problem solved. solution below the question.
could someone please help me reconfigure my nginx balancer?
i have 3 elk nodes behind a UDP/TCP balancer (round-robin).
|----------------|
| |
| elk-balancer |
| |
| 80,514,9200 |
|----------------|
|
---------------------------------------
| | |
|----------------| |----------------| |----------------|
| | | | | |
| elk-node-01 | | elk-node-02 | | elk-node-03 |
| | | | | |
|----------------| |----------------| |----------------|
since i updated kibana to 4.3.0 , i cant balance kibana web requests anymore.
nginx just hangs there, waiting for for the node to respond... forever...
GET http://elk-balancer/kibana
/var/log/nginx/access-80.log
10.11.12.32 - - [16/Dec/2015:09:41:13 -0200] "GET /kibana/ HTTP/1.1" 200 158 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.80 Safari/537.36"
10.11.12.32 - - [16/Dec/2015:09:41:16 -0200] "POST /kibana/elasticsearch/_mget?timeout=0&ignore_unavailable=true&preference=1450266075817 HTTP/1.1" 200 183 "http://10.20.30.160/kibana/app/kibana" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.80 Safari/537.36"
10.11.12.32 - - [16/Dec/2015:09:41:16 -0200] "POST /kibana/elasticsearch/.kibana/index-pattern/_search?fields= HTTP/1.1" 403 103 "http://10.20.30.160/kibana/app/kibana" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.80 Safari/537.36"
but elasticsearch, logstash, pen and rsyslog are working fine.