server.log

2023-02-11T15:36:23.899Z ERROR [ServerRuntime$Responder] An I/O error has occurred while writing a response message entity to the container output stream.
org.glassfish.jersey.server.internal.process.MappableException: java.io.IOException: Connection is closed
	at org.glassfish.jersey.server.internal.MappableExceptionWrapperInterceptor.aroundWriteTo(MappableExceptionWrapperInterceptor.java:67) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor.proceed(WriterInterceptorExecutor.java:139) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.MessageBodyFactory.writeTo(MessageBodyFactory.java:1116) ~[graylog.jar:?]
	at org.glassfish.jersey.server.ServerRuntime$Responder.writeResponse(ServerRuntime.java:642) [graylog.jar:?]
	at org.glassfish.jersey.server.ServerRuntime$Responder.processResponse(ServerRuntime.java:373) [graylog.jar:?]
	at org.glassfish.jersey.server.ServerRuntime$Responder.process(ServerRuntime.java:363) [graylog.jar:?]
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:258) [graylog.jar:?]
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248) [graylog.jar:?]
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244) [graylog.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292) [graylog.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274) [graylog.jar:?]
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244) [graylog.jar:?]
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265) [graylog.jar:?]
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234) [graylog.jar:?]
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684) [graylog.jar:?]
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356) [graylog.jar:?]
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200) [graylog.jar:?]
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: java.io.IOException: Connection is closed
	at org.glassfish.grizzly.nio.NIOConnection.assertOpen(NIOConnection.java:441) ~[graylog.jar:?]
	at org.glassfish.grizzly.http.io.OutputBuffer.write(OutputBuffer.java:663) ~[graylog.jar:?]
	at org.glassfish.grizzly.http.server.NIOOutputStreamImpl.write(NIOOutputStreamImpl.java:59) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.CommittingOutputStream.write(CommittingOutputStream.java:200) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$UnCloseableOutputStream.write(WriterInterceptorExecutor.java:276) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._flushBuffer(UTF8JsonGenerator.java:2171) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._writeStringSegment2(UTF8JsonGenerator.java:1485) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._writeStringSegment(UTF8JsonGenerator.java:1432) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._writeStringSegments(UTF8JsonGenerator.java:1315) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator.writeString(UTF8JsonGenerator.java:511) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.StringSerializer.serialize(StringSerializer.java:41) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serializeContents(IndexedListSerializer.java:119) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serialize(IndexedListSerializer.java:79) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serialize(IndexedListSerializer.java:18) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider._serialize(DefaultSerializerProvider.java:480) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider.serializeValue(DefaultSerializerProvider.java:319) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ObjectWriter$Prefetch.serialize(ObjectWriter.java:1518) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ObjectWriter.writeValue(ObjectWriter.java:1007) ~[graylog.jar:?]
	at com.fasterxml.jackson.jaxrs.base.ProviderBase.writeTo(ProviderBase.java:617) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$TerminalWriterInterceptor.invokeWriteTo(WriterInterceptorExecutor.java:242) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$TerminalWriterInterceptor.aroundWriteTo(WriterInterceptorExecutor.java:227) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor.proceed(WriterInterceptorExecutor.java:139) ~[graylog.jar:?]
	at org.glassfish.jersey.server.internal.JsonWithPaddingInterceptor.aroundWriteTo(JsonWithPaddingInterceptor.java:85) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor.proceed(WriterInterceptorExecutor.java:139) ~[graylog.jar:?]
	at org.glassfish.jersey.server.internal.MappableExceptionWrapperInterceptor.aroundWriteTo(MappableExceptionWrapperInterceptor.java:61) ~[graylog.jar:?]
	... 20 more
Caused by: java.io.IOException: Broken pipe
	at sun.nio.ch.FileDispatcherImpl.write0(Native Method) ~[?:?]
	at sun.nio.ch.SocketDispatcher.write(Unknown Source) ~[?:?]
	at sun.nio.ch.IOUtil.writeFromNativeBuffer(Unknown Source) ~[?:?]
	at sun.nio.ch.IOUtil.write(Unknown Source) ~[?:?]
	at sun.nio.ch.IOUtil.write(Unknown Source) ~[?:?]
	at sun.nio.ch.SocketChannelImpl.write(Unknown Source) ~[?:?]
	at org.glassfish.grizzly.nio.transport.TCPNIOUtils.flushByteBuffer(TCPNIOUtils.java:125) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.transport.TCPNIOUtils.writeCompositeBuffer(TCPNIOUtils.java:64) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.transport.TCPNIOAsyncQueueWriter.write0(TCPNIOAsyncQueueWriter.java:105) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.transport.TCPNIOAsyncQueueWriter.write0(TCPNIOAsyncQueueWriter.java:82) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.AbstractNIOAsyncQueueWriter.write(AbstractNIOAsyncQueueWriter.java:236) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.AbstractNIOAsyncQueueWriter.write(AbstractNIOAsyncQueueWriter.java:145) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.AbstractNIOAsyncQueueWriter.write(AbstractNIOAsyncQueueWriter.java:47) ~[graylog.jar:?]
	at org.glassfish.grizzly.nio.transport.TCPNIOTransportFilter.handleWrite(TCPNIOTransportFilter.java:102) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.TransportFilter.handleWrite(TransportFilter.java:167) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.ExecutorResolver$8.execute(ExecutorResolver.java:87) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:260) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:177) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:109) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:88) ~[graylog.jar:?]
	at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:53) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.FilterChainContext.write(FilterChainContext.java:866) ~[graylog.jar:?]
	at org.glassfish.grizzly.filterchain.FilterChainContext.write(FilterChainContext.java:834) ~[graylog.jar:?]
	at org.glassfish.grizzly.http.io.OutputBuffer.flushBuffer(OutputBuffer.java:1068) ~[graylog.jar:?]
	at org.glassfish.grizzly.http.io.OutputBuffer.write(OutputBuffer.java:695) ~[graylog.jar:?]
	at org.glassfish.grizzly.http.server.NIOOutputStreamImpl.write(NIOOutputStreamImpl.java:59) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.CommittingOutputStream.write(CommittingOutputStream.java:200) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$UnCloseableOutputStream.write(WriterInterceptorExecutor.java:276) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._flushBuffer(UTF8JsonGenerator.java:2171) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._writeStringSegment2(UTF8JsonGenerator.java:1485) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator._writeStringSegment(UTF8JsonGenerator.java:1432) ~[graylog.jar:?]
	at com.fasterxml.jackson.core.json.UTF8JsonGenerator.writeString(UTF8JsonGenerator.java:518) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.StringSerializer.serialize(StringSerializer.java:41) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serializeContents(IndexedListSerializer.java:119) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serialize(IndexedListSerializer.java:79) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.impl.IndexedListSerializer.serialize(IndexedListSerializer.java:18) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeFields(MapSerializer.java:808) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serializeWithoutTypeInfo(MapSerializer.java:764) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:720) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.MapSerializer.serialize(MapSerializer.java:35) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanPropertyWriter.serializeAsField(BeanPropertyWriter.java:728) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.std.BeanSerializerBase.serializeFields(BeanSerializerBase.java:774) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.BeanSerializer.serialize(BeanSerializer.java:178) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider._serialize(DefaultSerializerProvider.java:480) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ser.DefaultSerializerProvider.serializeValue(DefaultSerializerProvider.java:319) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ObjectWriter$Prefetch.serialize(ObjectWriter.java:1518) ~[graylog.jar:?]
	at com.fasterxml.jackson.databind.ObjectWriter.writeValue(ObjectWriter.java:1007) ~[graylog.jar:?]
	at com.fasterxml.jackson.jaxrs.base.ProviderBase.writeTo(ProviderBase.java:617) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$TerminalWriterInterceptor.invokeWriteTo(WriterInterceptorExecutor.java:242) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor$TerminalWriterInterceptor.aroundWriteTo(WriterInterceptorExecutor.java:227) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor.proceed(WriterInterceptorExecutor.java:139) ~[graylog.jar:?]
	at org.glassfish.jersey.server.internal.JsonWithPaddingInterceptor.aroundWriteTo(JsonWithPaddingInterceptor.java:85) ~[graylog.jar:?]
	at org.glassfish.jersey.message.internal.WriterInterceptorExecutor.proceed(WriterInterceptorExecutor.java:139) ~[graylog.jar:?]
	at org.glassfish.jersey.server.internal.MappableExceptionWrapperInterceptor.aroundWriteTo(MappableExceptionWrapperInterceptor.java:61) ~[graylog.jar:?]
	... 20 more
2023-02-12T19:27:14.093Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-12T19:27:14.106Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-12T19:27:14.106Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-12T19:27:27.308Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T19:27:27.309Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0x7554c509, L:/127.0.0.1:12201]) should be >= 1048576 but is 425984.
2023-02-12T19:27:27.309Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T19:29:26.418Z INFO  [Server] SIGNAL received. Shutting down.
2023-02-12T19:29:26.419Z INFO  [GracefulShutdown] Graceful shutdown initiated.
2023-02-12T19:29:26.419Z INFO  [GracefulShutdown] Node status: [Override lb:DEAD [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2023-02-12T19:29:29.422Z INFO  [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> [Syslog TCP].
2023-02-12T19:29:29.427Z INFO  [InputSetupService] Input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> closed. Took [5ms]
2023-02-12T19:29:29.436Z INFO  [Buffers] Waiting until [INPUT, PROCESS, OUTPUT] buffers are empty.
2023-02-12T19:29:29.437Z INFO  [Buffers] All buffers are empty. Continuing.
2023-02-12T19:29:29.437Z INFO  [GracefulShutdownService] Running graceful shutdown for <1> shutdown hooks
2023-02-12T19:29:29.437Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexBlockCheck].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2023-02-12T19:29:29.438Z INFO  [GracefulShutdownService] Initiate shutdown for <JobWorkerPool>
2023-02-12T19:29:29.438Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2023-02-12T19:29:29.438Z INFO  [JobSchedulerService] Shutdown of job heartbeat executor
2023-02-12T19:29:29.438Z INFO  [GracefulShutdownService] Finished shutdown for <JobWorkerPool>, took 0 ms
2023-02-12T19:29:29.438Z INFO  [GracefulShutdown] Goodbye.
2023-02-12T19:29:29.438Z INFO  [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T19:29:29.438Z INFO  [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2023-02-12T19:29:29.438Z INFO  [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2023-02-12T19:29:29.438Z INFO  [LocalKafkaMessageQueueReader] Stopping.
2023-02-12T19:29:29.439Z INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2023-02-12T19:29:29.439Z INFO  [LogManager] Shutting down.
2023-02-12T19:29:29.440Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@6081d30a] STOPPING, was RUNNING
2023-02-12T19:29:29.440Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@6081d30a] TERMINATED, was STOPPING
2023-02-12T19:29:29.440Z INFO  [LookupTableService] Cache whois-cache/63e02b9fef6a3c160dddff95 [@5f4a3e1] STOPPING, was RUNNING
2023-02-12T19:29:29.441Z INFO  [LookupDataAdapterRefreshService] Stopping 1 jobs
2023-02-12T19:29:29.441Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3ba40875] STOPPING, was RUNNING
2023-02-12T19:29:29.441Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3ba40875] TERMINATED, was STOPPING
2023-02-12T19:29:29.441Z INFO  [LookupTableService] Cache whois-cache/63e02b9fef6a3c160dddff95 [@5f4a3e1] TERMINATED, was STOPPING
2023-02-12T19:29:29.448Z INFO  [LogManager] Shutdown complete.
