<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Error when trying to create event service - Connection Refused Error in Splunk AppDynamics</title>
    <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721976#M2942</link>
    <description>&lt;P&gt;Hello team and sorry for the late response.&lt;BR /&gt;Sharing with you some steps that solved this issue.&lt;BR /&gt;&lt;BR /&gt;1- First, you will need to create any user differently from the root. If you are trying to start from root user, it will fail.&lt;BR /&gt;2- Set the write, read and executable privileges for this new user to the appd directory.&lt;BR /&gt;&lt;SPAN&gt;3- Then, with the new user, change the property values in your events-services-api-store.properties file to IP address instead of hostnames.&lt;/SPAN&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;egrep "dw.http.host|es.node.unicast.hosts|es.cluster.initial_master_nodes|es.cluster.http.hosts" ../conf/events-service-api-store.properties
ad.dw.http.host=X.X.X.X
ad.es.node.unicast.hosts=X.X.X.X:9300
ad.es.cluster.initial_master_nodes=X.X.X.X
ad.es.cluster.http.hosts:X.X.X.X:9200&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;4- Add the following environment variable to the new user.&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;export INSTALL_BOOTSTRAP_MASTER_ES8=true&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;5- Restart the Event-Service(ES) manually. Proceed with the steps below:&lt;BR /&gt;&lt;STRONG&gt;(From events-service/processor directory) -&amp;gt; &lt;U&gt;Need to run from this directory otherwise will fail&lt;/U&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;bin/events-service.sh stop -f &amp;amp;&amp;amp; rm -r events-service-api-store.id &amp;amp;&amp;amp; rm -r elasticsearch.id&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;STRONG&gt;If you have more than one cluster, run the following command on each node in the cluster. In my setup there is only one ES node.&lt;/STRONG&gt;&lt;BR /&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;nohup bin/events-service.sh start -p conf/events-service-api-store.properties &amp;amp;&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;STRONG&gt;After two or three minutes, check the opened ports.&lt;/STRONG&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;netstat -ant|egrep "9080|9081|9200|9300"
-a -&amp;gt; all ports
-n -&amp;gt; numeric ports
-t -&amp;gt; tcp ports&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;BR /&gt;Thanks,&lt;BR /&gt;Luiz Polli&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 13 Jul 2023 19:09:49 GMT</pubDate>
    <dc:creator>Luiz_Polli1</dc:creator>
    <dc:date>2023-07-13T19:09:49Z</dc:date>
    <item>
      <title>Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721970#M2936</link>
      <description>&lt;P&gt;Hi experts,&lt;/P&gt;&lt;P&gt;I have created a new event service in a demo deployment, but it is failing to start up. I'm seeing some errors for failed to connect to in platform-admin-server.log.&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;INFO  [2023-05-11 18:24:50,425] com.appdynamics.orcha.modules.modules.UriExec: Sending request to: http://appd-controller:9080/_ping

WARN  [2023-05-11 18:24:50,426] com.appdynamics.orcha.modules.modules.UriExec: Connection to [http://appd-controller:9080/_ping] failed due to [Failed to connect to appd-controller/192.168.0.17:9080].

INFO  [2023-05-11 18:24:51,742] com.appdynamics.platformadmin.resources.VersionResource: Found Enterprise Console version 23.4.0-10041, build

INFO  [2023-05-11 18:24:55,441] com.appdynamics.orcha.modules.modules.UriExec: Sending request to: http://appd-controller:9080/_ping

WARN  [2023-05-11 18:24:55,442] com.appdynamics.orcha.modules.modules.UriExec: Connection to [http://appd-controller:9080/_ping] failed due to [Failed to connect to appd-controller/192.168.0.17:9080].

INFO  [2023-05-11 18:25:00,442] com.appdynamics.orcha.modules.modules.UriExec: Sending request to: http://appd-controller:9080/_ping

WARN  [2023-05-11 18:25:00,443] com.appdynamics.orcha.modules.modules.UriExec: Connection to [http://appd-controller:9080/_ping] failed due to [Failed to connect to appd-controller/192.168.0.17:9080].

