Shield Goes Down Automatically

Elastic Stack Elasticsearch
1

I have shield and license installed on all my Nodes, 1 client,3 Master and 6 data Nodes but as soon as i start the cluster shield automatically goes down,exposing my cluster publicly. Status of shield changes to unlicensed and when i check my license it says active.

2

Hi,

Thanks for creating a thread here.

What messages do you see in logs? Which version are you using and what kind of license?

3

When i check the status of shield via :9200/_shield. It gives me a status of "unlicensed". There are no errors in logs . Shield is not working for my cluster.

4

Which version are you using and what kind of license?

5

{
"nodes": {
"mKlshXEBSPuurpFmFURTuA": {
"plugins": [
{
"name": "license",
"version": "2.3.3",
"description": "Internal Elasticsearch Licensing Plugin",
"jvm": true,
"classname": "org.elasticsearch.license.plugin.LicensePlugin",
"isolated": false,
"site": false
},
{
"name": "shield",
"version": "2.3.3",
"description": "Elasticsearch Shield (security)",
"jvm": true,
"classname": "org.elasticsearch.shield.ShieldPlugin",
"isolated": false,
"site": false
}
]
},
"a93QAuIhQAGjpXn7Q19DvA": {
"plugins": [
{
"name": "license",
"version": "2.3.3",
"description": "Internal Elasticsearch Licensing Plugin",
"jvm": true,
"classname": "org.elasticsearch.license.plugin.LicensePlugin",
"isolated": false,
"site": false
},
{
"name": "shield",
"version": "2.3.3",
"description": "Elasticsearch Shield (security)",
"jvm": true,
"classname": "org.elasticsearch.shield.ShieldPlugin",
"isolated": false,
"site": false
},
{
"name": "siren-join",
"version": "2.3.3-1",
"description": "SIREn plugin that adds join capabilities to Elasticsearch",
"jvm": true,
"classname": "solutions.siren.join.SirenJoinPlugin",
"isolated": true,
"site": false
}
]
},
"x4eniT4vS0yj1Ymw8PWZ0Q": {
"plugins": [
{
"name": "head",
"version": "master",
"description": "head - A web front end for an elastic search cluster",
"url": "/_plugin/head/",
"jvm": false,
"site": true
},
{
"name": "hq",
"version": "1.0.0",
"description": "Elastic-HQ",
"url": "/_plugin/hq/",
"jvm": false,
"site": true
},
{
"name": "license",
"version": "2.3.3",
"description": "Internal Elasticsearch Licensing Plugin",
"jvm": true,
"classname": "org.elasticsearch.license.plugin.LicensePlugin",
"isolated": false,
"site": false
},
{
"name": "shield",
"version": "2.3.3",
"description": "Elasticsearch Shield (security)",
"jvm": true,
"classname": "org.elasticsearch.shield.ShieldPlugin",
"isolated": false,
"site": false
},
{
"name": "siren-join",
"version": "2.3.3-1",
"description": "SIREn plugin that adds join capabilities to Elasticsearch",
"jvm": true,
"classname": "solutions.siren.join.SirenJoinPlugin",
"isolated": true,
"site": false
}
]
},
"oE8ybV3pSl6N7zGX2SG6yw": {
"plugins": [
{
"name": "license",
"version": "2.3.3",
"description": "Internal Elasticsearch Licensing Plugin",
"jvm": true,
"classname": "org.elasticsearch.license.plugin.LicensePlugin",
"isolated": false,
"site": false
},
{
"name": "shield",
"version": "2.3.3",
"description": "Elasticsearch Shield (security)",
"jvm": true,
"classname": "org.elasticsearch.shield.ShieldPlugin",
"isolated": false,
"site": false
}
]
},
"P1KmGyAwRYKHpz6zjK5Cwg": {
"plugins": [
{
"name": "license",
"version": "2.3.3",
"description": "Internal Elasticsearch Licensing Plugin",
"jvm": true,
"classname": "org.elasticsearch.license.plugin.LicensePlugin",
"isolated": false,
"site": false
},
{
"name": "shield",
"version": "2.3.3",
"description": "Elasticsearch Shield (security)",
"jvm": true,
"classname": "org.elasticsearch.shield.ShieldPlugin",
"isolated": false,
"site": false
},
{
"name": "siren-join",
"version": "2.3.3-1",
"description": "SIREn plugin that adds join capabilities to Elasticsearch",
"jvm": true,
"classname": "solutions.siren.join.SirenJoinPlugin",
"isolated": true,
"site": false
}
]
}}
}

6

My Elasticsearch version is 2.3.3 and i am using shield with a basic license.

7

Shield will not function with a basic license, but you can request a trial license by sending an email to info@elastic.co, which will let you try out shield.

8

But trail license is gonna expire again in 30 days. Let me see if i can buy a gold subscription.