# Problems with checking Elasticsearch remotely

**URL:** https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087
**Category:** Elastic Search
**Created:** [May 13, 2025, 1:23pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087 "2025-05-13T13:23:29Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Asfga](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Asfga](https://discuss.elastic.co/u/Asfga)
#### Post date: [May 13, 2025, 1:23pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/1 "2025-05-13T13:23:30Z")

</div>

Hi guys,

I am new to this topic and just set up a new Elasticsearch installation on my server. The connection to localhost works fine and I get a result when I do `curl -X GET 'http://localhost:9200'`.

Now I want to connect to Elasticsearch from a website from another server, so I thought I have to put the ip address of this server to the network.host in the config file. I've done this and tried the same curl as above `curl -X GET '<ip address of server>:9200'` but the connection failed to this. I have opened the port :9200, no firewall blocks and no errors in the Elasticsearch log.

Any ideas, where the problem is? Thanks!

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [May 13, 2025, 1:40pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/2 "2025-05-13T13:40:49Z")

</div>

> [@Asfga](#):
>
> Now I want to connect to Elasticsearch from a website from another server, so I thought I have to put the ip address of this server to the network.host in the config file.

Which IP did you use in `network.host`? It needs to be an IP address that exists on the network interfaces of the machine where Elasticsearch is running, it is the IP address to which the process will listen.

If you want it to be accessible externaly, you may just use `network.host` as `0.0.0.0` this makes Elasticsearch accessible on all the IP address on the machine.

You connect to it from another server using one of the IPs of the Elasticsearch machine.

---

<div class="post-metadata">

### Author: ![Asfga](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Asfga](https://discuss.elastic.co/u/Asfga)
#### Post date: [May 13, 2025, 2:33pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/3 "2025-05-13T14:33:28Z")

</div>

I used the IP of the other server, the server without Elasticsearch. I think at one time I also used `0.0.0.0`, but to no avail. I just tested it again with `0.0.0.0`, but `curl -X GET '<ip address of Elasticsearch server>:9200'` gave me the error `Failed to connect to 162.x.x.x port 9200 after 0 ms: Couldn't connect to server`.

> You connect to it from another server using one of the IPs of the Elasticsearch machine.

How can this be done?

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [May 13, 2025, 2:50pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/4 "2025-05-13T14:50:17Z")

</div>

> [@Asfga](#):
>
> How can this be done?

The same way you did, for example `curl -X get http://ip:9200`

Is Elasticsearch running? What do you havein the logs? What does your `elasticsearch.yml` looks like? Please share it.

If Elasticsearch is running and you configured `network.host` to listen on `0.0.0.0` but you still cannot access, then it may be a network issue.

---

<div class="post-metadata">

### Author: ![Asfga](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Asfga](https://discuss.elastic.co/u/Asfga)
#### Post date: [May 13, 2025, 3:44pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/5 "2025-05-13T15:44:42Z")

</div>

It should be running. I was testing it with `curl 'localhost:9200/_cat/indices?v'` and got `health status index pri rep docs.count docs.deleted store.size pri.store.size` as output.

Not sure how to share the files with you, so I will try to list you the input. I have the following lines in `elasticsearch.yml`:

- cluster.name: x
- path.data: /usr/home/...
- path.logs: /usr/home/...
- network.host: 0.0.0.0

