Testing a new ELK setup with a tribe node. Tribe node is pointed at two clusters, one is for kibana only and is a second elasticsearch instance on the same machine. When no indices exist all cluster status is green. If I create the .kibana index on the kibana cluster the kibana cluster stays green. The tribe node however goes status red with unassinged shards.. I've not been able to find much documentation on tribe nodes and even less about this condition on tribe nodes..
curl -k -u user https://localhost:9200/_cluster/health?pretty
{
"cluster_name" : "tribe",
"status" : "red",
"timed_out" : false,
"number_of_nodes" : 1,
"number_of_data_nodes" : 0,
"active_primary_shards" : 0,
"active_shards" : 0,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 2,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 0.0
}
curl -k -u user https://localhost:9202/_cluster/health?pretty
Enter host password for user 'user':
{
"cluster_name" : "kibana",
"status" : "green",
"timed_out" : false,
"number_of_nodes" : 1,
"number_of_data_nodes" : 1,
"active_primary_shards" : 2,
"active_shards" : 2,
"relocating_shards" : 0,
"initializing_shards" : 0,
"unassigned_shards" : 0,
"delayed_unassigned_shards" : 0,
"number_of_pending_tasks" : 0,
"number_of_in_flight_fetch" : 0,
"task_max_waiting_in_queue_millis" : 0,
"active_shards_percent_as_number" : 100.0
}
Thoughts and help would be appreciated.
And what does the health look like on the other cluster?
after further investigation I think it is the tribe configuration, if I
show state of the nodes only the local node is showing up.
The format isn't making sense to me...if I have it as such elasticsearch
doesn't start...so to get it to start I basically have to take the
indentions out from "blocks:" , "abc:" and "kibana:" and it starts but the
tribe doesn't work properly...
I am not finding a lot of documentation nor examples of tribe
configurations...all the documentation I have found indicates there should
be indentions but I am not having great results with it...
tribe:
on_conflict: prefer_kibana
blocks:
write.indices: abc_,def_
metadata.indices: abc_,def_
abc:
cluster.name: abc-cluster
discovery.zen.ping.unicast.hosts: ["a.b.c.d:9300"]
discovery.zen.ping.multicast.enabled: false
shield.ssl.keystore.path: "/etc/elasticsearch/elktribe.jks"
shield.ssl.keystore.password: "redacted"
shield.ssl.keystore.key_password: "redacted"
shield.transport.ssl: true
shield.http.ssl: true
shield.ssl.ciphers:
TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA
shield.ssl.hostname_verification.resolve_name: false
kibana:
cluster.name: kibana
discovery.zen.ping.unicast.hosts: ["127.0.0.1:9302"]
discovery.zen.ping.multicast.enabled: false
shield.ssl.keystore.path: "/etc/elasticsearch/elktribe.jks"
shield.ssl.keystore.password: "redacted"
shield.ssl.keystore.key_password: "redacted"
shield.transport.ssl: true
shield.http.ssl: true
shield.ssl.ciphers:
TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA
shield.ssl.hostname_verification.resolve_name: false