Unable to setup elastic cluster

Hello,
Need help !!
I am trying to setup a 3 Master,Data nodes and 1 ingest node. I have done the below configuration. elasticsearch service is starting but i dont see any logs in elasticsearch.log file.


[INFO ][o.e.n.Node ] [elastic1] stopping ...
[INFO ][o.e.x.m.p.l.CppLogMessageHandler] [elastic1] [controller/928392] [Main.cc@154] ML controller exiting
[INFO ][o.e.x.m.p.NativeController] [elastic1] Native controller process has stopped - no new native processes can be started
[INFO ][o.e.x.w.WatcherService ] [elastic1] stopping watch service, reason [shutdown initiated]
[INFO ][o.e.x.w.WatcherLifeCycleService] [elastic1] watcher has stopped and shutdown
[INFO ][o.e.n.Node ] [elastic1] stopped
[INFO ][o.e.n.Node ] [elastic1] closing ...
[INFO ][o.e.n.Node ] [elastic1] closed

To test..I tried configuring individual elasticsearch host. this time elasticsearch works as independent host and logs will be generating as below.

Caused by: javax.net.ssl.SSLHandshakeException: No available authentication scheme
at sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:?]
at sun.security.ssl.Alert.createSSLException(Alert.java:117) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:312) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:268) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:259) ~[?:?]
at sun.security.ssl.CertificateMessage$T13CertificateProducer.onProduceCertificate(CertificateMessage.java:955) ~[?:?]
at sun.security.ssl.CertificateMessage$T13CertificateProducer.produce(CertificateMessage.java:944) ~[?:?]
at sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:440) ~[?:?]
at sun.security.ssl.ClientHello$T13ClientHelloConsumer.goServerHello(ClientHello.java:1252) ~[?:?]
at sun.security.ssl.ClientHello$T13ClientHelloConsumer.consume(ClientHello.java:1188) ~[?:?]
at sun.security.ssl.ClientHello$ClientHelloConsumer.onClientHello(ClientHello.java:851) ~[?:?]
at sun.security.ssl.ClientHello$ClientHelloConsumer.consume(ClientHello.java:812) ~[?:?]
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396) ~[?:?]
at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:445) ~[?:?]
at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1247) ~[?:?]
at java.security.AccessController.doPrivileged(AccessController.java:691) ~[?:?]
at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1192) ~[?:?]
at io.netty.handler.ssl.SslHandler.runAllDelegatedTasks(SslHandler.java:1542) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1556) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1440) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) ~[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:501) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:440) ~[netty-codec-4.1.49.Final.jar:4.1.49.Final]

Master and data nodes: elastic1,elastic2,elastic3
Ingest node: elastic4

Configuration as below:
cluster.name: my-cluster
node.name: elastic1
node.master: true
node.data: true
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
path.repo: ["/var/lib/elasticsearch/snapshots"]
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["elastic2", "elastic3"]
cluster.initial_master_nodes: ["elastic1","elastic2","elastic3"]
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

Please try to reformat your input as code. This improves readability a lot.

As a side note: Don't start with security/tls right away. If you're not used to working with Elasticsearch this adds an extra layer of complexity. Try it with a test setup and when you gathered some experience, use that to set up the production cluster.

This looks like you enable ssl but did not provide any certificates.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.