The logs:

```auto
[2025-05-13T13:27:40,677][INFO][o.e.n.Node] [<server_ip>] JVM home [/usr/lib/jvm/java-17-openjdk-amd64], using bundled JDK [false]
[2025-05-13T13:27:40,678][INFO][o.e.n.Node] [<server_ip>] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-8342200614600624894, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/usr/home/itool/.linuxbrew/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Xms31744m, -Xmx31744m, -XX:MaxDirectMemorySize=16642998272, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=25, -Des.path.home=/usr/home/itool/.linuxbrew/Cellar/elasticsearch/7.17.6/libexec, -Des.path.conf=/usr/home/itool/.linuxbrew/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=tar, -Des.bundled_jdk=true]
[2025-05-13T13:27:42,124][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [aggs-matrix-stats]
[2025-05-13T13:27:42,124][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [analysis-common]
[2025-05-13T13:27:42,124][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [constant-keyword]
[2025-05-13T13:27:42,125][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [frozen-indices]
[2025-05-13T13:27:42,125][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [ingest-common]
[2025-05-13T13:27:42,125][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [ingest-geoip]
[2025-05-13T13:27:42,125][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [ingest-user-agent]
[2025-05-13T13:27:42,125][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [kibana]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [lang-expression]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [lang-mustache]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [lang-painless]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [legacy-geo]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [mapper-extras]
[2025-05-13T13:27:42,126][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [mapper-version]
[2025-05-13T13:27:42,127][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [parent-join]
[2025-05-13T13:27:42,127][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [percolator]
[2025-05-13T13:27:42,127][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [rank-eval]
[2025-05-13T13:27:42,127][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [reindex]
[2025-05-13T13:27:42,127][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [repositories-metering-api]
[2025-05-13T13:27:42,128][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [repository-encrypted]
[2025-05-13T13:27:42,128][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [repository-url]
[2025-05-13T13:27:42,128][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [runtime-fields-common]
[2025-05-13T13:27:42,128][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [search-business-rules]
[2025-05-13T13:27:42,128][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [searchable-snapshots]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [snapshot-repo-test-kit]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [spatial]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [transform]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [transport-netty4]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [unsigned-long]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [vector-tile]
[2025-05-13T13:27:42,129][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [vectors]
[2025-05-13T13:27:42,130][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [wildcard]
[2025-05-13T13:27:42,130][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-aggregate-metric]
[2025-05-13T13:27:42,130][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-analytics]
[2025-05-13T13:27:42,130][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-async]
[2025-05-13T13:27:42,130][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-async-search]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-autoscaling]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-ccr]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-core]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-data-streams]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-deprecation]
[2025-05-13T13:27:42,131][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-enrich]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-eql]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-fleet]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-graph]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-identity-provider]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-ilm]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-logstash]
[2025-05-13T13:27:42,132][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-ml]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-monitoring]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-ql]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-rollup]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-security]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-shutdown]
[2025-05-13T13:27:42,133][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-sql]
[2025-05-13T13:27:42,134][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-stack]
[2025-05-13T13:27:42,134][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-text-structure]
[2025-05-13T13:27:42,134][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-voting-only-node]
[2025-05-13T13:27:42,134][INFO][o.e.p.PluginsService] [<server_ip>] loaded module [x-pack-watcher]
[2025-05-13T13:27:42,135][INFO][o.e.p.PluginsService] [<server_ip>] no plugins loaded
[2025-05-13T13:27:42,154][INFO][o.e.e.NodeEnvironment] [<server_ip>] using [1] data paths, mounts [[/usr (/dev/mapper/vg-usr)]], net usable_space [380.5gb], net total_space [418.2gb], types [ext4]
[2025-05-13T13:27:42,154][INFO][o.e.e.NodeEnvironment] [<server_ip>] heap size [31gb], compressed ordinary object pointers [true]
[2025-05-13T13:27:42,164][INFO][o.e.n.Node] [<server_ip>] node name [<server_ip>], node ID [bQzu3MFlRb6vUMEXhMD9mA], cluster name [elasticsearch_itool], roles [transform, data_frozen, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest]
[2025-05-13T13:27:44,388][INFO][o.e.x.m.p.l.CppLogMessageHandler] [<server_ip>] [controller/72497] [Main.cc@122] controller (64 bit): Version 7.17.6 (Build ea0305ae2a3b09) Copyright (c) 2022 Elasticsearch BV
[2025-05-13T13:27:44,617][INFO][o.e.x.s.a.s.FileRolesStore] [<server_ip>] parsed [0] roles from file [/usr/home/itool/.linuxbrew/etc/elasticsearch/roles.yml]
