Nagios Support Forum

There is nothing in backup

[root@IWKSEUWPSSNLS01 elasticsearch]# cd /store/backups/nagioslogserver/
[root@IWKSEUWPSSNLS01 nagioslogserver]# ls
[root@IWKSEUWPSSNLS01 nagioslogserver]# ls -ll
total 0

Run this from the CLI as root to create a new user:
This will create a user named "recoveryuser" with the password "nagiosls". Try logging in with it and check the configuration settings under Administration. You may need to repopulate some or all of these settings but hopefully the actual log data will still be available.

[root@IWKSEUWPSSNLS01 ~]# curl -XPUT 'http://localhost:9200/nagioslogserver/user/99' -d '{"username":"recoveryuser","password":"c678bcf3b5138b9263a95c44d28097f22c2e02877193d2c25313478821d45c19","auth_type":"admin","email":"[email protected]","language":"default","apiaccess":"1","apikey":"1396e08757545557073844695e5b64caa0bd3ad3","created":"2015-01-23 10:00:00","created_by":0,"default_dashboard":"/dashboard/elasticsearch/default"}'
{"error":"UnavailableShardsException[[nagioslogserver][0] Primary shard is not active or isn't assigned to a known node. Timeout: [1m], request: index {[nagioslogserver][user][99], source[{\"username\":\"recoveryuser\",\"password\":\"c678bcf3b5138b9263a95c44d28097f22c2e02877193d2c25313478821d45c19\",\"auth_type\":\"admin\",\"email\":\"[email protected]\",\"language\":\"default\",\"apiaccess\":\"1\",\"apikey\":\"1396e08757545557073844695e5b64caa0bd3ad3\",\"created\":\"2015-01-23 10:00:00\",\"created_by\":0,\"default_dashboard\":\"/dashboard/elasticsearch/default\"}]}]","status":503}[root@IWKSEUWPSSNLS01 ~]#

Can we setup a remote session and investigate this problem?

We certainly can. Send an email to [email protected] to open a ticket and we can take it from there.

Before doing a remote though, I'd like to get a profile that you can attach to the email when you open the case. Copy the following script to the NLS server and give it execute permissions before running it:
The system-profile.tar.gz it creates will be found in /tmp

I see you have also opened an email ticket for this, so we will be locking this thread and continuing in the email ticket.