search

Graylog2 / graylog2-server

Free and open log management
https://www.graylog.org
Other
7.43k stars 1.07k forks source link

Graylog Docker PlainText Tcp/udp input is not working #5760

Closed gokhanabatay closed 5 years ago

gokhanabatay commented 5 years ago

I installed Docker Graylog on my development environment with guidance, but i cannot send echo message to graylog. All counters on graylog is zero and there is no log. I changed time to absolute and tried past and future dates.

Expected Behavior

I need to see echo message on graylog.

Current Behavior

There is no log or error on Graylog.

Steps to Reproduce (for bugs)

  1. docker-compose up below yml file

  2. Add Plain text tcp and udp inputs on Graylog with defaults image image

  3. Send echo message

    PS C:\Users\gokhan.abatay> echo "Test message" | ncat -v -u -w 10 127.0.0.1 5555
Ncat: Version 7.70 ( https://nmap.org/ncat )
Ncat: Connected to 127.0.0.1:5555.
Ncat: 14 bytes sent, 0 bytes received in 0.43 seconds.
PS C:\Users\gokhan.abatay> echo "Test message" | ncat -v -u -w 10 127.0.0.1 5555/udp
Ncat: Version 7.70 ( https://nmap.org/ncat )
Ncat: Connected to 127.0.0.1:5555.
Ncat: 14 bytes sent, 0 bytes received in 0.41 seconds.

    Your Environment

yml file

version: '2'
services:
  # MongoDB: https://hub.docker.com/_/mongo/
  mongodb:
    image: mongo:3
  # Elasticsearch: https://www.elastic.co/guide/en/elasticsearch/reference/6.6/docker.html
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.1
    environment:
      - http.host=0.0.0.0
      - transport.host=localhost
      - network.host=0.0.0.0
      - "ES_JAVA_OPTS=-Xms512m -Xmx512m"
    ulimits:
      memlock:
        soft: -1
        hard: -1
    mem_limit: 1g
  # Graylog: https://hub.docker.com/r/graylog/graylog/
  graylog:
    image: graylog/graylog:3.0
    volumes:
      - graylog_journal:/usr/share/graylog/data/journal
    environment:
      # CHANGE ME (must be at least 16 characters)!
      - GRAYLOG_PASSWORD_SECRET=somepasswordpepper
      # Password: admin
      - GRAYLOG_ROOT_PASSWORD_SHA2=8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918
      - GRAYLOG_HTTP_EXTERNAL_URI=http://127.0.0.1:9000/
    links:
      - mongodb:mongo
      - elasticsearch
    depends_on:
      - mongodb
      - elasticsearch
    ports:
       # Graylog web interface and REST API
      - 9000:9000
      # Syslog TCP
      - 1514:1514
      # Syslog UDP
      - 1514:1514/udp
      # GELF TCP
      - 12201:12201
      # GELF UDP
      - 12201:12201/udp
      # PLAINTEXT TCP
      - 5555:5555
      # PLAINTEXT UDP
      - 5555:5555/udp
# Volumes for persisting data, see https://docs.docker.com/engine/admin/volumes/volumes/
volumes:
  mongo_data:
    driver: local
  es_data:
    driver: local
  graylog_journal:
    driver: local