INFO  [2023-05-11 18:25:05,468] com.appdynamics.orcha.modules.modules.UriExec: Sending request to: http://appd-controller:9080/_ping

WARN  [2023-05-11 18:25:05,468] com.appdynamics.orcha.modules.modules.UriExec: Connection to [http://appd-controller:9080/_ping] failed due to [Failed to connect to appd-controller/192.168.0.17:9080].&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;SPAN class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Error_Event_Service_Not_Starting.png" style="width: 999px;"&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="image.png"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/35616iEDD21E98B23D0B33/image-size/large?v=v2&amp;amp;px=999" role="button" title="image.png" alt="image.png" /&gt;&lt;/span&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;Could anyone help me on that?&lt;/P&gt;</description>
      <pubDate>Wed, 10 May 2023 11:49:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721970#M2936</guid>
      <dc:creator>Luiz_Polli</dc:creator>
      <dc:date>2023-05-10T11:49:48Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721971#M2937</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/163562"&gt;@Luiz.Polli&lt;/A&gt;,&lt;/P&gt;
&lt;P&gt;I did some digging around and what I found was you need to also look into&amp;nbsp;&lt;SPAN&gt;the events-service-api-store.log and the appdynamics-events-service-cluster.log file from the remove events service host to review this issue further.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;For another member, this was the issue they had.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;The issue is due to the presence of a stale id file and so can you get remove it and then restart it from the econsole&lt;BR /&gt;&lt;BR /&gt;Remove this file&lt;BR /&gt;&lt;BR /&gt;/usr/local/appdynamics/platform/product/events-service/processor/bin/../&lt;A href="http://events-service-api-store.id/" rel="noreferrer nofollow noopener" target="_blank"&gt;events-service-api-store.id&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 14 May 2023 11:27:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721971#M2937</guid>
      <dc:creator>iamryan</dc:creator>
      <dc:date>2023-05-14T11:27:16Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721972#M2938</link>
      <description>&lt;P&gt;Hello Ryan,&lt;BR /&gt;I tried to remove the &lt;FONT face="courier new,courier"&gt;events-service-api-store.id&lt;/FONT&gt; and did not work. Attached the log files. But something is wrong with connection refused to elasticsearch service.&lt;/P&gt;&lt;P&gt;The log below is for&amp;nbsp;&lt;FONT face="courier new,courier"&gt;events-service-api-store.log&lt;/FONT&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;[2023-05-15T15:20:22,082-03:00]  [INFO ]  [elasticsearch-config-enforcer-0]  [c.a.a.p.e.i.m.OneToMultiNodeUpgradeEnforcerModule]  Attempt [2]

[2023-05-15T15:20:22,091-03:00]  [WARN ]  [elasticsearch-config-enforcer-0]  [c.a.a.p.e.i.m.OneToMultiNodeUpgradeEnforcerModule]  Error occurred while attempting to force cluster settings. Retry attempts remaining [1]
java.net.ConnectException: Connection refused
        at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:930)
        at org.elasticsearch.client.RestClient.performRequest(RestClient.java:300)
        at org.elasticsearch.client.RestClient.performRequest(RestClient.java:288)
        at co.elastic.clients.transport.rest_client.RestClientTransport.performRequest(RestClientTransport.java:147)
        at co.elastic.clients.elasticsearch.indices.ElasticsearchIndicesClient.getSettings(ElasticsearchIndicesClient.java:1139)
        at co.elastic.clients.elasticsearch.indices.ElasticsearchIndicesClient.getSettings(ElasticsearchIndicesClient.java:1156)
        at com.appdynamics.analytics.processor.elasticsearch.index.maintenance.OneToMultiNodeUpgradeEnforcerModule.getIndexSettings(OneToMultiNodeUpgradeEnforcerModule.java:79)
        at com.appdynamics.analytics.processor.elasticsearch.index.maintenance.OneToMultiNodeUpgradeEnforcerModule$EnforcerTask.run(OneToMultiNodeUpgradeEnforcerModule.java:220)
        at java.base/java.lang.Thread.run(Unknown Source)
Caused by: java.net.ConnectException: Connection refused
        at java.base/sun.nio.ch.Net.pollConnect(Native Method)
        at java.base/sun.nio.ch.Net.pollConnectNow(Unknown Source)
        at java.base/sun.nio.ch.SocketChannelImpl.finishConnect(Unknown Source)
        at org.apache.http.impl.nio.reactor.DefaultConnectingIOReactor.processEvent(DefaultConnectingIOReactor.java:171)
        at org.apache.http.impl.nio.reactor.DefaultConnectingIOReactor.processEvents(DefaultConnectingIOReactor.java:145)
        at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor.execute(AbstractMultiworkerIOReactor.java:348)
        at org.apache.http.impl.nio.conn.PoolingNHttpClientConnectionManager.execute(PoolingNHttpClientConnectionManager.java:191)
        at org.apache.http.impl.nio.client.CloseableHttpAsyncClientBase$1.run(CloseableHttpAsyncClientBase.java:64)
        ... 1 common frames omitted

