FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
Installed elasticsearch service on an external server and stopped the service on localhost but the health check feature keeps checking the localhost service status and sending notifications all the time.
This article describes how to exclude elasticsearch service from system and cluster health monitoring when it is externalized.
Scope
Solution
To avoid this disable the daemon of service using the command:
#systemctl disable elasticsearch
Now, 'csadmin services --status' and 'Health check system' both ignore it and do not send the notifications.
