I am not a logstash expert, but did you perhaps enable an embedded version in the output section of your logstash config?
-- Ivan On Fri, May 9, 2014 at 4:18 PM, Patrick Proniewski <[email protected] > wrote: > I have only one server. host.domain.tld and PUB.LIC.IP.ADDR always > represent the same values. > It looks like the client node is started by Logstash, I don't think its > useful, but I can't find a way to disable it. > > > > On 10 mai 2014, at 01:00, Ivan Brusic wrote: > > > It appears there is another Elasticsearch node on your network. Since > you masked the value I cannot tell, but are transport_address and host the > same for both nodes? > > > > If there is indeed another node on the network, you can either change > the cluster name or disable multicast and use unicast. If you will only > have 1 node, you do not even need to use unicast. > > > > Cheers, > > > > Ivan > > > > > > On Fri, May 9, 2014 at 3:48 PM, Patrick Proniewski < > [email protected]> wrote: > > Hello, > > > > I've noticed that my quite simple ES install (+ Logstash) has 2 nodes > running, but I configured only one. Is this a normal behavior? > > And its health is "yellow", as a consequence I guess of this second > uninvited node. > > > > # egrep -v "^#" /usr/local/etc/elasticsearch/elasticsearch.yml | sort -u > > > > cluster.name: elasticsearch > > network.bind_host: 127.0.0.1 > > network.host: 127.0.0.1 > > path.conf: /usr/local/etc/elasticsearch > > path.data: /zdata/elasticsearch > > path.logs: /var/log/elasticsearch > > path.plugins: /usr/local/lib/elasticsearch/plugins > > path.work: /var/tmp/elasticsearch > > > > > > # curl http://localhost:9200/_nodes/process?pretty > > { > > "cluster_name" : "elasticsearch", > > "nodes" : { > > "hPT0PtRjTCqbZCCn60dnwg" : { > > "name" : "Living Diamond", > > "transport_address" : "inet[/127.0.0.1:9300]", > > "host" : "host.domain.tld", > > "ip" : "PUB.LIC.IP.ADDR", > > "version" : "1.1.0", > > "build" : "2181e11", > > "http_address" : "inet[/127.0.0.1:9200]", > > "process" : { > > "refresh_interval" : 1000, > > "id" : 64168, > > "max_file_descriptors" : 11095, > > "mlockall" : false > > } > > }, > > "jnsj-WAIQGGQLJODnda90Q" : { > > "name" : "logstash-host.domain.tld-76994-4112", > > "transport_address" : "inet[/PUB.LIC.IP.ADDR:9300]", > > "host" : "host.domain.tld", > > "ip" : "PUB.LIC.IP.ADDR", > > "version" : "1.0.1", > > "build" : "5c03844", > > "attributes" : { > > "client" : "true", > > "data" : "false" > > }, > > "process" : { > > "refresh_interval" : 1000, > > "id" : 76994, > > "max_file_descriptors" : 11095, > > "mlockall" : false > > } > > } > > } > > } > > > > > > # curl http://localhost:9200/_cluster/health?pretty > > { > > "cluster_name" : "elasticsearch", > > "status" : "yellow", > > "timed_out" : false, > > "number_of_nodes" : 2, > > "number_of_data_nodes" : 1, > > "active_primary_shards" : 281, > > "active_shards" : 281, > > "relocating_shards" : 0, > > "initializing_shards" : 0, > > "unassigned_shards" : 281 > > } > > > > -- > > You received this message because you are subscribed to the Google > Groups "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/83D1BCA7-42DA-439E-9A07-F27B91C8646A%40patpro.net > . > > For more options, visit https://groups.google.com/d/optout. > > > > > > -- > > You received this message because you are subscribed to the Google > Groups "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected]. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQA1fXYvi%2B%2BLyTzEmr%2B7vi5%3DtiOuNe0oXLs0sryJSYtzxQ%40mail.gmail.com > . > > For more options, visit https://groups.google.com/d/optout. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/813C03EE-BED8-43BB-8943-A25346302478%40patpro.net > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CALY%3DcQCQeo6-_Ms3gT2ug0WRc2C3TP_y5NzeyCcpHD9TZtoQLg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