Logs

elasticsearch_1  | [2019-03-11T20:04:45,259][INFO ][o.e.n.Node               ] [A8E6u25] stopping ...
elasticsearch_1  | [2019-03-11T20:04:45,402][INFO ][o.e.n.Node               ] [A8E6u25] stopped
elasticsearch_1  | [2019-03-11T20:04:45,403][INFO ][o.e.n.Node               ] [A8E6u25] closing ...
elasticsearch_1  | [2019-03-11T20:04:45,448][INFO ][o.e.n.Node               ] [A8E6u25] closed
elasticsearch_1  | OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
elasticsearch_1  | [2019-03-11T20:05:13,384][INFO ][o.e.e.NodeEnvironment    ] [A8E6u25] using [1] data paths, mounts [[/ (overlay)]], net usable_space [52.6gb], net total_space [58.4gb], types [overlay]
elasticsearch_1  | [2019-03-11T20:05:13,392][INFO ][o.e.e.NodeEnvironment    ] [A8E6u25] heap size [495.3mb], compressed ordinary object pointers [true]
elasticsearch_1  | [2019-03-11T20:05:13,442][INFO ][o.e.n.Node               ] [A8E6u25] node name derived from node ID [A8E6u25hT1m14tcLxPBwUg]; set [node.name] to override
elasticsearch_1  | [2019-03-11T20:05:13,443][INFO ][o.e.n.Node               ] [A8E6u25] version[6.6.1], pid[1], build[oss/tar/1fd8f69/2019-02-13T17:10:04.160291Z], OS[Linux/4.9.125-linuxkit/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/11.0.1/11.0.1+13]
elasticsearch_1  | [2019-03-11T20:05:13,444][INFO ][o.e.n.Node               ] [A8E6u25] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch-10433447035744278886, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Djava.locale.providers=COMPAT, -XX:UseAVX=2, -Des.cgroups.hierarchy.override=/, -Xms512m, -Xmx512m, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=oss, -Des.distribution.type=tar]
elasticsearch_1  | [2019-03-11T20:05:15,211][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [aggs-matrix-stats]
elasticsearch_1  | [2019-03-11T20:05:15,212][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [analysis-common]
elasticsearch_1  | [2019-03-11T20:05:15,212][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [ingest-common]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-expression]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-mustache]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [lang-painless]
elasticsearch_1  | [2019-03-11T20:05:15,213][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [mapper-extras]
elasticsearch_1  | [2019-03-11T20:05:15,215][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [parent-join]
elasticsearch_1  | [2019-03-11T20:05:15,215][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [percolator]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [rank-eval]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [reindex]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [repository-url]
elasticsearch_1  | [2019-03-11T20:05:15,216][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [transport-netty4]
elasticsearch_1  | [2019-03-11T20:05:15,217][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded module [tribe]
elasticsearch_1  | [2019-03-11T20:05:15,218][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded plugin [ingest-geoip]
elasticsearch_1  | [2019-03-11T20:05:15,219][INFO ][o.e.p.PluginsService     ] [A8E6u25] loaded plugin [ingest-user-agent]
elasticsearch_1  | [2019-03-11T20:05:26,347][INFO ][o.e.d.DiscoveryModule    ] [A8E6u25] using discovery type [zen] and host providers [settings]
elasticsearch_1  | [2019-03-11T20:05:28,709][INFO ][o.e.n.Node               ] [A8E6u25] initialized
elasticsearch_1  | [2019-03-11T20:05:28,710][INFO ][o.e.n.Node               ] [A8E6u25] starting ...
elasticsearch_1  | [2019-03-11T20:05:29,359][INFO ][o.e.t.TransportService   ] [A8E6u25] publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}
graylog_1        | 2019-03-11 20:05:31,581 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: AWS plugins 3.0.0 [org.graylog.aws.AWSPlugin]
graylog_1        | 2019-03-11 20:05:31,586 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Collector 3.0.0 [org.graylog.plugins.collector.CollectorPlugin]
graylog_1        | 2019-03-11 20:05:31,588 INFO : org.graylog2.bootstrap.CmdLineTool - Loaded plugin: Threat Intelligence Plugin 3.0.0 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
graylog_1        | 2019-03-11 20:05:32,271 INFO : org.graylog2.bootstrap.CmdLineTool - Running with JVM arguments: -XX:+UnlockExperimentalVMOptions -XX:+UseCGroupMemoryLimitForHeap -XX:NewRatio=1 -XX:MaxMetaspaceSize=256m -XX:+ResizeTLAB -XX:+UseConcMarkSweepGC -XX:+CMSConcurrentMTEnabled -XX:+CMSClassUnloadingEnabled -XX:+UseParNewGC -XX:-OmitStackTraceInFastThrow -Dlog4j.configurationFile=/usr/share/graylog/data/config/log4j2.xml -Djava.library.path=/usr/share/graylog/lib/sigar/ -Dgraylog2.installation_source=docker
elasticsearch_1  | [2019-03-11T20:05:32,608][INFO ][o.e.c.s.MasterService    ] [A8E6u25] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300}
elasticsearch_1  | [2019-03-11T20:05:32,618][INFO ][o.e.c.s.ClusterApplierService] [A8E6u25] new_master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300}, reason: apply cluster state (from master [master {A8E6u25}{A8E6u25hT1m14tcLxPBwUg}{Lg_5MfBoSuGvUj7bng9VlA}{localhost}{127.0.0.1:9300} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
elasticsearch_1  | [2019-03-11T20:05:32,790][INFO ][o.e.h.n.Netty4HttpServerTransport] [A8E6u25] publish_address {172.18.0.2:9200}, bound_addresses {0.0.0.0:9200}
elasticsearch_1  | [2019-03-11T20:05:32,790][INFO ][o.e.n.Node               ] [A8E6u25] started
graylog_1        | 2019-03-11 20:05:32,847 INFO : org.hibernate.validator.internal.util.Version - HV000001: Hibernate Validator 5.1.3.Final
