Hi, I am new to the elastic world and am currently testing the elastic stack in a non production setting.
I previously set up ELK + filebeat and got everything running (first logs from filebeat visible in Kibana via Logstash -> Elastic). Since this is part of my bachelor thesis I am now trying to replicate this setup with the documentation I wrote, but I am having issues right at the start now and I am not sure why - "I am doing everything like I did the first time", but aparently I am not.
I am using ansible to install & configure everything. I am not allowed to use the official roles & need to do it by myself for the thesis.
My test setup:
Host macBookPro '15 with i7 & 16GB RAM
Guests:
Headless Debian 9 VM via VMWare Fusion (172.16.247.134) 2 Cores 2GB RAM
root + user (user has sudo rights)
Elasticsearch
Logstash
Kibana
[Not really interesting for this question]
Headless Debian 9 VM via VMWare Fusion (172.16.247.132) 1 Core 512MB RAM
root + user (user has sudo rights)
Filebeat
Basically what I am doing is:
- Install java 8
- Adding the apt_key
- Installing apt-transport-https
- Adding the repository definition in /etc/apt/sources....
- Updating the apt cache & install the elasticsearch package
- Editing the elasticsearch.yml
- Enabling the Elasticsearch service
- Starting the elasticsearch service
If I send a curl 172.16.247.134:9200, I get following answer:
{
"name" : "ELKrebuild",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "na",
"version" : {
"number" : "7.1.1",
"build_flavor" : "default",
"build_type" : "deb",
"build_hash" : "7a013de",
"build_date" : "2019-05-23T14:04:00.380842Z",
"build_snapshot" : false,
"lucene_version" : "8.0.0",
"minimum_wire_compatibility_version" : "6.8.0",
"minimum_index_compatibility_version" : "6.0.0-beta1"
},
"tagline" : "You Know, for Search"
}
If I now take a look at the elasticsearch log I think the problem is, that my single elastisearch node is not finding a master (and not electing itself as the master).
Since the log from the working setup is different from this point on from the new setup, right after "bound or publishing to a non-loopback address, enforcing bootstrap checks".
The working VM logs a cluster UUID and logs that it was elected-as-master, the non working VM logs "master not discovered yet, this node has not previously joined a bootstrapped (v7+) cluster, and [cluster.initial_master_nodes] is empty on this node: have discovered ; discovery will continue using [127.0.0.1:9300] from hosts providers and [{ELKrebuild}{eDxm9vQURH2wVvEe4ZfnEA}{SddpOSx0Ro6RZVT5z_KDKw}{172.16.247.134}{172.16.247.134:9300}{ml.machine_memory=2082492416, xpack.installed=true, ml.max_open_jobs=20}] from last-known cluster state; node term 0, last-accepted version 0 in term 0"
I am thankfull for any directions. Thanks!