I am using the Elastic Endpoint agents with 7.9.2. Elasticsearch is running in a single node cluster I am getting an error when in the network screen saying 5 of 7 shards have failed. curl -u elastic -X GET "127.0.0.1:9200/_cluster/health"?pretty=true { "cluster_name" : "elasticsearch",…

@gnordli , My good colleague @spong pointed me to this ticket and I think at this point you are seeing the same thing: [Security Solution] Handle indices without geoip schema defined in mapping opened 03:40PM - 27 Jul 20 UTC (UTC) …

Discuss the Elastic Stack

Shards failed in Network screen

Elastic Security Endpoint Security

Frank_Hassanabad (Frank Hassanabad) October 21, 2020, 2:47pm 2

Does this thread help?

I think you have only one node which is why it's yellow to start with. If you only want one node I think the advice on there should fix you up here.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.