Elastic Plugin suddenly stopped

Hi Team,

The elastic plugin suddenly started to show RED in Kibana dashboard.

Port 9200 is listening and process is also up but curl is giving some authentication errors.

Note - Nginx and X-PACK is not yet installed.

=============================================================================
[root@clm-pun-t2yior bin]# curl -XGET 'localhost:9200/?pretty'
{
  "error" : {
    "root_cause" : [
      {
        "type" : "security_exception",
        "reason" : "missing authentication token for REST request [/?pretty]",
        "header" : {
          "WWW-Authenticate" : "Basic realm=\"security\" charset=\"UTF-8\""
        }
      }
    ],
    "type" : "security_exception",
    "reason" : "missing authentication token for REST request [/?pretty]",
    "header" : {
      "WWW-Authenticate" : "Basic realm=\"security\" charset=\"UTF-8\""
    }
  },
  "status" : 401
}
================================================================================
[root@clm-pun-t2yior bin]# systemctl status elasticsearch.service
● elasticsearch.service - Elasticsearch
   Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2018-06-01 08:33:01 EDT; 14min ago
     Docs: http://www.elastic.co
  Process: 3189 ExecStartPre=/usr/share/elasticsearch/bin/elasticsearch-systemd-pre-exec (code=exited, status=0/SUCCESS)
 Main PID: 3191 (java)
   CGroup: /system.slice/elasticsearch.service
           └─3191 /bin/java -Xms2g -Xmx2g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -X...

Jun 01 08:33:01 clm-pun-t2yior systemd[1]: Starting Elasticsearch...
Jun 01 08:33:01 clm-pun-t2yior systemd[1]: Started Elasticsearch.
====================================================================================
[root@clm-pun-t2yior bin]# netstat -plntu
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN      1/systemd
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1140/sshd
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      1592/master
tcp        0      0 10.133.188.252:5601     0.0.0.0:*               LISTEN      3268/node
tcp6       0      0 :::4750                 :::*                    LISTEN      1731/bin/rscd
tcp6       0      0 :::111                  :::*                    LISTEN      1/systemd
tcp6       0      0 ::1:9200                :::*                    LISTEN      3191/java
tcp6       0      0 127.0.0.1:9200          :::*                    LISTEN      3191/java
tcp6       0      0 ::1:9300                :::*                    LISTEN      3191/java
tcp6       0      0 127.0.0.1:9300          :::*                    LISTEN      3191/java
======================================================================================

Kind Regards,
Asif Bhat

Could you post the log file from the server?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.