Cross cluster replication not able to start

Elastic Security
1

I am facing an issue and that is I have created a 'leader01' index on leader node and when I am going to replicate it in follower node under 'follower01' index then follower node is not able to find the 'leader01' index

ERROR:

{
  "error" : {
    "root_cause" : [
      {
        "type" : "index_not_found_exception",
        "reason" : "no such index [leader-01]",
        "index" : "leader-01",
        "resource.id" : "leader-01",
        "resource.type" : "index_expression",
        "index_uuid" : "_na_"
      }
    ],
    "type" : "index_not_found_exception",
    "reason" : "no such index [leader-01]",
    "index" : "leader-01",
    "resource.id" : "leader-01",
    "resource.type" : "index_expression",
    "index_uuid" : "_na_"
  },
  "status" : 404
}

Thankyou

2

HI @nikita_sahu,

According to error it seems you giving wrong index name leader-01 but it should be leader01 as you mentioned. Let me know if I am missing something.

3

Which version of Elasticsearch are you using? It is recommended to always include this when you create a post.

4

Thanks for your response @ashishtiwari1993 .

There is no confusion about wrong index,
actually, only leader-01 is right index that I have created and want to replicate from leader to follower.

Thanks
Nikita S

5

Could you confirm index is exists from dev tools panel OR By hitting any random query to the index? As per error it seems wrong index name given.

6

Hi Ashish,

I have run this command "curl -XGET -k -u ‘admin:admin’ https://0.0.0.0:9200/_cat/indices?v"on leader with leader’s password and same with follower credentials on follower’s vm. so i have these are the right method to run command. I’m attaching the result of both the vm.

Result of Leader node:

green  open   wazuh-archives-4.x-2024.05.30 w0f_P7sAQ3qujzobz2Qr8Q   3   0      10779            0      6.7mb          6.7mb
yellow open   leader-02                     Po0PkR8US-qQ74yE25iAoQ   1   1          0            0       208b           208b
yellow open   leader-03                     AxcHAmRNQ6mjBGX-IqEXJw   1   1          0            0       208b           208b
green  open   wazuh-statistics-2024.24w     Mzidy9dRSs6pUrp4fSRNig   1   0       4022            0      1.4mb          1.4mb
yellow open   leader-01                     Oviudis3TPKSPkGWQBfrDQ   1   1          0            0       208b           208b
green  open   wazuh-archives-4.x-2024.05.31 EfDhwJTLRyaq0u_r_w7UYA   3   0       7272            0      4.9mb          4.9mb

Result of follower node:

health status index                         uuid                   pri rep docs.count docs.deleted store.size pri.store.size
green  open   wazuh-monitoring-2024.26w     EzWm7IyrT3m5-9lvVFNxfg   1   0          0            0       208b           208b
green  open   .opensearch-observability     Ff-WnFsjSJeLPcJPNK16YA   1   0          0            0       208b           208b
green  open   wazuh-alerts-4.x-2024.06.26   XNWkg2QwRWWadpaA44TkrQ   3   0        921            0      1.3mb          1.3mb
green  open   wazuh-alerts-4.x-2024.06.25   sIywYyGbRH-FYSx81h-fGg   3   0        996            0      1.6mb          1.6mb
green  open   wazuh-archives-4.x-2024.06.25 r43AswB2SbmYys6WNSQYAw   3   0       2801            0      2.8mb          2.8mb
green  open   wazuh-archives-4.x-2024.06.26 GpzQcIDCQF2_JulfmYS_Ug   3   0       3792            0      3.6mb          3.6mb
green  open   wazuh-statistics-2024.26w     Gv9WRs2vTvOYKz_FlqRBEg   1   0        591            0    458.3kb        458.3kb
green  open   .opendistro_security          E4I84EFgTa6bZpUuJ2S0IA   1   0         10            2     54.9kb         54.9kb
green  open   .kibana_1                     EfjQldwASzmBbhb2Vtk8VA   1   0          4            1       26kb           26kb

Please help here.
Regards,
Nikita Sahu

7

OpenSearch/OpenDistro are AWS run products and differ from the original Elasticsearch and Kibana products that Elastic builds and maintains. You may need to contact them directly for further assistance. See What is OpenSearch and the OpenSearch Dashboard? | Elastic for more details.

(This is an automated response from your friendly Elastic bot. Please report this post if you have any suggestions or concerns :elasticheart: )

8

The Opensearch implementation of cross cluster replication is completely separate from the one in Elasticsearch and is not supported here. You will need to bring this up with the OpensSearch community.

9

Hi christian,

Thankyou for the help and assistence.

Regards
Nikita

10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.