Windows 10 Graylog Docker PlainText Tcp/udp input is not working

Graylog Docker PlainText Tcp/udp input is not working on local machine.

I installed Docker Graylog on my development environment with guidance, but i cannot send echo message to graylog.
All counters on graylog is zero and there is no log. I changed time to absolute and tried past and future dates.

Expected Behavior

I need to see echo message on graylog.

Current Behavior

There is no log or error on Graylog.

Steps to Reproduce (for bugs)

  1. docker-compose up below yml file
  2. Add Plain text tcp and udp inputs on Graylog with defaults
  3. Send echo message
PS C:\Users\gokhan.abatay> echo "Test message" | ncat -v -u -w 10 127.0.0.1 5555
Ncat: Version 7.70 ( https://nmap.org/ncat )
Ncat: Connected to 127.0.0.1:5555.
Ncat: 14 bytes sent, 0 bytes received in 0.43 seconds.
PS C:\Users\gokhan.abatay> echo "Test message" | ncat -v -u -w 10 127.0.0.1 5555/udp
Ncat: Version 7.70 ( https://nmap.org/ncat )
Ncat: Connected to 127.0.0.1:5555.
Ncat: 14 bytes sent, 0 bytes received in 0.41 seconds.

Your Environment

yml file

version: '2'
services:
  # MongoDB: https://hub.docker.com/_/mongo/
  mongodb:
    image: mongo:3
  # Elasticsearch: https://www.elastic.co/guide/en/elasticsearch/reference/6.6/docker.html
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.1
    environment:
      - http.host=0.0.0.0
      - transport.host=localhost
      - network.host=0.0.0.0
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    mem_limit: 1g
  # Graylog: https://hub.docker.com/r/graylog/graylog/
  graylog:
    image: graylog/graylog:3.0
    volumes:
      - graylog_journal:/usr/share/graylog/data/journal
    environment:
      # CHANGE ME (must be at least 16 characters)!
      - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
      # Password: admin
      - GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
      - GRAYLOG_HTTP_EXTERNAL_URI=http://127.0.0.1:9000/
    links:
      - mongodb:mongo
      - elasticsearch
    depends_on:
      - mongodb
      - elasticsearch
    ports:
       # Graylog web interface and REST API
      - 9000:9000
      # Syslog TCP
      - 1514:1514
      # Syslog UDP
      - 1514:1514/udp
      # GELF TCP
      - 12201:12201
      # GELF UDP
      - 12201:12201/udp
      # PLAINTEXT TCP
      - 5555:5555
      # PLAINTEXT UDP
      - 5555:5555/udp
# Volumes for persisting data, see https://docs.docker.com/engine/admin/volumes/volumes/
volumes:
  mongo_data:
    driver: local
  es_data:
    driver: local
  graylog_journal:
    driver: local

