Hi, I'm trying to get graylog2 up and running for the first time and am continually getting errors about a missing ElasticSearch master.
I'm following the directions here: http://support.torch.sh/help/kb/graylog2-server/installing-graylog2-server-v020x-on-nix-systems This is the configuration I'm using, built by following the directions at the above link and adding a change to disable multicast discovery from here: http://support.torch.sh/help/kb/graylog2-server/configuring-and-tuning-elasticsearch-for-graylog2-v0200 is_master = true node_id_file = /etc/graylog2-server-node-id password_secret = ******** root_password_sha2 = ******** plugin_dir = plugin rest_listen_uri = http://127.0.0.1:12900/ elasticsearch_max_docs_per_index = 20000000 elasticsearch_max_number_of_indices = 20 retention_strategy = delete elasticsearch_shards = 4 elasticsearch_replicas = 0 elasticsearch_index_prefix = graylog2 allow_leading_wildcard_searches = false elasticsearch_cluster_name = elasticsearch elasticsearch_discovery_zen_ping_multicast_enabled = false elasticsearch_discovery_zen_ping_unicast_hosts = 127.0.0.1:9300 elasticsearch_analyzer = standard output_batch_size = 5000 processbuffer_processors = 5 outputbuffer_processors = 5 processor_wait_strategy = blocking ring_size = 1024 mongodb_useauth = true mongodb_user = graylog2 mongodb_password = ******** mongodb_replica_set = mongo01:27017,mongo02:27017 mongodb_database = graylog2 mongodb_port = 27017 mongodb_host = mongo01 mongodb_max_connections = 100 mongodb_threads_allowed_to_block_multiplier = 5 transport_email_enabled = false transport_email_hostname = mail.example.com transport_email_port = 587 transport_email_use_auth = true transport_email_use_tls = true transport_email_use_ssl = true transport_email_auth_username = y...@example.com transport_email_auth_password = secret transport_email_subject_prefix = [graylog2] transport_email_from_email = grayl...@example.com I notice in the output some DEBUG messages that say this: 2014-02-12 17:30:43,380 DEBUG: org.elasticsearch.discovery.zen.ping.unicast - [graylog2-server] [2] filtering out response from [Scorpio][GrPJicD8TV6Kvaig7ZbLhQ][inet[/10.3.108.55:9300]], not same cluster_name [elasticsearch] And then the server fails with this error: 2014-02-12 17:30:48,377 ERROR: org.graylog2.Main - ################################################################################ ERROR: No ElasticSearch master was found. Need help? * Official documentation: http://support.torch.sh/help/kb * Mailing list: http://support.torch.sh/help/kb/general/forums-mailing-list * Issue tracker: http://support.torch.sh/help/kb/general/issue-trackers * Commercial support: http://www.torch.sh/ But we also got some specific help pages that might help you in this case: * http://support.torch.sh/help/kb/graylog2-server/configuring-and-tuning-elasticsearch-for-graylog2-v0200 Terminating. :( ################################################################################ Any ideas what the problem is? Thanks, Craig ~ -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.