Hi, the Graylog configuration looks sane (double check that elasticsearch_discovery_zen_ping_unicast_hosts is pointing to the correct host).
Also add the following line to your Graylog configuration file: elasticsearch_network_host <https://github.com/Graylog2/graylog2-server/blob/2.1.1/misc/graylog.conf#L293-L298> = 127.0.0.1 Cheers, Jochen On Friday, 14 October 2016 17:44:51 UTC+2, d3pr3cat3d wrote: > > Sorry about that. > > My server.conf > > # cat /etc/graylog/server/server.conf | egrep -v "^$|^#" > is_master = true > node_id_file = /etc/graylog/server/node-id > password_secret = <hash> > root_password_sha2 = <hash> > root_timezone = UTC > plugin_dir = /usr/share/graylog-server/plugin > rest_listen_uri = http://10.101.10.116:12900/ > web_listen_uri = http://10.101.10.116:9000/ > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 1 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog2 > allow_leading_wildcard_searches = false > allow_highlighting = false > elasticsearch_cluster_name = graylog2 > elasticsearch_discovery_zen_ping_unicast_hosts = <host>.<domain>.net:9300 > elasticsearch_analyzer = standard > output_batch_size = 500 > output_flush_interval = 1 > output_fault_count_threshold = 5 > output_fault_penalty_seconds = 30 > processbuffer_processors = 5 > outputbuffer_processors = 3 > processor_wait_strategy = blocking > ring_size = 65536 > inputbuffer_ring_size = 65536 > inputbuffer_processors = 2 > inputbuffer_wait_strategy = blocking > message_journal_enabled = true > message_journal_dir = /var/lib/graylog-server/journal > lb_recognition_period_seconds = 3 > mongodb_uri = mongodb://grayloguser:<password>@<host>.<domain>.net/graylog2 > mongodb_max_connections = 1000 > mongodb_threads_allowed_to_block_multiplier = 5 > content_packs_dir = /usr/share/graylog-server/contentpacks > content_packs_auto_load = grok-patterns.json > proxied_requests_thread_pool_size = 32 > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0aa40809-a598-44fe-b4b4-80cb28f3a281%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
