Unable to apply configuration and alerts jobs

[jeffquirosfallas]

Hello Team,
I am having problems with my Log Server, it is an old version 1.4.4. I am unable to apply the configurations via UI. I receive the following message:

Code: Select all

192.168.102.4 (logserver) The instance is likely offline, please check and try again.

In the PER INSTANCE view I got the following message:

Code: Select all

It looks like this instance hasn't checked in the last 5 minutes.
Normally this means it is not online or elasticsearch is not running.
If you don't know why it's offline, try these:

    Verify that elasticsearch is running on the instance and start elasticsearch if necessary
    Check the connection (firewall, cable link) to the instance from this instance
    Wait for the instance to return to an online state and check in

And it seems that the System Jobs aren't been executed, and this is a problem because I have a job that will send an alert in case the server receive certain kind of logs.

I dont know what else to do.

[gsmith]

Hi,

How many nodes are you using?
Is elasticsearch running on the node that is giving you problems?
What does the diskspace look like on that machine?

Thanks

[jeffquirosfallas]

Hi, just one node and yes elastic search as well as logstash are running. Also there are plenty of space.

Code: Select all

[root@logserver ~]# df -h
Filesystem               Size  Used Avail Use% Mounted on
devtmpfs                 3.7G     0  3.7G   0% /dev
tmpfs                    3.7G     0  3.7G   0% /dev/shm
tmpfs                    3.7G  385M  3.3G  11% /run
tmpfs                    3.7G     0  3.7G   0% /sys/fs/cgroup
/dev/mapper/centos-root  823G   37G  786G   5% /
/dev/sda1               1014M  354M  661M  35% /boot
/dev/mapper/centos-home  100G   33M  100G   1% /home
tmpfs                    742M     0  742M   0% /run/user/0

We also delete any kind of restriction in the firewall to be sure that the problem wasn't there, but we got the same message.

[jeffquirosfallas]

Hi gsmith we are only using one node, elasticsearch is running as well as logstash, and there is plenty space in the server.

Code: Select all

[root@logserver ~]# df -h
Filesystem               Size  Used Avail Use% Mounted on
devtmpfs                 3.7G     0  3.7G   0% /dev
tmpfs                    3.7G     0  3.7G   0% /dev/shm
tmpfs                    3.7G  385M  3.3G  11% /run
tmpfs                    3.7G     0  3.7G   0% /sys/fs/cgroup
/dev/mapper/centos-root  823G   38G  785G   5% /
/dev/sda1               1014M  354M  661M  35% /boot
/dev/mapper/centos-home  100G   33M  100G   1% /home
tmpfs                    742M     0  742M   0% /run/user/0

[ssax]

Please PM a copy of your profile, you can download it from Admin > System Status by clicking the Download System Profile button.

You can try restarting the services:

Code: Select all

service elasticsearch restart
service logstash restart

[ssax]

Please PM me these files:

Code: Select all

/var/log/logstash/logstash.log
/var/log/elasticsearch/9968e8c1-5eef-468e-8a92-9e89e2625c66.log