I have deployed ECK and BANZAI logging on AKS, then trying sent logs to elasticsearch via fluentd.
No index have found on the Kibana discovery, I deployed a CentOS pod and verified its HTTP connectivity. But empty responded as follows.
sh-4.2# curl -v http://my-elasticsearch-es-http.elastic-system.svc.cluster.local:9200
* About to connect() to my-elasticsearch-es-http.elastic-system.svc.cluster.local port 9200 (#0)
* Trying 10.0.85.166...
* Connected to my-elasticsearch-es-http.elastic-system.svc.cluster.local (10.0.85.166) port 9200 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: my-elasticsearch-es-http.elastic-system.svc.cluster.local:9200
> Accept: */*
>
* Empty reply from server
* Connection #0 to host my-elasticsearch-es-http.elastic-system.svc.cluster.local left intact
curl: (52) Empty reply from server
sh-4.2#
On the other hands, I had deployed elasticsearch via helm provided by Rancher. At the time the elasticsearch responded properly, and Kibana showed an index from fluentd via BANZAI flow.
sh-4.2# curl -v http://elasticsearch-master.my-efk-p-988c4.svc.cluster.local:9200
* About to connect() to elasticsearch-master.my-efk-p-988c4.svc.cluster.local port 9200 (#0)
* Trying 10.0.79.80...
* Connected to elasticsearch-master.my-efk-p-988c4.svc.cluster.local (10.0.79.80) port 9200 (#0)
> GET / HTTP/1.1
> User-Agent: curl/7.29.0
> Host: elasticsearch-master.my-efk-p-988c4.svc.cluster.local:9200
> Accept: */*
>
< HTTP/1.1 200 OK
< content-type: application/json; charset=UTF-8
< content-length: 517
<
{
"name" : "elasticsearch-master-2",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "gx-LF7UhQLK1LAcv0F_4Ug",
"version" : {
"number" : "7.3.0",
"build_flavor" : "default",
"build_type" : "docker",
"build_hash" : "de777fa",
"build_date" : "2019-07-24T18:30:11.767338Z",
"build_snapshot" : false,
"lucene_version" : "8.1.0",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
},
"tagline" : "You Know, for Search"
}
* Connection #0 to host elasticsearch-master.my-efk-p-988c4.svc.cluster.local left intact
sh-4.2#
I am wondering what I am missing. Anyone, please give me what I should do in the ECK case ?