Skip to content

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Arkime container unhealthy #548

Closed
devilman85 opened this issue Jan 11, 2025 · 1 comment
Closed

Arkime container unhealthy #548

devilman85 opened this issue Jan 11, 2025 · 1 comment
Labels
discussion Has an associated post on the Malcolm discussions board

Comments

@devilman85
Copy link

I installed the new version of Malcolm but only have the arkime unhelathy container. My instance of Malcolm is remote on an elasticsearch cluster. image

@devilman85 devilman85 added the bug Something isn't working label Jan 11, 2025
@mmguero mmguero added this to Malcolm Jan 11, 2025
@devilman85
Copy link
Author

error in post malcom start:

arkime-1 | Creating history ilm policy 'arkime_molochhistory' with: deleteTime 91d
arkime-1 | Creating sessions ilm policy 'arkime_molochsessions' with: forceTime: 3d deleteTime: 90d segments: 1 replicas: 1
arkime-1 | You will need to run db.pl upgrade with --ilm to update the templates the first time you turn ilm on.
arkime-1 | This is a fresh Arkime install
arkime-1 | Looks like Arkime wasn't installed, must do init at /opt/arkime/db/db.pl line 6150.
arkime-1 | ilm created
arkime-1 | {"_shards":{"total":574,"successful":574,"failed":0}}2025-01-13 08:39:36,743 INFO exited: initialize (exit status 0; expected)
arkime-1 | Launch viewer...
arkime-1 | WARNING - Using authMode=header since not set, add to config file to silence this warning.
arkime-1 | ERROR - Couldn't retrieve database version, is OpenSearch/Elasticsearch running? Have you run ./db.pl host:port init? ResponseError: Response Error
arkime-1 | at onBody (/opt/arkime/node_modules/@elastic/elasticsearch/lib/Transport.js:311:23)
arkime-1 | at IncomingMessage.onEnd (/opt/arkime/node_modules/@elastic/elasticsearch/lib/Transport.js:240:11)
arkime-1 | at IncomingMessage.emit (node:events:531:35)
arkime-1 | at endReadableNT (node:internal/streams/readable:1696:12)
arkime-1 | at process.processTicksAndRejections (node:internal/process/task_queues:82:21) {
arkime-1 | meta: {
arkime-1 | body: {},
arkime-1 | statusCode: 404,
arkime-1 | headers: {
arkime-1 | 'x-elastic-product': 'Elasticsearch',
arkime-1 | 'content-type': 'application/json',
arkime-1 | 'content-length': '2'
arkime-1 | },
arkime-1 | meta: {
arkime-1 | context: null,
arkime-1 | request: [Object],
arkime-1 | name: 'elasticsearch-js',
arkime-1 | connection: [Object],
arkime-1 | attempts: 0,
arkime-1 | aborted: false
arkime-1 | }
arkime-1 | }
arkime-1 | }

Having activated the ilm maybe I created problems with the arkime installation?

I removed the directory with 24.11 and did the git clone of 24.12

@cisagov cisagov locked and limited conversation to collaborators Jan 13, 2025
@mmguero mmguero converted this issue into discussion #549 Jan 13, 2025
@github-project-automation github-project-automation bot moved this to Done in Malcolm Jan 13, 2025
@mmguero mmguero added discussion Has an associated post on the Malcolm discussions board and removed bug Something isn't working labels Jan 13, 2025
@mmguero mmguero moved this from Done to Invalid in Malcolm Jan 13, 2025

This issue was moved to a discussion.

You can continue the conversation there. Go to discussion →

Labels
discussion Has an associated post on the Malcolm discussions board
Projects
Status: Invalid
Development

No branches or pull requests

2 participants