Nagios Support Forum

All,
I have tried installing Nagioslogserver ver 2.1.9 and it fails because the elasticsearch service doesn't come up. Below is the error message derived from sudo systemctl status elasticsearch.service.

sudo systemctl status elasticsearch.service
Last login: Tue Sep 7 07:15:01 EDT 2021 on cron
● elasticsearch.service - Elasticsearch
Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Tue 2021-09-07 06:41:13 EDT; 36min ago
Docs: https://www.elastic.co
Process: 7490 ExecStart=/usr/share/elasticsearch/bin/systemd-entrypoint -p ${PID_DIR}/elasticsearch.pid --quiet (code=exited, status=1/FAILURE)
Main PID: 7490 (code=exited, status=1/FAILURE)

Sep 07 06:41:13 myserver systemd-entrypoint[7490]: Error: A fatal exception has occurred. Program will exit.
Sep 07 06:41:13 myserver systemd-entrypoint[7490]: at org.elasticsearch.tools.launchers.JvmOption.flagsFinal(JvmOption.java:119)
Sep 07 06:41:13 myserver systemd-entrypoint[7490]: at org.elasticsearch.tools.launchers.JvmOption.findFinalOptions(JvmOption.java:81)
Sep 07 06:41:13 myserver systemd-entrypoint[7490]: at org.elasticsearch.tools.launchers.JvmErgonomics.choose(JvmErgonomics.java:38)
Sep 07 06:41:13 myserver systemd-entrypoint[7490]: at org.elasticsearch.tools.launchers.JvmOptionsParser.jvmOptions(JvmOptionsParser.java:135)
Sep 07 06:41:13 myserver systemd-entrypoint[7490]: at org.elasticsearch.tools.launchers.JvmOptionsParser.main(JvmOptionsParser.java:86)
Sep 07 06:41:13 myserver systemd[1]: elasticsearch.service: main process exited, code=exited, status=1/FAILURE
Sep 07 06:41:13 myserver systemd[1]: Failed to start Elasticsearch.
Sep 07 06:41:13 myserver systemd[1]: Unit elasticsearch.service entered failed state.
Sep 07 06:41:13 myserver systemd[1]: elasticsearch.service failed.

Hi HIINNS,

Greetings and thanks for contact us today.

What operating system are you installing 2.1.9 on? I would like to test this out here to confirm any issues.

--Benjamin

RHEL 7 FIPS.

Hi,

Okay, thanks for checking that. We currently do have support for FIPS enabled on CENT/RHEL. Please try disabling FIPS mode and try again.

--Benjamin

Sorry, can't do it. Soon, I will also be unable to turn off selinux. As a Federal contractor my site will be required to be CMMC level 5 compliant, which is one of the requirements.

Hi HIINNS,

We have an outstanding feature request for this functionality, I have added this thread to the conversation. Right now, SELinux/FIPS is not on the product roadmap, but we do get inquiries for this.

We do not build and test right now for FIPS-enabled operating systems, so I do not have details or instructions on how to make this complaint. That said, we do have many customers deploying our products in secure environments.

You might try to get it installed first and then enabling FIPS/SELinux to see how it impacts the system.

--Benjamin