[2025-05-13T13:27:44,986][INFO][o.e.i.g.ConfigDatabases] [<server_ip>] initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/usr/home/itool/.linuxbrew/etc/elasticsearch/ingest-geoip] for changes
[2025-05-13T13:27:44,986][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] initialized database registry, using geoip-databases directory [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA]
[2025-05-13T13:27:45,305][INFO][o.e.t.NettyAllocator] [<server_ip>] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=16mb}]
[2025-05-13T13:27:45,321][INFO][o.e.i.r.RecoverySettings] [<server_ip>] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2025-05-13T13:27:45,341][INFO][o.e.d.DiscoveryModule] [<server_ip>] using discovery type [zen] and seed hosts providers [settings]
[2025-05-13T13:27:45,591][INFO][o.e.g.DanglingIndicesState] [<server_ip>] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2025-05-13T13:27:45,850][INFO][o.e.n.Node] [<server_ip>] initialized
[2025-05-13T13:27:45,851][INFO][o.e.n.Node] [<server_ip>] starting ...
[2025-05-13T13:27:45,861][INFO][o.e.x.s.c.f.PersistentCache] [<server_ip>] persistent cache index loaded
[2025-05-13T13:27:45,862][INFO][o.e.x.d.l.DeprecationIndexingComponent] [<server_ip>] deprecation component started
[2025-05-13T13:27:45,926][INFO][o.e.t.TransportService] [<server_ip>] publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}
[2025-05-13T13:27:45,932][INFO][o.e.x.m.Monitoring] [<server_ip>] creating template [.monitoring-alerts-7] with version [7]
[2025-05-13T13:27:45,935][INFO][o.e.x.m.Monitoring] [<server_ip>] creating template [.monitoring-es] with version [7]
[2025-05-13T13:27:45,936][INFO][o.e.x.m.Monitoring] [<server_ip>] creating template [.monitoring-kibana] with version [7]
[2025-05-13T13:27:45,938][INFO][o.e.x.m.Monitoring] [<server_ip>] creating template [.monitoring-logstash] with version [7]
[2025-05-13T13:27:45,940][INFO][o.e.x.m.Monitoring] [<server_ip>] creating template [.monitoring-beats] with version [7]
[2025-05-13T13:27:46,003][WARN][o.e.b.BootstrapChecks] [<server_ip>] max number of threads [2048] for user [itool] is too low, increase to at least [4096]
[2025-05-13T13:27:46,004][WARN][o.e.b.BootstrapChecks] [<server_ip>] the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured
[2025-05-13T13:27:46,012][INFO][o.e.c.c.ClusterBootstrapService] [<server_ip>] no discovery configuration found, will perform best-effort cluster bootstrapping after [3s] unless existing master is discovered
[2025-05-13T13:27:49,014][INFO][o.e.c.c.Coordinator] [<server_ip>] setting initial configuration to VotingConfiguration{bQzu3MFlRb6vUMEXhMD9mA}
[2025-05-13T13:27:49,168][INFO][o.e.c.s.MasterService] [<server_ip>] elected-as-master ([1] nodes joined)[{<server_ip>}{bQzu3MFlRb6vUMEXhMD9mA}{QogF1OlwQZio6vgdg9Nw6Q}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{<server_ip>}{bQzu3MFlRb6vUMEXhMD9mA}{QogF1OlwQZio6vgdg9Nw6Q}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]}
[2025-05-13T13:27:49,200][INFO][o.e.c.c.CoordinationState] [<server_ip>] cluster UUID set to [U1h-EeCLRg6oEhU2S6766g]
[2025-05-13T13:27:49,220][INFO][o.e.c.s.ClusterApplierService] [<server_ip>] master node changed {previous [], current [{<server_ip>}{bQzu3MFlRb6vUMEXhMD9mA}{QogF1OlwQZio6vgdg9Nw6Q}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]}, term: 1, version: 1, reason: Publication{term=1, version=1}
[2025-05-13T13:27:49,258][INFO][o.e.h.AbstractHttpServerTransport] [<server_ip>] publish_address {127.0.0.1:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}
[2025-05-13T13:27:49,259][INFO][o.e.n.Node] [<server_ip>] started
[2025-05-13T13:27:49,318][INFO][o.e.g.GatewayService] [<server_ip>] recovered [0] indices into cluster_state
[2025-05-13T13:27:49,443][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.ml-anomalies-] for index patterns [.ml-anomalies-*]
[2025-05-13T13:27:49,483][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.ml-notifications-000002] for index patterns [.ml-notifications-000002]
[2025-05-13T13:27:49,507][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.ml-state] for index patterns [.ml-state*]
[2025-05-13T13:27:49,537][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.ml-stats] for index patterns [.ml-stats-*]
[2025-05-13T13:27:49,563][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [logs-settings]
[2025-05-13T13:27:49,587][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [metrics-mappings]
[2025-05-13T13:27:49,612][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [logs-mappings]
[2025-05-13T13:27:49,632][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [metrics-settings]
[2025-05-13T13:27:49,660][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [data-streams-mappings]
[2025-05-13T13:27:49,681][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [synthetics-settings]
[2025-05-13T13:27:49,708][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [synthetics-mappings]
[2025-05-13T13:27:49,745][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.watch-history-13] for index patterns [.watcher-history-13*]
[2025-05-13T13:27:49,764][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [ilm-history] for index patterns [ilm-history-5*]
[2025-05-13T13:27:49,794][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.slm-history] for index patterns [.slm-history-5*]
[2025-05-13T13:27:49,816][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [.deprecation-indexing-mappings]
[2025-05-13T13:27:49,834][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding component template [.deprecation-indexing-settings]
[2025-05-13T13:27:49,853][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [logs] for index patterns [logs-*-*]
[2025-05-13T13:27:49,872][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [metrics] for index patterns [metrics-*-*]
[2025-05-13T13:27:49,894][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [synthetics] for index patterns [synthetics-*-*]
[2025-05-13T13:27:49,915][INFO][o.e.c.m.MetadataIndexTemplateService] [<server_ip>] adding index template [.deprecation-indexing-template] for index patterns [.logs-deprecation.*]
[2025-05-13T13:27:49,931][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [ml-size-based-ilm-policy]
[2025-05-13T13:27:49,950][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [metrics]
[2025-05-13T13:27:49,963][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [synthetics]
[2025-05-13T13:27:49,975][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [logs]
[2025-05-13T13:27:49,995][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [90-days-default]
