I am getting below error while setting elastic search

devdev7711 · January 12, 2023, 11:26am

I am installing 8.5.3 elastic.
after yml file change I am double clicking elasticsearch.bat file and service is not starting looks like.

[2023-01-12T14:38:25,268][INFO ][o.e.n.Node ] [node-1] node name [node-1], node ID [PBa_3qgMQqOG5ApHLMitrg], cluster name [UNO-application], roles [data_frozen, ingest, data_cold, data, remote_cluster_client, master, data_warm, data_content, transform, data_hot, ml]
[2023-01-12T14:38:28,596][ERROR][o.e.b.Elasticsearch ] [node-1] fatal exception while booting Elasticsearch
org.elasticsearch.ElasticsearchSecurityException: failed to load SSL configuration [xpack.security.transport.ssl] - cannot read configured [PKCS12] keystore (as a truststore) [E:\setup\elasticsearch-8.5.3-windows-x86_64\elasticsearch-8.5.3\config\certs\transport.p12] because the file does not exist
at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSslConfigurations$11(SSLService.java:605) ~[?:?]
at java.util.HashMap.forEach(HashMap.java:1429) ~[?:?]
at java.util.Collections$UnmodifiableMap.forEach(Collections.java:1553) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.loadSslConfigurations(SSLService.java:601) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.(SSLService.java:156) ~[?:?]
at org.elasticsearch.xpack.core.XPackPlugin.createSSLService(XPackPlugin.java:465) ~[?:?]
at org.elasticsearch.xpack.core.XPackPlugin.createComponents(XPackPlugin.java:314) ~[?:?]
at org.elasticsearch.node.Node.lambda$new$16(Node.java:709) ~[elasticsearch-8.5.3.jar:?]
at org.elasticsearch.plugins.PluginsService.lambda$flatMap$0(PluginsService.java:252) ~[elasticsearch-8.5.3.jar:?]
at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:273) ~[?:?]
at java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:197) ~[?:?]
at java.util.AbstractList$RandomAccessSpliterator.forEachRemaining(AbstractList.java:722) ~[?:?]
at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:509) ~[?:?]
at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:499) ~[?:?]
at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:575) ~[?:?]
at java.util.stream.AbstractPipeline.evaluateToArrayNode(AbstractPipeline.java:260) ~[?:?]
at java.util.stream.ReferencePipeline.toArray(ReferencePipeline.java:616) ~[?:?]
at java.util.stream.ReferencePipeline.toArray(ReferencePipeline.java:622) ~[?:?]
at java.util.stream.ReferencePipeline.toList(ReferencePipeline.java:627) ~[?:?]
at org.elasticsearch.node.Node.(Node.java:724) ~[elasticsearch-8.5.3.jar:?]
at org.elasticsearch.node.Node.(Node.java:318) ~[elasticsearch-8.5.3.jar:?]
at org.elasticsearch.bootstrap.Elasticsearch$2.(Elasticsearch.java:214) ~[elasticsearch-8.5.3.jar:?]
at org.elasticsearch.bootstrap.Elasticsearch.initPhase3(Elasticsearch.java:214) ~[elasticsearch-8.5.3.jar:?]
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:67) ~[elasticsearch-8.5.3.jar:?]
Caused by: org.elasticsearch.common.ssl.SslConfigException: cannot read configured [PKCS12] keystore (as a truststore) [E:\setup\elasticsearch-8.5.3-windows-x86_64\elasticsearch-8.5.3\config\certs\transport.p12] because the file does not exist
at org.elasticsearch.common.ssl.SslFileUtil.fileNotFound(SslFileUtil.java:66) ~[?:?]
at org.elasticsearch.common.ssl.SslFileUtil.ioException(SslFileUtil.java:37) ~[?:?]
at org.elasticsearch.common.ssl.StoreTrustConfig.readKeyStore(StoreTrustConfig.java:98) ~[?:?]
at org.elasticsearch.common.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:82) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:473) ~[?:?]
at java.util.HashMap.computeIfAbsent(HashMap.java:1228) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSslConfigurations$11(SSLService.java:603) ~[?:?]
... 23 more
Caused by: java.nio.file.NoSuchFileException: E:\setup\elasticsearch-8.5.3-windows-x86_64\elasticsearch-8.5.3\config\certs\transport.p12
at sun.nio.fs.WindowsException.translateToIOException(WindowsException.java:85) ~[?:?]
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:103) ~[?:?]
at sun.nio.fs.WindowsException.rethrowAsIOException(WindowsException.java:108) ~[?:?]
at sun.nio.fs.WindowsFileSystemProvider.newByteChannel(WindowsFileSystemProvider.java:236) ~[?:?]
at java.nio.file.Files.newByteChannel(Files.java:380) ~[?:?]
at java.nio.file.Files.newByteChannel(Files.java:432) ~[?:?]
at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422) ~[?:?]
at java.nio.file.Files.newInputStream(Files.java:160) ~[?:?]
at org.elasticsearch.common.ssl.KeyStoreUtil.readKeyStore(KeyStoreUtil.java:71) ~[?:?]
at org.elasticsearch.common.ssl.StoreTrustConfig.readKeyStore(StoreTrustConfig.java:94) ~[?:?]
at org.elasticsearch.common.ssl.StoreTrustConfig.createTrustManager(StoreTrustConfig.java:82) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.createSslContext(SSLService.java:473) ~[?:?]
at java.util.HashMap.computeIfAbsent(HashMap.java:1228) ~[?:?]
at org.elasticsearch.xpack.core.ssl.SSLService.lambda$loadSslConfigurations$11(SSLService.java:603) ~[?:?]
... 23 more

dadiasish · January 12, 2023, 11:36am

Does this file transport.p12 exists in the path which is mentioned in the elasticsearch.yml.

