Error installing Zenarmor

[aduwing]

I am running 23.1.4 and reinstalling Zenarmor so I can use Elasticsearch instead of Mongodb.

I am getting this error during the configuration.

Setting up elasticsearch...Starting elasticsearch service...
***ERROR***: Elasticsearch service could not be started in 60 seconds!***
***ERROR*** CODE:2***

I have tried uninstalling it several times but the error persists.

Any advise how to resolve this?

Thank you.

[aduwing]

Here is the status of ElasticSearch:
root@OPNsense:~ # service elasticsearch5 status
elasticsearch5 does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), or is not executable

Any advise how to resolve this?

Thank you.

[aduwing]

Was able to fix it using this link.

https://www.reddit.com/r/OPNsenseFirewall/comments/lt4kqu/elasticsearch_service_could_not_be_started_in_60/

[persec-anon]

ZenArmor disk space issues. Following this guide to re-install the DB:
https://www.zenarmor.com/docs/troubleshooting/reporting#how-do-i-reinstall-the-reporting-database

Moving from ElasticSearch v5 to v8. Either version I end up with:

***ERROR***: Elasticsearch service could not be started in 60 seconds!***
***ERROR*** CODE:2***

Tried the uninstall/nuke Elasticsearch mentioned here, not a fix.
OPNsense 25.1.5_5, Intel(R) Celeron(R) N5105 @ 2.00GHz (4 cores, 4 threads), 32gb of RAM. This router is overkill but Zenarmor is giving me grief.

Works with Sqlite, but I want two months of logs/reports/data, not 2 days.

[persec-anon]

(dupe post)

[sy]

Hi,

Please remove existing Elasticsearch package and all Elasticsearch data and config files then re-try it

pkg remove elasticsearch5 elasticsearch8
pkg autoremove
rm -fr /usr/local/etc/elasticsearch
rm -fr /usr/local/datastore/elasticsearch