systemctl status elasticsearch
× elasticsearch.service - Elasticsearch
Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Tue 2023-09-12 08:24:41 +03; 58min ago
Docs: https://www.elastic.co
Process: 2717340 ExecStart=/usr/share/elasticsearch/bin/systemd-entrypoint -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
Main PID: 2717340 (code=exited, status=1/FAILURE)
CPU: 1.479s
12 08:24:41 ubuntu systemd-entrypoint[2717340]: at java.base/java.nio.file.Files.newByteChannel(Files.java:431)
12 08:24:41 ubuntu systemd-entrypoint[2717340]: at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java>
12 08:24:41 ubuntu systemd-entrypoint[2717340]: at java.base/java.nio.file.Files.newInputStream(Files.java:159)
12 08:24:41 ubuntu systemd-entrypoint[2717340]: at java.base/java.nio.file.Files.newBufferedReader(Files.java:2892)
12 08:24:41 ubuntu systemd-entrypoint[2717340]: at org.elasticsearch.node.InternalSettingsPreparer.loadConfigWithSubstitutions(InternalS>
12 08:24:41 ubuntu systemd-entrypoint[2717340]: ... 6 more
12 08:24:41 ubuntu systemd[1]: elasticsearch.service: Main process exited, code=exited, =1/FAILURE
سبتمبر 12 08:24:41 ubuntu systemd[1]: elasticsearch.service: Failed with result 'exit-code'.
12 08:24:41 ubuntu systemd[1]: Failed to start Elasticsearch.
12 08:24:41 ubuntu systemd[1]: elasticsearch.service: Consumed 1.479s CPU time.
this is the log file
[2023-09-11T01:30:00,001][INFO ][o.e.x.m.MlDailyMaintenanceService] [ubuntu] triggering scheduled [ML] maintenance tasks
[2023-09-11T01:30:00,151][INFO ][o.e.x.m.a.TransportDeleteExpiredDataAction] [ubuntu] Deleting expired data
[2023-09-11T01:30:00,154][INFO ][o.e.x.m.j.r.UnusedStatsRemover] [ubuntu] Successfully deleted [0] unused stats documents
[2023-09-11T01:30:00,185][INFO ][o.e.x.m.a.TransportDeleteExpiredDataAction] [ubuntu] Completed deletion of expired ML data
[2023-09-11T01:30:00,185][INFO ][o.e.x.m.MlDailyMaintenanceService] [ubuntu] Successfully completed [ML] maintenance task: triggerDeleteExpiredDataTask
[2023-09-11T03:00:08,782][INFO ][o.e.c.m.MetadataCreateIndexService] [ubuntu] [.monitoring-kibana-7-2023.09.11] creating index, cause [auto(bulk api)], templates [.monitoring-kibana], shards [1]/[0]
[2023-09-11T03:00:09,895][INFO ][o.e.c.m.MetadataCreateIndexService] [ubuntu] [.monitoring-es-7-2023.09.11] creating index, cause [auto(bulk api)], templates [.monitoring-es], shards [1]/[0]
[2023-09-11T04:29:39,551][INFO ][o.e.m.j.JvmGcMonitorService] [ubuntu] [gc][302125] overhead, spent [385ms] collecting in the last [1s]
[2023-09-11T04:30:00,000][INFO ][o.e.x.s.SnapshotRetentionTask] [ubuntu] starting SLM retention snapshot cleanup task
[2023-09-11T04:30:00,001][INFO ][o.e.x.s.SnapshotRetentionTask] [ubuntu] there are no repositories to fetch, SLM retention snapshot cleanup task complete
[2023-09-11T04:32:32,298][WARN ][o.e.c.c.ClusterBootstrapService] [ubuntu] this node is locked into cluster UUID [d_-n9Pq4QduyINJwEgcekQ] but [cluster.initial_master_nodes] is set to [ubuntu]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts; for further information see https://www.elastic.co/guide/en/elasticsearch/reference/8.9/important-settings.html#initial_master_nodes
[2023-09-11T08:43:07,468][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] http client did not trust this server's certificate, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.35:49829}
[2023-09-11T09:01:03,011][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.35:50172}
[2023-09-11T09:01:04,078][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.35:50173}
[2023-09-11T09:01:07,336][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] http client did not trust this server's certificate, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.35:50174}
[2023-09-11T10:14:30,922][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52196}
[2023-09-11T10:14:30,926][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52242}
[2023-09-11T10:14:30,928][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52262}
[2023-09-11T10:14:30,927][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52256}
[2023-09-11T10:14:30,923][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52208}
[2023-09-11T10:14:30,929][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52264}
[2023-09-11T10:14:30,925][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52230}
[2023-09-11T10:14:30,924][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52220}
[2023-09-11T10:14:30,953][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52274}
[2023-09-11T10:14:30,954][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52282}
[2023-09-11T10:14:37,551][WARN ][o.e.h.AbstractHttpServerTransport] [ubuntu] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.83:52286}
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:499) ~[?:?]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[?:?]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[?:?]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) ~[?:?]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) ~[?:?]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) ~[?:?]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) ~[?:?]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) ~[?:?]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) ~[?:?]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) ~[?:?]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) ~[?:?]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) ~[?:?]
