Found the issue. It was a firewall blocking the REST API port. Thank you for the assistance
On Thursday, June 2, 2016 at 4:37:24 PM UTC-4, Scott John wrote: > > I am getting the following error in my graylog log file. > > 2016-06-02T16:16:55.327-04:00 WARN [BlockingBatchedESOutput] Error while > waiting for healthy Elasticsearch cluster. Not flushing. > java.util.concurrent.TimeoutException: Elasticsearch cluster didn't get > healthy within timeout > at > org.graylog2.indexer.cluster.Cluster.waitForConnectedAndHealthy(Cluster.java:179) > > ~[graylog.jar:?] > at > org.graylog2.indexer.cluster.Cluster.waitForConnectedAndHealthy(Cluster.java:184) > > ~[graylog.jar:?] > at > org.graylog2.outputs.BlockingBatchedESOutput.flush(BlockingBatchedESOutput.java:112) > > [graylog.jar:?] > at > org.graylog2.outputs.BlockingBatchedESOutput.write(BlockingBatchedESOutput.java:105) > > [graylog.jar:?] > at > org.graylog2.buffers.processors.OutputBufferProcessor$1.run(OutputBufferProcessor.java:189) > > [graylog.jar:?] > at > com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:176) > > [graylog.jar:?] > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > [?:1.8.0_91] > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > [?:1.8.0_91] > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > [?:1.8.0_91] > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > [?:1.8.0_91] > at java.lang.Thread.run(Thread.java:745) [?:1.8.0_91] > > The web interface comes up but reports that it cannot connect to the > server on port 12900. > GL - 2.0.2 > ES - 2.3.3 > MDB - 3.0.12 > OS - RHEL 7.2 > Installed from repos. > > curl -XGET http://localhost:9200/_cluster/health?pretty > { > "cluster_name" : "graylog2", > "status" : "green", > "timed_out" : false, > "number_of_nodes" : 1, > "number_of_data_nodes" : 1, > "active_primary_shards" : 48, > "active_shards" : 48, > "relocating_shards" : 0, > "initializing_shards" : 0, > "unassigned_shards" : 0, > "delayed_unassigned_shards" : 0, > "number_of_pending_tasks" : 0, > "number_of_in_flight_fetch" : 0, > "task_max_waiting_in_queue_millis" : 0, > "active_shards_percent_as_number" : 100.0 > } > > elasticsearch.yml > > cluster.name: graylog2 > network.host: 127.0.0.1 > discovery.zen.ping.multicast.enabled: false > discovery.zen.ping.unicast.hosts: ["127.0.0.1:9300"] > script.inline: on > script.indexed: on > > server.conf > > is_master = true > node_id_file = /etc/graylog/server/node-id > password_secret = XXXX > root_password_sha2 = XXXX > root_email = "[email protected]" > root_timezone = UTC > rest_listen_uri = http://127.0.0.1:12900/ > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 4 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog2 > allow_leading_wildcard_searches = false > allow_highlighting = false > elasticsearch_http_enabled = false > elasticsearch_discovery_zen_ping_multicast_enabled = false > elasticsearch_discovery_zen_ping_unicast_hosts = 127.0.0.1:9300 > elasticsearch_network_host = 127.0.0.1 > elasticsearch_analyzer = standard > output_batch_size = 500 > output_flush_interval = 1 > output_fault_count_threshold = 5 > output_fault_penalty_seconds = 30 > processbuffer_processors = 5 > outputbuffer_processors = 3 > processor_wait_strategy = blocking > ring_size = 65536 > inputbuffer_ring_size = 65536 > inputbuffer_processors = 2 > inputbuffer_wait_strategy = blocking > message_journal_enabled = true > message_journal_dir = /var/lib/graylog-server/journal > dead_letters_enabled = false > lb_recognition_period_seconds = 3 > mongodb_uri = mongodb://localhost/graylog2 > mongodb_max_connections = 100 > mongodb_threads_allowed_to_block_multiplier = 5 > mongodb_useauth = false > transport_email_enabled = false > transport_email_hostname = mailhost.email.com > transport_email_port = 587 > transport_email_use_auth = false > transport_email_use_tls = true > transport_email_subject_prefix = [graylog2] > transport_email_from_email = [email protected] > transport_email_web_interface_url = https://glog.email.com > content_packs_dir = /usr/share/graylog-server/contentpacks > content_packs_auto_load = grok-patterns.json > > > What am I missing here? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/839fd880-ef53-49e5-9808-62546f286e78%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