2023-02-12T19:29:29.450Z WARN  [Errors] The following warnings have been detected: WARNING: Unknown HK2 failure detected:
MultiException stack 1 of 8
java.lang.IllegalStateException: Could not find an active context for org.glassfish.jersey.process.internal.RequestScoped
	at org.jvnet.hk2.internal.ServiceLocatorImpl._resolveContext(ServiceLocatorImpl.java:2212)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.access$000(ServiceLocatorImpl.java:106)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:166)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:162)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture$1.call(Cache.java:74)
	at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture.run(Cache.java:131)
	at org.glassfish.hk2.utilities.cache.Cache.compute(Cache.java:176)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.resolveContext(ServiceLocatorImpl.java:2225)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2080)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:93)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:67)
	at org.glassfish.jersey.inject.hk2.ContextInjectionResolverImpl.resolve(ContextInjectionResolverImpl.java:103)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:211)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 2 of 8
java.lang.IllegalStateException: While attempting to create a service for SystemDescriptor(
	implementation=org.glassfish.jersey.server.internal.process.SecurityContextInjectee
	contracts={javax.ws.rs.core.SecurityContext}
	scope=org.glassfish.jersey.process.internal.RequestScoped
	qualifiers={}
	descriptorType=CLASS
	descriptorVisibility=NORMAL
	metadata=
	rank=0
	loader=null
	proxiable=true
	proxyForSameScope=false
	analysisName=null
	id=47
	locatorId=0
	identityHashCode=2059328704
	reified=true) in scope org.glassfish.jersey.process.internal.RequestScoped an error occured while locating the context
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2086)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:93)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:67)
	at org.glassfish.jersey.inject.hk2.ContextInjectionResolverImpl.resolve(ContextInjectionResolverImpl.java:103)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:211)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 3 of 8
java.lang.IllegalStateException: Could not find an active context for org.glassfish.jersey.process.internal.RequestScoped
	at org.jvnet.hk2.internal.ServiceLocatorImpl._resolveContext(ServiceLocatorImpl.java:2212)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.access$000(ServiceLocatorImpl.java:106)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:166)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:162)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture$1.call(Cache.java:74)
	at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture.run(Cache.java:131)
	at org.glassfish.hk2.utilities.cache.Cache.compute(Cache.java:176)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.resolveContext(ServiceLocatorImpl.java:2220)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2080)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:93)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:67)
	at org.glassfish.jersey.inject.hk2.ContextInjectionResolverImpl.resolve(ContextInjectionResolverImpl.java:103)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:211)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 4 of 8
java.lang.IllegalStateException: While attempting to create a service for SystemDescriptor(
	implementation=org.glassfish.jersey.inject.hk2.SupplierFactoryBridge
	contracts={javax.ws.rs.container.ResourceInfo,javax.ws.rs.core.UriInfo,org.glassfish.jersey.server.ExtendedUriInfo}
	scope=org.glassfish.jersey.process.internal.RequestScoped
	qualifiers={}
	descriptorType=PROVIDE_METHOD
	descriptorVisibility=NORMAL
	metadata=
	rank=0
	loader=org.glassfish.hk2.utilities.binding.AbstractBinder$2@36cd1478
	proxiable=true
	proxyForSameScope=false
	analysisName=null
	id=46
	locatorId=0
	identityHashCode=1167112977
	reified=true) in scope org.glassfish.jersey.process.internal.RequestScoped an error occured while locating the context
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2086)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:93)
	at org.jvnet.hk2.internal.ServiceHandleImpl.getService(ServiceHandleImpl.java:67)
	at org.glassfish.jersey.inject.hk2.ContextInjectionResolverImpl.resolve(ContextInjectionResolverImpl.java:103)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:211)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 5 of 8
java.lang.IllegalStateException: Could not find an active context for org.glassfish.jersey.process.internal.RequestScoped
	at org.jvnet.hk2.internal.ServiceLocatorImpl._resolveContext(ServiceLocatorImpl.java:2212)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.access$000(ServiceLocatorImpl.java:106)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:166)
	at org.jvnet.hk2.internal.ServiceLocatorImpl$3.compute(ServiceLocatorImpl.java:162)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture$1.call(Cache.java:74)
	at java.base/java.util.concurrent.FutureTask.run(Unknown Source)
	at org.glassfish.hk2.utilities.cache.Cache$OriginThreadAwareFuture.run(Cache.java:131)
	at org.glassfish.hk2.utilities.cache.Cache.compute(Cache.java:176)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.resolveContext(ServiceLocatorImpl.java:2220)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2080)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.server.internal.inject.ValueParamProviderConfigurator.lambda$init$3(ValueParamProviderConfigurator.java:133)
	at org.glassfish.jersey.server.internal.inject.ParamInjectionResolver.resolve(ParamInjectionResolver.java:97)
	at org.glassfish.jersey.inject.hk2.InjectionResolverWrapper.resolve(InjectionResolverWrapper.java:62)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:218)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 6 of 8
java.lang.IllegalStateException: While attempting to create a service for SystemDescriptor(
	implementation=org.glassfish.jersey.server.internal.process.RequestProcessingContextReference
	contracts={org.glassfish.jersey.server.internal.process.RequestProcessingContextReference}
	scope=org.glassfish.jersey.process.internal.RequestScoped
	qualifiers={}
	descriptorType=CLASS
	descriptorVisibility=NORMAL
	metadata=
	rank=0
	loader=null
	proxiable=null
	proxyForSameScope=null
	analysisName=null
	id=34
	locatorId=0
	identityHashCode=1846137615
	reified=true) in scope org.glassfish.jersey.process.internal.RequestScoped an error occured while locating the context
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2086)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.server.internal.inject.ValueParamProviderConfigurator.lambda$init$3(ValueParamProviderConfigurator.java:133)
	at org.glassfish.jersey.server.internal.inject.ParamInjectionResolver.resolve(ParamInjectionResolver.java:97)
	at org.glassfish.jersey.inject.hk2.InjectionResolverWrapper.resolve(InjectionResolverWrapper.java:62)
	at org.jvnet.hk2.internal.ClazzCreator.resolve(ClazzCreator.java:188)
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:218)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 7 of 8
java.lang.IllegalArgumentException: While attempting to resolve the dependencies of org.graylog2.rest.resources.cluster.ClusterInputStatesResource errors were found
	at org.jvnet.hk2.internal.ClazzCreator.resolveAllDependencies(ClazzCreator.java:224)
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:334)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
MultiException stack 8 of 8
java.lang.IllegalStateException: Unable to perform operation: resolve on org.graylog2.rest.resources.cluster.ClusterInputStatesResource
	at org.jvnet.hk2.internal.ClazzCreator.create(ClazzCreator.java:363)
	at org.jvnet.hk2.internal.SystemDescriptor.create(SystemDescriptor.java:463)
	at org.glassfish.jersey.inject.hk2.RequestContext.findOrCreate(RequestContext.java:59)
	at org.jvnet.hk2.internal.Utilities.createService(Utilities.java:2102)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:758)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.internalGetService(ServiceLocatorImpl.java:721)
	at org.jvnet.hk2.internal.ServiceLocatorImpl.getService(ServiceLocatorImpl.java:691)
	at org.glassfish.jersey.inject.hk2.AbstractHk2InjectionManager.getInstance(AbstractHk2InjectionManager.java:160)
	at org.glassfish.jersey.inject.hk2.ImmediateHk2InjectionManager.getInstance(ImmediateHk2InjectionManager.java:30)
	at org.glassfish.jersey.internal.inject.Injections.getOrCreate(Injections.java:105)
	at org.glassfish.jersey.server.model.MethodHandler$ClassBasedMethodHandler.getInstance(MethodHandler.java:260)
	at org.glassfish.jersey.server.internal.routing.PushMethodHandlerRouter.apply(PushMethodHandlerRouter.java:51)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:86)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage._apply(RoutingStage.java:89)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:69)
	at org.glassfish.jersey.server.internal.routing.RoutingStage.apply(RoutingStage.java:38)
	at org.glassfish.jersey.process.internal.Stages.process(Stages.java:173)
	at org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.java:247)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)
	at org.glassfish.jersey.internal.Errors$1.call(Errors.java:244)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:292)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:274)
	at org.glassfish.jersey.internal.Errors.process(Errors.java:244)
	at org.glassfish.jersey.process.internal.RequestScope.runInScope(RequestScope.java:265)
	at org.glassfish.jersey.server.ServerRuntime.process(ServerRuntime.java:234)
	at org.glassfish.jersey.server.ApplicationHandler.handle(ApplicationHandler.java:684)
	at org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer.service(GrizzlyHttpContainer.java:356)
	at org.glassfish.grizzly.http.server.HttpHandler$1.run(HttpHandler.java:200)
	at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)


2023-02-12T19:29:32.438Z INFO  [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2023-02-12T19:29:32.438Z INFO  [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T19:29:32.439Z INFO  [ServiceManagerListener] Services are now stopped.
2023-02-12T19:29:33.684Z INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-02-12T19:29:34.069Z INFO  [CmdLineTool] Loaded plugin: AWS plugins 5.0.3 [org.graylog.aws.AWSPlugin]
2023-02-12T19:29:34.070Z INFO  [CmdLineTool] Loaded plugin: Integrations 5.0.3 [org.graylog.integrations.IntegrationsPlugin]
2023-02-12T19:29:34.071Z INFO  [CmdLineTool] Loaded plugin: Collector 5.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2023-02-12T19:29:34.071Z INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-02-12T19:29:34.071Z INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.3+a82acb2 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-02-12T19:29:34.072Z INFO  [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.3+a82acb2 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-02-12T19:29:34.084Z INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-02-12T19:29:34.188Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T19:29:34.190Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T19:29:34.199Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T19:29:34.202Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:29}] to localhost:27017
2023-02-12T19:29:34.202Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:28}] to localhost:27017
2023-02-12T19:29:34.202Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=13614027}
2023-02-12T19:29:34.219Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:30}] to localhost:27017
2023-02-12T19:29:34.242Z INFO  [MongoDBPreflightCheck] Connected to MongoDB version 5.0.14
2023-02-12T19:29:34.608Z INFO  [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <Elasticsearch:7.10.2>
2023-02-12T19:29:34.685Z INFO  [Version] HV000001: Hibernate Validator null
2023-02-12T19:29:36.457Z INFO  [InputBufferImpl] Message journal is enabled.
2023-02-12T19:29:36.470Z INFO  [NodeId] Node ID: a30f2b45-6107-45e9-9bba-76d3112d6e71
2023-02-12T19:29:36.592Z INFO  [LogManager] Loading logs.
2023-02-12T19:29:36.623Z INFO  [LogManager] Logs loading complete.
2023-02-12T19:29:36.625Z INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-02-12T19:29:36.629Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T19:29:36.630Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T19:29:36.630Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:32}] to localhost:27017
2023-02-12T19:29:36.630Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:31}] to localhost:27017
2023-02-12T19:29:36.631Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1488750}
2023-02-12T19:29:36.631Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T19:29:36.633Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:33}] to localhost:27017
2023-02-12T19:29:36.735Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-02-12T19:29:36.922Z INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-02-12T19:29:37.245Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T19:29:37.361Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:34}] to localhost:27017
2023-02-12T19:29:37.371Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T19:29:37.737Z INFO  [ServerBootstrap] Graylog server 5.0.3+a82acb2 starting up
2023-02-12T19:29:37.737Z INFO  [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 6.1.4-060104-generic
2023-02-12T19:29:37.737Z INFO  [ServerBootstrap] Deployment: deb
2023-02-12T19:29:37.737Z INFO  [ServerBootstrap] OS: Ubuntu 22.04.1 LTS (jammy)
2023-02-12T19:29:37.737Z INFO  [ServerBootstrap] Arch: amd64
2023-02-12T19:29:37.812Z INFO  [ServerBootstrap] Running 49 migrations...
2023-02-12T19:29:38.160Z INFO  [PeriodicalsService] Starting 26 periodicals ...