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) ~[?:?]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[?:?]
at java.lang.Thread.run(Thread.java:1623) ~[?:?]
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: unknown_ca
at sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[?:?]
at sun.security.ssl.Alert.createSSLException(Alert.java:117) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:365) ~[?:?]
at sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:287) ~[?:?]
at sun.security.ssl.TransportContext.dispatch(TransportContext.java:204) ~[?:?]
at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
at sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:736) ~[?:?]
at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:691) ~[?:?]
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:506) ~[?:?]
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:482) ~[?:?]
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:679) ~[?:?]
at io.netty.handler.ssl.SslHandler$SslEngineType$3.unwrap(SslHandler.java:297) ~[?:?]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1353) ~[?:?]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1246) ~[?:?]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1295) ~[?:?]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529) ~[?:?]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468) ~[?:?]
... 16 more
[2023-09-11T10:25:37,610][WARN ][o.e.h.n.Netty4HttpServerTransport] [ubuntu] http client did not trust this server's certificate, closing connection Netty4HttpChannel{localAddress=/172.20.10.50:9200, remoteAddress=/172.20.10.35:53018}
[2023-09-11T10:26:23,134][INFO ][o.e.n.Node ] [ubuntu] stopping ...
[2023-09-11T10:26:23,136][INFO ][o.e.c.f.AbstractFileWatchingService] [ubuntu] shutting down watcher thread
[2023-09-11T10:26:23,214][INFO ][o.e.c.f.AbstractFileWatchingService] [ubuntu] watcher service stopped
[2023-09-11T10:26:23,217][INFO ][o.e.x.w.WatcherService ] [ubuntu] stopping watch service, reason [shutdown initiated]
[2023-09-11T10:26:23,218][INFO ][o.e.x.w.WatcherLifeCycleService] [ubuntu] watcher has stopped and shutdown
[2023-09-11T10:26:24,239][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ubuntu] [controller/3683359] [Main.cc@176] ML controller exiting
[2023-09-11T10:26:24,494][INFO ][o.e.x.m.p.NativeController] [ubuntu] Native controller process has stopped - no new native processes can be started
[2023-09-11T10:26:29,845][INFO ][o.e.n.Node ] [ubuntu] stopped
[2023-09-11T10:26:29,845][INFO ][o.e.n.Node ] [ubuntu] closing ...
[2023-09-11T10:26:30,136][INFO ][o.e.n.Node ] [ubuntu] closed
# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
# Before you set out to tweak and tune the configuration, make sure you
# understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
cluster.name: ubuntu
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
node.name: Data_Node_1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
#path.data: /var/lib/elasticsearch
path.data: /var/lib/elasticsearch2
#path.data: /var/lib/docker/volumes/docker_esdata/_data/
#path.data: /home/ubuntu/Documents/docker_esdata/_data/
#path.data: /home/ubuntu/Downloads/docker_esdata/_data
#
#action.auto_create_index: +*
#
#
# Path to log files:
#
path.logs: /var/log/elasticsearch
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
#
network.host: "localhost"
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.seed_hosts: ["172.20.10.35", "172.20.10.50"]
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["Master_Node", "Data_Node_1"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false
#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically
# generated to configure Elasticsearch security features on 30-08-2023 07:54:47
#
# --------------------------------------------------------------------------------
# Enable security features
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
enabled: true
keystore.path: certs/http.p12
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
enabled: true
verification_mode: certificate
keystore.path: certs/transport.p12
truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
#cluster.initial_master_nodes: ["Master_Node"]
# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 0.0.0.0
# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
#transport.host: 0.0.0.0
#----------------------- END SECURITY AUTO CONFIGURATION -------------------------