title: can't connect elasticsearch to logstash
body: <p>I'm trying to connect elasticsearch to logstash on a centralized logstash aggregator</p>
  
  <p>I'm running the logstash web interface over port 80 with kibana. </p>
  
  <p>This is the command I'm using to start logstash :</p>
  
  <pre><code>/usr/bin/java -jar /etc/alternatives/logstashhome/logstash.jar agent -f      /etc/logstash/logstash.conf web --port 80
  </code></pre>
  
  <p>This is the conf I am using:</p>
  
  <pre><code> [root@logstash:~] #cat /etc/logstash/logstash.conf 
    input { redis { host =&gt; "my-ip-here" 
    type =&gt; "redis-input" 
    data_type =&gt; "list"
    key =&gt;       "logstash" } 
    }
  
   output {
   stdout { }
   elasticsearch{
      type =&gt; "all"
      embedded =&gt; false
      host =&gt; "my-ip-here"
      port =&gt; "9300"
      cluster =&gt; "jf"
      node_name =&gt; "logstash"
      }
   }
  </code></pre>
  
  <p>And it looks as if I am receiving data from the logstash agent (installed on another host). I see log entries streaming by after I start logstash via init script.</p>
  
  <pre><code>2013-10-31T02:51:53.916+0000 beta Oct 30 22:51:53 49eb8f3e-a2c1-4c12-a41f-42dbe635a9f0 sshd[23324]: Connection closed by xx.xx.xx.xx
  2013-10-31T02:52:13.002+0000 beta Oct 30 22:52:12 49eb8f3e-a2c1-4c12-a41f-42dbe635a9f0 proftpd[23403]: xx.xx.xx.xx (xx.xx.xx.xx[xx.xx.xx.xx]) - FTP session opened.
  2013-10-31T02:52:13.002+0000 beta Oct 30 22:52:12 49eb8f3e-a2c1-4c12-a41f-42dbe635a9f0 proftpd[23403]: xx.xx.xx.xx (xx.xx.xx.xx[xx.xx.xx.xx]) - FTP session closed.
  2013-10-31T02:52:30.080+0000 beta Oct 30 22:52:29 49eb8f3e-a2c1-4c12-a41f-42dbe635a9f0 xinetd[1757]: START: nrpe pid=23405 from=xx.xx.xx.xx
  2013-10-31T02:52:30.081+0000 beta Oct 30 22:52:29 49eb8f3e-a2c1-4c12-a41f-42dbe635a9f0 xinetd[1757]: EXIT: nrpe status=0 pid=23405 duration=0(sec)
  </code></pre>
  
  <p>I can see my nagios server connecting to the beta host ( beta is the external host with the logstash agent installed and running) and some FTP sessions (not that I'm in love FTP, but hey what can ya do?)</p>
  
  <p>Yet when I point my browser to the logstash server I see this message:</p>
  
  <pre><code>Error No index found at http://logstash.mydomain.com:9200/_all/_mapping. Please create at least one index.If you're using a proxy ensure it is configured correctly.1 alert(s)
  </code></pre>
  
  <p>This is my cluster setting in elasticsearch.yaml</p>
  
  <pre><code> grep -i cluster /etc/elasticsearch/elasticsearch.yml  | grep jf
   cluster.name: jf
  </code></pre>
  
  <p>My host in elasticsearch.yaml
      grep -i host  /etc/elasticsearch/elasticsearch.yml  </p>
  
  <pre><code> network.bind_host: xxx.xx.xx.xxx  # &lt;- my logstash ip
  </code></pre>
  
  <p>I did try to add an index using the following curl:</p>
  
  <pre><code>[root@logstash:~] #curl -PUT http://logstash.mydomain.com:9200/_template/logstash_per_index
  </code></pre>
  
  <p>But when I reload the page I get the same error message. A bit stuck at this point. I'd appreciate any advice anyone may have!</p>
  
  <p>Thanks!</p>