Initialization freezing on "Contacting elasticsearch cluster 'clustername' and wait for YELLOW ...

Hi all!

I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”

sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv

``

After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.

  • Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)

``

In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

elasticsearch.yml (without comments):
cluster.name: elk-dev

node.name: ${HOSTNAME}

path.data: /opt/elastic/elasticsearch

network.host: [local, site]

searchguard.config_index_name: searchguard

searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false

searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jkssearchguard.ssl.http.truststore_filepath: truststore.jks

searchguard.authcz.admin_dn:

  • CN=client-admin,OU=SSL,O=Test,L=Test, C=RU

searchguard.cert.oid: ‘1.4.2.4.2.112’

``

That I does wrong?

You have an invalid combination of parameters for sgadmin:. You specify the cluster name via the -cn switch, but then use the -icl (“ignore cluster name”) at the same time. So it should work if you remove the -icl switch.

···

On Friday, May 26, 2017 at 2:12:04 AM UTC+2, Alexey Chernyaev wrote:

Hi all!

I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”

sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv

``

After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.

  • Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)

``

In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

elasticsearch.yml (without comments):
cluster.name: elk-dev

node.name: ${HOSTNAME}

path.data: /opt/elastic/elasticsearch

network.host: [local, site]

searchguard.config_index_name: searchguard

searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false

searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jkssearchguard.ssl.http.truststore_filepath: truststore.jks

searchguard.authcz.admin_dn:

  • CN=client-admin,OU=SSL,O=Test,L=Test, C=RU

searchguard.cert.oid: ‘1.4.2.4.2.112’

``

That I does wrong?

It’s was a problem with client certificate. After recreate client certificate all work ok!

Thanks for help!

···

пятница, 26 мая 2017 г., 15:27:59 UTC+3 пользователь Jochen Kressin написал:

You have an invalid combination of parameters for sgadmin:. You specify the cluster name via the -cn switch, but then use the -icl (“ignore cluster name”) at the same time. So it should work if you remove the -icl switch.

On Friday, May 26, 2017 at 2:12:04 AM UTC+2, Alexey Chernyaev wrote:

Hi all!

I have a trouble with install SG on my server ES! When I try startin sgdamin for initialization, sgadmin stopt on “Contacting elasticsearch cluster ‘elk-dev’ and wait for YELLOW clusterstate …”

sgadmin params:
./sgadmin.sh -ts /etc/elasticsearch/truststore.jks -tspass changeme -ks /etc/elasticsearch/client-admin-keystore.jks -kspass changeme -cd …/sgconfig -icl -cn elk-dev -dg -nhnv

``

After a few minutes, i get an error:
ERR: Timed out while waiting for a green or yellow cluster state.

  • Try running sgadmin.sh with -icl and -nhnv (If thats works you need to check your clustername as well as hostnames in your SSL certificates)

``

In diagnostic trace I find this error:
ClusterHealthRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

and this:
PendingClusterTasksRequest:
{
“error” : “Can not start an object, expecting field name (context: Object)”
}

``

elasticsearch.yml (without comments):
cluster.name: elk-dev

node.name: ${HOSTNAME}

path.data: /opt/elastic/elasticsearch

network.host: [local, site]

searchguard.config_index_name: searchguard

searchguard.ssl.transport.keystore_filepath: elk-dev-01-keystore.jks
searchguard.ssl.transport.keystore_password: changeme
searchguard.ssl.transport.truststore_filepath: truststore.jks
searchguard.ssl.transport.truststore_password: changeme
searchguard.ssl.transport.enforce_hostname_verification: false

searchguard.ssl.http.enabled: false
searchguard.ssl.http.keystore_filepath: elk-dev-01-keystore.jkssearchguard.ssl.http.truststore_filepath: truststore.jks

searchguard.authcz.admin_dn:

  • CN=client-admin,OU=SSL,O=Test,L=Test, C=RU

searchguard.cert.oid: ‘1.4.2.4.2.112’

``

That I does wrong?