Differences

This shows you the differences between two versions of the page.

--- wiki:elasticsearch_troubleshooting [2022/12/09 09:43] – add snapshot and index restore problem antisa
+++ wiki:elasticsearch_troubleshooting [2024/07/23 11:28] (current) – add opensearch curl error antisa
@@ Line 1: / Line 1: @@
-{{tag>troubleshooting elasticsearch graylog}}
+{{tag>troubleshooting elasticsearch opensearch graylog}}
-====== Elasticsearch troubleshooting ======
+====== Elasticsearch/Opensearch troubleshooting ======
 If graylog stops showing message streams it could be an issue with indexes.
@@ Line 119: / Line 119: @@
-Free some disk space and run this:
+Free some disk space for example delete an old index (see howto for [[wiki:graylog_troubleshooting#elasticsearch_nodes_disk_usage_above_low_watermark|graylog index management]])
+  curl -X DELETE -u undefined:$ESPASS "localhost:9200/my-index?pretty"
+ and run this:
   curl -XPUT -H "Content-Type: application/json" http://localhost:9200/_all/_settings -d '{"index.blocks.read_only_allow_delete": null}'
@@ Line 144: / Line 148: @@
 Delete the snapshot repo
-  curl -X DELETE -u undefined:$ESPASS "localhost:9200/_snapshot/es_backup?pretty
+  curl -X DELETE -u undefined:$ESPASS "localhost:9200/_snapshot/es_backup?pretty"
 and try listing again.
@@ Line 175: / Line 179: @@
   curl -s -X POST "localhost:9200/.logs-deprecation.elasticsearch-default/_rollover"
+and run delete command again.
+===== curl (52) empty reply from server =====
+Happened with OpenSearch docker compose installation trying this:
+  curl -u admin:Antekante_1 -XGET "http://localhost:9200/_cluster/health?pretty"
+It needs the certificate file in the command but if you are testing, easiest is just to disable the ssl. Add the following line in ''docker-compose.yml''
+<code>
+  - plugins.security.ssl.http.enabled=false
+</code>
+and rerun
+  docker-compose up -d
 ===== Tested on =====
   * Debian 10