search

Qianlitp / WatchAD

AD Security Intrusion Detection System
GNU General Public License v3.0
1.29k stars 295 forks source link

elasticsearch crash #22

Open merkleID opened 4 years ago

merkleID commented 4 years ago

Hi! I'm trying to run WatchAD, but everytime I run 'docker-compose up' I end up with this error:

watchad_logstash_1 | [2020-02-02T18:12:57,006][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"http://127.0.0.1:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [http://127.0.0.1:9200/][Manticore::SocketException] Connection refused (Connection refused)"}

and ES doesn't show in docker stats as it is crashed:

CONTAINER ID NAME CPU % MEM USAGE / LIMIT MEM % NET I/O BLOCK I/O PIDS 3671ac967d7b watchad_watchad_mongo_1 0.25% 70.38MiB / 7.767GiB 0.88% 1.45kB / 0B 0B / 442kB 32 29b7406ba9c4 watchad_watchad_rabbitmq_1 0.19% 93.44MiB / 7.767GiB 1.17% 2.96kB / 1.26kB 0B / 311kB 128 9fa30549a8de watchad_watchad_redis_1 0.11% 3.098MiB / 7.767GiB 0.04% 1.81kB / 0B 0B / 0B 4 469986ea1dde watchad_watchad_logstash_1 2.08% 707.8MiB / 7.767GiB 8.90% 0B / 0B 0B / 6.51MB 44

Thank you for any help!

Qianlitp commented 4 years ago

Maybe you can provide ES error logs to let me know why it crashes. The docker configuration in the local test environment is only used for temporary testing. If you already have an ES service, docker is not required

khuntor commented 3 years ago

Maybe you can provide ES error logs to let me know why it crashes. The docker configuration in the local test environment is only used for temporary testing. If you already have an ES service, docker is not required

image 您好，elasticsearch的容器一直在重启，我查看了日志，如上图所示，请问是什么问题呢？？