> not same cluster_name [elasticsearch] Seems like your graylog2-server node is running with cluster.name "elasticsearch" and your ElasticSearch node(s) are not. You need to set the same cluster.name everywhere.
On Wed, Feb 12, 2014 at 6:40 PM, Craig Blake <craigwbl...@gmail.com> wrote: > Hi, I'm trying to get graylog2 up and running for the first time and am > continually getting errors about a missing ElasticSearch master. > > I'm following the directions here: > http://support.torch.sh/help/kb/graylog2-server/installing-graylog2-server-v020x-on-nix-systems > > > > This is the configuration I'm using, built by following the directions at > the above link and adding a change to disable multicast discovery from here: > http://support.torch.sh/help/kb/graylog2-server/configuring-and-tuning-elasticsearch-for-graylog2-v0200 > > is_master = true > node_id_file = /etc/graylog2-server-node-id > password_secret = ******** > root_password_sha2 = ******** > plugin_dir = plugin > rest_listen_uri = http://127.0.0.1:12900/ > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 4 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog2 > allow_leading_wildcard_searches = false > elasticsearch_cluster_name = elasticsearch > elasticsearch_discovery_zen_ping_multicast_enabled = false > elasticsearch_discovery_zen_ping_unicast_hosts = 127.0.0.1:9300 > elasticsearch_analyzer = standard > output_batch_size = 5000 > processbuffer_processors = 5 > outputbuffer_processors = 5 > processor_wait_strategy = blocking > ring_size = 1024 > mongodb_useauth = true > mongodb_user = graylog2 > mongodb_password = ******** > mongodb_replica_set = mongo01:27017,mongo02:27017 > mongodb_database = graylog2 > mongodb_port = 27017 > mongodb_host = mongo01 > mongodb_max_connections = 100 > mongodb_threads_allowed_to_block_multiplier = 5 > transport_email_enabled = false > transport_email_hostname = mail.example.com > transport_email_port = 587 > transport_email_use_auth = true > transport_email_use_tls = true > transport_email_use_ssl = true > transport_email_auth_username = y...@example.com > transport_email_auth_password = secret > transport_email_subject_prefix = [graylog2] > transport_email_from_email = grayl...@example.com > > > > I notice in the output some DEBUG messages that say this: > > 2014-02-12 17:30:43,380 DEBUG: org.elasticsearch.discovery.zen.ping.unicast > - [graylog2-server] [2] filtering out response from > [Scorpio][GrPJicD8TV6Kvaig7ZbLhQ][inet[/10.3.108.55:9300]], not same > cluster_name [elasticsearch] > > > > And then the server fails with this error: > > 2014-02-12 17:30:48,377 ERROR: org.graylog2.Main - > > ################################################################################ > > ERROR: No ElasticSearch master was found. > > Need help? > > * Official documentation: http://support.torch.sh/help/kb > * Mailing list: http://support.torch.sh/help/kb/general/forums-mailing-list > * Issue tracker: http://support.torch.sh/help/kb/general/issue-trackers > * Commercial support: http://www.torch.sh/ > > But we also got some specific help pages that might help you in this case: > > * > http://support.torch.sh/help/kb/graylog2-server/configuring-and-tuning-elasticsearch-for-graylog2-v0200 > > Terminating. :( > > ################################################################################ > > > Any ideas what the problem is? > > Thanks, > Craig > > ~ > > -- > You received this message because you are subscribed to the Google Groups > "graylog2" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/groups/opt_out. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
