Per my other thread, I decided to delete the VMs and start over from scratch. Instead of running ES on two nodes and Graylog on one of those nodes, I've got two VM. Running ES only and the other running Graylog and MongoDB only.
ansted -> x.x.x.146 Running Graylog and MongoDB ansted-search-01 -> x.x.x.149 Running ElasticSearch I've attached the two config files (one for Graylog and one for ES). I removed all of the commented out lines from the text files. I've also attached the log file that Graylog is generating. The repeated error is: 2016-08-04T14:14:09.089-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [18] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] It is trying to connect to the ES server's IP, but I am out of ideas as for what is wrong. I know I have ES set to use port 9300 for transport and Graylog is (currently) set to port 9200, but changing Graylog's config file doesn't seem to change the error in the Graylog log file. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/27bac447-822a-4a22-be1b-2453d44b2df1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
2016-08-04T14:13:30.660-04:00 INFO [CmdLineTool] Loaded plugin: Collector 1.0.3 [org.graylog.plugins.collector.CollectorPlugin] 2016-08-04T14:13:30.661-04:00 INFO [CmdLineTool] Loaded plugin: Enterprise Integration Plugin 1.0.3 [org.graylog.plugins.enterprise_integration.EnterpriseIntegrationPlugin] 2016-08-04T14:13:30.661-04:00 INFO [CmdLineTool] Loaded plugin: MapWidgetPlugin 1.0.3 [org.graylog.plugins.map.MapWidgetPlugin] 2016-08-04T14:13:30.661-04:00 INFO [CmdLineTool] Loaded plugin: Pipeline Processor Plugin 1.0.0-beta.5 [org.graylog.plugins.pipelineprocessor.ProcessorPlugin] 2016-08-04T14:13:30.661-04:00 INFO [CmdLineTool] Loaded plugin: Anonymous Usage Statistics 2.0.3 [org.graylog.plugins.usagestatistics.UsageStatsPlugin] 2016-08-04T14:13:30.734-04:00 INFO [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:NewRatio=1 -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=rpm 2016-08-04T14:13:32.757-04:00 INFO [InputBufferImpl] Message journal is enabled. 2016-08-04T14:13:32.926-04:00 INFO [LogManager] Loading logs. 2016-08-04T14:13:32.990-04:00 INFO [LogManager] Logs loading complete. 2016-08-04T14:13:32.991-04:00 INFO [KafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal 2016-08-04T14:13:33.003-04:00 INFO [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers. 2016-08-04T14:13:33.034-04:00 INFO [cluster] Cluster created with settings {hosts=[localhost:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout='30000 ms', maxWaitQueueSize=5000} 2016-08-04T14:13:33.067-04:00 INFO [cluster] No server chosen by ReadPreferenceServerSelector{readPreference=primary} from cluster description ClusterDescription{type=UNKNOWN, connectionMode=SINGLE, all=[ServerDescription{address=localhost:27017, type=UNKNOWN, state=CONNECTING}]}. Waiting for 30000 ms before timing out 2016-08-04T14:13:33.099-04:00 INFO [connection] Opened connection [connectionId{localValue:1, serverValue:84}] to localhost:27017 2016-08-04T14:13:33.100-04:00 INFO [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 2, 8]}, minWireVersion=0, maxWireVersion=4, maxDocumentSize=16777216, roundTripTimeNanos=568164} 2016-08-04T14:13:33.106-04:00 INFO [connection] Opened connection [connectionId{localValue:2, serverValue:85}] to localhost:27017 2016-08-04T14:13:33.288-04:00 INFO [NodeId] Node ID: f51e5052-55d0-4c4a-92ca-89a28282b3f4 2016-08-04T14:13:33.361-04:00 INFO [node] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] version[2.3.2], pid[24882], build[b9e4a6a/2016-04-21T16:03:47Z] 2016-08-04T14:13:33.361-04:00 INFO [node] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] initializing ... 2016-08-04T14:13:33.366-04:00 INFO [plugins] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] modules [], plugins [graylog-monitor], sites [] 2016-08-04T14:13:34.876-04:00 INFO [node] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] initialized 2016-08-04T14:13:34.944-04:00 INFO [Version] HV000001: Hibernate Validator 5.2.4.Final 2016-08-04T14:13:35.072-04:00 INFO [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>. 2016-08-04T14:13:36.748-04:00 INFO [RulesEngineProvider] No static rules file loaded. 2016-08-04T14:13:36.798-04:00 INFO [connection] Opened connection [connectionId{localValue:3, serverValue:86}] to localhost:27017 2016-08-04T14:13:36.977-04:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /tmp/GeoLite2-City.mmdb 2016-08-04T14:13:36.990-04:00 INFO [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>. 