2023-02-12T19:29:38.161Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.166Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-02-12T19:29:38.172Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.176Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-02-12T19:29:38.178Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-02-12T19:29:38.178Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-02-12T19:29:38.179Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-02-12T19:29:38.179Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3d5b8d33] STARTING
2023-02-12T19:29:38.182Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-02-12T19:29:38.187Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-02-12T19:29:38.191Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-02-12T19:29:38.198Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-02-12T19:29:38.198Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3d5b8d33] RUNNING
2023-02-12T19:29:38.201Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@293bd6cf] STARTING
2023-02-12T19:29:38.202Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@293bd6cf] RUNNING
2023-02-12T19:29:38.205Z INFO  [LookupDataAdapterRefreshService] Adding job for <geoip-lookup/63e5a4fd018beb7bd6cb960d/@3d5b8d33> [interval=60000ms]
2023-02-12T19:29:38.205Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.208Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-02-12T19:29:38.214Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-02-12T19:29:38.214Z INFO  [LookupTableService] Starting lookup table geoip-lookup-table/63e5a57a018beb7bd6cb9715 [@1c085dc0] using cache geoip-cache/63e02b9fef6a3c160dddff95 [@293bd6cf], data adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3d5b8d33]
2023-02-12T19:29:38.215Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.216Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-02-12T19:29:38.217Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-02-12T19:29:38.218Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.219Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-02-12T19:29:38.219Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T19:29:38.219Z INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-02-12T19:29:38.219Z INFO  [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-02-12T19:29:38.220Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-02-12T19:29:38.220Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-02-12T19:29:38.220Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-02-12T19:29:38.223Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T19:29:38.223Z INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-02-12T19:29:38.224Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:36}] to localhost:27017
2023-02-12T19:29:38.227Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:35}] to localhost:27017
2023-02-12T19:29:39.348Z INFO  [JerseyService] Started REST API at <127.0.0.1:9000>
2023-02-12T19:29:39.348Z INFO  [ServiceManagerListener] Services are healthy
2023-02-12T19:29:39.348Z INFO  [ServerBootstrap] Services started, startup times in ms: {BufferSynchronizerService [RUNNING]=0, LocalKafkaMessageQueueWriter [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, OutputSetupService [RUNNING]=0, GracefulShutdownService [RUNNING]=0, FailureHandlingService [RUNNING]=0, InputSetupService [RUNNING]=0, UrlWhitelistService [RUNNING]=2, LocalKafkaMessageQueueReader [RUNNING]=2, EtagService [RUNNING]=4, LocalKafkaJournal [RUNNING]=4, MongoDBProcessingStatusRecorderService [RUNNING]=6, PrometheusExporter [RUNNING]=9, JobSchedulerService [RUNNING]=9, ConfigurationEtagService [RUNNING]=12, StreamCacheService [RUNNING]=14, GeoIpDbFileChangeMonitorService [RUNNING]=25, LookupTableService [RUNNING]=50, PeriodicalsService [RUNNING]=63, JerseyService [RUNNING]=1187}
2023-02-12T19:29:39.348Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-02-12T19:29:39.351Z INFO  [ServerBootstrap] Graylog server up and running.
2023-02-12T19:29:39.406Z INFO  [InputLauncher] Launching input [Syslog TCP/Suricata Eve Beat/63e44cdd6b174c385b2c62f0] - desired state is RUNNING
2023-02-12T19:29:39.411Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T19:29:39.442Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T19:29:39.446Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0x031b81a0, L:/127.0.0.1:12201]) should be >= 1048576 but is 425984.
2023-02-12T19:31:47.665Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:37}] to localhost:27017
2023-02-12T19:31:47.666Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-12T19:31:47.671Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-12T19:31:47.672Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-12T19:31:47.673Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T19:31:47.699Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xb38bf696, L:/127.0.0.1:12201]) should be >= 2097152 but is 425984.
2023-02-12T19:31:47.700Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T20:17:03.406Z INFO  [SystemJobManager] Submitted SystemJob <36b6bce0-ab12-11ed-8c57-3417ebeaaae1> [org.graylog2.indexer.ranges.RebuildIndexRangesJob]
2023-02-12T20:17:03.407Z INFO  [RebuildIndexRangesJob] Recalculating index ranges.
2023-02-12T20:17:03.409Z INFO  [RebuildIndexRangesJob] Recalculating index ranges for index set Default index set (graylog_*): 3 indices affected.
2023-02-12T20:17:03.481Z INFO  [MongoIndexRangeService] Calculated range of [graylog_1] in [70ms].
2023-02-12T20:17:03.487Z INFO  [RebuildIndexRangesJob] Created ranges for index graylog_1: MongoIndexRange{id=null, indexName=graylog_1, begin=2023-02-09T01:30:02.000Z, end=2023-02-10T02:40:15.003Z, calculatedAt=2023-02-12T20:17:03.410Z, calculationDuration=70, streamIds=[000000000000000000000001, 63e03832ef6a3c160de1870e]}
2023-02-12T20:17:03.495Z INFO  [MongoIndexRangeService] Calculated range of [graylog_0] in [6ms].
2023-02-12T20:17:03.496Z INFO  [RebuildIndexRangesJob] Created ranges for index graylog_0: MongoIndexRange{id=null, indexName=graylog_0, begin=2023-02-05T00:00:48.091Z, end=2023-02-06T00:29:32.216Z, calculatedAt=2023-02-12T20:17:03.489Z, calculationDuration=6, streamIds=[000000000000000000000001, 63e03832ef6a3c160de1870e]}
2023-02-12T20:17:03.500Z INFO  [RebuildIndexRangesJob] Done calculating index ranges for 3 indices. Took 89ms.
2023-02-12T20:17:03.503Z INFO  [SystemJobManager] SystemJob <36b6bce0-ab12-11ed-8c57-3417ebeaaae1> [org.graylog2.indexer.ranges.RebuildIndexRangesJob] finished in 94ms.
2023-02-12T20:20:54.329Z INFO  [IndexFieldTypePollerPeriodical] Cluster not connected yet, delaying index field type initialization until it is reachable.
2023-02-12T20:21:09.856Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoNodeIsRecoveringException: Command failed with error 11600 (InterruptedAtShutdown): 'interrupted at shutdown' on server localhost:27017. The full response is {"ok": 0.0, "errmsg": "interrupted at shutdown", "code": 11600, "codeName": "InterruptedAtShutdown"}
	at com.mongodb.internal.connection.ProtocolHelper.createSpecialException(ProtocolHelper.java:260) ~[graylog.jar:?]
	at com.mongodb.internal.connection.ProtocolHelper.getCommandFailureException(ProtocolHelper.java:194) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receiveCommandMessageResponse(InternalStreamConnection.java:413) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receive(InternalStreamConnection.java:369) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:221) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T20:21:10.206Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.215Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.215Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.360Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoSocketOpenException: Exception opening socket
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:70) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.open(InternalStreamConnection.java:180) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:193) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: java.net.ConnectException: Connection refused
	at sun.nio.ch.Net.pollConnect(Native Method) ~[?:?]
	at sun.nio.ch.Net.pollConnectNow(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.timedFinishConnect(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.SocksSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.Socket.connect(Unknown Source) ~[?:?]
	at com.mongodb.internal.connection.SocketStreamHelper.initialize(SocketStreamHelper.java:107) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.initializeSocket(SocketStream.java:79) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:65) ~[graylog.jar:?]
	... 4 more
2023-02-12T20:21:10.681Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.732Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.778Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:21:10.862Z INFO  [connection] Opened connection [connectionId{localValue:12, serverValue:1}] to localhost:27017
2023-02-12T20:21:10.862Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1895055}
2023-02-12T20:21:10.865Z INFO  [connection] Opened connection [connectionId{localValue:13, serverValue:2}] to localhost:27017
2023-02-12T20:21:10.866Z INFO  [connection] Opened connection [connectionId{localValue:15, serverValue:3}] to localhost:27017
2023-02-12T20:21:10.868Z INFO  [connection] Opened connection [connectionId{localValue:16, serverValue:4}] to localhost:27017
2023-02-12T20:21:10.869Z INFO  [connection] Opened connection [connectionId{localValue:14, serverValue:5}] to localhost:27017
2023-02-12T20:21:10.871Z INFO  [connection] Opened connection [connectionId{localValue:18, serverValue:6}] to localhost:27017
2023-02-12T20:21:10.871Z INFO  [connection] Opened connection [connectionId{localValue:19, serverValue:7}] to localhost:27017
2023-02-12T20:21:26.792Z INFO  [connection] Opened connection [connectionId{localValue:20, serverValue:8}] to localhost:27017
2023-02-12T20:26:30.340Z INFO  [Server] SIGNAL received. Shutting down.
2023-02-12T20:26:30.345Z INFO  [GracefulShutdown] Graceful shutdown initiated.
2023-02-12T20:26:30.346Z INFO  [GracefulShutdown] Node status: [Override lb:DEAD [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2023-02-12T20:26:33.347Z INFO  [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> [Syslog TCP].
2023-02-12T20:26:33.349Z INFO  [InputSetupService] Input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> closed. Took [1ms]
2023-02-12T20:26:33.358Z INFO  [Buffers] Waiting until [INPUT, PROCESS, OUTPUT] buffers are empty.
2023-02-12T20:26:33.359Z INFO  [Buffers] All buffers are empty. Continuing.
2023-02-12T20:26:33.359Z INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2023-02-12T20:26:33.359Z INFO  [GracefulShutdownService] Running graceful shutdown for <1> shutdown hooks
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexBlockCheck].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2023-02-12T20:26:33.360Z INFO  [GracefulShutdownService] Initiate shutdown for <JobWorkerPool>
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2023-02-12T20:26:33.360Z INFO  [JobSchedulerService] Shutdown of job heartbeat executor
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2023-02-12T20:26:33.360Z INFO  [GracefulShutdownService] Finished shutdown for <JobWorkerPool>, took 0 ms
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2023-02-12T20:26:33.360Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2023-02-12T20:26:33.361Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2023-02-12T20:26:33.361Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2023-02-12T20:26:33.361Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2023-02-12T20:26:33.361Z INFO  [Periodicals] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2023-02-12T20:26:33.361Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2023-02-12T20:26:33.361Z INFO  [GracefulShutdown] Goodbye.
2023-02-12T20:26:33.361Z INFO  [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T20:26:33.361Z INFO  [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2023-02-12T20:26:33.361Z INFO  [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2023-02-12T20:26:33.362Z INFO  [LocalKafkaMessageQueueReader] Stopping.
2023-02-12T20:26:33.362Z INFO  [LogManager] Shutting down.
2023-02-12T20:26:33.363Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@293bd6cf] STOPPING, was RUNNING
2023-02-12T20:26:33.363Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3d5b8d33] STOPPING, was RUNNING
2023-02-12T20:26:33.364Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@3d5b8d33] TERMINATED, was STOPPING
2023-02-12T20:26:33.364Z INFO  [LookupDataAdapterRefreshService] Stopping 1 jobs
2023-02-12T20:26:33.364Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@293bd6cf] TERMINATED, was STOPPING
2023-02-12T20:26:33.367Z INFO  [LogManager] Shutdown complete.
2023-02-12T20:26:36.361Z INFO  [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2023-02-12T20:26:36.362Z INFO  [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T20:26:36.362Z INFO  [ServiceManagerListener] Services are now stopped.
2023-02-12T20:26:37.474Z INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-02-12T20:26:37.875Z INFO  [CmdLineTool] Loaded plugin: AWS plugins 5.0.3 [org.graylog.aws.AWSPlugin]
2023-02-12T20:26:37.875Z INFO  [CmdLineTool] Loaded plugin: Integrations 5.0.3 [org.graylog.integrations.IntegrationsPlugin]
2023-02-12T20:26:37.876Z INFO  [CmdLineTool] Loaded plugin: Collector 5.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2023-02-12T20:26:37.877Z INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-02-12T20:26:37.877Z INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.3+a82acb2 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-02-12T20:26:37.877Z INFO  [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.3+a82acb2 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-02-12T20:26:37.892Z INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-02-12T20:26:38.010Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T20:26:38.011Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T20:26:38.019Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:26:38.026Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:9}] to localhost:27017
2023-02-12T20:26:38.026Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:10}] to localhost:27017
2023-02-12T20:26:38.026Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=12656294}
2023-02-12T20:26:38.042Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:11}] to localhost:27017
2023-02-12T20:26:38.066Z INFO  [MongoDBPreflightCheck] Connected to MongoDB version 5.0.14
2023-02-12T20:26:38.439Z INFO  [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <Elasticsearch:7.10.2>
2023-02-12T20:26:38.517Z INFO  [Version] HV000001: Hibernate Validator null
2023-02-12T20:26:39.976Z INFO  [InputBufferImpl] Message journal is enabled.
2023-02-12T20:26:39.987Z INFO  [NodeId] Node ID: a30f2b45-6107-45e9-9bba-76d3112d6e71
2023-02-12T20:26:40.081Z INFO  [LogManager] Loading logs.
2023-02-12T20:26:40.104Z INFO  [LogManager] Logs loading complete.
2023-02-12T20:26:40.106Z INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-02-12T20:26:40.110Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T20:26:40.111Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T20:26:40.111Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:12}] to localhost:27017
2023-02-12T20:26:40.111Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:13}] to localhost:27017
2023-02-12T20:26:40.111Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1171611}
2023-02-12T20:26:40.111Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T20:26:40.113Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:14}] to localhost:27017
2023-02-12T20:26:40.181Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-02-12T20:26:40.367Z INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-02-12T20:26:40.688Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T20:26:40.827Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:15}] to localhost:27017
2023-02-12T20:26:40.835Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T20:26:41.169Z INFO  [ServerBootstrap] Graylog server 5.0.3+a82acb2 starting up
2023-02-12T20:26:41.170Z INFO  [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 6.1.4-060104-generic
2023-02-12T20:26:41.170Z INFO  [ServerBootstrap] Deployment: deb
2023-02-12T20:26:41.170Z INFO  [ServerBootstrap] OS: Ubuntu 22.04.1 LTS (jammy)
2023-02-12T20:26:41.170Z INFO  [ServerBootstrap] Arch: amd64
2023-02-12T20:26:41.240Z INFO  [ServerBootstrap] Running 49 migrations...
