root@graylog:/var/log/graylog# graylog-ctl tail
==> /var/log/graylog/server/current <==
==> /var/log/graylog/server/config <==
s209715200
n30
t86400
!gzip
==> /var/log/graylog/server/state <==
==> /var/log/graylog/etcd/current <==
==> /var/log/graylog/etcd/config <==
s209715200
n30
t86400
!gzip
==> /var/log/graylog/etcd/state <==
==> /var/log/graylog/elasticsearch/graylog.log <==
[2017-08-24T08:56:15,347][INFO ][o.e.n.Node ] [CfluYh6] starting …
[2017-08-24T08:56:15,454][INFO ][i.n.u.i.PlatformDependent] Your platform does not provide complete low-level API for accessing direct buffers reliably. Unless explicitly requested, heap buffer will always be preferred to avoid potential system instability.
[2017-08-24T08:56:15,772][INFO ][o.e.t.TransportService ] [CfluYh6] publish_address {10.248.14.144:9300}, bound_addresses {10.248.14.144:9300}
[2017-08-24T08:56:15,796][INFO ][o.e.b.BootstrapChecks ] [CfluYh6] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2017-08-24T08:56:25,988][INFO ][o.e.c.s.ClusterService ] [CfluYh6] new_master {CfluYh6}{CfluYh6NQjKVpY96PZcOoQ}{Sk2OKjpzSk-ky7GePKtGVw}{10.248.14.144}{10.248.14.144:9300}, reason: zen-disco-elected-as-master ([0] nodes joined)
[2017-08-24T08:56:26,139][INFO ][o.e.h.n.Netty4HttpServerTransport] [CfluYh6] publish_address {10.248.14.144:9200}, bound_addresses {10.248.14.144:9200}
[2017-08-24T08:56:26,152][INFO ][o.e.n.Node ] [CfluYh6] started
[2017-08-24T08:56:26,534][INFO ][o.e.g.GatewayService ] [CfluYh6] recovered [1] indices into cluster_state
[2017-08-24T08:56:26,992][INFO ][o.e.c.r.a.AllocationService] [CfluYh6] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[graylog_0][0], [graylog_0][1], [graylog_0][3]] …]).
[2017-08-24T09:27:39,614][INFO ][o.e.c.m.MetaDataMappingService] [CfluYh6] [graylog_0/QhbjdykySp2-KVWD3y5eaA] update_mapping [message]
==> /var/log/graylog/elasticsearch/current <==
==> /var/log/graylog/elasticsearch/graylog_deprecation.log <==
[2017-08-24T09:27:39,519][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,521][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,522][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,523][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,525][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,527][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,528][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,530][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,531][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
[2017-08-24T09:27:39,532][WARN ][o.e.d.i.m.TypeParsers ] Expected a boolean [true/false] for property [index] but got [not_analyzed]
==> /var/log/graylog/elasticsearch/graylog_index_indexing_slowlog.log <==
==> /var/log/graylog/elasticsearch/config <==
s209715200
n30
t86400
!gzip
==> /var/log/graylog/elasticsearch/graylog_index_search_slowlog.log <==
==> /var/log/graylog/elasticsearch/state <==
==> /var/log/graylog/mongodb/current <==
==> /var/log/graylog/mongodb/config <==
s209715200
n30
t86400
!gzip
==> /var/log/graylog/mongodb/state <==
==> /var/log/graylog/nginx/current <==
==> /var/log/graylog/nginx/error.log <==
2017/08/25 10:14:04 [error] 4938#0: *16 connect() failed (111: Connection refused) while connecting to upstream, client: 10.248.2.187, server: , request: “GET / HTTP/1.1”, upstream: “http://127.0.0.1:9000/”, host: "10.248.14.144"
2017/08/25 10:14:04 [error] 4938#0: *16 connect() failed (111: Connection refused) while connecting to upstream, client: 10.248.2.187, server: , request: “GET / HTTP/1.1”, upstream: “http://[::1]:9000/”, host: "10.248.14.144"
2017/08/25 10:14:04 [error] 4938#0: *19 no live upstreams while connecting to upstream, client: 10.248.2.187, server: , request: “GET /config.js HTTP/1.1”, upstream: “http://localhost/config.js”, host: “10.248.14.144”, referrer: "http://10.248.14.144/"
2017/08/25 10:14:06 [error] 4938#0: *20 no live upstreams while connecting to upstream, client: 10.248.2.187, server: , request: “GET /assets/favicon.png HTTP/1.1”, upstream: “http://localhost/assets/favicon.png”, host: “10.248.14.144”, referrer: "http://10.248.14.144/"
2017/08/25 10:14:36 [error] 4938#0: *20 connect() failed (111: Connection refused) while connecting to upstream, client: 10.248.2.187, server: , request: “GET / HTTP/1.1”, upstream: “http://[::1]:9000/”, host: "10.248.14.144"
2017/08/25 10:14:36 [error] 4938#0: *20 connect() failed (111: Connection refused) while connecting to upstream, client: 10.248.2.187, server: , request: “GET / HTTP/1.1”, upstream: “http://127.0.0.1:9000/”, host: "10.248.14.144"
2017/08/25 10:14:36 [error] 4938#0: *23 no live upstreams while connecting to upstream, client: 10.248.2.187, server: , request: “GET /config.js HTTP/1.1”, upstream: “http://localhost/config.js”, host: “10.248.14.144”, referrer: “http://10.248.14.144/”
==> /var/log/graylog/nginx/config <==
s104857600
n5
t86400
!gzip
==> /var/log/graylog/nginx/state <==