When a node that was down and unregistered starts again, it would have the Audit Store configuration. Similarly, when any external machine, such as an external OpenSearch machine is connected to the Audit Store without using the Join Cluster button from the Audit Store Management page, then the node appears with an orange icon (). In this case, register the node using the Register button.
Perform the following steps to register a node:
Navigate to Audit Store > Cluster Management > Overview > Nodes.
Click Register ().
The node will be a part of the cluster and a black node icon () will appear.
When a node goes down, such as due to a crash or for maintenance, then the node is greyed out (). Disconnect the node from the cluster using the Unregister button. A disconnected node can be added back to the cluster later, if required.
Perform the following steps to remove the disconnected node:
Navigate to Audit Store > Cluster Management > Overview > Nodes.
Click Unregister ().
The node will still be a part of the cluster, however, it will not be visible in the list.