylog/server/node-id
password_secret = YvYl6POzZT5uYrWREaw0mzBG86kWKUuUSDonhuV0EZxfMPs4pNsUIpWOSlZhaVM2CVvqooPSHhr3eyjR8vQ1iObUhAE5aEl3
root_password_sha2 = e4a5771abc3e0698b76a93c9b219a71e8c31ccba7a418904906e275e73259f5c
rest_listen_uri = http://127.0.0.1:9000/api/
web_listen_uri = http://127.0.0.1:9000/
http_bind_address = 0.0.0.0
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
proxied_requests_thread_pool_size = 32

sudo ip -br a
lo UNKNOWN 127.0.0.1/8 ::1/128
eno1 UP 10.233.0.16/22 fe80::86a9:3eff:fe8c:447d/64

utente@graylog:~$ lsof -Pni :9000
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
firefox-e 5100 utente 59u IPv4 53872 0t0 TCP 10.233.0.16:39278->10.233.0.16:9000 (ESTABLISHED)
firefox-e 5100 utente 110u IPv4 53877 0t0 TCP 10.233.0.16:39294->10.233.0.16:9000 (ESTABLISHED)
firefox-e 5100 utente 145u IPv4 53878 0t0 TCP 10.233.0.16:39306->10.233.0.16:9000 (ESTABLISHED)
firefox-e 5100 utente 146u IPv4 53879 0t0 TCP 10.233.0.16:39316->10.233.0.16:9000 (ESTABLISHED)
firefox-e 5100 utente 148u IPv4 53880 0t0 TCP 10.233.0.16:39332->10.233.0.16:9000 (ESTABLISHED)
firefox-e 5100 utente 149u IPv4 52031 0t0 TCP 10.233.0.16:39342->10.233.0.16:9000 (ESTABLISHED)

the tests I did and with a windows pc connected with a switch of the same network where I can ping and ssh access the debian machine)
Grazie mille

rest_listen_uri = http://127.0.0.1:9000/api/
web_listen_uri = http://127.0.0.1:9000/

These need to be removed. Those are artifacts from an earlier version of server.conf.

Change http_bind_address to the host’s IP. That should get you where you need to go.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.