[2023-05-15T15:20:22,091-03:00]  [INFO ]  [elasticsearch-config-enforcer-0]  [c.a.a.p.e.i.m.OneToMultiNodeUpgradeEnforcerModule]  Attempt [3]

[2023-05-15T15:20:22,097-03:00]  [ERROR]  [elasticsearch-config-enforcer-0]  [c.a.a.p.e.i.m.OneToMultiNodeUpgradeEnforcerModule]  Error occurred while attempting to force cluster settings
java.net.ConnectException: Connection refused
        at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:930)
        at org.elasticsearch.client.RestClient.performRequest(RestClient.java:300)
        at org.elasticsearch.client.RestClient.performRequest(RestClient.java:288)
        at co.elastic.clients.transport.rest_client.RestClientTransport.performRequest(RestClientTransport.java:147)
        at co.elastic.clients.elasticsearch.indices.ElasticsearchIndicesClient.getSettings(ElasticsearchIndicesClient.java:1139)
        at co.elastic.clients.elasticsearch.indices.ElasticsearchIndicesClient.getSettings(ElasticsearchIndicesClient.java:1156)
        at com.appdynamics.analytics.processor.elasticsearch.index.maintenance.OneToMultiNodeUpgradeEnforcerModule.getIndexSettings(OneToMultiNodeUpgradeEnforcerModule.java:79)
        at com.appdynamics.analytics.processor.elasticsearch.index.maintenance.OneToMultiNodeUpgradeEnforcerModule$EnforcerTask.run(OneToMultiNodeUpgradeEnforcerModule.java:220)
        at java.base/java.lang.Thread.run(Unknown Source)
Caused by: java.net.ConnectException: Connection refused
        at java.base/sun.nio.ch.Net.pollConnect(Native Method)
        at java.base/sun.nio.ch.Net.pollConnectNow(Unknown Source)
        at java.base/sun.nio.ch.SocketChannelImpl.finishConnect(Unknown Source)
        at org.apache.http.impl.nio.reactor.DefaultConnectingIOReactor.processEvent(DefaultConnectingIOReactor.java:171)
        at org.apache.http.impl.nio.reactor.DefaultConnectingIOReactor.processEvents(DefaultConnectingIOReactor.java:145)
        at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor.execute(AbstractMultiworkerIOReactor.java:348)
        at org.apache.http.impl.nio.conn.PoolingNHttpClientConnectionManager.execute(PoolingNHttpClientConnectionManager.java:191)
        at org.apache.http.impl.nio.client.CloseableHttpAsyncClientBase$1.run(CloseableHttpAsyncClientBase.java:64)
        ... 1 common frames omitted
[root@appd-controller logs]#&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;The log below is for&amp;nbsp;&lt;FONT face="courier new,courier"&gt;appdynamics-events-service-cluster.log&amp;nbsp;&lt;/FONT&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;[root@appd-controller logs]# tail -200 appdynamics-events-service-cluster.log
[2023-05-15T15:16:32,832][WARN ][o.e.c.l.LogConfigurator  ] [appd-controller] Some logging configurations have %marker but don't have %node_name. We will automatically add %node_name to the pattern to ease the migration for users who customize log4j2.properties but will stop this behavior in 7.0. You should manually replace `%node_name` with `[%node_name]%marker ` in these locations:
  /home/appdynamics/platform/product/events-service/processor/elasticsearch/config/log4j2.properties
[2023-05-15T15:16:36,705][ERROR][o.e.b.Elasticsearch      ] [appd-controller] fatal exception while booting Elasticsearch
java.lang.RuntimeException: can not run elasticsearch as root
        at org.elasticsearch.bootstrap.Elasticsearch.initializeNatives(Elasticsearch.java:260) ~[elasticsearch-8.5.3.jar:?]
        at org.elasticsearch.bootstrap.Elasticsearch.initPhase2(Elasticsearch.java:166) ~[elasticsearch-8.5.3.jar:?]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:66) ~[elasticsearch-8.5.3.jar:?]