elasticsearch_1  | [2019-03-11T20:05:33,527][INFO ][o.e.g.GatewayService     ] [A8E6u25] recovered [1] indices into cluster_state
elasticsearch_1  | [2019-03-11T20:05:34,600][INFO ][o.e.c.r.a.AllocationService] [A8E6u25] Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[graylog_0][0]] ...]).
graylog_1        | 2019-03-11 20:05:37,982 INFO : org.graylog2.shared.buffers.InputBufferImpl - Message journal is enabled.
graylog_1        | 2019-03-11 20:05:38,027 INFO : org.graylog2.plugin.system.NodeId - Node ID: 1baf378b-eefd-47dc-a7c8-3285a9d42cb3
graylog_1        | 2019-03-11 20:05:38,546 INFO : kafka.log.LogManager - Loading logs.
graylog_1        | 2019-03-11 20:05:38,609 WARN : kafka.log.Log - Found a corrupted index file, /usr/share/graylog/data/journal/messagejournal-0/00000000000000000000.index, deleting and rebuilding index...
graylog_1        | 2019-03-11 20:05:38,667 INFO : kafka.log.LogManager - Logs loading complete.
graylog_1        | 2019-03-11 20:05:38,668 INFO : org.graylog2.shared.journal.KafkaJournal - Initialized Kafka based journal at /usr/share/graylog/data/journal
graylog_1        | 2019-03-11 20:05:38,711 INFO : org.graylog2.shared.buffers.InputBufferImpl - Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
graylog_1        | 2019-03-11 20:05:38,757 INFO : org.mongodb.driver.cluster - Cluster created with settings {hosts=[mongo:27017], mode=SINGLE, requiredClusterType=UNKNOWN, serverSelectionTimeout='30000 ms', maxWaitQueueSize=500}
mongodb_1        | 2019-03-11T20:05:38.930+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55740 #1 (1 connection now open)
graylog_1        | 2019-03-11 20:05:38,936 INFO : org.mongodb.driver.cluster - Cluster description not yet available. Waiting for 30000 ms before timing out
mongodb_1        | 2019-03-11T20:05:38.991+0000 I NETWORK  [conn1] received client metadata from 172.18.0.4:55740 conn1: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:39,029 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:1, serverValue:1}] to mongo:27017
graylog_1        | 2019-03-11 20:05:39,039 INFO : org.mongodb.driver.cluster - Monitor thread successfully connected to server with description ServerDescription{address=mongo:27017, type=STANDALONE, state=CONNECTED, ok=true, version=ServerVersion{versionList=[3, 6, 11]}, minWireVersion=0, maxWireVersion=6, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=4638700}
mongodb_1        | 2019-03-11T20:05:39.061+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55742 #2 (2 connections now open)
mongodb_1        | 2019-03-11T20:05:39.063+0000 I NETWORK  [conn2] received client metadata from 172.18.0.4:55742 conn2: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:39,076 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:2, serverValue:2}] to mongo:27017
graylog_1        | 2019-03-11 20:05:39,752 INFO : io.searchbox.client.AbstractJestClient - Setting server pool to a list of 1 servers: [http://elasticsearch:9200]
graylog_1        | 2019-03-11 20:05:39,754 INFO : io.searchbox.client.JestClientFactory - Using multi thread/connection supporting pooling connection manager
graylog_1        | 2019-03-11 20:05:39,855 INFO : io.searchbox.client.JestClientFactory - Using custom ObjectMapper instance
graylog_1        | 2019-03-11 20:05:39,856 INFO : io.searchbox.client.JestClientFactory - Node Discovery disabled...
graylog_1        | 2019-03-11 20:05:39,856 INFO : io.searchbox.client.JestClientFactory - Idle connection reaping disabled...
graylog_1        | 2019-03-11 20:05:40,077 INFO : org.graylog2.shared.buffers.ProcessBuffer - Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
graylog_1        | 2019-03-11 20:05:40,406 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,434 INFO : org.graylog2.buffers.OutputBuffer - Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
mongodb_1        | 2019-03-11T20:05:40.444+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55752 #3 (3 connections now open)
mongodb_1        | 2019-03-11T20:05:40.446+0000 I NETWORK  [conn3] received client metadata from 172.18.0.4:55752 conn3: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:40,449 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:3, serverValue:3}] to mongo:27017
graylog_1        | 2019-03-11 20:05:40,482 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,521 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,555 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:40,624 WARN : org.graylog.plugins.map.geoip.GeoIpResolverEngine - GeoIP database file does not exist: /etc/graylog/server/GeoLite2-City.mmdb
graylog_1        | 2019-03-11 20:05:41,377 INFO : org.graylog2.bootstrap.ServerBootstrap - Graylog server 3.0.0+db6cf59 starting up
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - JRE: Oracle Corporation 1.8.0_181 on Linux 4.9.125-linuxkit
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - Deployment: docker
graylog_1        | 2019-03-11 20:05:41,378 INFO : org.graylog2.bootstrap.ServerBootstrap - OS: Debian GNU/Linux 9 (stretch) (debian)
graylog_1        | 2019-03-11 20:05:41,379 INFO : org.graylog2.bootstrap.ServerBootstrap - Arch: amd64
graylog_1        | 2019-03-11 20:05:41,445 INFO : org.graylog2.shared.initializers.PeriodicalsService - Starting 27 periodicals ...
graylog_1        | 2019-03-11 20:05:41,445 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,464 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,464 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.AlertScannerThread] periodical in [10s], polling every [60s].