2023-02-12T20:26:41.593Z INFO  [PeriodicalsService] Starting 26 periodicals ...
2023-02-12T20:26:41.593Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.596Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:16}] to localhost:27017
2023-02-12T20:26:41.597Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-02-12T20:26:41.602Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.604Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-02-12T20:26:41.604Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-02-12T20:26:41.605Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-02-12T20:26:41.606Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-02-12T20:26:41.606Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-02-12T20:26:41.607Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-02-12T20:26:41.607Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-02-12T20:26:41.608Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-02-12T20:26:41.609Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.609Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-02-12T20:26:41.614Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-02-12T20:26:41.615Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.617Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-02-12T20:26:41.621Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-02-12T20:26:41.633Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.634Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6a48940] STARTING
2023-02-12T20:26:41.635Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-02-12T20:26:41.635Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T20:26:41.636Z INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-02-12T20:26:41.636Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6a48940] RUNNING
2023-02-12T20:26:41.637Z INFO  [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-02-12T20:26:41.637Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-02-12T20:26:41.638Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-02-12T20:26:41.638Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-02-12T20:26:41.641Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T20:26:41.641Z INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-02-12T20:26:41.641Z INFO  [LookupDataAdapterRefreshService] Adding job for <geoip-lookup/63e5a4fd018beb7bd6cb960d/@6a48940> [interval=60000ms]
2023-02-12T20:26:41.647Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@4683922a] STARTING
2023-02-12T20:26:41.647Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@4683922a] RUNNING
2023-02-12T20:26:41.652Z INFO  [LookupTableService] Starting lookup table geoip-lookup-table/63e5a57a018beb7bd6cb9715 [@76c2b70b] using cache geoip-cache/63e02b9fef6a3c160dddff95 [@4683922a], data adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6a48940]
2023-02-12T20:26:41.665Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:17}] to localhost:27017
2023-02-12T20:26:42.663Z INFO  [JerseyService] Started REST API at <127.0.0.1:9000>
2023-02-12T20:26:42.663Z INFO  [ServiceManagerListener] Services are healthy
2023-02-12T20:26:42.664Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-02-12T20:26:42.664Z INFO  [ServerBootstrap] Services started, startup times in ms: {GracefulShutdownService [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, LocalKafkaMessageQueueReader [RUNNING]=0, UrlWhitelistService [RUNNING]=0, InputSetupService [RUNNING]=0, FailureHandlingService [RUNNING]=0, ConfigurationEtagService [RUNNING]=1, LocalKafkaMessageQueueWriter [RUNNING]=1, BufferSynchronizerService [RUNNING]=2, OutputSetupService [RUNNING]=2, LocalKafkaJournal [RUNNING]=2, PrometheusExporter [RUNNING]=3, EtagService [RUNNING]=3, JobSchedulerService [RUNNING]=3, MongoDBProcessingStatusRecorderService [RUNNING]=10, StreamCacheService [RUNNING]=11, GeoIpDbFileChangeMonitorService [RUNNING]=24, PeriodicalsService [RUNNING]=48, LookupTableService [RUNNING]=58, JerseyService [RUNNING]=1070}
2023-02-12T20:26:42.666Z INFO  [ServerBootstrap] Graylog server up and running.
2023-02-12T20:26:42.708Z INFO  [InputLauncher] Launching input [Syslog TCP/Suricata Eve Beat/63e44cdd6b174c385b2c62f0] - desired state is RUNNING
2023-02-12T20:26:42.712Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T20:26:42.753Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T20:26:42.755Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xf9a46795, L:/127.0.0.1:12201]) should be >= 2097152 but is 425984.
2023-02-12T20:31:41.613Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:18}] to localhost:27017
2023-02-12T22:01:41.611Z INFO  [connection] Opened connection [connectionId{localValue:11, serverValue:19}] to localhost:27017
2023-02-12T22:11:10.198Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-12T22:11:10.203Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-12T22:11:10.204Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-12T22:11:10.205Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T22:11:10.205Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xe22d30e7, L:/127.0.0.1:12201]) should be >= 2097152 but is 425984.
2023-02-12T22:11:10.206Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T22:34:22.281Z INFO  [Server] SIGNAL received. Shutting down.
2023-02-12T22:34:22.293Z INFO  [GracefulShutdown] Graceful shutdown initiated.
2023-02-12T22:34:22.294Z INFO  [GracefulShutdown] Node status: [Override lb:DEAD [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2023-02-12T22:34:22.401Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoNodeIsRecoveringException: Command failed with error 11600 (InterruptedAtShutdown): 'interrupted at shutdown' on server localhost:27017. The full response is {"ok": 0.0, "errmsg": "interrupted at shutdown", "code": 11600, "codeName": "InterruptedAtShutdown"}
	at com.mongodb.internal.connection.ProtocolHelper.createSpecialException(ProtocolHelper.java:260) ~[graylog.jar:?]
	at com.mongodb.internal.connection.ProtocolHelper.getCommandFailureException(ProtocolHelper.java:194) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receiveCommandMessageResponse(InternalStreamConnection.java:413) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receive(InternalStreamConnection.java:369) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:221) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:34:22.417Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:22.609Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:22.615Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:22.683Z INFO  [IndexFieldTypePollerPeriodical] Cluster not connected yet, delaying index field type initialization until it is reachable.
2023-02-12T22:34:22.848Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:22.907Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoSocketOpenException: Exception opening socket
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:70) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.open(InternalStreamConnection.java:180) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:193) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: java.net.ConnectException: Connection refused
	at sun.nio.ch.Net.pollConnect(Native Method) ~[?:?]
	at sun.nio.ch.Net.pollConnectNow(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.timedFinishConnect(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.SocksSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.Socket.connect(Unknown Source) ~[?:?]
	at com.mongodb.internal.connection.SocketStreamHelper.initialize(SocketStreamHelper.java:107) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.initializeSocket(SocketStream.java:79) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:65) ~[graylog.jar:?]
	... 4 more
2023-02-12T22:34:23.224Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:25.294Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.069Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.069Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.072Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.091Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.112Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.605Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.607Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:41.640Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:34:41.640Z INFO  [VersionProbe] Elasticsearch is not available. Retry #1
2023-02-12T22:34:46.641Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:34:46.641Z INFO  [VersionProbe] Elasticsearch is not available. Retry #2
2023-02-12T22:34:51.643Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:34:51.643Z INFO  [VersionProbe] Elasticsearch is not available. Retry #3
2023-02-12T22:34:52.418Z ERROR [JobSchedulerService] Error running job execution engine
com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at com.mongodb.internal.connection.BaseCluster.getDescription(BaseCluster.java:181) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SingleServerCluster.getDescription(SingleServerCluster.java:44) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.getConnectedClusterDescription(MongoClientDelegate.java:144) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.createClientSession(MongoClientDelegate.java:101) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.getClientSession(MongoClientDelegate.java:291) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:207) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:173) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1691) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1548) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1516) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1460) ~[graylog.jar:?]
	at org.mongojack.JacksonDBCollection.findAndModify(JacksonDBCollection.java:908) ~[graylog.jar:?]
	at org.graylog.scheduler.DBJobTriggerService.nextRunnableTrigger(DBJobTriggerService.java:366) ~[graylog.jar:?]
	at org.graylog.scheduler.JobExecutionEngine.execute(JobExecutionEngine.java:115) ~[graylog.jar:?]
	at org.graylog.scheduler.JobSchedulerService.run(JobSchedulerService.java:119) [graylog.jar:?]
	at com.google.common.util.concurrent.AbstractExecutionThreadService$1$2.run(AbstractExecutionThreadService.java:67) [graylog.jar:?]
	at com.google.common.util.concurrent.Callables$4.run(Callables.java:121) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:34:52.419Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:52.609Z ERROR [NodePingThread] Uncaught exception in Periodical
com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at com.mongodb.internal.connection.BaseCluster.getDescription(BaseCluster.java:181) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SingleServerCluster.getDescription(SingleServerCluster.java:44) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.getConnectedClusterDescription(MongoClientDelegate.java:144) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.createClientSession(MongoClientDelegate.java:101) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.getClientSession(MongoClientDelegate.java:291) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:183) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:168) ~[graylog.jar:?]
	at com.mongodb.DBCursor.initializeCursor(DBCursor.java:810) ~[graylog.jar:?]
	at com.mongodb.DBCursor.hasNext(DBCursor.java:163) ~[graylog.jar:?]
	at com.mongodb.DBCursor.one(DBCursor.java:611) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findOne(DBCollection.java:820) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findOne(DBCollection.java:780) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findOne(DBCollection.java:723) ~[graylog.jar:?]
	at org.graylog2.database.PersistedServiceImpl.findOne(PersistedServiceImpl.java:128) ~[graylog.jar:?]
	at org.graylog2.cluster.NodeServiceImpl.byNodeId(NodeServiceImpl.java:73) ~[graylog.jar:?]
	at org.graylog2.cluster.NodeServiceImpl.byNodeId(NodeServiceImpl.java:84) ~[graylog.jar:?]
	at org.graylog2.periodical.NodePingThread.doRun(NodePingThread.java:68) ~[graylog.jar:?]
	at org.graylog2.plugin.periodical.Periodical.run(Periodical.java:94) [graylog.jar:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:?]
	at java.util.concurrent.FutureTask.runAndReset(Unknown Source) [?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:34:52.610Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:52.615Z WARN  [ClusterEventPeriodical] Error while reading cluster events from MongoDB, retrying.
com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at com.mongodb.internal.connection.BaseCluster.getDescription(BaseCluster.java:181) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SingleServerCluster.getDescription(SingleServerCluster.java:44) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.getConnectedClusterDescription(MongoClientDelegate.java:144) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.createClientSession(MongoClientDelegate.java:101) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.getClientSession(MongoClientDelegate.java:291) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:183) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:168) ~[graylog.jar:?]
	at com.mongodb.DBCursor.initializeCursor(DBCursor.java:810) ~[graylog.jar:?]
	at com.mongodb.DBCursor.hasNext(DBCursor.java:163) ~[graylog.jar:?]
	at org.mongojack.DBCursor.hasNext(DBCursor.java:255) ~[graylog.jar:?]
	at org.graylog2.events.ClusterEventPeriodical.doRun(ClusterEventPeriodical.java:152) [graylog.jar:?]
	at org.graylog2.plugin.periodical.Periodical.run(Periodical.java:94) [graylog.jar:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:?]
	at java.util.concurrent.FutureTask.runAndReset(Unknown Source) [?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:34:52.616Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:52.853Z ERROR [MongoDBProcessingStatusRecorderService] Couldn't persist processing status
java.lang.RuntimeException: com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at org.graylog2.database.MongoDBUpsertRetryer.run(MongoDBUpsertRetryer.java:58) ~[graylog.jar:?]
	at org.graylog2.system.processing.DBProcessingStatusService.save(DBProcessingStatusService.java:134) ~[graylog.jar:?]
	at org.graylog2.system.processing.DBProcessingStatusService.save(DBProcessingStatusService.java:126) ~[graylog.jar:?]
	at org.graylog2.system.processing.MongoDBProcessingStatusRecorderService.doPersist(MongoDBProcessingStatusRecorderService.java:134) ~[graylog.jar:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:?]
	at java.util.concurrent.FutureTask.runAndReset(Unknown Source) [?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at com.mongodb.internal.connection.BaseCluster.getDescription(BaseCluster.java:181) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SingleServerCluster.getDescription(SingleServerCluster.java:44) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.getConnectedClusterDescription(MongoClientDelegate.java:144) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.createClientSession(MongoClientDelegate.java:101) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.getClientSession(MongoClientDelegate.java:291) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:207) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:173) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1691) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1548) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1516) ~[graylog.jar:?]
	at com.mongodb.DBCollection.findAndModify(DBCollection.java:1460) ~[graylog.jar:?]
	at org.mongojack.JacksonDBCollection.findAndModify(JacksonDBCollection.java:880) ~[graylog.jar:?]
	at org.graylog2.system.processing.DBProcessingStatusService.lambda$save$1(DBProcessingStatusService.java:134) ~[graylog.jar:?]
	at com.github.rholder.retry.AttemptTimeLimiters$NoAttemptTimeLimit.call(AttemptTimeLimiters.java:78) ~[graylog.jar:?]
	at com.github.rholder.retry.Retryer.call(Retryer.java:160) ~[graylog.jar:?]
	at org.graylog2.database.MongoDBUpsertRetryer.run(MongoDBUpsertRetryer.java:56) ~[graylog.jar:?]
