Unable to start elasticsearch when auto_create_index is set to false

Graylog Central (peer support)
1

I installed elasticsearch latest version (7.6) and added the below in the elasticsearch.yml file.

cluster.name: graylog
action.auto_create_index: false.

For some reason, it doesn’t like the action.auto_create_index setting and due to this, it won’t come up. If I comment it out, it comes up but getting this error when I click on received messages. I do see in/out and also can see the messages being received but this error shows up when i click on received messages. And due to this, I can’t create extractor.

While retrieving data for this widget, the following error(s) occurred:

  • Unable to perform search query: [query_string] query does not support [use_dis_max].

Can you please help on this? Thanks.

2

Maybe you missed the docs, please check it.
https://docs.graylog.org/en/3.2/pages/installation.html#system-requirements

3

image :slightly_frowning_face:

4

You are too kind. Give a chance to read.

1 Like
5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.