graylog_1        | 2019-03-11 20:05:41,466 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,472 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
graylog_1        | 2019-03-11 20:05:41,484 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,485 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
graylog_1        | 2019-03-11 20:05:41,486 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
graylog_1        | 2019-03-11 20:05:41,487 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
graylog_1        | 2019-03-11 20:05:41,488 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,489 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
graylog_1        | 2019-03-11 20:05:41,491 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,492 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,493 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ClusterIdGeneratorPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration - Legacy default stream has no connections, no migration needed.
graylog_1        | 2019-03-11 20:05:41,498 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRangesMigrationPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,499 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
mongodb_1        | 2019-03-11T20:05:41.519+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55762 #4 (4 connections now open)
mongodb_1        | 2019-03-11T20:05:41.523+0000 I NETWORK  [conn4] received client metadata from 172.18.0.4:55762 conn4: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.525+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55764 #5 (5 connections now open)
mongodb_1        | 2019-03-11T20:05:41.527+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55766 #6 (6 connections now open)
mongodb_1        | 2019-03-11T20:05:41.528+0000 I NETWORK  [conn6] received client metadata from 172.18.0.4:55766 conn6: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.529+0000 I NETWORK  [conn5] received client metadata from 172.18.0.4:55764 conn5: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:41,530 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:4, serverValue:4}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,531 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:6, serverValue:6}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,534 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:5, serverValue:5}] to mongo:27017
mongodb_1        | 2019-03-11T20:05:41.537+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55768 #7 (7 connections now open)
mongodb_1        | 2019-03-11T20:05:41.544+0000 I NETWORK  [conn7] received client metadata from 172.18.0.4:55768 conn7: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.547+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55770 #8 (8 connections now open)
mongodb_1        | 2019-03-11T20:05:41.550+0000 I NETWORK  [conn8] received client metadata from 172.18.0.4:55770 conn8: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
mongodb_1        | 2019-03-11T20:05:41.558+0000 I NETWORK  [listener] connection accepted from 172.18.0.4:55772 #9 (9 connections now open)
graylog_1        | 2019-03-11 20:05:41,559 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:8, serverValue:8}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,560 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:7, serverValue:7}] to mongo:27017
mongodb_1        | 2019-03-11T20:05:41.564+0000 I NETWORK  [conn9] received client metadata from 172.18.0.4:55772 conn9: { driver: { name: "mongo-java-driver", version: "unknown" }, os: { type: "Linux", name: "Linux", architecture: "amd64", version: "4.9.125-linuxkit" }, platform: "Java/Oracle Corporation/1.8.0_181-8u181-b13-2~deb9u1-b13" }
graylog_1        | 2019-03-11 20:05:41,567 INFO : org.mongodb.driver.connection - Opened connection [connectionId{localValue:9, serverValue:9}] to mongo:27017
graylog_1        | 2019-03-11 20:05:41,580 INFO : org.graylog2.shared.initializers.PeriodicalsService - Not starting [org.graylog2.periodical.UserPermissionMigrationPeriodical] periodical. Not configured to run on this node.
graylog_1        | 2019-03-11 20:05:41,580 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.AlarmCallbacksMigrationPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,601 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.ConfigurationManagementPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,625 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.LdapGroupMappingMigration] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,628 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.IndexFailuresPeriodical] periodical, running forever.
graylog_1        | 2019-03-11 20:05:41,649 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
graylog_1        | 2019-03-11 20:05:41,681 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [3600s].
graylog_1        | 2019-03-11 20:05:41,685 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
graylog_1        | 2019-03-11 20:05:41,687 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
graylog_1        | 2019-03-11 20:05:41,689 INFO : org.graylog2.periodical.Periodicals - Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
graylog_1        | 2019-03-11 20:05:42,848 INFO : org.graylog2.shared.initializers.JerseyService - Enabling CORS for HTTP endpoint
graylog_1        | 2019-03-11 20:06:16,750 INFO : org.glassfish.grizzly.http.server.NetworkListener - Started listener bound to [0.0.0.0:9000]
graylog_1        | 2019-03-11 20:06:16,753 INFO : org.glassfish.grizzly.http.server.HttpServer - [HttpServer] Started.
