Grid/Elasticsearch Status: Pending

[arisentow]

Version

2.4.40

Installation Method

Security Onion ISO image

Description

other (please provide detail below)

Installation Type

Standalone

Location

on-prem with Internet access

Hardware Specs

Exceeds minimum requirements

CPU

4

RAM

32GB

Storage for /

4TB

Storage for /nsm

4TB

Network Traffic Collection

tap

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

I'm having the same issue as described in #12224 following an upgrade from 2.4.30 to 2.4.40. I've attempted the fix actions listed in #12224, however I am still showing "Elasticsearch Status: Pending" in the grid status. I had a handful of indices listed after running sudo so-elasticsearch-indices-list | grep -vE "green|health", I cleared them out, rebooted, ran the command again (no indices listed), and still showing "pending".

I've checked the logs and don't see anything that stands out regarding Elasticsearch. No issues running a state.highstate.

Any ideas? Does this indicate that Elasticsearch is not actually working?

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[arisentow]

Fix via #12302