[root@appd-controller logs]#&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;Hope that information helps to find a solution.&lt;/P&gt;&lt;P&gt;Thank you,&lt;BR /&gt;Luiz Polli&lt;/P&gt;</description>
      <pubDate>Tue, 16 May 2023 11:51:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721972#M2938</guid>
      <dc:creator>Luiz_Polli</dc:creator>
      <dc:date>2023-05-16T11:51:26Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721973#M2939</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/163562"&gt;@Luiz.Polli&lt;/A&gt;,&lt;/P&gt;
&lt;P&gt;Let's see if the Community can jump in and help out further. If you also discover something, please share that here too.&lt;/P&gt;</description>
      <pubDate>Fri, 19 May 2023 10:22:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721973#M2939</guid>
      <dc:creator>iamryan</dc:creator>
      <dc:date>2023-05-19T10:22:31Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721974#M2940</link>
      <description>&lt;P&gt;Hi Ryan,&amp;nbsp;&lt;/P&gt;&lt;P&gt;I'm also seeing this same error when installing Event Service&amp;nbsp; locally on the Enterprise Console host (centos 8 stream).&amp;nbsp; &amp;nbsp;I installed the EC using&amp;nbsp; platform-setup-x64-linux-23.4.0.10041.sh&amp;nbsp; &amp;nbsp;The&amp;nbsp;&amp;nbsp;appdynamics-events-service-cluster.log shows the below:&lt;/P&gt;&lt;P&gt;[root@centos8stream logs]# cat appdynamics-events-service-cluster.log&lt;BR /&gt;[2023-07-11T03:26:32,998][WARN ][o.e.c.l.LogConfigurator ] [centos8stream.localdomain] Some logging configurations have %marker but don't have %node_name. We will automatically add %node_name to the pattern to ease the migration for users who customize log4j2.properties but will stop this behavior in 7.0. You should manually replace `%node_name` with `[%node_name]%marker ` in these locations:&lt;BR /&gt;/opt/appdynamics/platform/product/events-service/processor/elasticsearch/config/log4j2.properties&lt;BR /&gt;[2023-07-11T03:26:33,179][ERROR][o.e.b.Elasticsearch ] [centos8stream.localdomain] fatal exception while booting Elasticsearch&lt;BR /&gt;java.lang.RuntimeException: can not run elasticsearch as root&lt;BR /&gt;at org.elasticsearch.bootstrap.Elasticsearch.initializeNatives(Elasticsearch.java:260) ~[elasticsearch-8.5.3.jar:?]&lt;BR /&gt;at org.elasticsearch.bootstrap.Elasticsearch.initPhase2(Elasticsearch.java:166) ~[elasticsearch-8.5.3.jar:?]&lt;BR /&gt;at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:66) ~[elasticsearch-8.5.3.jar:?]&lt;/P&gt;&lt;P&gt;Checking "netstat -an",&amp;nbsp; port 9080 is not showing - no surprises there.&lt;/P&gt;&lt;P&gt;Also note that " /opt/appdynamics/platform/platform-admin/bin/platform-admin.sh start-platform-admin" must be run as root user, otherwise it returns the error:&lt;/P&gt;&lt;P&gt;[appd@centos8stream appdynamics]$ /opt/appdynamics/platform/platform-admin/bin/platform-admin.sh start-platform-admin&lt;BR /&gt;Enterprise Console must be operated with user 'root'. Current user is appd&lt;/P&gt;</description>
      <pubDate>Tue, 11 Jul 2023 07:45:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721974#M2940</guid>
      <dc:creator>PsychicMushroom</dc:creator>
      <dc:date>2023-07-11T07:45:55Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721975#M2941</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/77669"&gt;@Michael.Lee&lt;/A&gt;,&lt;/P&gt;
