Hi Dave, the rest_transport_uri setting and the rest_listen_uri setting you've chosen are incompatible.
I'd recommend setting only rest_listen_uri to your public IP address and using the default for rest_transport_uri (i. e. remove your own setting). Cheers, Jochen > Am 29.08.2016 um 17:42 schrieb Dave <[email protected]>: > > Hello, > > I'm trying to stand up Graylog on a RHEL 7 VM. The webui is throwing this > error when I attempt to authenticate: > "Error - the server returned: 404 - cannot POST > http://<my_public_ip>:12900/system/sessions (404)" > > System info: > RHEL 7.2 > Graylog 2.1.0-8.rc.1 > Elasticsearch 2.3.5-1 > MongoDB 3.2.9-1 > Config: > > is_master = true > node_id_file = /etc/graylog/server/node-id > password_secret = <snip> > root_password_sha2 = <snip> > root_timezone = America/New_York > plugin_dir = /usr/share/graylog-server/plugin > rest_listen_uri = http://0.0.0.0:12900/api/ > rest_transport_uri = http://<my_public_ip>:12900/ > trusted_proxies = 127.0.0.1/32, <public_subnet> > web_listen_uri = http://0.0.0.0:9000/ > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 4 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog > allow_leading_wildcard_searches = false > allow_highlighting = false > elasticsearch_analyzer = standard > output_batch_size = 500 > output_flush_interval = 1 > output_fault_count_threshold = 5 > output_fault_penalty_seconds = 30 > processbuffer_processors = 5 > outputbuffer_processors = 3 > processor_wait_strategy = blocking > ring_size = 65536 > inputbuffer_ring_size = 65536 > inputbuffer_processors = 2 > inputbuffer_wait_strategy = blocking > message_journal_enabled = true > message_journal_dir = /var/lib/graylog-server/journal > lb_recognition_period_seconds = 3 > mongodb_uri = mongodb://localhost/graylog > mongodb_max_connections = 1000 > mongodb_threads_allowed_to_block_multiplier = 5 > content_packs_dir = /usr/share/graylog-server/contentpacks > content_packs_auto_load = grok-patterns.json > > > > Any ideas? > > > > Thanks, > > > > --Dave > > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/04cfbadc-5b5f-43ef-8b61-402dd40edca0%40googlegroups.com > > <https://groups.google.com/d/msgid/graylog2/04cfbadc-5b5f-43ef-8b61-402dd40edca0%40googlegroups.com?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/d/optout > <https://groups.google.com/d/optout>. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/57DB3779-C70C-427C-9B87-4A5D0063DCB2%40schalanda.name. For more options, visit https://groups.google.com/d/optout.