[2025-05-13T13:27:50,023][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [30-days-default]
[2025-05-13T13:27:50,036][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [180-days-default]
[2025-05-13T13:27:50,053][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [365-days-default]
[2025-05-13T13:27:50,070][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [7-days-default]
[2025-05-13T13:27:50,087][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [watch-history-ilm-policy]
[2025-05-13T13:27:50,101][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [ilm-history-ilm-policy]
[2025-05-13T13:27:50,114][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [slm-history-ilm-policy]
[2025-05-13T13:27:50,131][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [.deprecation-indexing-ilm-policy]
[2025-05-13T13:27:50,145][INFO][o.e.x.i.a.TransportPutLifecycleAction] [<server_ip>] adding index lifecycle policy [.fleet-actions-results-ilm-policy]
[2025-05-13T13:27:50,180][INFO][o.e.i.g.GeoIpDownloader] [<server_ip>] updating geoip databases
[2025-05-13T13:27:50,180][INFO][o.e.i.g.GeoIpDownloader] [<server_ip>] fetching geoip databases overview from [https://geoip.elastic.co/v1/database?elastic_geoip_service_tos=agree]
[2025-05-13T13:27:50,241][INFO][o.e.l.LicenseService] [<server_ip>] license [08c75905-62cc-4771-b1db-f22df9b8419d] mode [basic] - valid
[2025-05-13T13:27:50,242][INFO][o.e.x.s.s.SecurityStatusChangeListener] [<server_ip>] Active license is now [BASIC]; Security is disabled
[2025-05-13T13:27:50,242][WARN][o.e.x.s.s.SecurityStatusChangeListener] [<server_ip>] Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security.
[2025-05-13T13:27:51,525][INFO][o.e.c.m.MetadataCreateIndexService] [<server_ip>] [.geoip_databases] creating index, cause [auto(bulk api)], templates [], shards [1]/[0]
[2025-05-13T13:27:51,694][INFO][o.e.c.r.a.AllocationService] [<server_ip>] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.geoip_databases][0]]]).
[2025-05-13T13:27:52,111][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] retrieve geoip database [GeoLite2-ASN.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-ASN.mmdb.tmp.gz]
[2025-05-13T13:27:52,121][INFO][o.e.i.g.GeoIpDownloader] [<server_ip>] successfully downloaded geoip database [GeoLite2-ASN.mmdb]
[2025-05-13T13:27:52,278][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] successfully reloaded changed geoip database file [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-ASN.mmdb]
[2025-05-13T13:27:54,436][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] retrieve geoip database [GeoLite2-City.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-City.mmdb.tmp.gz]
[2025-05-13T13:27:54,447][INFO][o.e.i.g.GeoIpDownloader] [<server_ip>] successfully downloaded geoip database [GeoLite2-City.mmdb]
[2025-05-13T13:27:54,992][INFO][o.e.c.m.MetadataCreateIndexService] [<server_ip>] [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001] creating index, cause [initialize_data_stream], templates [.deprecation-indexing-template], shards [1]/[1]
[2025-05-13T13:27:54,993][INFO][o.e.c.r.a.AllocationService] [<server_ip>] updating number_of_replicas to [0] for indices [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001]
[2025-05-13T13:27:54,995][INFO][o.e.c.m.MetadataCreateDataStreamService] [<server_ip>] adding data stream [.logs-deprecation.elasticsearch-default] with write index [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001], backing indices [], and aliases []
[2025-05-13T13:27:55,008][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] successfully reloaded changed geoip database file [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-City.mmdb]
[2025-05-13T13:27:55,034][INFO][o.e.c.r.a.AllocationService] [<server_ip>] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001][0]]]).
[2025-05-13T13:27:55,056][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001] from [null] to [{"phase":"new","action":"complete","name":"complete"}] in policy [.deprecation-indexing-ilm-policy]
[2025-05-13T13:27:55,088][INFO][o.e.c.m.MetadataMappingService] [<server_ip>] [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001/0yBBuvxYTxS8ydGD3skEjg] update_mapping [_doc]
[2025-05-13T13:27:55,118][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001] from [{"phase":"new","action":"complete","name":"complete"}] to [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] in policy [.deprecation-indexing-ilm-policy]
[2025-05-13T13:27:55,137][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-.logs-deprecation.elasticsearch-default-2025.05.13-000001] from [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [.deprecation-indexing-ilm-policy]
[2025-05-13T13:27:55,535][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] retrieve geoip database [GeoLite2-Country.mmdb] from [.geoip_databases] to [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-Country.mmdb.tmp.gz]
[2025-05-13T13:27:55,543][INFO][o.e.i.g.GeoIpDownloader] [<server_ip>] successfully downloaded geoip database [GeoLite2-Country.mmdb]
[2025-05-13T13:27:55,606][INFO][o.e.i.g.DatabaseNodeService] [<server_ip>] successfully reloaded changed geoip database file [/tmp/elasticsearch-8342200614600624894/geoip-databases/bQzu3MFlRb6vUMEXhMD9mA/GeoLite2-Country.mmdb]
[2025-05-13T13:27:59,982][INFO][o.e.c.m.MetadataCreateIndexService] [<server_ip>] [.ds-ilm-history-5-2025.05.13-000001] creating index, cause [initialize_data_stream], templates [ilm-history], shards [1]/[0]
[2025-05-13T13:27:59,985][INFO][o.e.c.m.MetadataCreateDataStreamService] [<server_ip>] adding data stream [ilm-history-5] with write index [.ds-ilm-history-5-2025.05.13-000001], backing indices [], and aliases []
[2025-05-13T13:28:00,023][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-ilm-history-5-2025.05.13-000001] from [null] to [{"phase":"new","action":"complete","name":"complete"}] in policy [ilm-history-ilm-policy]
[2025-05-13T13:28:00,040][INFO][o.e.c.r.a.AllocationService] [<server_ip>] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.ds-ilm-history-5-2025.05.13-000001][0]]]).
[2025-05-13T13:28:00,052][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-ilm-history-5-2025.05.13-000001] from [{"phase":"new","action":"complete","name":"complete"}] to [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] in policy [ilm-history-ilm-policy]
[2025-05-13T13:28:00,068][INFO][o.e.x.i.IndexLifecycleTransition] [<server_ip>] moving index [.ds-ilm-history-5-2025.05.13-000001] from [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [ilm-history-ilm-policy]