##Logs

elasticsearch_1  | [2019-03-11T20:04:45,259][INFO ][o.e.n.Node               ] [A8E6u25] stopping ...
elasticsearch_1  | [2019-03-11T20:04:45,402][INFO ][o.e.n.Node               ] [A8E6u25] stopped
elasticsearch_1  | [2019-03-11T20:04:45,403][INFO ][o.e.n.Node               ] [A8E6u25] closing ...
elasticsearch_1  | [2019-03-11T20:04:45,448][INFO ][o.e.n.Node               ] [A8E6u25] closed
elasticsearch_1  | OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
elasticsearch_1  | [2019-03-11T20:05:13,384][INFO ][o.e.e.NodeEnvironment    ] [A8E6u25] using [1] data paths, mounts [[/ (overlay)]], net usable_space [52.6gb], net total_space [58.4gb], types [overlay]
elasticsearch_1  | [2019-03-11T20:05:13,392][INFO ][o.e.e.NodeEnvironment    ] [A8E6u25] heap size [495.3mb], compressed ordinary object pointers [true]
elasticsearch_1  | [2019-03-11T20:05:13,442][INFO ][o.e.n.Node               ] [A8E6u25] node name derived from node ID [A8E6u25hT1m14tcLxPBwUg]; set [node.name] to override
elasticsearch_1  | [2019-03-11T20:05:13,443][INFO ][o.e.n.Node               ] [A8E6u25] version[6.6.1], pid[1], build[oss/tar/1fd8f69/2019-02-13T17:10:04.160291Z], OS[Linux/4.9.125-linuxkit/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/11.0.1/11.0.1+13]
elasticsearch_1  | [2019-03-11T20:05:13,444][INFO ][o.e.n.Node               ] [A8E6u25] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch-10433447035744278886, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Djava.locale.providers=COMPAT, -XX:UseAVX=2, -Des.cgroups.hierarchy.override=/, -Xms512m, -Xmx512m, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=oss, -Des.distribution.type=tar]
elasticsearch_1  | [2019-03-11T20:05:15,211][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [aggs-matrix-stats]
elasticsearch_1  | [2019-03-11T20:05:15,212][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [analysis-common]
elasticsearch_1  | [2019-03-11T20:05:15,212][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [ingest-common]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-expression]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-mustache]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-painless]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [mapper-extras]
elasticsearch_1  | [2019-03-11T20:05:15,215][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [parent-join]
elasticsearch_1  | [2019-03-11T20:05:15,215][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [percolator]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [rank-eval]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [reindex]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [repository-url]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [transport-netty4]
elasticsearch_1  | [2019-03-11T20:05:15,217][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [tribe]
elasticsearch_1  | [2019-03-11T20:05:15,218][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded plugin [ingest-geoip]
elasticsearch_1  | [2019-03-11T20:05:15,219][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded plugin [ingest-user-agent]
elasticsearch_1  | [2019-03-11T20:05:26,347][INFO ][o.e.d.DiscoveryModule    ] [A8E6u25] using discovery type [zen] and host providers [settings]
elasticsearch_1  | [2019-03-11T20:05:28,709][INFO ][o.e.n.Node               ] [A8E6u25] initialized
elasticsearch_1  | [2019-03-11T20:05:28,710][INFO ][o.e.n.Node               ] [A8E6u25] starting ...
elasticsearch_1  | [2019-03-11T20:05:29,359][INFO ][o.e.t.TransportService   ] [A8E6u25] publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}
graylog_1        | 2019-03-11 20:05:31,581 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: AWS plugins 3.0.0 [org.graylog.aws.AWSPlugin]
graylog_1        | 2019-03-11 20:05:31,586 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Collector 3.0.0 [org.graylog.plugins.collector.CollectorPlugin]
graylog_1        | 2019-03-11 20:05:31,588 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Threat Intelligence Plugin 3.0.0 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
graylog_1        | 2019-03-11 20:05:32,271 INFO : org.graylog2.bootstrap.CmdLineTool - Running with JVM arguments: -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -XX:NewRatio=1 -XX:MaxMetaspaceSize=256m -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Dlog4j.configurationFile=/usr/share/graylog/data/config/log4j2.xml -Djava.library.path=/usr/share/graylog/lib/sigar/ -Dgraylog2.installation_source=docker
elasticsearch_1  | [2019-03-11T20:05:32,608][INFO ][o.e.c.s.MasterService    ] [A8E6u25] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300}
elasticsearch_1  | [2019-03-11T20:05:32,618][INFO ][o.e.c.s.ClusterApplierService] [A8E6u25] new_master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300}, reason: apply cluster state (from master [master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
elasticsearch_1  | [2019-03-11T20:05:32,790][INFO ][o.e.h.n.Netty4HttpServerTransport] [A8E6u25] publish_address {172.18.0.2:9200}, bound_addresses {0.0.0.0:9200}
elasticsearch_1  | [2019-03-11T20:05:32,790][INFO ][o.e.n.Node               ] [A8E6u25] started
graylog_1        | 2019-03-11 20:05:32,847 INFO : org.hibernate.validator.internal.util.Version - HV000001: Hibernate Validator 5.1.3.Final
elasticsearch_1  | [2019-03-11T20:05:33,527][INFO ][o.e.g.GatewayService     ] [A8E6u25] recovered [1] indices into cluster_state
elasticsearch_1  | [2019-03-11T20:05:34,600][INFO ][o.e.c.r.a.AllocationService] [A8E6u25] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[graylog_0][0]] ...]).
graylog_1        | 2019-03-11 20:05:37,982 INFO : org.graylog2.shared.buffers.InputBufferImpl - Message journal is enabled.
graylog_1        | 2019-03-11 20:05:38,027 INFO : org.graylog2.plugin.system.NodeId - Node ID: 1baf378b-eefd-47dc-a7c8-3285a9d42cb3
graylog_1        | 2019-03-11 20:05:38,546 INFO : kafka.log.LogManager - Loading logs.
graylog_1        | 2019-03-11 20:05:38,609 WARN : kafka.log.Log - Found a corrupted index file, /usr/share/graylog/data/journal/messagejournal-0/00000000000000000000.index, deleting and rebuilding index...