2016-08-04T14:13:37.074-04:00 INFO [connection] Opened connection [connectionId{localValue:4, serverValue:87}] to localhost:27017 2016-08-04T14:13:37.085-04:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /tmp/GeoLite2-City.mmdb 2016-08-04T14:13:37.161-04:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /tmp/GeoLite2-City.mmdb 2016-08-04T14:13:37.263-04:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /tmp/GeoLite2-City.mmdb 2016-08-04T14:13:37.300-04:00 WARN [GeoIpResolverEngine] GeoIP database file does not exist: /tmp/GeoLite2-City.mmdb 2016-08-04T14:13:37.778-04:00 INFO [ServerBootstrap] Graylog server 2.0.3 (f07c170) starting up 2016-08-04T14:13:37.778-04:00 INFO [ServerBootstrap] JRE: Oracle Corporation 1.8.0_101 on Linux 3.10.0-327.28.2.el7.x86_64 2016-08-04T14:13:37.778-04:00 INFO [ServerBootstrap] Deployment: rpm 2016-08-04T14:13:37.778-04:00 INFO [ServerBootstrap] OS: CentOS Linux 7 (Core) (centos) 2016-08-04T14:13:37.778-04:00 INFO [ServerBootstrap] Arch: amd64 2016-08-04T14:13:37.782-04:00 WARN [DeadEventLoggingListener] Received unhandled event of type <org.graylog2.plugin.lifecycles.Lifecycle> from event bus <AsyncEventBus{graylog-eventbus}> 2016-08-04T14:13:37.808-04:00 INFO [PeriodicalsService] Starting 24 periodicals ... 2016-08-04T14:13:37.808-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s]. 2016-08-04T14:13:37.810-04:00 INFO [node] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] starting ... 2016-08-04T14:13:37.812-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.AlertScannerThread] periodical in [10s], polling every [60s]. 2016-08-04T14:13:37.812-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s]. 2016-08-04T14:13:37.812-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [0s], polling every [20s]. 2016-08-04T14:13:37.813-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical, running forever. 2016-08-04T14:13:37.814-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever. 2016-08-04T14:13:37.815-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s]. 2016-08-04T14:13:37.815-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s]. 2016-08-04T14:13:37.817-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s]. 2016-08-04T14:13:37.817-04:00 INFO [IndexRetentionThread] Elasticsearch cluster not available, skipping index retention checks. 2016-08-04T14:13:37.818-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s]. 2016-08-04T14:13:37.818-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s]. 2016-08-04T14:13:37.818-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s]. 2016-08-04T14:13:37.819-04:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s]. 2016-08-04T14:13:37.819-04:00 INFO [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [300s]. 2016-08-04T14:13:37.820-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever. 2016-08-04T14:13:37.820-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever. 2016-08-04T14:13:37.820-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s]. 2016-08-04T14:13:37.835-04:00 INFO [connection] Opened connection [connectionId{localValue:6, serverValue:89}] to localhost:27017 2016-08-04T14:13:37.835-04:00 INFO [connection] Opened connection [connectionId{localValue:5, serverValue:88}] to localhost:27017 2016-08-04T14:13:37.855-04:00 INFO [IndexerClusterCheckerThread] Indexer not fully initialized yet. Skipping periodic cluster check. 2016-08-04T14:13:37.893-04:00 INFO [connection] Opened connection [connectionId{localValue:7, serverValue:90}] to localhost:27017 2016-08-04T14:13:37.956-04:00 INFO [PeriodicalsService] Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node. 2016-08-04T14:13:37.956-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.AlarmCallbacksMigrationPeriodical] periodical, running forever. 2016-08-04T14:13:37.956-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever. 2016-08-04T14:13:37.991-04:00 INFO [Periodicals] Starting [org.graylog2.periodical.LdapGroupMappingMigration] periodical, running forever. 2016-08-04T14:13:38.012-04:00 INFO [Periodicals] Starting [org.graylog.plugins.usagestatistics.UsageStatsNodePeriodical] periodical in [300s], polling every [21600s]. 2016-08-04T14:13:38.012-04:00 INFO [Periodicals] Starting [org.graylog.plugins.usagestatistics.UsageStatsClusterPeriodical] periodical in [300s], polling every [21600s]. 2016-08-04T14:13:38.012-04:00 INFO [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s]. 2016-08-04T14:13:38.203-04:00 INFO [transport] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] publish_address {127.0.0.1:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200} 2016-08-04T14:13:38.209-04:00 INFO [discovery] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] graylog/CNFExff9S0ivUhydyR6mXQ 2016-08-04T14:13:38.296-04:00 INFO [AbstractJerseyService] Enabling CORS for HTTP endpoint 2016-08-04T14:13:40.953-04:00 INFO [NetworkListener] Started listener bound to [x.x.x.146:9000] 2016-08-04T14:13:40.954-04:00 INFO [HttpServer] [HttpServer] Started. 