	... 9 more
2023-02-12T22:34:53.224Z ERROR [InMemoryRolePermissionResolver] Could not find roles collection, no user roles updated.
com.mongodb.MongoTimeoutException: Timed out after 30000 ms while waiting to connect. Client view of cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, caused by {java.net.ConnectException: Connection refused}}]
	at com.mongodb.internal.connection.BaseCluster.getDescription(BaseCluster.java:181) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SingleServerCluster.getDescription(SingleServerCluster.java:44) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.getConnectedClusterDescription(MongoClientDelegate.java:144) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate.createClientSession(MongoClientDelegate.java:101) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.getClientSession(MongoClientDelegate.java:291) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:183) ~[graylog.jar:?]
	at com.mongodb.client.internal.MongoClientDelegate$DelegateOperationExecutor.execute(MongoClientDelegate.java:168) ~[graylog.jar:?]
	at com.mongodb.DBCursor.initializeCursor(DBCursor.java:810) ~[graylog.jar:?]
	at com.mongodb.DBCursor.hasNext(DBCursor.java:163) ~[graylog.jar:?]
	at org.mongojack.DBCursor.hasNext(DBCursor.java:255) ~[graylog.jar:?]
	at com.google.common.collect.ImmutableSet.copyOf(ImmutableSet.java:273) ~[graylog.jar:?]
	at com.google.common.collect.ImmutableSet.copyOf(ImmutableSet.java:262) ~[graylog.jar:?]
	at org.graylog2.users.RoleServiceImpl.loadAll(RoleServiceImpl.java:159) ~[graylog.jar:?]
	at org.graylog2.users.RoleServiceImpl.loadAllIdMap(RoleServiceImpl.java:180) ~[graylog.jar:?]
	at org.graylog2.security.InMemoryRolePermissionResolver$RoleUpdater.run(InMemoryRolePermissionResolver.java:98) [graylog.jar:?]
	at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) [?:?]
	at java.util.concurrent.FutureTask.runAndReset(Unknown Source) [?:?]
	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:34:53.225Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:34:53.855Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:37:49.640Z INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-02-12T22:37:52.379Z INFO  [CmdLineTool] Loaded plugin: AWS plugins 5.0.3 [org.graylog.aws.AWSPlugin]
2023-02-12T22:37:52.380Z INFO  [CmdLineTool] Loaded plugin: Integrations 5.0.3 [org.graylog.integrations.IntegrationsPlugin]
2023-02-12T22:37:52.381Z INFO  [CmdLineTool] Loaded plugin: Collector 5.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2023-02-12T22:37:52.381Z INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-02-12T22:37:52.381Z INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.3+a82acb2 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-02-12T22:37:52.382Z INFO  [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.3+a82acb2 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-02-12T22:37:52.571Z INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-02-12T22:37:53.168Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:37:53.171Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:37:53.191Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:37:53.441Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:1}] to localhost:27017
2023-02-12T22:37:53.441Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:2}] to localhost:27017
2023-02-12T22:37:53.442Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=29342001}
2023-02-12T22:37:53.511Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:3}] to localhost:27017
2023-02-12T22:37:53.671Z INFO  [MongoDBPreflightCheck] Connected to MongoDB version 5.0.14
2023-02-12T22:37:56.110Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:37:56.111Z INFO  [VersionProbe] Elasticsearch is not available. Retry #1
2023-02-12T22:38:01.112Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:38:01.112Z INFO  [VersionProbe] Elasticsearch is not available. Retry #2
2023-02-12T22:38:06.113Z ERROR [VersionProbe] Unable to retrieve version from Elasticsearch node: Failed to connect to /127.0.0.1:9200. - Connection refused.
2023-02-12T22:38:06.113Z INFO  [VersionProbe] Elasticsearch is not available. Retry #3
2023-02-12T22:38:11.621Z INFO  [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <Elasticsearch:7.10.2>
2023-02-12T22:38:13.321Z INFO  [Version] HV000001: Hibernate Validator null
2023-02-12T22:38:19.631Z INFO  [InputBufferImpl] Message journal is enabled.
2023-02-12T22:38:19.652Z INFO  [NodeId] Node ID: a30f2b45-6107-45e9-9bba-76d3112d6e71
2023-02-12T22:38:20.047Z INFO  [LogManager] Loading logs.
2023-02-12T22:38:20.075Z WARN  [Log] Found a corrupted index file, /var/lib/graylog-server/journal/messagejournal-0/00000000000002575679.index, deleting and rebuilding index...
2023-02-12T22:38:20.114Z INFO  [LogManager] Logs loading complete.
2023-02-12T22:38:20.115Z INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-02-12T22:38:20.119Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:38:20.120Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:38:20.120Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:5}] to localhost:27017
2023-02-12T22:38:20.120Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:4}] to localhost:27017
2023-02-12T22:38:20.120Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1078258}
2023-02-12T22:38:20.120Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:38:20.122Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:6}] to localhost:27017
2023-02-12T22:38:20.260Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-02-12T22:38:20.550Z INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-02-12T22:38:21.223Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T22:38:21.372Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:7}] to localhost:27017
2023-02-12T22:38:21.890Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T22:38:22.459Z INFO  [ServerBootstrap] Graylog server 5.0.3+a82acb2 starting up
2023-02-12T22:38:22.460Z INFO  [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 6.1.4-060104-generic
2023-02-12T22:38:22.460Z INFO  [ServerBootstrap] Deployment: deb
2023-02-12T22:38:22.460Z INFO  [ServerBootstrap] OS: Ubuntu 22.04.1 LTS (jammy)
2023-02-12T22:38:22.460Z INFO  [ServerBootstrap] Arch: amd64
2023-02-12T22:38:22.530Z INFO  [ServerBootstrap] Running 49 migrations...
2023-02-12T22:38:23.490Z INFO  [PeriodicalsService] Starting 26 periodicals ...
2023-02-12T22:38:23.491Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.493Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:8}] to localhost:27017
2023-02-12T22:38:23.505Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-02-12T22:38:23.507Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.507Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-02-12T22:38:23.507Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-02-12T22:38:23.508Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-02-12T22:38:23.508Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-02-12T22:38:23.508Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-02-12T22:38:23.508Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-02-12T22:38:23.509Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-02-12T22:38:23.509Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.509Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:9}] to localhost:27017
2023-02-12T22:38:23.509Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-02-12T22:38:23.510Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-02-12T22:38:23.510Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.510Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-02-12T22:38:23.510Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:10}] to localhost:27017
2023-02-12T22:38:23.511Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-02-12T22:38:23.511Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.511Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-02-12T22:38:23.512Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T22:38:23.512Z INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-02-12T22:38:23.512Z INFO  [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-02-12T22:38:23.513Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-02-12T22:38:23.513Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-02-12T22:38:23.516Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-02-12T22:38:23.516Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T22:38:23.517Z INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-02-12T22:38:23.518Z INFO  [connection] Opened connection [connectionId{localValue:11, serverValue:11}] to localhost:27017
2023-02-12T22:38:23.528Z INFO  [connection] Opened connection [connectionId{localValue:13, serverValue:13}] to localhost:27017
2023-02-12T22:38:23.530Z INFO  [connection] Opened connection [connectionId{localValue:12, serverValue:12}] to localhost:27017
2023-02-12T22:38:23.531Z INFO  [connection] Opened connection [connectionId{localValue:17, serverValue:15}] to localhost:27017
2023-02-12T22:38:23.531Z INFO  [connection] Opened connection [connectionId{localValue:16, serverValue:14}] to localhost:27017
2023-02-12T22:38:23.608Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-02-12T22:38:23.699Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@5d1590f5] STARTING
2023-02-12T22:38:23.705Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@5d1590f5] RUNNING
2023-02-12T22:38:23.705Z INFO  [LookupDataAdapterRefreshService] Adding job for <geoip-lookup/63e5a4fd018beb7bd6cb960d/@5d1590f5> [interval=60000ms]
2023-02-12T22:38:23.770Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@24d14506] STARTING
2023-02-12T22:38:23.771Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@24d14506] RUNNING
2023-02-12T22:38:23.803Z INFO  [LookupTableService] Starting lookup table geoip-lookup-table/63e5a57a018beb7bd6cb9715 [@7a5df958] using cache geoip-cache/63e02b9fef6a3c160dddff95 [@24d14506], data adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@5d1590f5]
2023-02-12T22:38:25.459Z INFO  [JerseyService] Started REST API at <127.0.0.1:9000>
2023-02-12T22:38:25.459Z INFO  [ServiceManagerListener] Services are healthy
2023-02-12T22:38:25.460Z INFO  [ServerBootstrap] Services started, startup times in ms: {UrlWhitelistService [RUNNING]=0, LocalKafkaMessageQueueReader [RUNNING]=0, PrometheusExporter [RUNNING]=0, InputSetupService [RUNNING]=0, GracefulShutdownService [RUNNING]=0, FailureHandlingService [RUNNING]=0, OutputSetupService [RUNNING]=0, JobSchedulerService [RUNNING]=0, BufferSynchronizerService [RUNNING]=0, LocalKafkaMessageQueueWriter [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, ConfigurationEtagService [RUNNING]=0, LocalKafkaJournal [RUNNING]=1, EtagService [RUNNING]=1, StreamCacheService [RUNNING]=9, PeriodicalsService [RUNNING]=27, MongoDBProcessingStatusRecorderService [RUNNING]=157, LookupTableService [RUNNING]=312, GeoIpDbFileChangeMonitorService [RUNNING]=354, JerseyService [RUNNING]=1968}
2023-02-12T22:38:25.460Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-02-12T22:38:25.625Z INFO  [ServerBootstrap] Graylog server up and running.
2023-02-12T22:38:25.801Z INFO  [InputLauncher] Launching input [Syslog TCP/Suricata Eve Beat/63e44cdd6b174c385b2c62f0] - desired state is RUNNING
2023-02-12T22:38:25.807Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T22:38:25.894Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T22:38:25.900Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xd5c8924b, L:/127.0.0.1:12201]) should be >= 2097152 but is 425984.
2023-02-12T22:53:17.584Z INFO  [Server] SIGNAL received. Shutting down.
2023-02-12T22:53:17.587Z INFO  [GracefulShutdown] Graceful shutdown initiated.
2023-02-12T22:53:17.587Z INFO  [GracefulShutdown] Node status: [Override lb:DEAD [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2023-02-12T22:53:17.602Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoNodeIsRecoveringException: Command failed with error 11600 (InterruptedAtShutdown): 'interrupted at shutdown' on server localhost:27017. The full response is {"ok": 0.0, "errmsg": "interrupted at shutdown", "code": 11600, "codeName": "InterruptedAtShutdown"}
	at com.mongodb.internal.connection.ProtocolHelper.createSpecialException(ProtocolHelper.java:260) ~[graylog.jar:?]
	at com.mongodb.internal.connection.ProtocolHelper.getCommandFailureException(ProtocolHelper.java:194) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receiveCommandMessageResponse(InternalStreamConnection.java:413) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.receive(InternalStreamConnection.java:369) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:221) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
2023-02-12T22:53:18.295Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:18.296Z INFO  [cluster] Exception in monitor thread while connecting to server localhost:27017
com.mongodb.MongoSocketOpenException: Exception opening socket
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:70) ~[graylog.jar:?]
	at com.mongodb.internal.connection.InternalStreamConnection.open(InternalStreamConnection.java:180) ~[graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.lookupServerDescription(DefaultServerMonitor.java:193) [graylog.jar:?]
	at com.mongodb.internal.connection.DefaultServerMonitor$ServerMonitorRunnable.run(DefaultServerMonitor.java:157) [graylog.jar:?]
	at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: java.net.ConnectException: Connection refused
	at sun.nio.ch.Net.pollConnect(Native Method) ~[?:?]
	at sun.nio.ch.Net.pollConnectNow(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.timedFinishConnect(Unknown Source) ~[?:?]
	at sun.nio.ch.NioSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.SocksSocketImpl.connect(Unknown Source) ~[?:?]
	at java.net.Socket.connect(Unknown Source) ~[?:?]
	at com.mongodb.internal.connection.SocketStreamHelper.initialize(SocketStreamHelper.java:107) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.initializeSocket(SocketStream.java:79) ~[graylog.jar:?]
	at com.mongodb.internal.connection.SocketStream.open(SocketStream.java:65) ~[graylog.jar:?]
