Okay, maybe that was one problem. foo@logserver:~$ dpkg -l | grep graylog ii graylog2-0.91-repository-ubuntu14.04 1.1.0-1 all Package to install Graylog2 0.91 GPG key and repository ii graylog2-server 0.91.3-1 all Graylog2 server ii graylog2-web 0.91.3-1 all Graylog2 web
I upgraded to Elasticsearch 1.3.5 (using the directions and specifying the 1.3 trunk) I think graylog2-server is running, but I don’t know how to definitively say: sudo service graylog2-server status graylog2-server start/running, process 5690 My server log tail is: 2014-11-10T16:21:35.453Z INFO [Reflections] Reflections took 95 ms to scan 1 urls, producing 5 keys and 19 values 2014-11-10T16:21:37.332Z INFO [Reflections] Reflections took 252 ms to scan 1 urls, producing 8 keys and 18 values 2014-11-10T16:21:37.595Z INFO [Reflections] Reflections took 92 ms to scan 1 urls, producing 5 keys and 19 values 2014-11-10T16:21:39.504Z INFO [Reflections] Reflections took 258 ms to scan 1 urls, producing 8 keys and 18 values 2014-11-10T16:21:39.776Z INFO [Reflections] Reflections took 100 ms to scan 1 urls, producing 5 keys and 19 values 2014-11-10T16:21:41.699Z INFO [Reflections] Reflections took 256 ms to scan 1 urls, producing 8 keys and 18 values 2014-11-10T16:21:41.963Z INFO [Reflections] Reflections took 97 ms to scan 1 urls, producing 5 keys and 19 values 2014-11-10T16:21:43.884Z INFO [Reflections] Reflections took 257 ms to scan 1 urls, producing 8 keys and 18 values 2014-11-10T16:21:44.176Z INFO [Reflections] Reflections took 96 ms to scan 1 urls, producing 5 keys and 19 values 2014-11-10T16:21:46.105Z INFO [Reflections] Reflections took 263 ms to scan 1 urls, producing 8 keys and 18 values -- Jeff Schoolcraft On November 10, 2014 at 11:02:03 AM, Jochen Schalanda ([email protected]) wrote: Hello Jeff, from the output of netstat it looks like your graylog2-server isn't running. Could you please check that the server is actually running? Which version of Graylog2 are you using? Only Graylog2 0.90.x (and before) work with Elasticsearch 0.90.10. Graylog2 0.91.x and later requires Elasticsearch 1.3.4. Cheers, Jochen Am Montag, 10. November 2014 16:15:30 UTC+1 schrieb Jeff Schoolcraft: I’ve done a fresh install on a newly provisioned Ubuntu 14 LTS box. Installed Mongodb and ElasticSearch (0.90.x) using the apt procedures on both sites. Installed Graylog2 using the deb instructions. I’ve worked through a few issues and my most recent error is: jschoolcraft@logserver:~$ tail -f /var/log/graylog2-web/application.log Caused by: java.net.ConnectException: Connection refused: /127.0.0.1:12900 to http://127.0.0.1:12900/system/cluster/node at com.ning.http.client.providers.netty.NettyConnectListener.operationComplete(NettyConnectListener.java:103) ~[com.ning.async-http-client-1.7.18.jar:na] ... 12 common frames omitted Caused by: java.net.ConnectException: Connection refused: /127.0.0.1:12900 at sun.nio.ch.SocketChannelImpl.checkConnect(Native Method) ~[na:1.7.0_65] at sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:739) ~[na:1.7.0_65] at org.jboss.netty.channel.socket.nio.NioClientBoss.connect(NioClientBoss.java:152) ~[io.netty.netty-3.9.3.Final.jar:na] at org.jboss.netty.channel.socket.nio.NioClientBoss.processSelectedKeys(NioClientBoss.java:105) ~[io.netty.netty-3.9.3.Final.jar:na] ... 8 common frames omitted The relevant bits (I think) from /etc/graylog2.conf are: # REST API listen URI. Must be reachable by other graylog2-server nodes if you run a cluster. rest_listen_uri = http://127.0.0.1:12900/ # rest_listen_uri = http://0.0.0.0:12900/ # REST API transport address. Defaults to the value of rest_listen_uri. Exception: If rest_listen_uri # is set to a wildcard IP address (0.0.0.0) the first non-loopback IPv4 system address is used. # This will be promoted in the cluster discovery APIs and other nodes may try to connect on this # address. (see rest_listen_uri) #rest_transport_uri = http://192.168.1.1:12900/ rest_transport_uri = http://127.0.0.1:12900/ And from /etc/graylog2/web/graylog2-web-interface.conf are: # graylog2-server REST URIs (one or more, comma separated) For example: "http://127.0.0.1:12900/,http://127.0.0.1:12910/"; graylog2-server.uris="http://127.0.0.1:12900/"; # graylog2-server.uris="http://0.0.0.0:12900/"; here are active TCP connections: foo@logserver:~$ netstat -ltn Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:2812 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN tcp6 0 0 :::9200 :::* LISTEN tcp6 0 0 :::9300 :::* LISTEN tcp6 0 0 :::22 :::* LISTEN tcp6 0 0 :::25 :::* LISTEN tcp6 0 0 :::9000 :::* LISTEN and UDP connections: foo@logserver:~$ netstat -lun Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State udp 0 0 10.208.34.47:123 0.0.0.0:* udp 0 0 127.0.0.1:123 0.0.0.0:* udp 0 0 0.0.0.0:123 0.0.0.0:* udp6 0 0 fe80::be76:4eff:fe0:123 :::* udp6 0 0 ::1:123 :::* udp6 0 0 :::123 :::* udp6 0 0 :::54328 :::* Any suggestions where I should look? -- Jeff Schoolcraft -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