```

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [May 13, 2025, 4:42pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/6 "2025-05-13T16:42:42Z")

</div>

> [@Asfga](#):
>
> `[2025-05-13T13:27:49,258][INFO][o.e.h.AbstractHttpServerTransport] [<server_ip>] publish_address {127.0.0.1:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}`

It still binding to only `127.0.0.1`, did you restart it after changing `elasticsearch.yml`?

> [@Asfga](#):
>
> Not sure how to share the files with you, so I will try to list you the input.

Just copy the file contents and paste in the same way as you did with the logs.

---

<div class="post-metadata">

### Author: ![Asfga](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Asfga](https://discuss.elastic.co/u/Asfga)
#### Post date: [May 13, 2025, 7:05pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/7 "2025-05-13T19:05:49Z")

</div>

The restart did it 🙂 Now I can see two more issues in the logs:

```auto

* bootstrap check failure [1] of [2]: max number of threads [2048] for user [itool] is too low, increase to at least [4096]
* bootstrap check failure [2] of [2]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed_hosts, discovery.seed_providers, cluster.initial_master_nodes] must be configured

```

I wanted to solve the first issue, but I can't find the `/etc/securits/limits.conf` file...

---

<div class="post-metadata">

### Author: ![Asfga](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@Asfga](https://discuss.elastic.co/u/Asfga)
#### Post date: [May 13, 2025, 8:46pm UTC](https://discuss.elastic.co/t/problems-with-checking-elasticsearch-remotely/378087/8 "2025-05-13T20:46:40Z")

</div>

Is it possible to change these settings without having root access? It seems that I don't have this type of access on my current webserver.