&lt;P&gt;Thanks for sharing. Since the community was not able to jump in and help out&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/163562"&gt;@Luiz.Polli&lt;/A&gt;&amp;nbsp;I would recommend contacting Support or your AppD rep for more help with this.&lt;BR /&gt;&lt;BR /&gt;Unless&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/163562"&gt;@Luiz.Polli&lt;/A&gt;&amp;nbsp;was able to find a solution and can share it here.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;A href="https://community.appdynamics.com/t5/Knowledge-Base/How-do-I-submit-a-Support-ticket-An-FAQ/m-p/28959#U28959" class="lia-mention-container-editor-message lia-img-icon-tkb-thread lia-fa-icon lia-fa-tkb lia-fa-thread lia-fa"&gt;How do I submit a Support ticket? An FAQ&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 11 Jul 2023 22:21:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721975#M2941</guid>
      <dc:creator>iamryan</dc:creator>
      <dc:date>2023-07-11T22:21:45Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721976#M2942</link>
      <description>&lt;P&gt;Hello team and sorry for the late response.&lt;BR /&gt;Sharing with you some steps that solved this issue.&lt;BR /&gt;&lt;BR /&gt;1- First, you will need to create any user differently from the root. If you are trying to start from root user, it will fail.&lt;BR /&gt;2- Set the write, read and executable privileges for this new user to the appd directory.&lt;BR /&gt;&lt;SPAN&gt;3- Then, with the new user, change the property values in your events-services-api-store.properties file to IP address instead of hostnames.&lt;/SPAN&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;egrep "dw.http.host|es.node.unicast.hosts|es.cluster.initial_master_nodes|es.cluster.http.hosts" ../conf/events-service-api-store.properties
ad.dw.http.host=X.X.X.X
ad.es.node.unicast.hosts=X.X.X.X:9300
ad.es.cluster.initial_master_nodes=X.X.X.X
ad.es.cluster.http.hosts:X.X.X.X:9200&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;4- Add the following environment variable to the new user.&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;export INSTALL_BOOTSTRAP_MASTER_ES8=true&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&amp;nbsp;5- Restart the Event-Service(ES) manually. Proceed with the steps below:&lt;BR /&gt;&lt;STRONG&gt;(From events-service/processor directory) -&amp;gt; &lt;U&gt;Need to run from this directory otherwise will fail&lt;/U&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;bin/events-service.sh stop -f &amp;amp;&amp;amp; rm -r events-service-api-store.id &amp;amp;&amp;amp; rm -r elasticsearch.id&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;STRONG&gt;If you have more than one cluster, run the following command on each node in the cluster. In my setup there is only one ES node.&lt;/STRONG&gt;&lt;BR /&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;nohup bin/events-service.sh start -p conf/events-service-api-store.properties &amp;amp;&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;STRONG&gt;After two or three minutes, check the opened ports.&lt;/STRONG&gt;&lt;/P&gt;&lt;PRE class="lia-code-sample language-markup"&gt;&lt;CODE&gt;netstat -ant|egrep "9080|9081|9200|9300"
-a -&amp;gt; all ports
-n -&amp;gt; numeric ports
-t -&amp;gt; tcp ports&lt;/CODE&gt;&lt;/PRE&gt;&lt;P&gt;&lt;BR /&gt;Thanks,&lt;BR /&gt;Luiz Polli&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jul 2023 19:09:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721976#M2942</guid>
      <dc:creator>Luiz_Polli1</dc:creator>
      <dc:date>2023-07-13T19:09:49Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721977#M2943</link>
      <description>&lt;P&gt;Follow the case link opened for this issue. But I'm not sure if you will have access to it.&lt;BR /&gt;&lt;A href="https://help.appdynamics.com/hc/en-us/requests/367007" target="_self" rel="nofollow noopener noreferrer"&gt;https://help.appdynamics.com/hc/en-us/requests/367007&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jul 2023 19:13:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721977#M2943</guid>
      <dc:creator>Luiz_Polli1</dc:creator>
