Hi Nathan,
try removing the elasticsearch_transport_tcp_port setting from your Graylog
configuration and add the port (9300) to the IP address in
elasticsearch_discovery_zen_ping_unicast_hosts (so that it's bein set to
x.x.x.149:9300).
Additionally, your web_endpoint_uri is wrong and should be removed
completely (or at least point to the public address of the Graylog REST
API).
Cheers,
Jochen
On Thursday, 4 August 2016 21:14:37 UTC+2, Nathan Mace wrote:
>
> Per my other thread, I decided to delete the VMs and start over from
> scratch. Instead of running ES on two nodes and Graylog on one of those
> nodes, I've got two VM. Running ES only and the other running Graylog and
> MongoDB only.
>
> ansted -> x.x.x.146 Running Graylog and MongoDB
> ansted-search-01 -> x.x.x.149 Running ElasticSearch
>
> I've attached the two config files (one for Graylog and one for ES). I
> removed all of the commented out lines from the text files. I've also
> attached the log file that Graylog is generating. The repeated error is:
>
> 2016-08-04T14:14:09.089-04:00 WARN [unicast]
> [graylog-f51e5052-55d0-4c4a-92ca-89a28282b3f4] failed to send ping to
> [{#zen_unicast_1#}{x.x.x.149}{x.x.x.149:9200}]
> org.elasticsearch.transport.ReceiveTimeoutTransportException:
> [][x.x.x.149:9200][internal:discovery/zen/unicast] request_id [18] timed
> out after [3750ms]
> at
> org.elasticsearch.transport.TransportService$TimeoutHandler.run(TransportService.java:679)
>
> [graylog.jar:?]
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
>
> [?:1.8.0_101]
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
>
> [?:1.8.0_101]
> at java.lang.Thread.run(Thread.java:745) [?:1.8.0_101]
>
> It is trying to connect to the ES server's IP, but I am out of ideas as
> for what is wrong. I know I have ES set to use port 9300 for transport and
> Graylog is (currently) set to port 9200, but changing Graylog's config file
> doesn't seem to change the error in the Graylog log file.
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/89575922-a7f4-4cf4-ad78-ae8587f0b4a0%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