graylog_1        | 2019-03-11 20:05:38,667 INFO : kafka.log.LogManager - Logs loading complete.
graylog_1        | 2019-03-11 20:05:38,668 INFO : org.graylog2.shared.journal.KafkaJournal - Initialized Kafka based journal at /usr/share/graylog/data/journal
graylog_1        | 2019-03-11 20:05:38,711 INFO : org.graylog2.shared.buffers.InputBufferImpl - Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
graylog_1        | 2019-03-11 20:05:38,757 INFO : org.mongodb.driver.cluster - Cluster created with settings {hosts=[mongo:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout='30000 ms', maxWaitQueueSize=500}
mongodb_1        | 2019-03-11T20:05:38.930+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55740 #1 (1 connection now open)
graylog_1        | 2019-03-11 20:05:38,936 INFO : org.mongodb.driver.cluster - Cluster description not yet available. Waiting for 30000 ms before timing out
mongodb_1        | 2019-03-11T20:05:38.991+0000 I NETWORK  [conn1] received client metadata from 172.18.0.4:55740 conn1: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:39,029 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:1, serverValue:1}] to mongo:27017
graylog_1        | 2019-03-11 20:05:39,039 INFO : org.mongodb.driver.cluster - Monitor thread successfully connected to server with description ServerDescription{address=mongo:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 6, 11]}, minWireVersion=0, maxWireVersion=6, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=4638700}
mongodb_1        | 2019-03-11T20:05:39.061+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55742 #2 (2 connections now open)
mongodb_1        | 2019-03-11T20:05:39.063+0000 I NETWORK  [conn2] received client metadata from 172.18.0.4:55742 conn2: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:39,076 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:2, serverValue:2}] to mongo:27017
graylog_1        | 2019-03-11 20:05:39,752 INFO : io.searchbox.client.AbstractJestClient - Setting server pool to a list of 1 servers: [http://elasticsearch:9200]
graylog_1        | 2019-03-11 20:05:39,754 INFO : io.searchbox.client.JestClientFactory - Using multi thread/connection supporting pooling connection manager
graylog_1        | 2019-03-11 20:05:39,855 INFO : io.searchbox.client.JestClientFactory - Using custom ObjectMapper instance
graylog_1        | 2019-03-11 20:05:39,856 INFO : io.searchbox.client.JestClientFactory - Node Discovery disabled...
graylog_1        | 2019-03-11 20:05:39,856 INFO : io.searchbox.client.JestClientFactory - Idle connection reaping disabled...
graylog_1        | 2019-03-11 20:05:40,077 INFO : org.graylog2.shared.buffers.ProcessBuffer - Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
graylog_1        | 2019-03-11 20:05:40,406 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,434 INFO : org.graylog2.buffers.OutputBuffer - Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
mongodb_1        | 2019-03-11T20:05:40.444+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55752 #3 (3 connections now open)
mongodb_1        | 2019-03-11T20:05:40.446+0000 I NETWORK  [conn3] received client metadata from 172.18.0.4:55752 conn3: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:40,449 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:3, serverValue:3}] to mongo:27017
graylog_1        | 2019-03-11 20:05:40,482 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,521 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,555 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,624 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:41,377 INFO : org.graylog2.bootstrap.ServerBootstrap - Graylog server 3.0.0+db6cf59 starting up
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - JRE: Oracle Corporation 1.8.0_181 on Linux 4.9.125-linuxkit
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - Deployment: docker
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - OS: Debian GNU/Linux 9 (stretch) (debian)
graylog_1        | 2019-03-11 20:05:41,379 INFO : org.graylog2.bootstrap.ServerBootstrap - Arch: amd64
graylog_1        | 2019-03-11 20:05:41,445 INFO : org.graylog2.shared.initializers.PeriodicalsService - Starting 27 periodicals ...
graylog_1        | 2019-03-11 20:05:41,445 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,464 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,464 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.AlertScannerThread] periodical in [10s], polling every [60s].
graylog_1        | 2019-03-11 20:05:41,466 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,472 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
graylog_1        | 2019-03-11 20:05:41,484 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,485 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
graylog_1        | 2019-03-11 20:05:41,486 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
graylog_1        | 2019-03-11 20:05:41,487 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
graylog_1        | 2019-03-11 20:05:41,488 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,489 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
graylog_1        | 2019-03-11 20:05:41,491 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,492 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,493 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration - Legacy default stream has no connections, no migration needed.
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,499 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
mongodb_1        | 2019-03-11T20:05:41.519+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55762 #4 (4 connections now open)
mongodb_1        | 2019-03-11T20:05:41.523+0000 I NETWORK  [conn4] received client metadata from 172.18.0.4:55762 conn4: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.525+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55764 #5 (5 connections now open)
