We’ve been having a weird issue since we upgraded from 2.1.3 to 2.2.0
The Web UI reloads every 20 seconds or so, and briefly displays the following error
Effectively making it useless, as it keeps on trying to reload a search or closes the input details / configs …
This was not an issue prior to the upgrade.
I did some digging and discovered that the problem occurs when it tries to load
Where authorization fails.
Why is this happening.
I worked around it by accessing http://10.20.2.75:9000/api/system/cluster/node directly and entering my credentials at the login prompt.
But this only works until I close my session.
I was able to reproduce the issue by using another browser, I’m logged in and able to access everything in graylog, however the page reloads every 20 seconds when it attempts to access http://10.20.2.75:9000/api/system/cluster/node
Is there a bug somewhere or is this something to do with our configuration.
This is a staging server which is a single instance, non-clustered environment, we use this before doing full production upgrade.
On this instance, the configuration changes from the default sample are very minimal.
55c55 < password_secret = --- > password_secret = redacted 66c66 < root_password_sha2 = --- > root_password_sha2 = redacted 70c70 < #root_email = "" --- > root_email = redacted 81c81,83 < rest_listen_uri = http://127.0.0.1:9000/api/ --- > rest_listen_uri = http://10.20.2.75:9000/api/ 90c92 < #rest_transport_uri = http://192.168.1.1:9000/api/ --- > #rest_transport_uri = http://10.20.2.75:9000/api/ 135a138,139 > web_listen_uri = http://10.20.2.75:9000/ 262c268 < allow_leading_wildcard_searches = false --- > allow_leading_wildcard_searches = true 266c272 < allow_highlighting = false --- > allow_highlighting = true 271c277 < #elasticsearch_cluster_name = graylog --- > elasticsearch_cluster_name = graylog 403c409 < message_journal_dir = data/journal --- > message_journal_dir = /data/journal 434,435c440,441 < #stream_processing_timeout = 2000 < #stream_processing_max_faults = 3 --- > stream_processing_timeout = 5000 > stream_processing_max_faults = 10 476c482 < #rules_file = /etc/graylog/server/rules.drl --- > rules_file = /etc/graylog/server/rules.drl 479,488c485,495 < #transport_email_enabled = false < #transport_email_hostname = mail.example.com < #transport_email_port = 587 < #transport_email_use_auth = true < #transport_email_use_tls = true < #transport_email_use_ssl = true < #transport_email_auth_username = email@example.com < #transport_email_auth_password = secret < #transport_email_subject_prefix = [graylog] < #transport_email_from_email = firstname.lastname@example.org --- > transport_email_enabled = true > #transport_email_hostname = redacted > transport_email_hostname = redacted > transport_email_port = redacted > transport_email_use_auth = false > transport_email_use_tls = false > transport_email_use_ssl = false > transport_email_auth_username = > transport_email_auth_password = > transport_email_subject_prefix = [graylog] > transport_email_from_email = redacted 492c499 < #transport_email_web_interface_url = https://graylog.example.com --- > transport_email_web_interface_url = redacted
Obviously we’re hesitating to do a full production system update.