<div dir="ltr">Or try to set skip-cluster-health-check(yes) option in your elasticsearch destination: <div><a href="https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-destination-elasticsearch2.html#elasticsearch2-option-elasticsearch2-skip-cluster-health-check">https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-destination-elasticsearch2.html#elasticsearch2-option-elasticsearch2-skip-cluster-health-check</a><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Sep 8, 2016 at 2:40 PM, Fabien Wernli <span dir="ltr"><<a href="mailto:wernli@in2p3.fr" target="_blank">wernli@in2p3.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Scot,<br>
<span class=""><br>
On Thu, Sep 08, 2016 at 07:32:19AM -0400, Scot Needy wrote:<br>
> [root@meo syslog-ng]# while true;do curl <a href="http://localhost:9200/_cat/indices;sleep" rel="noreferrer" target="_blank">http://localhost:9200/_cat/<wbr>indices;sleep</a> 5;done<br>
</span><span class="">> yellow open syslog-ng_2016.09.08 5 1 1 3 12.7kb 12.7kb<br>
<br>
</span>It may be that syslog-ng waits for the cluster to be green.<br>
The most common cause for that is that you configured elasticsearch for too<br>
many replicas that your cluster topology can handle.<br>
<br>
If you have only one node, make sure to reduce the number of replicas to 0<br>
for every index [1]<br>
<br>
Cheers<br>
<br>
[1]<br>
<a href="https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-update-settings.html" rel="noreferrer" target="_blank">https://www.elastic.co/guide/<wbr>en/elasticsearch/reference/<wbr>current/indices-update-<wbr>settings.html</a><br>
<br>
______________________________<wbr>______________________________<wbr>__________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/<wbr>mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/<wbr>support/documentation/?<wbr>product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/<wbr>syslog-ng-faq</a><br>
<br>
<br>
</blockquote></div><br></div>