Thanks Jochen! There was a typo in elasticsearch_discovery_zen_ping_unicast_hosts
On Friday, October 14, 2016 at 9:19:07 AM UTC-7, Jochen Schalanda wrote: > > Hi, > > the Graylog configuration looks sane (double check that > elasticsearch_discovery_zen_ping_unicast_hosts is pointing to the correct > host). > > Also add the following line to your Graylog configuration file: > > elasticsearch_network_host > <https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2FGraylog2%2Fgraylog2-server%2Fblob%2F2.1.1%2Fmisc%2Fgraylog.conf%23L293-L298&sa=D&sntz=1&usg=AFQjCNGKQHkyjajFMyWj-PpzVjdBycWvBA> > > = 127.0.0.1 > > > Cheers, > Jochen > > On Friday, 14 October 2016 17:44:51 UTC+2, d3pr3cat3d wrote: >> >> Sorry about that. >> >> My server.conf >> >> # cat /etc/graylog/server/server.conf | egrep -v "^$|^#" >> is_master = true >> node_id_file = /etc/graylog/server/node-id >> password_secret = <hash> >> root_password_sha2 = <hash> >> root_timezone = UTC >> plugin_dir = /usr/share/graylog-server/plugin >> rest_listen_uri = http://10.101.10.116:12900/ >> web_listen_uri = http://10.101.10.116:9000/ >> rotation_strategy = count >> elasticsearch_max_docs_per_index = 20000000 >> elasticsearch_max_number_of_indices = 20 >> retention_strategy = delete >> elasticsearch_shards = 1 >> elasticsearch_replicas = 0 >> elasticsearch_index_prefix = graylog2 >> allow_leading_wildcard_searches = false >> allow_highlighting = false >> elasticsearch_cluster_name = graylog2 >> elasticsearch_discovery_zen_ping_unicast_hosts = <host>.<domain>.net:9300 >> elasticsearch_analyzer = standard >> output_batch_size = 500 >> output_flush_interval = 1 >> output_fault_count_threshold = 5 >> output_fault_penalty_seconds = 30 >> processbuffer_processors = 5 >> outputbuffer_processors = 3 >> processor_wait_strategy = blocking >> ring_size = 65536 >> inputbuffer_ring_size = 65536 >> inputbuffer_processors = 2 >> inputbuffer_wait_strategy = blocking >> message_journal_enabled = true >> message_journal_dir = /var/lib/graylog-server/journal >> lb_recognition_period_seconds = 3 >> mongodb_uri = mongodb://grayloguser:<password>@<host>.<domain>.net/graylog2 >> mongodb_max_connections = 1000 >> mongodb_threads_allowed_to_block_multiplier = 5 >> content_packs_dir = /usr/share/graylog-server/contentpacks >> content_packs_auto_load = grok-patterns.json >> proxied_requests_thread_pool_size = 32 >> >> >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/72e76d60-c5bd-4340-aeea-f5f2fce403ab%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