	... 4 more
2023-02-12T22:53:18.371Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:18.427Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:18.509Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:18.510Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:18.654Z INFO  [IndexFieldTypePollerPeriodical] Cluster not connected yet, delaying index field type initialization until it is reachable.
2023-02-12T22:53:18.797Z INFO  [connection] Opened connection [connectionId{localValue:19, serverValue:1}] to localhost:27017
2023-02-12T22:53:18.797Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=658936}
2023-02-12T22:53:18.798Z INFO  [connection] Opened connection [connectionId{localValue:22, serverValue:2}] to localhost:27017
2023-02-12T22:53:18.798Z INFO  [connection] Opened connection [connectionId{localValue:20, serverValue:3}] to localhost:27017
2023-02-12T22:53:18.799Z INFO  [connection] Opened connection [connectionId{localValue:21, serverValue:4}] to localhost:27017
2023-02-12T22:53:18.800Z INFO  [connection] Opened connection [connectionId{localValue:23, serverValue:5}] to localhost:27017
2023-02-12T22:53:18.800Z INFO  [connection] Opened connection [connectionId{localValue:24, serverValue:6}] to localhost:27017
2023-02-12T22:53:20.592Z INFO  [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> [Syslog TCP].
2023-02-12T22:53:20.596Z INFO  [InputSetupService] Input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> closed. Took [3ms]
2023-02-12T22:53:20.598Z WARN  [BufferSynchronizerService] Elasticsearch is unavailable. Not waiting to clear process and output buffers and caches, as we have no healthy cluster.
2023-02-12T22:53:20.598Z INFO  [Buffers] Waiting until [INPUT] buffers are empty.
2023-02-12T22:53:20.599Z INFO  [Buffers] All buffers are empty. Continuing.
2023-02-12T22:53:20.600Z INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2023-02-12T22:53:20.601Z INFO  [GracefulShutdownService] Running graceful shutdown for <1> shutdown hooks
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexBlockCheck].
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2023-02-12T22:53:20.601Z INFO  [GracefulShutdownService] Initiate shutdown for <JobWorkerPool>
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2023-02-12T22:53:20.601Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2023-02-12T22:53:20.602Z INFO  [JobSchedulerService] Shutdown of job heartbeat executor
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2023-02-12T22:53:20.602Z INFO  [GracefulShutdownService] Finished shutdown for <JobWorkerPool>, took 0 ms
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2023-02-12T22:53:20.602Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2023-02-12T22:53:20.603Z INFO  [GracefulShutdown] Goodbye.
2023-02-12T22:53:20.603Z INFO  [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T22:53:20.603Z INFO  [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2023-02-12T22:53:20.603Z INFO  [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2023-02-12T22:53:20.614Z INFO  [LocalKafkaMessageQueueReader] Stopping.
2023-02-12T22:53:20.614Z INFO  [LogManager] Shutting down.
2023-02-12T22:53:20.616Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@24d14506] STOPPING, was RUNNING
2023-02-12T22:53:20.617Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@24d14506] TERMINATED, was STOPPING
2023-02-12T22:53:20.617Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@5d1590f5] STOPPING, was RUNNING
2023-02-12T22:53:20.617Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@5d1590f5] TERMINATED, was STOPPING
2023-02-12T22:53:20.619Z INFO  [LookupDataAdapterRefreshService] Stopping 1 jobs
2023-02-12T22:53:20.620Z INFO  [LogManager] Shutdown complete.
2023-02-12T22:53:23.604Z INFO  [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2023-02-12T22:53:23.604Z INFO  [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-12T22:53:23.604Z INFO  [ServiceManagerListener] Services are now stopped.
2023-02-12T22:53:24.831Z INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-02-12T22:53:25.185Z INFO  [CmdLineTool] Loaded plugin: AWS plugins 5.0.3 [org.graylog.aws.AWSPlugin]
2023-02-12T22:53:25.185Z INFO  [CmdLineTool] Loaded plugin: Integrations 5.0.3 [org.graylog.integrations.IntegrationsPlugin]
2023-02-12T22:53:25.186Z INFO  [CmdLineTool] Loaded plugin: Collector 5.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2023-02-12T22:53:25.186Z INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-02-12T22:53:25.187Z INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.3+a82acb2 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-02-12T22:53:25.187Z INFO  [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.3+a82acb2 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-02-12T22:53:25.199Z INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-02-12T22:53:25.308Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:53:25.309Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:53:25.317Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:25.320Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:8}] to localhost:27017
2023-02-12T22:53:25.320Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:7}] to localhost:27017
2023-02-12T22:53:25.321Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=12810871}
2023-02-12T22:53:25.339Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:9}] to localhost:27017
2023-02-12T22:53:25.365Z INFO  [MongoDBPreflightCheck] Connected to MongoDB version 5.0.14
2023-02-12T22:53:25.767Z INFO  [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <Elasticsearch:7.10.2>
2023-02-12T22:53:25.863Z INFO  [Version] HV000001: Hibernate Validator null
2023-02-12T22:53:27.319Z INFO  [InputBufferImpl] Message journal is enabled.
2023-02-12T22:53:27.328Z INFO  [NodeId] Node ID: a30f2b45-6107-45e9-9bba-76d3112d6e71
2023-02-12T22:53:27.420Z INFO  [LogManager] Loading logs.
2023-02-12T22:53:27.442Z INFO  [LogManager] Logs loading complete.
2023-02-12T22:53:27.443Z INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-02-12T22:53:27.446Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:53:27.447Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-12T22:53:27.447Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:11}] to localhost:27017
2023-02-12T22:53:27.447Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:10}] to localhost:27017
2023-02-12T22:53:27.448Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1017869}
2023-02-12T22:53:27.448Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-12T22:53:27.450Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:12}] to localhost:27017
2023-02-12T22:53:27.527Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-02-12T22:53:27.684Z INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-02-12T22:53:28.022Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T22:53:28.142Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:13}] to localhost:27017
2023-02-12T22:53:28.150Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-12T22:53:28.526Z INFO  [ServerBootstrap] Graylog server 5.0.3+a82acb2 starting up
2023-02-12T22:53:28.527Z INFO  [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 6.1.4-060104-generic
2023-02-12T22:53:28.527Z INFO  [ServerBootstrap] Deployment: deb
2023-02-12T22:53:28.527Z INFO  [ServerBootstrap] OS: Ubuntu 22.04.1 LTS (jammy)
2023-02-12T22:53:28.527Z INFO  [ServerBootstrap] Arch: amd64
2023-02-12T22:53:28.581Z INFO  [ServerBootstrap] Running 49 migrations...
2023-02-12T22:53:28.947Z INFO  [PeriodicalsService] Starting 26 periodicals ...
2023-02-12T22:53:28.948Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-02-12T22:53:28.951Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-02-12T22:53:28.954Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:14}] to localhost:27017
2023-02-12T22:53:28.960Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-02-12T22:53:28.962Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-02-12T22:53:28.963Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-02-12T22:53:28.965Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@77dc3cd5] STARTING
2023-02-12T22:53:28.967Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-02-12T22:53:28.967Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-02-12T22:53:28.969Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-02-12T22:53:28.974Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-02-12T22:53:28.975Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-02-12T22:53:28.976Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@7f260bf6] STARTING
2023-02-12T22:53:28.976Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@7f260bf6] RUNNING
2023-02-12T22:53:28.977Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-02-12T22:53:28.979Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-02-12T22:53:28.980Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@77dc3cd5] RUNNING
2023-02-12T22:53:28.980Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-02-12T22:53:28.981Z INFO  [LookupDataAdapterRefreshService] Adding job for <geoip-lookup/63e5a4fd018beb7bd6cb960d/@77dc3cd5> [interval=60000ms]
2023-02-12T22:53:28.981Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-02-12T22:53:28.992Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-02-12T22:53:28.993Z INFO  [LookupTableService] Starting lookup table geoip-lookup-table/63e5a57a018beb7bd6cb9715 [@9e4024a] using cache geoip-cache/63e02b9fef6a3c160dddff95 [@7f260bf6], data adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@77dc3cd5]
2023-02-12T22:53:28.995Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-02-12T22:53:28.997Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-02-12T22:53:29.007Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-02-12T22:53:29.008Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-02-12T22:53:29.016Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-02-12T22:53:29.020Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-02-12T22:53:29.021Z INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-02-12T22:53:29.062Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:15}] to localhost:27017
2023-02-12T22:53:30.162Z INFO  [JerseyService] Started REST API at <127.0.0.1:9000>
2023-02-12T22:53:30.162Z INFO  [ServiceManagerListener] Services are healthy
2023-02-12T22:53:30.162Z INFO  [ServerBootstrap] Services started, startup times in ms: {LocalKafkaMessageQueueReader [RUNNING]=0, GracefulShutdownService [RUNNING]=0, InputSetupService [RUNNING]=0, LocalKafkaMessageQueueWriter [RUNNING]=0, FailureHandlingService [RUNNING]=0, UrlWhitelistService [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, ConfigurationEtagService [RUNNING]=2, OutputSetupService [RUNNING]=2, EtagService [RUNNING]=2, JobSchedulerService [RUNNING]=4, PrometheusExporter [RUNNING]=5, BufferSynchronizerService [RUNNING]=9, MongoDBProcessingStatusRecorderService [RUNNING]=13, StreamCacheService [RUNNING]=15, LocalKafkaJournal [RUNNING]=20, GeoIpDbFileChangeMonitorService [RUNNING]=23, LookupTableService [RUNNING]=44, PeriodicalsService [RUNNING]=74, JerseyService [RUNNING]=1215}
2023-02-12T22:53:30.162Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-02-12T22:53:30.165Z INFO  [ServerBootstrap] Graylog server up and running.
2023-02-12T22:53:30.211Z INFO  [InputLauncher] Launching input [Syslog TCP/Suricata Eve Beat/63e44cdd6b174c385b2c62f0] - desired state is RUNNING
2023-02-12T22:53:30.215Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T22:53:30.247Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T22:53:30.249Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xaed41b2e, L:/127.0.0.1:12201]) should be >= 2097152 but is 425984.
2023-02-12T22:55:18.542Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-12T22:55:18.546Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-12T22:55:18.546Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-12T22:55:36.332Z INFO  [connection] Opened connection [connectionId{localValue:12, serverValue:17}] to localhost:27017
2023-02-12T22:55:36.332Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:16}] to localhost:27017
2023-02-12T22:55:45.193Z INFO  [connection] Opened connection [connectionId{localValue:17, serverValue:18}] to localhost:27017
2023-02-12T22:55:45.193Z INFO  [connection] Opened connection [connectionId{localValue:18, serverValue:19}] to localhost:27017
2023-02-12T22:55:45.195Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T22:55:45.196Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0x92c115a6, L:/127.0.0.1:12202]) should be >= 2097152 but is 425984.
2023-02-12T22:55:45.197Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-12T23:15:12.054Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-12T23:15:12.056Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-12T23:15:12.056Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-12T23:15:52.721Z INFO  [InputStateListener] Input [Syslog UDP/63e97328ef19fe723705c280] is now STARTING
2023-02-12T23:15:52.773Z INFO  [InputStateListener] Input [Syslog UDP/63e97328ef19fe723705c280] is now RUNNING
2023-02-12T23:16:56.513Z INFO  [ExtractorsResource] Added extractor <57e7dcf0-ab2b-11ed-9cdc-3417ebeaaae1> of type [json] to input <63e97328ef19fe723705c280>.
2023-02-12T23:16:56.513Z INFO  [ExtractorsResource] Added extractor <57e80400-ab2b-11ed-9cdc-3417ebeaaae1> of type [copy_input] to input <63e97328ef19fe723705c280>.
2023-02-12T23:18:28.068Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-12T23:18:28.071Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0x0e09d19e, L:/127.0.0.1:12202]) should be >= 2097152 but is 425984.
2023-02-12T23:18:28.073Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-13T00:11:05.697Z INFO  [DeflectorResource] Cycling deflector for index set <63dfc5270b7078030c51c140>. Reason: REST request.
2023-02-13T00:11:05.700Z INFO  [MongoIndexSet] Cycling from <graylog_2> to <graylog_3>.
2023-02-13T00:11:05.700Z INFO  [MongoIndexSet] Creating target index <graylog_3>.
2023-02-13T00:11:05.739Z INFO  [Indices] Successfully ensured index template graylog-internal
2023-02-13T00:11:05.821Z INFO  [MongoIndexSet] Waiting for allocation of index <graylog_3>.
2023-02-13T00:11:05.917Z INFO  [MongoIndexSet] Index <graylog_3> has been successfully allocated.
