Hello Jeff, from the output of netstat it looks like your graylog2-server isn't running. Could you please check that the server is actually running?
Which version of Graylog2 are you using? Only Graylog2 0.90.x (and before) work with Elasticsearch 0.90.10. Graylog2 0.91.x and later requires Elasticsearch 1.3.4. Cheers, Jochen Am Montag, 10. November 2014 16:15:30 UTC+1 schrieb Jeff Schoolcraft: > > I’ve done a fresh install on a newly provisioned Ubuntu 14 LTS box. > Installed Mongodb and ElasticSearch (0.90.x) using the apt procedures on > both sites. Installed Graylog2 using the deb instructions. > > I’ve worked through a few issues and my most recent error is: > > jschoolcraft@logserver:~$ tail -f /var/log/graylog2-web/application.log > Caused by: java.net.ConnectException: Connection refused: /127.0.0.1:12900 > to http://127.0.0.1:12900/system/cluster/node > at > com.ning.http.client.providers.netty.NettyConnectListener.operationComplete(NettyConnectListener.java:103) > > ~[com.ning.async-http-client-1.7.18.jar:na] > ... 12 common frames omitted > Caused by: java.net.ConnectException: Connection refused: /127.0.0.1:12900 > at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) ~[na:1.7.0_65] > at sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739) > ~[na:1.7.0_65] > at > org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152) > > ~[io.netty.netty-3.9.3.Final.jar:na] > at > org.jboss.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105) > > ~[io.netty.netty-3.9.3.Final.jar:na] > ... 8 common frames omitted > > The relevant bits (I think) from /etc/graylog2.conf are: > > # REST API listen URI. Must be reachable by other graylog2-server nodes if > you run a cluster. > rest_listen_uri = http://127.0.0.1:12900/ > # rest_listen_uri = http://0.0.0.0:12900/ > > # REST API transport address. Defaults to the value of rest_listen_uri. > Exception: If rest_listen_uri > # is set to a wildcard IP address (0.0.0.0) the first non-loopback IPv4 > system address is used. > # This will be promoted in the cluster discovery APIs and other nodes may > try to connect on this > # address. (see rest_listen_uri) > #rest_transport_uri = http://192.168.1.1:12900/ > rest_transport_uri = http://127.0.0.1:12900/ > > And from /etc/graylog2/web/graylog2-web-interface.conf are: > > # graylog2-server REST URIs (one or more, comma separated) For example: " > http://127.0.0.1:12900/,http://127.0.0.1:12910/"; > graylog2-server.uris="http://127.0.0.1:12900/"; > # graylog2-server.uris="http://0.0.0.0:12900/"; > > here are active TCP connections: > > foo@logserver:~$ netstat -ltn > Active Internet connections (only servers) > Proto Recv-Q Send-Q Local Address Foreign Address State > tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN > tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN > tcp 0 0 127.0.0.1:2812 0.0.0.0:* LISTEN > tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN > tcp6 0 0 :::9200 :::* LISTEN > tcp6 0 0 :::9300 :::* LISTEN > tcp6 0 0 :::22 :::* LISTEN > tcp6 0 0 :::25 :::* LISTEN > tcp6 0 0 :::9000 :::* LISTEN > > and UDP connections: > > foo@logserver:~$ netstat -lun > Active Internet connections (only servers) > Proto Recv-Q Send-Q Local Address Foreign Address State > udp 0 0 10.208.34.47:123 0.0.0.0:* > udp 0 0 127.0.0.1:123 0.0.0.0:* > udp 0 0 0.0.0.0:123 0.0.0.0:* > udp6 0 0 fe80::be76:4eff:fe0:123 :::* > udp6 0 0 ::1:123 :::* > udp6 0 0 :::123 :::* > udp6 0 0 :::54328 :::* > > Any suggestions where I should look? > -- > Jeff Schoolcraft > -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
