# Graylog2 & ElsaticSearch connection problem **URL:** \ **Category:** Elasticsearch\ **Created:** [March 29, 2013, 2:50pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383 "2013-03-29T14:50:10Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![setevo\_\_](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Post date:** [March 29, 2013, 2:50pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/1 "2013-03-29T14:50:10Z")
Hi. I'm absolutely new with _Graylog2_ - so sorry if anything wrong. After I installed it with that[http://support.torch.sh/help/kb/graylog2-server/installing-graylog2-server-on-debian-6](http://support.torch.sh/help/kb/graylog2-server/installing-graylog2-server-on-debian-6)and that [http://bezha.od.ua/centos-6-2-x64-graylog2-v0-9-6/](http://bezha.od.ua/centos-6-2-x64-graylog2-v0-9-6/) instructions - I got error when start it: $ 2013-03-29 15:09:49,654 WARN : org.elasticsearch.discovery - [graylog2-server] waited for 30s and no initial state was set by the discovery Exception in thread "main" org.elasticsearch.discovery.MasterNotDiscoveredException: waited for [30s] Full debug-log available here[http://rtfm.co.ua/uploads/graylogstart-debug.txt](http://rtfm.co.ua/uploads/graylogstart-debug.txt) . Used: # lsb\_release -a Description: Debian GNU/Linux 6.0.7 (squeeze) Package: elasticsearch Version: 0.20.6 Graylog2-server: 0.10.0-rc.1 Am I right understand that _Graylog2-server_ cann't connect to \* ElasticSearch\*? Can somebody please give any idea to fix it? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Kay\_Ropke](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_ropke/32/2424_2.png) [@Kay\_Ropke](https://discuss.elastic.co/u/Kay_Ropke)\ **Post date:** [March 29, 2013, 2:53pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/2 "2013-03-29T14:53:30Z")
On Mar 29, 2013, at 3:50 PM, setevoй\_червь™ [setevoy4@gmail.com](mailto:setevoy4@gmail.com) wrote: > Am I right understand that Graylog2-server cann't connect to Elasticsearch? yes > Can somebody please give any idea to fix it? it looks like you are trying to use multicast discovery. check that your Elasticsearch cluster is up and try to disable multicast discovery and use unicast discovery in elasticsearch.yml (the one used in graylog2-server, not the one in elasticsearch itself). you can find the options here: > **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)** > > Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today. cheers, -k -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Kay\_Ropke](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_ropke/32/2424_2.png) [@Kay\_Ropke](https://discuss.elastic.co/u/Kay_Ropke)\ **Post date:** [March 29, 2013, 2:54pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/3 "2013-03-29T14:54:27Z")
On Mar 29, 2013, at 3:50 PM, setevoй\_червь™ [setevoy4@gmail.com](mailto:setevoy4@gmail.com) wrote: > Full debug-log available here. oh, and you really want to update your graylog2 version. 0.10rc1 is _old_. 🙂 -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![setevo\_\_](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Post date:** [March 29, 2013, 3:16pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/4 "2013-03-29T15:16:31Z")
it looks like you are trying to use multicast discovery. > check that your Elasticsearch cluster is up and try to disable multicast > discovery and use unicast discovery in elasticsearch.yml (the one used in > graylog2-server, not the one in elasticsearch itself). > > On 03/29/2013 04:53 PM, Kay Röpke wrote: it looks like you are trying to use multicast discovery. check that your Elasticsearch cluster is up and try to disable multicast discovery and use unicast discovery in elasticsearch.yml (the one used in graylog2-server, not the one in elasticsearch itself). Thank for replay. So I uncomment: discovery.zen.ping.multicast.enabled: false and: discovery.zen.ping.unicast.hosts And after that restarted _Elastic_. But still have errors: # java -jar graylog2-server.jar --debug \> /home/setevoy/graylogstart-debug2.txt Exception in thread "main" org.elasticsearch.discovery.MasterNotDiscoveredException: waited for [30s] at org.elasticsearch.action.support.master.TransportMasterNodeOperationAction$3.onTimeout(TransportMasterNodeOperationAction.java:169) at org.elasticsearch.cluster.service.InternalClusterService$NotifyTimeout.run(InternalClusterService.java:356) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) at java.lang.Thread.run(Thread.java:636) My configs: graylog2.conf [http://rtfm.co.ua/uploads/graylog2.conf](http://rtfm.co.ua/uploads/graylog2.conf) graylog2-elasticsearch.yml[http://rtfm.co.ua/uploads/graylog2-elasticsearch.yml](http://rtfm.co.ua/uploads/graylog2-elasticsearch.yml) New debug-log available here[http://rtfm.co.ua/uploads/graylogstart-debug2.txt](http://rtfm.co.ua/uploads/graylogstart-debug2.txt) . -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![setevo\_\_](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Post date:** [March 29, 2013, 3:18pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/5 "2013-03-29T15:18:45Z")
On Friday, March 29, 2013 4:54:27 PM UTC+2, Kay Röpke wrote: > oh, and you really want to update your graylog2 version. 0.10rc1 is _old_. It's last version I found on GitHub[https://github.com/Graylog2/graylog2-server/downloads](https://github.com/Graylog2/graylog2-server/downloads)🙂 Can you please give any other source? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![Kay\_Ropke](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kay_ropke/32/2424_2.png) [@Kay\_Ropke](https://discuss.elastic.co/u/Kay_Ropke)\ **Post date:** [March 29, 2013, 3:33pm UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/6 "2013-03-29T15:33:49Z")
On Mar 29, 2013, at 4:18 PM, setevoй\_червь™ [setevoy4@gmail.com](mailto:setevoy4@gmail.com) wrote: > Can you please give any other source? github has deprecated the uploads, so we can't upload binaries there anymore. I guess the read me should mention that explicitly. Get the latest from [http://www.graylog2.org/download](http://www.graylog2.org/download) always 🙂 As for your discovery: you put 127.0.0.1:9350 into your discovery list. But that's the address of the graylog2-server Elasticsearch node, which it uses as a client to connect to the cluster. You have to put in the address of the Elasticsearch cluster you are running 😉 cheers, -k -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![setevo\_\_](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Post date:** [March 30, 2013, 8:34am UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/7 "2013-03-30T08:34:14Z")
29.03.2013 17:33, Kay Röpke пишет: > As for your discovery: > you put 127.0.0.1:9350 into your discovery list. > But that's the address of the graylog2-server Elasticsearch node, which it uses as a client to connect to the cluster. > You have to put in the address of the Elasticsearch cluster you are running 😉 Kay, thanks - but I'll check it later on. Anyone sometimes must have weekend 😉 -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![setevo\_\_](https://avatars.discourse-cdn.com/v4/letter/s/22d042/32.png) [@setevo\_\_](https://discuss.elastic.co/u/setevo__)\ **Post date:** [April 1, 2013, 8:12am UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/8 "2013-04-01T08:12:56Z")
Well, I'm finished my misfortune 🙂 A lot of thanks to you and that[https://groups.google.com/forum/?hl=en-US&fromgroups=#!topic/graylog2/3l8w9dx\_wvU](https://groups.google.com/forum/?hl=en-US&fromgroups=#!topic/graylog2/3l8w9dx_wvU)post. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:43am UTC](https://discuss.elastic.co/t/graylog2-elsaticsearch-connection-problem/11383/9 "2017-07-06T02:43:25Z")