2023-02-13T00:11:05.917Z INFO  [MongoIndexSet] Pointing index alias <graylog_deflector> to new index <graylog_3>.
2023-02-13T00:11:05.942Z INFO  [SystemJobManager] Submitted SystemJob <e8b78850-ab32-11ed-9cdc-3417ebeaaae1> [org.graylog2.indexer.indices.jobs.SetIndexReadOnlyAndCalculateRangeJob]
2023-02-13T00:11:05.942Z INFO  [MongoIndexSet] Successfully pointed index alias <graylog_deflector> to index <graylog_3>.
2023-02-13T00:11:35.966Z INFO  [SetIndexReadOnlyJob] Flushing old index <graylog_2>.
2023-02-13T00:11:35.972Z INFO  [SetIndexReadOnlyJob] Setting old index <graylog_2> to read-only.
2023-02-13T00:11:36.014Z INFO  [SystemJobManager] Submitted SystemJob <faa44ee0-ab32-11ed-9cdc-3417ebeaaae1> [org.graylog2.indexer.indices.jobs.OptimizeIndexJob]
2023-02-13T00:11:36.018Z INFO  [OptimizeIndexJob] Optimizing index <graylog_2>.
2023-02-13T00:11:36.020Z INFO  [CreateNewSingleIndexRangeJob] Calculating ranges for index graylog_2.
2023-02-13T00:11:36.734Z INFO  [MongoIndexRangeService] Calculated range of [graylog_2] in [712ms].
2023-02-13T00:11:36.735Z INFO  [CreateNewSingleIndexRangeJob] Created ranges for index graylog_2.
2023-02-13T00:11:36.746Z INFO  [SystemJobManager] SystemJob <e8b78850-ab32-11ed-9cdc-3417ebeaaae1> [org.graylog2.indexer.indices.jobs.SetIndexReadOnlyAndCalculateRangeJob] finished in 800ms.
2023-02-13T00:13:14.708Z INFO  [SystemJobManager] SystemJob <faa44ee0-ab32-11ed-9cdc-3417ebeaaae1> [org.graylog2.indexer.indices.jobs.OptimizeIndexJob] finished in 98693ms.
2023-02-13T00:52:43.173Z INFO  [InputStateListener] Input [Syslog UDP/63e97328ef19fe723705c280] is now STOPPING
2023-02-13T00:52:43.177Z INFO  [InputStateListener] Input [Syslog UDP/63e97328ef19fe723705c280] is now STOPPED
2023-02-13T00:52:43.179Z INFO  [InputStateListener] Input [Syslog UDP/63e97328ef19fe723705c280] is now TERMINATED
2023-02-13T00:53:27.174Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-13T00:53:27.179Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-13T00:53:27.181Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-13T00:53:27.183Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-13T00:53:27.185Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xc9502cda, L:/127.0.0.1:12202]) should be >= 2097152 but is 425984.
2023-02-13T00:53:27.188Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-13T01:14:07.614Z INFO  [Server] SIGNAL received. Shutting down.
2023-02-13T01:14:07.615Z INFO  [GracefulShutdown] Graceful shutdown initiated.
2023-02-13T01:14:07.616Z INFO  [GracefulShutdown] Node status: [Override lb:DEAD [LB:DEAD]]. Waiting <3sec> for possible load balancers to recognize state change.
2023-02-13T01:14:10.619Z INFO  [InputSetupService] Attempting to close input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> [Syslog TCP].
2023-02-13T01:14:10.624Z INFO  [InputSetupService] Input <org.graylog2.inputs.syslog.tcp.SyslogTCPInput.63e44cdd6b174c385b2c62f0> closed. Took [4ms]
2023-02-13T01:14:10.648Z INFO  [Buffers] Waiting until [INPUT, PROCESS, OUTPUT] buffers are empty.
2023-02-13T01:14:10.650Z INFO  [Buffers] All buffers are empty. Continuing.
2023-02-13T01:14:10.652Z INFO  [OutputSetupService] Stopping output org.graylog2.outputs.BlockingBatchedESOutput
2023-02-13T01:14:10.653Z INFO  [GracefulShutdownService] Running graceful shutdown for <1> shutdown hooks
2023-02-13T01:14:10.653Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread].
2023-02-13T01:14:10.654Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ClusterHealthCheckThread].
2023-02-13T01:14:10.654Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexerClusterCheckerThread].
2023-02-13T01:14:10.655Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexBlockCheck].
2023-02-13T01:14:10.655Z INFO  [GracefulShutdownService] Initiate shutdown for <JobWorkerPool>
2023-02-13T01:14:10.655Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRetentionThread].
2023-02-13T01:14:10.655Z INFO  [JobSchedulerService] Shutdown of job heartbeat executor
2023-02-13T01:14:10.655Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRotationThread].
2023-02-13T01:14:10.655Z INFO  [GracefulShutdownService] Finished shutdown for <JobWorkerPool>, took 0 ms
2023-02-13T01:14:10.655Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.VersionCheckThread].
2023-02-13T01:14:10.656Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ThrottleStateUpdaterThread].
2023-02-13T01:14:10.656Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventPeriodical].
2023-02-13T01:14:10.656Z INFO  [Periodicals] Shutting down periodical [org.graylog2.events.ClusterEventCleanupPeriodical].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.IndexRangesCleanupPeriodical].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.TrafficCounterCalculator].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog2.periodical.ESVersionCheckPeriodical].
2023-02-13T01:14:10.657Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread].
2023-02-13T01:14:10.658Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads].
2023-02-13T01:14:10.658Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.views.search.db.SearchesCleanUpJob].
2023-02-13T01:14:10.658Z INFO  [Periodicals] Shutting down periodical [org.graylog.events.periodicals.EventNotificationStatusCleanUp].
2023-02-13T01:14:10.658Z INFO  [Periodicals] Shutting down periodical [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread].
2023-02-13T01:14:10.658Z INFO  [GracefulShutdown] Goodbye.
2023-02-13T01:14:10.658Z INFO  [FailureSubmissionQueue] [FailureHandlerService#triggerShutdown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-13T01:14:10.658Z INFO  [FailureHandlingService] The service's thread has been interrupted. The queue currently contains 0 failure batches.
2023-02-13T01:14:10.658Z INFO  [JerseyService] Shutting down HTTP listener at <127.0.0.1:9000>
2023-02-13T01:14:10.659Z INFO  [LocalKafkaMessageQueueReader] Stopping.
2023-02-13T01:14:10.659Z INFO  [LogManager] Shutting down.
2023-02-13T01:14:10.660Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@7f260bf6] STOPPING, was RUNNING
2023-02-13T01:14:10.660Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@77dc3cd5] STOPPING, was RUNNING
2023-02-13T01:14:10.661Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@7f260bf6] TERMINATED, was STOPPING
2023-02-13T01:14:10.661Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@77dc3cd5] TERMINATED, was STOPPING
2023-02-13T01:14:10.661Z INFO  [LookupDataAdapterRefreshService] Stopping 1 jobs
2023-02-13T01:14:10.664Z INFO  [LogManager] Shutdown complete.
2023-02-13T01:14:13.658Z INFO  [FailureHandlingService] Shutting down the service. Processed 0 remaining failure batches.
2023-02-13T01:14:13.659Z INFO  [FailureSubmissionQueue] [FailureHandlerService#shutDown] Total number of submitted batches: 0 (0 failures), total number of consumed batches: 0 (0 failures)
2023-02-13T01:14:13.659Z INFO  [ServiceManagerListener] Services are now stopped.
2023-02-13T01:15:37.707Z INFO  [ImmutableFeatureFlagsCollector] Following feature flags are used: {default properties file=[scripting_api_preview=off, search_filter=on]}
2023-02-13T01:15:38.077Z INFO  [CmdLineTool] Loaded plugin: AWS plugins 5.0.3 [org.graylog.aws.AWSPlugin]
2023-02-13T01:15:38.077Z INFO  [CmdLineTool] Loaded plugin: Integrations 5.0.3 [org.graylog.integrations.IntegrationsPlugin]
2023-02-13T01:15:38.078Z INFO  [CmdLineTool] Loaded plugin: Collector 5.0.3 [org.graylog.plugins.collector.CollectorPlugin]
2023-02-13T01:15:38.078Z INFO  [CmdLineTool] Loaded plugin: Threat Intelligence Plugin 5.0.3 [org.graylog.plugins.threatintel.ThreatIntelPlugin]
2023-02-13T01:15:38.079Z INFO  [CmdLineTool] Loaded plugin: Elasticsearch 7 Support 5.0.3+a82acb2 [org.graylog.storage.elasticsearch7.Elasticsearch7Plugin]
2023-02-13T01:15:38.079Z INFO  [CmdLineTool] Loaded plugin: OpenSearch 2 Support 5.0.3+a82acb2 [org.graylog.storage.opensearch2.OpenSearch2Plugin]
2023-02-13T01:15:38.091Z INFO  [CmdLineTool] Running with JVM arguments: -Xms1g -Xmx1g -XX:+UseG1GC -XX:-OmitStackTraceInFastThrow -Djdk.tls.acknowledgeCloseNotify=true -Dlog4j2.formatMsgNoLookups=true -Dlog4j.configurationFile=file:///etc/graylog/server/log4j2.xml -Djava.library.path=/usr/share/graylog-server/lib/sigar -Dgraylog2.installation_source=deb
2023-02-13T01:15:38.195Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-13T01:15:38.196Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-13T01:15:38.206Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-13T01:15:38.208Z INFO  [connection] Opened connection [connectionId{localValue:2, serverValue:21}] to localhost:27017
2023-02-13T01:15:38.208Z INFO  [connection] Opened connection [connectionId{localValue:1, serverValue:20}] to localhost:27017
2023-02-13T01:15:38.208Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=13244236}
2023-02-13T01:15:38.226Z INFO  [connection] Opened connection [connectionId{localValue:3, serverValue:22}] to localhost:27017
2023-02-13T01:15:38.248Z INFO  [MongoDBPreflightCheck] Connected to MongoDB version 5.0.14
2023-02-13T01:15:38.581Z INFO  [SearchDbPreflightCheck] Connected to (Elastic/Open)Search version <Elasticsearch:7.10.2>
2023-02-13T01:15:38.657Z INFO  [Version] HV000001: Hibernate Validator null
2023-02-13T01:15:40.178Z INFO  [InputBufferImpl] Message journal is enabled.
2023-02-13T01:15:40.188Z INFO  [NodeId] Node ID: a30f2b45-6107-45e9-9bba-76d3112d6e71
2023-02-13T01:15:40.273Z INFO  [LogManager] Loading logs.
2023-02-13T01:15:40.275Z INFO  [LogManager] Logs loading complete.
2023-02-13T01:15:40.295Z INFO  [LogManager] Created log for partition [messagejournal,0] in /var/lib/graylog-server/journal with properties {file.delete.delay.ms -> 60000, compact -> false, max.message.bytes -> 104857600, min.insync.replicas -> 1, segment.jitter.ms -> 0, index.interval.bytes -> 4096, min.cleanable.dirty.ratio -> 0.5, unclean.leader.election.enable -> true, retention.bytes -> 5368709120, delete.retention.ms -> 86400000, flush.ms -> 60000, segment.bytes -> 104857600, segment.ms -> 3600000, retention.ms -> 43200000, flush.messages -> 1000000, segment.index.bytes -> 1048576}.
