Found the issue. It was a firewall blocking the REST API port. Thank you for the assistance
On Thursday, June 2, 2016 at 4:37:24 PM UTC-4, Scott John wrote: > > I am getting the following error in my graylog log file. > > 2016-06-02T16:16:55.327-04:00 WARN [BlockingBatchedESOutput] Error while > waiting for healthy Elasticsearch cluster. Not flushing. > java.util.concurrent.TimeoutException: Elasticsearch cluster didn't get > healthy within timeout > at > org.graylog2.indexer.cluster.Cluster.waitForConnectedAndHealthy(Cluster.java:179) > > ~[graylog.jar:?] > at > org.graylog2.indexer.cluster.Cluster.waitForConnectedAndHealthy(Cluster.java:184) > > ~[graylog.jar:?] > at > org.graylog2.outputs.BlockingBatchedESOutput.flush(BlockingBatchedESOutput.java:112) > > [graylog.jar:?] > at > org.graylog2.outputs.BlockingBatchedESOutput.write(BlockingBatchedESOutput.java:105) > > [graylog.jar:?] > at > org.graylog2.buffers.processors.OutputBufferProcessor$1.run(OutputBufferProcessor.java:189) > > [graylog.jar:?] > at > com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:176) > > [graylog.jar:?] > at > java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) > [?:1.8.0_91] > at java.util.concurrent.FutureTask.run(FutureTask.java:266) > [?:1.8.0_91] > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) > > [?:1.8.0_91] > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) > > [?:1.8.0_91] > at java.lang.Thread.run(Thread.java:745) [?:1.8.0_91] > > The web interface comes up but reports that it cannot connect to the > server on port 12900. > GL - 2.0.2 > ES - 2.3.3 > MDB - 3.0.12 > OS - RHEL 7.2 > Installed from repos. > > curl -XGET http://localhost:9200/_cluster/health?pretty > { > "cluster_name" : "graylog2", > "status" : "green", > "timed_out" : false, > "number_of_nodes" : 1, > "number_of_data_nodes" : 1, > "active_primary_shards" : 48, > "active_shards" : 48, > "relocating_shards" : 0, > "initializing_shards" : 0, > "unassigned_shards" : 0, > "delayed_unassigned_shards" : 0, > "number_of_pending_tasks" : 0, > "number_of_in_flight_fetch" : 0, > "task_max_waiting_in_queue_millis" : 0, > "active_shards_percent_as_number" : 100.0 > } > > elasticsearch.yml > > cluster.name: graylog2 > network.host: 127.0.0.1 > discovery.zen.ping.multicast.enabled: false > discovery.zen.ping.unicast.hosts: ["127.0.0.1:9300"] > script.inline: on > script.indexed: on > > server.conf > > is_master = true > node_id_file = /etc/graylog/server/node-id > password_secret = XXXX > root_password_sha2 = XXXX > root_email = "ad...@email.com" > root_timezone = UTC > rest_listen_uri = http://127.0.0.1:12900/ > rotation_strategy = count > elasticsearch_max_docs_per_index = 20000000 > elasticsearch_max_number_of_indices = 20 > retention_strategy = delete > elasticsearch_shards = 4 > elasticsearch_replicas = 0 > elasticsearch_index_prefix = graylog2 > allow_leading_wildcard_searches = false > allow_highlighting = false > elasticsearch_http_enabled = false > elasticsearch_discovery_zen_ping_multicast_enabled = false > elasticsearch_discovery_zen_ping_unicast_hosts = 127.0.0.1:9300 > elasticsearch_network_host = 127.0.0.1 > elasticsearch_analyzer = standard > output_batch_size = 500 > output_flush_interval = 1 > output_fault_count_threshold = 5 > output_fault_penalty_seconds = 30 > processbuffer_processors = 5 > outputbuffer_processors = 3 > processor_wait_strategy = blocking > ring_size = 65536 > inputbuffer_ring_size = 65536 > inputbuffer_processors = 2 > inputbuffer_wait_strategy = blocking > message_journal_enabled = true > message_journal_dir = /var/lib/graylog-server/journal > dead_letters_enabled = false > lb_recognition_period_seconds = 3 > mongodb_uri = mongodb://localhost/graylog2 > mongodb_max_connections = 100 > mongodb_threads_allowed_to_block_multiplier = 5 > mongodb_useauth = false > transport_email_enabled = false > transport_email_hostname = mailhost.email.com > transport_email_port = 587 > transport_email_use_auth = false > transport_email_use_tls = true > transport_email_subject_prefix = [graylog2] > transport_email_from_email = g...@email.com > transport_email_web_interface_url = https://glog.email.com > content_packs_dir = /usr/share/graylog-server/contentpacks > content_packs_auto_load = grok-patterns.json > > > What am I missing here? > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/839fd880-ef53-49e5-9808-62546f286e78%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