mongodb_1        | 2019-03-11T20:05:41.527+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55766 #6 (6 connections now open)
mongodb_1        | 2019-03-11T20:05:41.528+0000 I NETWORK  [conn6] received client metadata from 172.18.0.4:55766 conn6: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.529+0000 I NETWORK  [conn5] received client metadata from 172.18.0.4:55764 conn5: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:41,530 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:4, serverValue:4}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,531 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:6, serverValue:6}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,534 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:5, serverValue:5}] to mongo:27017
mongodb_1        | 2019-03-11T20:05:41.537+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55768 #7 (7 connections now open)
mongodb_1        | 2019-03-11T20:05:41.544+0000 I NETWORK  [conn7] received client metadata from 172.18.0.4:55768 conn7: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.547+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55770 #8 (8 connections now open)
mongodb_1        | 2019-03-11T20:05:41.550+0000 I NETWORK  [conn8] received client metadata from 172.18.0.4:55770 conn8: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.558+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55772 #9 (9 connections now open)
graylog_1        | 2019-03-11 20:05:41,559 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:8, serverValue:8}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,560 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:7, serverValue:7}] to mongo:27017
mongodb_1        | 2019-03-11T20:05:41.564+0000 I NETWORK  [conn9] received client metadata from 172.18.0.4:55772 conn9: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:41,567 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:9, serverValue:9}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,580 INFO : org.graylog2.shared.initializers.PeriodicalsService - Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
graylog_1        | 2019-03-11 20:05:41,580 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.AlarmCallbacksMigrationPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,601 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,625 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.LdapGroupMappingMigration] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,628 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexFailuresPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,649 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,681 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [3600s].
graylog_1        | 2019-03-11 20:05:41,685 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
graylog_1        | 2019-03-11 20:05:41,687 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
graylog_1        | 2019-03-11 20:05:41,689 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
graylog_1        | 2019-03-11 20:05:42,848 INFO : org.graylog2.shared.initializers.JerseyService - Enabling CORS for HTTP endpoint
graylog_1        | 2019-03-11 20:06:16,750 INFO : org.glassfish.grizzly.http.server.NetworkListener - Started listener bound to [0.0.0.0:9000]
graylog_1        | 2019-03-11 20:06:16,753 INFO : org.glassfish.grizzly.http.server.HttpServer - [HttpServer] Started.
graylog_1        | 2019-03-11 20:06:16,753 INFO : org.graylog2.shared.initializers.JerseyService - Started REST API at <0.0.0.0:9000>
graylog_1        | 2019-03-11 20:06:16,755 INFO : org.graylog2.shared.initializers.ServiceManagerListener - Services are healthy
graylog_1        | 2019-03-11 20:06:16,758 INFO : org.graylog2.bootstrap.ServerBootstrap - Services started, startup times in ms: {OutputSetupService [RUNNING]=37, BufferSynchronizerService [RUNNING]=38, KafkaJournal [RUNNING]=79, InputSetupService [RUNNING]=132, ConfigurationEtagService [RUNNING]=194, EtagService [RUNNING]=195, JournalReader [RUNNING]=196, LookupTableService [RUNNING]=197, StreamCacheService [RUNNING]=197, PeriodicalsService [RUNNING]=318, JerseyService [RUNNING]=35336}
graylog_1        | 2019-03-11 20:06:16,759 INFO : org.graylog2.shared.initializers.InputSetupService - Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
graylog_1        | 2019-03-11 20:06:16,805 INFO : org.graylog2.bootstrap.ServerBootstrap - Graylog server up and running.
graylog_1        | 2019-03-11 20:06:16,888 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext TCP/5c86668e2ab79c000e85c869] is now STARTING
graylog_1        | 2019-03-11 20:06:16,903 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext UDP/5c86696a2ab79c000e85cb8e] is now STARTING
graylog_1        | 2019-03-11 20:06:16,907 INFO : org.graylog2.inputs.InputStateListener - Input [GELF TCP/5c866c2d2ab79c000e85ce94] is now STARTING
graylog_1        | 2019-03-11 20:06:16,910 INFO : org.graylog2.inputs.InputStateListener - Input [Syslog UDP/5c86ae592ab79c000dcd6266] is now STARTING
graylog_1        | 2019-03-11 20:06:17,027 INFO : org.graylog2.inputs.InputStateListener - Input [GELF TCP/5c866c2d2ab79c000e85ce94] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,034 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext TCP/5c86668e2ab79c000e85c869] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,043 INFO : org.graylog2.inputs.InputStateListener - Input [Syslog UDP/5c86ae592ab79c000dcd6266] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,052 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext UDP/5c86696a2ab79c000e85cb8e] is now RUNNING
elasticsearch_1  | [2019-03-11T20:06:55,340][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
  • Graylog Version:3.0
  • Elasticsearch Version:6.6.1
  • MongoDB Version:3
  • Operating System:Windows 10 enterprise
  • Browser version:Chrome

Did you create the input in the Graylog UI? Only opening/forwarding the port is not enough, you need to configure one input in Graylog System > Inputs that receive the messages.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.