graylog_1        | 2019-03-11 20:06:16,753 INFO : org.graylog2.shared.initializers.JerseyService - Started REST API at <0.0.0.0:9000>
graylog_1        | 2019-03-11 20:06:16,755 INFO : org.graylog2.shared.initializers.ServiceManagerListener - Services are healthy
graylog_1        | 2019-03-11 20:06:16,758 INFO : org.graylog2.bootstrap.ServerBootstrap - Services started, startup times in ms: {OutputSetupService [RUNNING]=37, BufferSynchronizerService [RUNNING]=38, KafkaJournal [RUNNING]=79, InputSetupService [RUNNING]=132, ConfigurationEtagService [RUNNING]=194, EtagService [RUNNING]=195, JournalReader [RUNNING]=196, LookupTableService [RUNNING]=197, StreamCacheService [RUNNING]=197, PeriodicalsService [RUNNING]=318, JerseyService [RUNNING]=35336}
graylog_1        | 2019-03-11 20:06:16,759 INFO : org.graylog2.shared.initializers.InputSetupService - Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
graylog_1        | 2019-03-11 20:06:16,805 INFO : org.graylog2.bootstrap.ServerBootstrap - Graylog server up and running.
graylog_1        | 2019-03-11 20:06:16,888 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext TCP/5c86668e2ab79c000e85c869] is now STARTING
graylog_1        | 2019-03-11 20:06:16,903 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext UDP/5c86696a2ab79c000e85cb8e] is now STARTING
graylog_1        | 2019-03-11 20:06:16,907 INFO : org.graylog2.inputs.InputStateListener - Input [GELF TCP/5c866c2d2ab79c000e85ce94] is now STARTING
graylog_1        | 2019-03-11 20:06:16,910 INFO : org.graylog2.inputs.InputStateListener - Input [Syslog UDP/5c86ae592ab79c000dcd6266] is now STARTING
graylog_1        | 2019-03-11 20:06:17,027 INFO : org.graylog2.inputs.InputStateListener - Input [GELF TCP/5c866c2d2ab79c000e85ce94] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,034 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext TCP/5c86668e2ab79c000e85c869] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,043 INFO : org.graylog2.inputs.InputStateListener - Input [Syslog UDP/5c86ae592ab79c000dcd6266] is now RUNNING
graylog_1        | 2019-03-11 20:06:17,052 INFO : org.graylog2.inputs.InputStateListener - Input [Raw/Plaintext UDP/5c86696a2ab79c000e85cb8e] is now RUNNING
elasticsearch_1  | [2019-03-11T20:06:55,340][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:55,343][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:55,863][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:55,865][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:56,363][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:56,364][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:56,477][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:56,479][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:57,316][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:57,318][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:57,547][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:57,551][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:58,331][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:58,332][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:58,398][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:58,399][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:59,341][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:59,342][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:59,404][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:06:59,406][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:00,320][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:00,321][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:00,437][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:00,438][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:01,339][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:01,341][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:01,398][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:01,401][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:02,312][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:02,313][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:02,375][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:02,376][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:03,340][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:03,340][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:03,408][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:03,410][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:04,316][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:04,318][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:04,367][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:04,370][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:05,321][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:05,323][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:05,541][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:05,542][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:06,320][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:06,322][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:06,365][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:06,366][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:07,318][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:07,320][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:07,389][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:07,390][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:08,324][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:08,325][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:08,387][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:08,391][