2023-02-13T01:15:40.297Z INFO  [LocalKafkaJournal] Initialized Kafka based journal at /var/lib/graylog-server/journal
2023-02-13T01:15:40.301Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-13T01:15:40.302Z INFO  [client] MongoClient with metadata {"driver": {"name": "mongo-java-driver|legacy", "version": "4.7.1"}, "os": {"type": "Linux", "name": "Linux", "architecture": "amd64", "version": "6.1.4-060104-generic"}, "platform": "Java/Eclipse Adoptium/17.0.6+10"} created with settings MongoClientSettings{readPreference=primary, writeConcern=WriteConcern{w=null, wTimeout=null ms, journal=null}, retryWrites=true, retryReads=true, readConcern=ReadConcern{level=null}, credential=null, streamFactoryFactory=null, commandListeners=[], codecRegistry=ProvidersCodecRegistry{codecProviders=[ValueCodecProvider{}, BsonValueCodecProvider{}, DBRefCodecProvider{}, DBObjectCodecProvider{}, DocumentCodecProvider{}, IterableCodecProvider{}, MapCodecProvider{}, GeoJsonCodecProvider{}, GridFSFileCodecProvider{}, Jsr310CodecProvider{}, JsonObjectCodecProvider{}, BsonCodecProvider{}, EnumCodecProvider{}, com.mongodb.Jep395RecordCodecProvider@3dd818e8]}, clusterSettings={hosts=[localhost:27017], srvServiceName=mongodb, mode=SINGLE, requiredClusterType=UNKNOWN, requiredReplicaSetName='null', serverSelector='null', clusterListeners='[]', serverSelectionTimeout='30000 ms', localThreshold='30000 ms'}, socketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=0, receiveBufferSize=0, sendBufferSize=0}, heartbeatSocketSettings=SocketSettings{connectTimeoutMS=10000, readTimeoutMS=10000, receiveBufferSize=0, sendBufferSize=0}, connectionPoolSettings=ConnectionPoolSettings{maxSize=1000, minSize=0, maxWaitTimeMS=120000, maxConnectionLifeTimeMS=0, maxConnectionIdleTimeMS=0, maintenanceInitialDelayMS=0, maintenanceFrequencyMS=60000, connectionPoolListeners=[], maxConnecting=2}, serverSettings=ServerSettings{heartbeatFrequencyMS=10000, minHeartbeatFrequencyMS=500, serverListeners='[]', serverMonitorListeners='[]'}, sslSettings=SslSettings{enabled=false, invalidHostNameAllowed=false, context=null}, applicationName='null', compressorList=[], uuidRepresentation=UNSPECIFIED, serverApi=null, autoEncryptionSettings=null, contextProvider=null}
2023-02-13T01:15:40.303Z INFO  [connection] Opened connection [connectionId{localValue:4, serverValue:23}] to localhost:27017
2023-02-13T01:15:40.303Z INFO  [connection] Opened connection [connectionId{localValue:5, serverValue:24}] to localhost:27017
2023-02-13T01:15:40.303Z INFO  [cluster] Monitor thread successfully connected to server with description ServerDescription{address=localhost:27017, type=STANDALONE, state=CONNECTED, ok=true, minWireVersion=0, maxWireVersion=13, maxDocumentSize=16777216, logicalSessionTimeoutMinutes=30, roundTripTimeNanos=1314880}
2023-02-13T01:15:40.303Z INFO  [cluster] Cluster description not yet available. Waiting for 30000 ms before timing out
2023-02-13T01:15:40.305Z INFO  [connection] Opened connection [connectionId{localValue:6, serverValue:25}] to localhost:27017
2023-02-13T01:15:40.380Z INFO  [InputBufferImpl] Initialized InputBufferImpl with ring size <65536> and wait strategy <BlockingWaitStrategy>, running 2 parallel message handlers.
2023-02-13T01:15:40.563Z INFO  [ElasticsearchVersionProvider] Elasticsearch cluster is running Elasticsearch:7.10.2
2023-02-13T01:15:40.929Z INFO  [ProcessBuffer] Initialized ProcessBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-13T01:15:41.046Z INFO  [connection] Opened connection [connectionId{localValue:7, serverValue:26}] to localhost:27017
2023-02-13T01:15:41.054Z INFO  [OutputBuffer] Initialized OutputBuffer with ring size <65536> and wait strategy <BlockingWaitStrategy>.
2023-02-13T01:15:41.418Z INFO  [ServerBootstrap] Graylog server 5.0.3+a82acb2 starting up
2023-02-13T01:15:41.418Z INFO  [ServerBootstrap] JRE: Eclipse Adoptium 17.0.6 on Linux 6.1.4-060104-generic
2023-02-13T01:15:41.418Z INFO  [ServerBootstrap] Deployment: deb
2023-02-13T01:15:41.419Z INFO  [ServerBootstrap] OS: Ubuntu 22.04.1 LTS (jammy)
2023-02-13T01:15:41.419Z INFO  [ServerBootstrap] Arch: amd64
2023-02-13T01:15:41.483Z INFO  [ServerBootstrap] Running 49 migrations...
2023-02-13T01:15:41.810Z INFO  [PeriodicalsService] Starting 26 periodicals ...
2023-02-13T01:15:41.810Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThroughputCalculator] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.814Z INFO  [Periodicals] Starting [org.graylog.plugins.pipelineprocessor.periodical.LegacyDefaultStreamMigration] periodical, running forever.
2023-02-13T01:15:41.814Z INFO  [connection] Opened connection [connectionId{localValue:8, serverValue:27}] to localhost:27017
2023-02-13T01:15:41.821Z INFO  [Periodicals] Starting [org.graylog2.periodical.BatchedElasticSearchOutputFlushThread] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.823Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6f83d1ae] STARTING
2023-02-13T01:15:41.823Z INFO  [LegacyDefaultStreamMigration] Legacy default stream has no connections, no migration needed.
2023-02-13T01:15:41.827Z INFO  [Periodicals] Starting [org.graylog2.periodical.ClusterHealthCheckThread] periodical in [120s], polling every [20s].
2023-02-13T01:15:41.829Z INFO  [LookupTableService] Data Adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6f83d1ae] RUNNING
2023-02-13T01:15:41.830Z INFO  [LookupDataAdapterRefreshService] Adding job for <geoip-lookup/63e5a4fd018beb7bd6cb960d/@6f83d1ae> [interval=60000ms]
2023-02-13T01:15:41.831Z INFO  [PeriodicalsService] Not starting [org.graylog2.periodical.ContentPackLoaderPeriodical] periodical. Not configured to run on this node.
2023-02-13T01:15:41.831Z INFO  [Periodicals] Starting [org.graylog2.periodical.GarbageCollectionWarningThread] periodical, running forever.
2023-02-13T01:15:41.832Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexerClusterCheckerThread] periodical in [0s], polling every [30s].
2023-02-13T01:15:41.833Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexBlockCheck] periodical in [0s], polling every [30s].
2023-02-13T01:15:41.836Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRetentionThread] periodical in [0s], polling every [300s].
2023-02-13T01:15:41.837Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRotationThread] periodical in [0s], polling every [10s].
2023-02-13T01:15:41.845Z INFO  [Periodicals] Starting [org.graylog2.periodical.NodePingThread] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.847Z INFO  [Periodicals] Starting [org.graylog2.periodical.VersionCheckThread] periodical in [300s], polling every [1800s].
2023-02-13T01:15:41.848Z INFO  [Periodicals] Starting [org.graylog2.periodical.ThrottleStateUpdaterThread] periodical in [1s], polling every [1s].
2023-02-13T01:15:41.850Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventPeriodical] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.851Z INFO  [Periodicals] Starting [org.graylog2.events.ClusterEventCleanupPeriodical] periodical in [0s], polling every [86400s].
2023-02-13T01:15:41.853Z INFO  [Periodicals] Starting [org.graylog2.periodical.IndexRangesCleanupPeriodical] periodical in [15s], polling every [3600s].
2023-02-13T01:15:41.852Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@1041d391] STARTING
2023-02-13T01:15:41.854Z INFO  [LookupTableService] Cache geoip-cache/63e02b9fef6a3c160dddff95 [@1041d391] RUNNING
2023-02-13T01:15:41.855Z INFO  [Periodicals] Starting [org.graylog2.periodical.TrafficCounterCalculator] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.857Z INFO  [Periodicals] Starting [org.graylog2.indexer.fieldtypes.IndexFieldTypePollerPeriodical] periodical in [0s], polling every [1s].
2023-02-13T01:15:41.857Z INFO  [Periodicals] Starting [org.graylog.scheduler.periodicals.ScheduleTriggerCleanUp] periodical in [120s], polling every [86400s].
2023-02-13T01:15:41.857Z INFO  [Periodicals] Starting [org.graylog2.periodical.ESVersionCheckPeriodical] periodical in [0s], polling every [30s].
2023-02-13T01:15:41.857Z INFO  [LookupTableService] Starting lookup table geoip-lookup-table/63e5a57a018beb7bd6cb9715 [@283ee891] using cache geoip-cache/63e02b9fef6a3c160dddff95 [@1041d391], data adapter geoip-lookup/63e5a4fd018beb7bd6cb960d [@6f83d1ae]
2023-02-13T01:15:41.857Z INFO  [Periodicals] Starting [org.graylog2.periodical.UserSessionTerminationPeriodical] periodical, running forever.
2023-02-13T01:15:41.860Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredSidecarsThread] periodical in [0s], polling every [600s].
2023-02-13T01:15:41.860Z INFO  [Periodicals] Starting [org.graylog.plugins.sidecar.periodical.PurgeExpiredConfigurationUploads] periodical in [0s], polling every [600s].
2023-02-13T01:15:41.861Z INFO  [Periodicals] Starting [org.graylog.plugins.views.search.db.SearchesCleanUpJob] periodical in [3600s], polling every [28800s].
2023-02-13T01:15:41.862Z INFO  [Periodicals] Starting [org.graylog.events.periodicals.EventNotificationStatusCleanUp] periodical in [120s], polling every [86400s].
2023-02-13T01:15:41.862Z INFO  [Periodicals] Starting [org.graylog.plugins.collector.periodical.PurgeExpiredCollectorsThread] periodical in [0s], polling every [3600s].
2023-02-13T01:15:41.887Z INFO  [connection] Opened connection [connectionId{localValue:9, serverValue:28}] to localhost:27017
2023-02-13T01:15:42.926Z INFO  [JerseyService] Started REST API at <127.0.0.1:9000>
2023-02-13T01:15:42.926Z INFO  [ServiceManagerListener] Services are healthy
2023-02-13T01:15:42.927Z INFO  [ServerBootstrap] Services started, startup times in ms: {LocalKafkaMessageQueueWriter [RUNNING]=0, UserSessionTerminationService [RUNNING]=0, InputSetupService [RUNNING]=0, GracefulShutdownService [RUNNING]=0, UrlWhitelistService [RUNNING]=0, FailureHandlingService [RUNNING]=0, EtagService [RUNNING]=1, LocalKafkaMessageQueueReader [RUNNING]=1, OutputSetupService [RUNNING]=1, BufferSynchronizerService [RUNNING]=2, PrometheusExporter [RUNNING]=3, ConfigurationEtagService [RUNNING]=4, LocalKafkaJournal [RUNNING]=7, JobSchedulerService [RUNNING]=13, GeoIpDbFileChangeMonitorService [RUNNING]=18, MongoDBProcessingStatusRecorderService [RUNNING]=20, StreamCacheService [RUNNING]=21, LookupTableService [RUNNING]=45, PeriodicalsService [RUNNING]=52, JerseyService [RUNNING]=1116}
2023-02-13T01:15:42.927Z INFO  [InputSetupService] Triggering launching persisted inputs, node transitioned from Uninitialized [LB:DEAD] to Running [LB:ALIVE]
2023-02-13T01:15:42.930Z INFO  [ServerBootstrap] Graylog server up and running.
2023-02-13T01:15:42.973Z INFO  [InputLauncher] Launching input [Syslog TCP/Suricata Eve Beat/63e44cdd6b174c385b2c62f0] - desired state is RUNNING
2023-02-13T01:15:42.977Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-13T01:15:43.007Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING
2023-02-13T01:15:43.010Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0x0ec70ad3, L:/127.0.0.1:12202]) should be >= 2097152 but is 425984.
2023-02-13T03:24:46.852Z INFO  [connection] Opened connection [connectionId{localValue:10, serverValue:29}] to localhost:27017
2023-02-13T08:06:41.829Z INFO  [connection] Opened connection [connectionId{localValue:11, serverValue:30}] to localhost:27017
2023-02-13T08:10:41.838Z INFO  [connection] Opened connection [connectionId{localValue:12, serverValue:31}] to localhost:27017
2023-02-13T14:00:41.471Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPING
2023-02-13T14:00:41.475Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STOPPED
2023-02-13T14:00:41.475Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now TERMINATED
2023-02-13T14:00:41.477Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now STARTING
2023-02-13T14:00:41.477Z WARN  [AbstractTcpTransport] receiveBufferSize (SO_RCVBUF) for input SyslogTCPInput{title=Suricata Eve Beat, type=org.graylog2.inputs.syslog.tcp.SyslogTCPInput, nodeId=a30f2b45-6107-45e9-9bba-76d3112d6e71} (channel [id: 0xdc1b5527, L:/0.0.0.0:12202]) should be >= 2097152 but is 425984.
2023-02-13T14:00:41.478Z INFO  [InputStateListener] Input [Syslog TCP/63e44cdd6b174c385b2c62f0] is now RUNNING