When elk is deployed, an error is reported when logstash is started.
Sending logstash logs to/var/log/logstash. log.
Exception in thread "> output" org. elasticsearch. Discovery. masternotdiscoveredexception: waited for [30 s]
At org. elasticsearch. Action. Support. master. transportmasternodeoperationaction $3. ontimeout (ORG/elasticsearch/Action/support/master/transportmasternodeoperationaction. Java: 180)
At org. elasticsearch. Cluster. Service. internalclusterservice $ policytimeout. Run (ORG/elasticsearch/cluster/service/internalclusterservice. Java: 492)
At java. util. Concurrent. threadpoolexecutor. runworker (Java/util/concurrent/threadpoolexecutor. Java: 1145)
At java. util. Concurrent. threadpoolexecutor $ worker. Run (Java/util/concurrent/threadpoolexecutor. Java: 615)
At java. Lang. thread. Run (Java/lang/thread. Java: 722)
Check the EA configuration and find that the cluster name is modified. Modify the logstash output attribute:
Elasticsearch {
Host => "127.0.0.1"
Port = & gt; 9300
Cluster => "US-elasticsearch"
}
Add the cluster attribute and restart it!
Logstash startup error exception in thread "> output" org. elasticsearch. Discovery. masternotdiscoveredexception: waited for [30 s]