      <dc:date>2023-07-13T19:13:04Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721978#M2944</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/164074"&gt;@Luiz.Polli&lt;/A&gt;,&lt;/P&gt;
&lt;P&gt;Other community members do not have access to view your ticket, so thank you for sharing a bit more detail in the post above. Is there are any other details you can share, please do so as a reply to the post so it can be seen.&lt;/P&gt;
&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Fri, 14 Jul 2023 17:00:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721978#M2944</guid>
      <dc:creator>iamryan</dc:creator>
      <dc:date>2023-07-14T17:00:32Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721979#M2945</link>
      <description>&lt;P&gt;Hi Ryan,&lt;/P&gt;&lt;P&gt;That's all from my side. I hope it helps.&lt;/P&gt;&lt;P&gt;Thanks,&lt;BR /&gt;Luiz Polli&lt;/P&gt;</description>
      <pubDate>Fri, 14 Jul 2023 17:34:55 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721979#M2945</guid>
      <dc:creator>Luiz_Polli1</dc:creator>
      <dc:date>2023-07-14T17:34:55Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721980#M2946</link>
      <description>&lt;P&gt;This is the solution that worked for me ....&lt;/P&gt;&lt;P&gt;Ensure entry in /etc/hosts&amp;nbsp; containing the EC hostname as I'm installing the Event Service locally.&lt;/P&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;platform-admin.sh stop-platform-admin&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;Edit &amp;lt;platform_home&amp;gt;/mysql/db.cnf and&amp;nbsp; made the following change:&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;From:&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;user=root&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;To:&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;user=appd&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;Change the ownership of all the files in the EC home directory.&lt;/DIV&gt;&lt;DIV&gt;&lt;SPAN&gt;chown -R appd:appd /opt/appdynamics&lt;/SPAN&gt;&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;platform-admin.sh start-platform-admin&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;Remove the Events Service, and then deploy it again locally to the EC host.&lt;/DIV&gt;&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;&lt;DIV&gt;Events Service started OK.&lt;/DIV&gt;</description>
      <pubDate>Sat, 15 Jul 2023 22:27:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721980#M2946</guid>
      <dc:creator>PsychicMushroom</dc:creator>
      <dc:date>2023-07-15T22:27:40Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721981#M2947</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;A href="https://community.appdynamics.com/t5/user/viewprofilepage/user-id/77669"&gt;@Michael.Lee&lt;/A&gt;,&lt;/P&gt;
&lt;P&gt;Thanks for sharing this as well. Now the Community has two different options they can try.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 17 Jul 2023 15:40:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721981#M2947</guid>
      <dc:creator>iamryan</dc:creator>
      <dc:date>2023-07-17T15:40:33Z</dc:date>
    </item>
    <item>
      <title>Re: Error when trying to create event service - Connection Refused Error</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721982#M2948</link>
      <description>&lt;P&gt;The switch to IP helped resolve my migration issues, Thanks!&lt;/P&gt;</description>
      <pubDate>Mon, 27 Jan 2025 22:59:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Error-when-trying-to-create-event-service-Connection-Refused/m-p/721982#M2948</guid>
      <dc:creator>Eric_Robinson1</dc:creator>
      <dc:date>2025-01-27T22:59:29Z</dc:date>
    </item>
  </channel>
</rss>

