SweetSecurity
                                
                                
                                
                                    SweetSecurity copied to clipboard
                            
                            
                            
                        Waiting for Elasticsearch to start...
Hi sir,
 then i install the server by  "sudo python setup.py".  it always blocking in "Waiting for Elasticsearch to start..." as below.
 i do not know how to do the next? how to start Elasticsearch? it has been installed?
 thanks
Elasticsearch already installed Creating elasticsearch credentials Kibana already installed Importing Kibana Index Patterns Importing /root/Documents/github/SweetSecurity/kibana/patterns/logstash.json Importing /root/Documents/github/SweetSecurity/kibana/patterns/sweet_security_alerts.json Importing /root/Documents/github/SweetSecurity/kibana/patterns/sweet_security.json Importing /root/Documents/github/SweetSecurity/kibana/patterns/tardis.json Importing Dashboards Importing /root/Documents/github/SweetSecurity/kibana/dashboards/geoip.json Importing /root/Documents/github/SweetSecurity/kibana/dashboards/SweetSecurityAlerts.json Importing /root/Documents/github/SweetSecurity/kibana/dashboards/logstash.json Importing /root/Documents/github/SweetSecurity/kibana/dashboards/sweet_security.json Importing /root/Documents/github/SweetSecurity/kibana/dashboards/baselines.json Waiting for Elasticsearch to start... Waiting for Elasticsearch to start...
There appears to be an error in communicating with Elasticsearch to update the kibana instance. If there is a specific exception being thrown, the current installer does not log it. You can modify the installer to print out the exception by performing the following.
- Edit install/kibana.py
 - Modify line 99 from
except:toexcept Exception,e: - Add a line in the exception block below on line 100:
print(e) 
Paste the results here.
Are you getting issues regarding the curl of localhost:9200? If so, you can kill the install, run sudo service elasticsearch start, check the status and review the error code. I was having like issues and it was complaining java-v8 was not installed. Purged all old java and installed 8. Re-ran the install and everything is working fine now.
I am trying to install a server (Role 3) on an Ubuntu 17.10 64 bit and I am having the same issue Starting Kibana Importing Kibana Index Pattern Importing /home/user/sweetsecurity/kibana/patterns/tardis.json Importing /home/user/sweetsecurity/kibana/patterns/logstash.json Importing /home/user/sweetsecurity/kibana/patterns/sweet_security_alerts.json Importing /home/user/sweetsecurity/kibana/patterns/sweet_security.json Importing Dashboards Importing /home/user/sweetsecurity/kibana/dashboards/SweetSecurityAlerts.json Importing /home/user/sweetsecurity/kibana/dashboards/logstash.json Importing /home/user/sweetsecurity/kibana/dashboards/geoip.json Importing /home/user/sweetsecurity/kibana/dashboards/baselines.json Importing /home/user/sweetsecurity/kibana/dashboards/sweet_security.json Waiting for Elasticsearch to start...
The exception for me is:
TransportError(404, u'document_missing_exception', u'[config][5.5.1]: document missing')
the elasticsearch service is running and responds on port 9200 but the installer does not see it.
Same issue, my errors just show unable to connect over and over saying connection refused.
Restarting Apache
Installing Logstash
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0curl: (7) Failed to connect to localhost port 9201: Connection refused
Error: Waiting for Elasticsearch to start...try 1 of 10
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0curl: (7) Failed to connect to localhost port 9201: Connection refused
Error: Waiting for Elasticsearch to start...try 2 of 10
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0curl: (7) Failed to connect to localhost port 9201: Connection refused
Error: Waiting for Elasticsearch to start...try 3 of 10
                                    
                                    
                                    
                                
I had a similar problem, but discovered it was the password I used on my elastic stack. I built the web half in a VM and used a non-alphanumeric in the password, but the Raspberry Pi was set to En-GB keyboard, so when I typed in the password on the Raspberry Pi it was submitting the wrong character.
In case the setup script wait on elastic search run the following command: /etic/init.d/elasticsearch status
it will most probably say that the service did not start correctly, and most probably it will be due to the Java Runtime Env. run the following commands and it will fix your issue in case its the java: apt-get update apt-get install default-jre
Having same problem with error NotFoundError(404, u'document_missing_exception', u'[config][5.5.1]: document missing')