Problem: This version of Kibana requires Elasticsearch 1.4.3 or higher on all nodes

[gcobr]

I am running Elasticsearch 1.4.3; however, the first time I started Kibana, the application showed me the following error message:

Kibana: This version of Kibana requires Elasticsearch 1.4.3 or higher on all nodes. I found the following incompatible nodes in your cluster: 

Elasticsearch 1.1.1 @ inet[/10.28.3.201:9301] ()

After a brief investigation, I found out that the application listening on port 9301 was actually Logstash. It had nothing to do with Elasticsearch.

For some unexplained reason, Kibana thought it were an Elasticsearch server.

[markwalkom]

That'd be because you are using the node transport protocol, so LS joins the cluster as a node.

Use the HTTP or transport protocols and you won't have this problem.

[rogersmarin]

@markwalkom where/how can I configure that?

[markwalkom]

In your LS config, see http://logstash.net/docs/1.4.2/outputs/elasticsearch#protocol

[runesl]

Kibana shoudn't detect logstash as an ES node, which it can draw data from. It's counterintuitive and makes elk unnecesarily difficult to setup.

[wrigby]

@rogersmarin Use the elasticsearch_http output plugin instead of the elasticsearch one for a quick workaround. I think this will be fixed in 4.0.0 - see #3066 .

[markwalkom]

Don't use the elasticsearch_http output, it's being deprecated, use the elastisearch one with protocol => http

[wrigby]

@markwalkom woops... I didn't notice that. Thanks for the heads up!

[mingderwang]

To check and find some nodes in your elasticsearch cluster are running 1.1.1 es.
$ curl -XGET 'http://localhost:9200/_nodes?pretty=true'
Shutdown them with their node ID, such as
$ curl -XPOST 'http://localhost:9200/_cluster/nodes/i5Nk8Jp8RCaCUGWc_egSZQ/_shutdown'

It causes by logstash default come with its own embedded elasticsearch, which is 1.1.1 and will join the clustering.