[graylog2] Re: Graylog server not starting

2016-10-14 Thread d3pr3cat3d 
Thanks Jochen!  There was a typo in 
elasticsearch_discovery_zen_ping_unicast_hosts



On Friday, October 14, 2016 at 9:19:07 AM UTC-7, Jochen Schalanda wrote:
>
> Hi,
>
> the Graylog configuration looks sane (double check that 
> elasticsearch_discovery_zen_ping_unicast_hosts is pointing to the correct 
> host).
>
> Also add the following line to your Graylog configuration file:
>
> elasticsearch_network_host 
> 
>  
> = 127.0.0.1
>
>
> Cheers,
> Jochen
>
> On Friday, 14 October 2016 17:44:51 UTC+2, d3pr3cat3d wrote:
>>
>> Sorry about that.
>>
>> My server.conf
>>
>> # cat /etc/graylog/server/server.conf | egrep -v "^$|^#"
>> is_master = true
>> node_id_file = /etc/graylog/server/node-id
>> password_secret = 
>> root_password_sha2 = 
>> root_timezone = UTC
>> plugin_dir = /usr/share/graylog-server/plugin
>> rest_listen_uri = http://10.101.10.116:12900/
>> web_listen_uri = http://10.101.10.116:9000/
>> rotation_strategy = count
>> elasticsearch_max_docs_per_index = 2000
>> elasticsearch_max_number_of_indices = 20
>> retention_strategy = delete
>> elasticsearch_shards = 1
>> elasticsearch_replicas = 0
>> elasticsearch_index_prefix = graylog2
>> allow_leading_wildcard_searches = false
>> allow_highlighting = false
>> elasticsearch_cluster_name = graylog2
>> elasticsearch_discovery_zen_ping_unicast_hosts = ..net:9300
>> elasticsearch_analyzer = standard
>> output_batch_size = 500
>> output_flush_interval = 1
>> output_fault_count_threshold = 5
>> output_fault_penalty_seconds = 30
>> processbuffer_processors = 5
>> outputbuffer_processors = 3
>> processor_wait_strategy = blocking
>> ring_size = 65536
>> inputbuffer_ring_size = 65536
>> inputbuffer_processors = 2
>> inputbuffer_wait_strategy = blocking
>> message_journal_enabled = true
>> message_journal_dir = /var/lib/graylog-server/journal
>> lb_recognition_period_seconds = 3
>> mongodb_uri = mongodb://grayloguser:@..net/graylog2
>> mongodb_max_connections = 1000
>> mongodb_threads_allowed_to_block_multiplier = 5
>> content_packs_dir = /usr/share/graylog-server/contentpacks
>> content_packs_auto_load = grok-patterns.json
>> proxied_requests_thread_pool_size = 32
>>
>> ​
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/72e76d60-c5bd-4340-aeea-f5f2fce403ab%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog server not starting

2016-10-14 Thread Jochen Schalanda 
Hi,

the Graylog configuration looks sane (double check that 
elasticsearch_discovery_zen_ping_unicast_hosts is pointing to the correct 
host).

Also add the following line to your Graylog configuration file:

elasticsearch_network_host 

 
= 127.0.0.1


Cheers,
Jochen

On Friday, 14 October 2016 17:44:51 UTC+2, d3pr3cat3d wrote:
>
> Sorry about that.
>
> My server.conf
>
> # cat /etc/graylog/server/server.conf | egrep -v "^$|^#"
> is_master = true
> node_id_file = /etc/graylog/server/node-id
> password_secret = 
> root_password_sha2 = 
> root_timezone = UTC
> plugin_dir = /usr/share/graylog-server/plugin
> rest_listen_uri = http://10.101.10.116:12900/
> web_listen_uri = http://10.101.10.116:9000/
> rotation_strategy = count
> elasticsearch_max_docs_per_index = 2000
> elasticsearch_max_number_of_indices = 20
> retention_strategy = delete
> elasticsearch_shards = 1
> elasticsearch_replicas = 0
> elasticsearch_index_prefix = graylog2
> allow_leading_wildcard_searches = false
> allow_highlighting = false
> elasticsearch_cluster_name = graylog2
> elasticsearch_discovery_zen_ping_unicast_hosts = ..net:9300
> elasticsearch_analyzer = standard
> output_batch_size = 500
> output_flush_interval = 1
> output_fault_count_threshold = 5
> output_fault_penalty_seconds = 30
> processbuffer_processors = 5
> outputbuffer_processors = 3
> processor_wait_strategy = blocking
> ring_size = 65536
> inputbuffer_ring_size = 65536
> inputbuffer_processors = 2
> inputbuffer_wait_strategy = blocking
> message_journal_enabled = true
> message_journal_dir = /var/lib/graylog-server/journal
> lb_recognition_period_seconds = 3
> mongodb_uri = mongodb://grayloguser:@..net/graylog2
> mongodb_max_connections = 1000
> mongodb_threads_allowed_to_block_multiplier = 5
> content_packs_dir = /usr/share/graylog-server/contentpacks
> content_packs_auto_load = grok-patterns.json
> proxied_requests_thread_pool_size = 32
>
> ​
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/0aa40809-a598-44fe-b4b4-80cb28f3a281%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog server not starting

2016-10-14 Thread d3pr3cat3d 


Sorry about that.

My server.conf

# cat /etc/graylog/server/server.conf | egrep -v "^$|^#"
is_master = true
node_id_file = /etc/graylog/server/node-id
password_secret = 
root_password_sha2 = 
root_timezone = UTC
plugin_dir = /usr/share/graylog-server/plugin
rest_listen_uri = http://10.101.10.116:12900/
web_listen_uri = http://10.101.10.116:9000/
rotation_strategy = count
elasticsearch_max_docs_per_index = 2000
elasticsearch_max_number_of_indices = 20
retention_strategy = delete
elasticsearch_shards = 1
elasticsearch_replicas = 0
elasticsearch_index_prefix = graylog2
allow_leading_wildcard_searches = false
allow_highlighting = false
elasticsearch_cluster_name = graylog2
elasticsearch_discovery_zen_ping_unicast_hosts = ..net:9300
elasticsearch_analyzer = standard
output_batch_size = 500
output_flush_interval = 1
output_fault_count_threshold = 5
output_fault_penalty_seconds = 30
processbuffer_processors = 5
outputbuffer_processors = 3
processor_wait_strategy = blocking
ring_size = 65536
inputbuffer_ring_size = 65536
inputbuffer_processors = 2
inputbuffer_wait_strategy = blocking
message_journal_enabled = true
message_journal_dir = /var/lib/graylog-server/journal
lb_recognition_period_seconds = 3
mongodb_uri = mongodb://grayloguser:@..net/graylog2
mongodb_max_connections = 1000
mongodb_threads_allowed_to_block_multiplier = 5
content_packs_dir = /usr/share/graylog-server/contentpacks
content_packs_auto_load = grok-patterns.json
proxied_requests_thread_pool_size = 32

​

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/01b7d293-5896-4eec-a3ce-9b205baaa385%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Graylog server not starting

2016-10-14 Thread Jochen Schalanda 
Hi,

your Graylog configuration file looks very strange. Please post the correct 
one without the interleaved Elasticsearch configuration parts.

Cheers,
Jochen

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/cc98147d-3ba9-4edd-9323-aaefed974721%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.