Hi,
I installed clean (new, not upgraded) Graylog 4.0.8 and forwarded some logs. Everything is fine until here 
But I Created a dashboard and save after reopen dashboard = loading…
How can I solve this problem. I try chrome and firefox and same problem on both.
Do you have any idea?
Anyone experiencing this problem?
already thanks
This problem has no solution. I looked at the other topic.
I will install Kibana ELK Stack.
Thanks
Sorry your having a difficult time but we dont get paid to help out other Grayloger’s. Most of us have day/night jobs.
I’m assuming you created a dashbaord and now it stuck on loading. Might be a configuration issue or permission issue.
I would have liked to help you out but the lack of infornation in about your environment or configurations you made would have helped. It would have been great ifyou could share what has been tried. That way we are not repeating troubleshooting tip.
@gsmith hi,
Our Graylog setup is standalone clean install and configuration file in below. Dashboard is basic but I don’t understand why it stays on loading.
############################
############################
is_master = true
node_id_file = /etc/graylog/server/node-id
password_secret = BlaBlaBla
root_password_sha2 = blablabla
root_timezone = Europe/Istanbul
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
http_bind_address = 192.168.1.17:9000
http_enable_cors = true
http_enable_gzip = true
http_max_header_size = 8192
http_thread_pool_size = 16
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost/graylog
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
proxied_requests_thread_pool_size = 32
###########
Hello,
Sorry for the delay, I was away for week. I need to ask some more questions, I not sure exactly what could be the issue.
I know you said it a fresh install, but do you have all plugins the same version? Just checking.
How did you install Graylog, was it an OVA, Docker, or package (YUM, Deb, etc…)?
Are you using a reverse proxy (i.e., Nginx, Apache)?
Do you have firewall enabled? If so, are all the correct port allowed.
Is Selinux enabled or something similar? If so, have you tried to disable it or put it in passive mode?
What kind of resources do you have in CPU, Memory, and Volume? When the dashboard is stuck on loading have you tried to use TOP maybe it might be a resource issue.
How about permission on Graylog Directory? Maybe double check
chown graylog:graylog -R /etc/graylog/
Do you see anything in Elasticsearch, MongoDb, and Graylog Logs that may pertain to this issue?
http_enable_gzip, have you tries to comment this line out and restart graylog service?
elasticsearch_hosts = I don’t see this setting in your configuration file.
Hope that helps
Hi @gsmith
I will try to answer your questions.
Yes, all plugin is the same version.
Elasticsearch, MongoDb, and Graylog; There are some errors in the logs, but I don’t know if it’s normal. where are the important logs, if you direct me I can share the logs. Because the problem persists.
What’s the status of the elasticsearch service?
sudo systemctl status elasticsearch
What errors are present in the Graylog server log file?
/var/log/graylog-server/server.log
Hello
This will tell you where all your default files are located.
Default file locations — Graylog 4.0.0 documentation.
Just out of curiousity, when you made changes to the files, did you restart your service?
This is one of my Lab Graylog servers config file. I have 12 cores so my config file was adjusted.
[root@graylog graylog_user]# grep -v "^#\|^$" /etc/graylog/server/server.conf
is_master = true
node_id_file = /etc/graylog/server/node-id
password_secret =some_string
root_password_sha2 =some string
root_email = "email.com"
root_timezone = America/Chicago
bin_dir = /usr/share/graylog-server/bin
data_dir = /var/lib/graylog-server
plugin_dir = /usr/share/graylog-server/plugin
http_bind_address = 8.8.8.8:9000
http_enable_cors = true
elasticsearch_hosts = http://8.8.8.8:9200
rotation_strategy = count
elasticsearch_max_docs_per_index = 20000000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 4
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog
allow_leading_wildcard_searches = true
allow_highlighting = false
elasticsearch_analyzer = standard
elasticsearch_index_optimization_timeout = 1h
output_batch_size = 5000
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 7
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
message_journal_max_size = 12gb
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://localhost:27017/graylog
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
transport_email_enabled = true
transport_email_hostname = localhost
tansport_email_port = 25
transport_email_subject_prefix = [graylog]
transport_email_from_email = root@domain.com
transport_email_web_interface_url = https://10.200.6.70:9000
http_connect_timeout = 10s
proxied_requests_thread_pool_size = 32
[root@graylog graylog_user]#
And here is my Elasticsearch config for this server
[root@graylog graylog_user]# grep -v "^#\|^$" /etc/elasticsearch/elasticsearch.yml
cluster.name: graylog
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 8.8.8.8
http.port: 9200
action.auto_create_index: false
[root@graylog graylog_user]#
Hope that helps
Hi @gsmith
Everything is the same except the IP address. I am using internal IP 192.168.1.17. Elasticsearch “elasticsearch_hosts” default localhost and “network.host:” in default setting.
How many CPU’s are you using for your server?
When the dashboard is loading what do to see when monitoring your system using TOP or something similar?
Have you tried a different browser like firefox or Internet explorer?
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
