SSL Connection Cannot Be Established While Sending Logs To Elasticsearch

The Elasticsearch cannot get the Robot logs from the Orchestrator.

Issue Description: After setting the ElasticSearch in Nlog seccion in UiPath.Orchestrator.dll.config file, the logs are not sent to ElasticSearch, and the following error message is obtained in the Event Viewer log,

"ElasticSearch: Failed to send log messages. # OriginalException: Elasticsearch.Net.ElasticsearchClientException: Failed to ping the specified node.. Call: Status code unknown from: HEAD /

---> Elasticsearch.Net.PipelineException: Failed to ping the specified node.

---> Elasticsearch.Net.PipelineException: An error occurred trying to write the request data to the specified node.

---> System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner exception.

---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid because of errors in the certificate chain: PartialChain"


Root Cause: This is a SSL certificate issue, encountered because the ElasticSearch SSL certificate is not imported in Orchestrator server, so the connection to the ElasticSearch cannot be created successfully.

Resolution:

  • Check the issue with the Elasticseach team and import the ElasticSearch SSL certificate into the Orchestrator server and put it in the trusted folder.

Note: Elasticsearch 8.x can only work with Orchestrator version 22.10 or above and it is required to follow the rules in the documentation Elasticsearch Server - Orchestrator Logs to set it.