Hi all!
I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”
sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv
``
After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.
- Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)
``
In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
elasticsearch.yml (without comments):
cluster.name: elk-dev
node.name: ${HOSTNAME}
path.data: /opt/elastic/elasticsearch
network.host: [local, site]
searchguard.config_index_name: searchguard
searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jks searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.authcz.admin_dn:
- CN=client-admin,OU=SSL,O=Test,L=Test, C=RU
searchguard.cert.oid: ‘1.4.2.4.2.112’
``
That I does wrong?
You have an invalid combination of parameters for sgadmin:. You specify the cluster name via the -cn switch, but then use the -icl (“ignore cluster name”) at the same time. So it should work if you remove the -icl switch.
···
On Friday, May 26, 2017 at 2:12:04 AM UTC+2, Alexey Chernyaev wrote:
Hi all!
I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”
sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv
``
After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.
- Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)
``
In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
elasticsearch.yml (without comments):
cluster.name: elk-dev
node.name: ${HOSTNAME}
path.data: /opt/elastic/elasticsearch
network.host: [local, site]
searchguard.config_index_name: searchguard
searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jks searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.authcz.admin_dn:
- CN=client-admin,OU=SSL,O=Test,L=Test, C=RU
searchguard.cert.oid: ‘1.4.2.4.2.112’
``
That I does wrong?
It’s was a problem with client certificate. After recreate client certificate all work ok!
Thanks for help!
···
пятница, 26 мая 2017 г., 15:27:59 UTC+3 пользователь Jochen Kressin написал:
You have an invalid combination of parameters for sgadmin:. You specify the cluster name via the -cn switch, but then use the -icl (“ignore cluster name”) at the same time. So it should work if you remove the -icl switch.
On Friday, May 26, 2017 at 2:12:04 AM UTC+2, Alexey Chernyaev wrote:
Hi all!
I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”
sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv
``
After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.
- Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)
``
In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}
``
elasticsearch.yml (without comments):
cluster.name: elk-dev
node.name: ${HOSTNAME}
path.data: /opt/elastic/elasticsearch
network.host: [local, site]
searchguard.config_index_name: searchguard
searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jks searchguard.ssl.http.truststore_filepath: truststore.jks
searchguard.authcz.admin_dn:
- CN=client-admin,OU=SSL,O=Test,L=Test, C=RU
searchguard.cert.oid: ‘1.4.2.4.2.112’
``
That I does wrong?