2016-08-04T14:13:40.955-04:00 INFO [WebInterfaceService] Started Web Interface at <http://x.x.x.146:9000/> 2016-08-04T14:13:41.212-04:00 WARN [discovery] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] waited for 3s and no initial state was set by the discovery 2016-08-04T14:13:41.213-04:00 INFO [node] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] started 2016-08-04T14:13:42.123-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [0] timed out after [3765ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:13:44.430-04:00 INFO [NetworkListener] Started listener bound to [x.x.x.146:12900] 2016-08-04T14:13:44.433-04:00 INFO [HttpServer] [HttpServer-1] Started. 2016-08-04T14:13:44.434-04:00 INFO [RestApiService] Started REST API at <http://x.x.x.146:12900/> 2016-08-04T14:13:46.219-04:00 WARN [IndexerSetupService] Could not connect to Elasticsearch 2016-08-04T14:13:46.219-04:00 INFO [IndexerSetupService] If you're using multicast, check that it is working in your network and that Elasticsearch is accessible. Also check that the cluster name setting is correct. 2016-08-04T14:13:46.220-04:00 INFO [IndexerSetupService] See http://docs.graylog.org/en/2.0/pages/configuration/elasticsearch.html for details. 2016-08-04T14:13:46.222-04:00 INFO [ServiceManagerListener] Services are healthy 2016-08-04T14:13:46.224-04:00 INFO [ServerBootstrap] Services started, startup times in ms: {OutputSetupService [RUNNING]=31, BufferSynchronizerService [RUNNING]=31, JournalReader [RUNNING]=33, InputSetupService [RUNNING]=35, MetricsReporterService [RUNNING]=44, KafkaJournal [RUNNING]=45, PeriodicalsService [RUNNING]=211, WebInterfaceService [RUNNING]=3149, RestApiService [RUNNING]=6636, IndexerSetupService [RUNNING]=8416} 2016-08-04T14:13:46.230-04:00 INFO [ServerBootstrap] Graylog server up and running. 2016-08-04T14:13:46.237-04:00 INFO [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE] 2016-08-04T14:13:46.674-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [3] timed out after [3751ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:13:51.057-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [6] timed out after [3755ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:13:52.821-04:00 INFO [IndexRangesCleanupPeriodical] Skipping index range cleanup because the Elasticsearch cluster is unreachable or unhealthy 2016-08-04T14:14:00.085-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [12] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:14:04.587-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [15] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:14:09.089-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [18] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:14:13.591-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [21] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:14:18.093-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [24] timed out after [3751ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101] 2016-08-04T14:14:25.599-04:00 WARN [unicast] [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}] org.elasticsearch.transport.ReceiveTimeoutTransportException: [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [30] timed out after [3750ms] at org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679) [graylog.jar:?] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [?:1.8.0_101] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [?:1.8.0_101] at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101]
is_master = true node_id_file = /etc/graylog/server/node-id password_secret = Secret! root_password_sha2 = Secret! plugin_dir = /usr/share/graylog-server/plugin rest_listen_uri = http://x.x.x.146:12900/ web_enable = true web_listen_uri = http://x.x.x.146:9000/ web_endpoint_uri = http://x.x.x.146:9000/ rotation_strategy = count elasticsearch_max_docs_per_index = 20000000 rotation_strategy = count elasticsearch_max_docs_per_index = 20000000 elasticsearch_max_number_of_indices = 20 retention_strategy = delete elasticsearch_max_number_of_indices = 20 retention_strategy = delete elasticsearch_shards = 4 elasticsearch_replicas = 0 elasticsearch_index_prefix = graylog allow_leading_wildcard_searches = false allow_highlighting = false elasticsearch_cluster_name = graylog elasticsearch_discovery_zen_ping_unicast_hosts = x.x.x.149 elasticsearch_transport_tcp_port = 9200 elasticsearch_http_enabled = false elasticsearch_discovery_zen_ping_multicast_enabled = true elasticsearch_analyzer = standard output_batch_size = 500 output_flush_interval = 1 output_fault_count_threshold = 5 output_fault_penalty_seconds = 30 processbuffer_processors = 5 outputbuffer_processors = 3 processor_wait_strategy = blocking ring_size = 65536 inputbuffer_ring_size = 65536 inputbuffer_processors = 2 inputbuffer_wait_strategy = blocking message_journal_enabled = true message_journal_dir = /var/lib/graylog-server/journal lb_recognition_period_seconds = 3 mongodb_uri = mongodb://localhost/graylog mongodb_max_connections = 1000 mongodb_threads_allowed_to_block_multiplier = 5 content_packs_dir = /usr/share/graylog-server/contentpacks content_packs_auto_load = grok-patterns.json
ES Config
Description: Binary data