Hi Jochen, I have the same problem: Error - the server returned: 404 - cannot POST https://graylog.example.com/system/sessions (404)
I use a proxypass rule for https. My conf is: server.conf rest_listen_uri = http://graylog01.internal.net:12900/ #rest_transport_uri = http://graylog.example.com:12900/ web_listen_uri = http://graylog01.internal.net:9000/ web_endpoint_uri = https://graylog.example.com:9000/api/ SSL conf file <VirtualHost *:443> RequestHeader set X-Forwarded-Proto "https" RequestHeader set X-Forwarded-Port "443" RequestHeader set X-Graylog-Server-URL "https://graylog.example.com:12900/"; ServerName graylog.example.com ProxyPass / http://172.31.20.211:9000/ ProxyPassReverse / http://172.31.20.211:9000/ ProxyRequests Off SSLEngine on SSLCertificateFile /etc/ssl/certs/example.com.crt SSLCertificateKeyFile /etc/ssl/private/example.com.key SSLCertificateChainFile /etc/ssl/certs/gd_bundle-g2-g1.crt <Proxy http://172.31.20.211:9000/> Order deny,allow Allow from all </Proxy> </VirtualHost> Any idea how to fix it? Thanks Tony Il giorno lunedì 29 agosto 2016 18:24:39 UTC+1, Jochen Schalanda ha scritto: > > Hi Dave, > > the rest_transport_uri setting and the rest_listen_uri setting you've > chosen are incompatible. > > I'd recommend setting only rest_listen_uri to your public IP address and > using the default for rest_transport_uri (i. e. remove your own setting). > > Cheers, > Jochen > > Am 29.08.2016 um 17:42 schrieb Dave <[email protected] <javascript:>>: > > Hello, > > I'm trying to stand up Graylog on a RHEL 7 VM. The webui is throwing this > error when I attempt to authenticate: > "Error - the server returned: 404 - cannot POST > http://<my_public_ip>:12900/system/sessions > (404)" > > System info: > > - RHEL 7.2 > - Graylog 2.1.0-8.rc.1 > - Elasticsearch 2.3.5-1 > - MongoDB 3.2.9-1 > > Config: > > is_master = true > node_id_file = /etc/graylog/server/node-id > password_secret = <snip> > root_password_sha2 = <snip> > root_timezone = America/New_York > plugin_dir = /usr/share/graylog-server/plugin > rest_listen_uri = http://0.0.0.0:12900/api/ > rest_transport_uri = http://<my_public_ip>:12900/ > trusted_proxies = 127.0.0.1/32, <public_subnet> > web_listen_uri = http://0.0.0.0:9000/ > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 4 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog > allow_leading_wildcard_searches = false > allow_highlighting = false > elasticsearch_analyzer = standard > output_batch_size = 500 > output_flush_interval = 1 > output_fault_count_threshold = 5 > output_fault_penalty_seconds = 30 > processbuffer_processors = 5 > outputbuffer_processors = 3 > processor_wait_strategy = blocking > ring_size = 65536 > inputbuffer_ring_size = 65536 > inputbuffer_processors = 2 > inputbuffer_wait_strategy = blocking > message_journal_enabled = true > message_journal_dir = /var/lib/graylog-server/journal > lb_recognition_period_seconds = 3 > mongodb_uri = mongodb://localhost/graylog > mongodb_max_connections = 1000 > mongodb_threads_allowed_to_block_multiplier = 5 > content_packs_dir = /usr/share/graylog-server/contentpacks > content_packs_auto_load = grok-patterns.json > > > Any ideas? > > > Thanks, > > > --Dave > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/04cfbadc-5b5f-43ef-8b61-402dd40edca0%40googlegroups.com > > <https://groups.google.com/d/msgid/graylog2/04cfbadc-5b5f-43ef-8b61-402dd40edca0%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > > > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f4292acc-091a-4e12-94b9-0a988473c012%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
