Hi, the cluster.name setting in you Elasticsearch configuration is commented out so that it won't have any effect.
It's mandatory to use the same ES cluster name in the Graylog and the Elasticsearch configuration (also see http://docs.graylog.org/en/2.1/pages/installation/os/centos.html#elasticsearch and http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html#cluster-name ). Cheers, Jochen On Tuesday, 8 November 2016 15:39:43 UTC+1, [email protected] wrote: > > Elasticsearch configuration attached. Yes, all components are on the same > machine - I literally followed the CentOS guide on the website step by step > and from the same machine > > On Tuesday, November 8, 2016 at 9:35:42 AM UTC-5, Jochen Schalanda wrote: >> >> Hi, >> >> please attach your Elasticsearch configuration. >> >> But anyway, the logs of your Graylog node are pretty clear: >> >> 2016-11-07T13:18:57.383-05:00 ERROR [NodePingThread] Uncaught exception >>> in periodical >>> com.mongodb.MongoTimeoutException: Timed out after 30000 ms while >>> waiting for a server that matches >>> ReadPreferenceServerSelector{readPreference=primary}. Client view of >>> cluster state is {type=UNKNOWN, servers=[{address=localhost:27017, >>> type=UNKNOWN, state=CONNECTING, >>> exception={com.mongodb.MongoSocketOpenException: Exception opening socket}, >>> caused by {java.net.ConnectException: Connection refused (Connection >>> refused)}}] >>> [...] >>> 2016-11-07T13:19:35.309-05:00 WARN [IndexerSetupService] Could not >>> connect to Elasticsearch >>> 2016-11-07T13:19:35.310-05:00 INFO [IndexerSetupService] If you're >>> using multicast, check that it is working in your network and that >>> Elasticsearch is accessible. Also check that the cluster name setting is >>> correct. >>> 2016-11-07T13:19:35.311-05:00 INFO [IndexerSetupService] See >>> http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html >>> for details. >> >> >> Just to make sure: All components (Graylog, MongoDB, Elasticsearch) are >> installed on the same machine, correct? >> >> Cheers, >> Jochen >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/e020df34-86f5-4e27-892e-4aa88693fa1e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
