After restoring Sentinel the elasticsearch fails to come up

  • 7023702
  • 06-Feb-2019
  • 07-Feb-2019

Environment

Sentinel 8.2 

Situation

Elastic Search does not come up. Also no SI dashboards are present in the UI after the restore.

Resolution

Change the IP address in the elasticsearch.yml file to the IP address of the destination Sentinel server and restart SIDB, ES service comes up.  Reopen the Sentinel WebUI to confirm that the  SI dashboards start showing up.

Steps: 

1. go to /etc/opt/novell/sentinel/3rdparty/elasticsearch/elasticsearch.yml 

2. Make a copy of the elasticsearch.yml file
3. edit line network.host: [<ip address of the sentinel server> ,127.0.0.1] to match the ip address of the source Sentinel server.

4. Save and close the file.
Note: confirm that the permissions have not changed.

5. go to /opt/novell/sentinel/bin

6. su novell

7. ./si_db.sh restart

Cause

The elasticsearch.yml file has the entry: network.host: [<ip address of the sentinel server> ,127.0.0.1]

While restoring, the IP address of the source server gets copied to the destination server's elasticsearch.yml file.