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:09,380][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:09,383][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:09,425][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:09,426][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:10,350][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:10,353][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:10,407][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:10,409][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:11,326][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:11,328][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:11,353][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:11,354][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:12,309][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:12,310][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:12,355][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:12,357][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:13,327][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:13,328][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:13,391][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:13,392][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:14,319][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:14,320][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:14,369][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:14,370][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:15,329][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:15,330][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:15,380][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:15,382][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:16,315][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:16,316][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:16,376][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:16,378][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:17,385][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:17,386][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:17,454][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:17,455][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:18,323][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:18,326][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:18,388][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:18,391][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:19,319][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:19,321][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:19,370][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:19,372][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:20,313][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:20,316][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:20,361][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:20,362][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:21,338][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:21,339][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:21,390][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:21,390][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:22,316][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:22,317][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:22,364][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:22,365][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:23,348][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:23,349][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:23,404][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:23,405][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:24,308][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:24,311][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:24,347][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:24,347][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:25,349][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:25,353][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:25,416][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:25,416][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:26,365][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:26,380][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:26,439][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:26,439][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:27,348][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:27,354][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:27,431][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:27,436][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:28,331][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:28,338][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:28,409][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
elasticsearch_1  | [2019-03-11T20:07:28,411][WARN ][o.e.d.c.ParseField       ] [A8E6u25] Deprecated field [disable_coord] used, replaced by [disable_coord has been removed]
jalogisch commented 5 years ago

The IP you have configured for teh Input in the Graylog UI is from the view of the Docker Container, not the Host. That means your input is listening to the localhost of inside of the container. Change that to a global input that is listening on all devises and it will work.

We are using GitHub issues for tracking bugs in Graylog itself, but this doesn't look like one. Please post this issue to our discussion forum or join the #graylog channel on freenode IRC.

Thank you!