Please check that.

devdev7711 · January 12, 2023, 12:57pm

This file is not present

dadiasish · January 12, 2023, 1:03pm

That's what the error says.

Please follow this elastic guide below if you want to setup basic security for the system.

devdev7711 · January 14, 2023, 2:02pm

after follow steps I am still getting ssl error

leandrojmp · January 14, 2023, 2:10pm

What does your elasticsearch.yml file looks like? Please share it using the preformatted text option, the </> button.

The error is pretty direct.

[xpack.security.transport.ssl] - cannot read configured [PKCS12] keystore (as a truststore) [E:\setup\elasticsearch-8.5.3-windows-x86_64\elasticsearch-8.5.3\config\certs\transport.p12] because the file does not exist

It says that the file transport.p12 is not present in the specified directory.

If you follow the setup guide, created the file and put it in the specified directory it should work or give you a differente error.

Please share the error you are receiving now.

devdev7711 · January 15, 2023, 12:17pm

this is my elasticsearch yaml file now i have the tranport.p2 file but still getting error.

======================== Elasticsearch Configuration =========================

NOTE: Elasticsearch comes with reasonable defaults for most settings.

Before you set out to tweak and tune the configuration, make sure you

understand what are you trying to accomplish and the consequences.

The primary way of configuring a node is via this file. This template lists

the most important settings you may want to configure for a production cluster.

Please consult the documentation for further information on configuration options:

Elasticsearch Guide | Elastic

---------------------------------- Cluster -----------------------------------

Use a descriptive name for your cluster:

cluster.name: my-application

------------------------------------ Node ------------------------------------

Use a descriptive name for the node:

node.name: node-1

Add custom attributes to the node:

#node.attr.rack: r1

----------------------------------- Paths ------------------------------------

Path to directory where to store the data (separate multiple locations by comma):

#path.data: /path/to/data

Path to log files:

#path.logs: /path/to/logs

----------------------------------- Memory -----------------------------------

Lock the memory on startup:

#bootstrap.memory_lock: true

Make sure that the heap size is set to about half the memory available

on the system and that the owner of the process is allowed to use this

limit.

Elasticsearch performs poorly when the system is swapping the memory.

---------------------------------- Network -----------------------------------

Set the bind address to a specific IP (IPv4 or IPv6):

http.host: 10.181.32.143

Set a custom port for HTTP:

http.port: 9300

For more information, consult the network module documentation.

--------------------------------- Discovery ----------------------------------

Pass an initial list of hosts to perform discovery when this node is started:

The default list of hosts is ["127.0.0.1", "[::1]"]

discovery.seed_hosts: ["mysys"]
discovery.type: single-node

Bootstrap the cluster using an initial set of master-eligible nodes:

#cluster.initial_master_nodes: ["node-1", "node-2"]

For more information, consult the discovery and cluster formation module documentation.

---------------------------------- Gateway -----------------------------------

Block initial recovery after a full cluster restart until N nodes are started:

#gateway.recover_after_nodes: 3

For more information, consult the gateway module documentation.

---------------------------------- Various -----------------------------------

Require explicit names when deleting indices:

#action.destructive_requires_name: true
#xpack.security.audit.enabled: true
#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------

The following settings, TLS certificates, and keys have been automatically

generated to configure Elasticsearch security features on 15-01-2023 10:28:28

--------------------------------------------------------------------------------

Enable security features

xpack.security.enabled: true

xpack.security.enrollment.enabled: true

Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents

xpack.security.http.ssl:
enabled: true
keystore.path: certs/http.p12

Enable encryption and mutual authentication between cluster nodes

xpack.security.transport.ssl:
enabled: true
verification_mode: certificate
keystore.path: certs/transport.p12
truststore.path: certs/transport.p12

Create a new cluster with the current node only

Additional nodes can still join the cluster later

cluster.initial_master_nodes: ["mysys"]

Allow HTTP API connections from anywhere

Connections are encrypted and require user authentication

http.host: 10.181.32.143

Allow other nodes to join the cluster from anywhere

Connections are encrypted and mutually authenticated

#transport.host: 0.0.0.0

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

leandrojmp · January 15, 2023, 1:59pm

As I said, you need to share the error you are receiving, if you have the file in the correct path you won't get the same error.

devdev7711 · January 20, 2023, 7:26am

below is my filebeat it is working fine for 1 log location and 1 index but i want to use 2 file log location and 2 diifferent index 1 index for 1 log path. how can we do this

filebeat.inputs:

type: logenabled: truepaths:
- C:\ProgramData\dir\SES\Logs***

filebeat.config.modules:

path: ${path.config}/modules.d/*.yml

reload.enabled: true

setup.template.settings:
index.number_of_shards: 1

setup.template.name: "filebeat-"
setup.template.overwrite: true
setup.template.pattern: "filebeat-"
setup.template.settings:

setup.kibana:

host: ["http://10.111.32.150:5600"]

output.elasticsearch:

hosts: ["http://10.111.32.150:9300"]

index: "filebeat-*"

processors:

add_cloud_metadata: ~
add_docker_metadata: ~
add_kubernetes_metadata: ~

leandrojmp · January 20, 2023, 1:50pm

This is a completely different question, it is not clear if you solved your first issue or not and you didn't share the error you are getting.

If you solved the error, then you should open a new question about this, also, do not share configurations in plain text, use the preformatted button, the </>, it makes clear to read the configuration.

system · February 17, 2023, 1:51pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.