ubuntu@ip-:/var/log/logstash$ sudo docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
8baa61dd4bc5 securityonionsolutions/so-curator "/bin/bash" 24 seconds ago Up 23 seconds so-curator
99d932bcd1b2 securityonionsolutions/so-elastalert "/opt/start-elasta..." 24 seconds ago Up 24 seconds so-elastalert
25b48607c92f securityonionsolutions/so-domainstats "/bin/sh -c '/usr/..." About a minute ago Up About a minute 20000/tcp so-domainstats
7e93c2cdd323 securityonionsolutions/so-freqserver "/bin/sh -c '/usr/..." About a minute ago Up About a minute 10004/tcp so-freqserver
ubuntu@ip-:/var/log/logstash$ cat /var/log/elasticsearch/
Wes
unread,
Oct 25, 2017, 8:02:55 AM10/25/17
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to security-onion
Jon,
Have you tried checking the log(s) in /var/log/elasticsearch/ for clues?