While retrieving data for this widget, the following error(s) occurred: Elasticsearch exception

Graylog Central (peer support)
1

1. Describe your incident:

I’ve just installed a fresh installation of Graylog to be able to receive alerts from Wazuh Manager, via a raw/plaintext TCP input. I’ve connected both instances correctly but I’m receiving these errors, when I try to “Show Received Messages”:

2023-01-30 17_56_45-_ Threads - WAZUH - Slack
2023-01-30 17_56_45-_ Threads - WAZUH - Slack1917×906 45.1 KB

  • OS Information:
    Ubuntu Server 22.04
  • Package Version:
    Graylog v4.3.11+b48cf45

3. What steps have you already taken to try and solve the problem?

I’ve just repeated the same steps above and I also tried to delete the index graylog_0 on Wazuh’s Indexer.

2

Was able to solve this by editing server.conf and changing the default elastic index prefix name.

2023-01-30 22_24_09-Threads - WAZUH - Slack
2023-01-30 22_24_09-Threads - WAZUH - Slack1060×451 45.5 KB

Thank you, nevertheless!

1 Like
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.