no logs in kibana

[ktroberson]

When I run so-elasticsearch-indicies-list, I dont see any of the indicies, but when i log into the search nodes I do. Please help

[ktroberson]

[ktroberson]

[cm-ops]

salt-call pillar.get elasticsearch:true_cluster if that is False, you are running a cross cluster https://docs.securityonion.net/en/latest/elasticsearch.html#cross-cluster-search The indices are on the search nodes and the manager queries the search nodes via cross cluster search.