C:\elk2\elasticsearch-8.8.0\bin>elasticsearch [2023-05-25T09:58:32,805][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] version[8.8.0], pid[8032], build[zip/c01029875a091076ed42cdb3a41c10b1a9a5a20f/2023-05-23T17:16:07.179039820Z], OS[Windows Server 2022/10.0/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/20.0.1/20.0.1+9-29] [2023-05-25T09:58:32,805][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] JVM home [C:\elk2\elasticsearch-8.8.0\jdk], using bundled JDK [true] [2023-05-25T09:58:32,821][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] JVM arguments [-Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=org.elasticsearch.preallocate, -XX:+UseG1GC, -Djava.io.tmpdir=C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,level,pid,tags:filecount=32,filesize=64m, -Xms4095m, -Xmx4095m, -XX:MaxDirectMemorySize=2147483648, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.distribution.type=zip, --module-path=C:\elk2\elasticsearch-8.8.0\lib, --add-modules=jdk.net, --add-modules=org.elasticsearch.preallocate, -Djdk.module.main=org.elasticsearch.server] [2023-05-25T09:58:44,484][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: No SLF4J providers were found. [2023-05-25T09:58:44,500][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Defaulting to no-operation (NOP) logger implementation [2023-05-25T09:58:44,500][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: See https://www.slf4j.org/codes.html#noProviders for further details. [2023-05-25T09:58:44,500][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Class path contains SLF4J bindings targeting slf4j-api versions 1.7.x or earlier. [2023-05-25T09:58:44,500][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Ignoring binding found at [jar:file:///C:/elk2/elasticsearch-8.8.0/modules/repository-azure/log4j-slf4j-impl-2.19.0.jar!/org/slf4j/impl/StaticLoggerBinder.class] [2023-05-25T09:58:44,500][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: See https://www.slf4j.org/codes.html#ignoredBindings for an explanation. [2023-05-25T09:58:53,713][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [repository-url] [2023-05-25T09:58:53,713][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [dlm] [2023-05-25T09:58:53,713][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-core] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-redact] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [ingest-user-agent] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-async-search] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-monitoring] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [repository-s3] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-analytics] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-ent-search] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-autoscaling] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [lang-painless] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-ml] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [lang-mustache] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [legacy-geo] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-ql] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [rank-rrf] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [analysis-common] [2023-05-25T09:58:53,729][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [transport-netty4] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [aggregations] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [ingest-common] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [frozen-indices] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-identity-provider] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-shutdown] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-text-structure] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [snapshot-repo-test-kit] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [ml-package-loader] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [kibana] [2023-05-25T09:58:53,747][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [constant-keyword] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-logstash] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-ccr] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-graph] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [parent-join] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-enrich] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [repositories-metering-api] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [transform] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [repository-azure] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [repository-gcs] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [spatial] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [apm] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [mapper-extras] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [mapper-version] [2023-05-25T09:58:53,761][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-aggregate-metric] [2023-05-25T09:58:53,779][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-rollup] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [percolator] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [data-streams] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-stack] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [rank-eval] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [reindex] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-security] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [blob-cache] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [searchable-snapshots] [2023-05-25T09:58:53,782][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [snapshot-based-recoveries] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-watcher] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [old-lucene-versions] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-ilm] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-voting-only-node] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-deprecation] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-fleet] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-profiling] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [ingest-geoip] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-write-load-forecaster] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [search-business-rules] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [ingest-attachment] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [wildcard] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [unsigned-long] [2023-05-25T09:58:53,792][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-sql] [2023-05-25T09:58:53,810][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [runtime-fields-common] [2023-05-25T09:58:53,810][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-async] [2023-05-25T09:58:53,810][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [vector-tile] [2023-05-25T09:58:53,810][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [lang-expression] [2023-05-25T09:58:53,810][INFO ][o.e.p.PluginsService ] [EC2AMAZ-D7KH0CR] loaded module [x-pack-eql] [2023-05-25T09:59:00,495][WARN ][stderr ] [EC2AMAZ-D7KH0CR] May 25, 2023 9:59:00 AM org.apache.lucene.store.MemorySegmentIndexInputProvider [2023-05-25T09:59:00,504][INFO ][o.e.e.NodeEnvironment ] [EC2AMAZ-D7KH0CR] using [1] data paths, mounts [[(C:)]], net usable_space [4.1gb], net total_space [29.9gb], types [NTFS] [2023-05-25T09:59:00,504][INFO ][o.e.e.NodeEnvironment ] [EC2AMAZ-D7KH0CR] heap size [4gb], compressed ordinary object pointers [true] [2023-05-25T09:59:03,500][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] node name [EC2AMAZ-D7KH0CR], node ID [n4hX5k0mT3CYavjXqo5MpQ], cluster name [elasticsearch], roles [data_hot, ml, data_frozen, ingest, data_cold, data, remote_cluster_client, master, data_warm, data_content, transform] [2023-05-25T09:59:08,380][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [EC2AMAZ-D7KH0CR] [controller/16060] [Main.cc@123] controller (64 bit): Version 8.8.0 (Build e011a2f1bf1ba7) Copyright (c) 2023 Elasticsearch BV [2023-05-25T09:59:08,999][INFO ][o.e.x.s.Security ] [EC2AMAZ-D7KH0CR] Security is enabled [2023-05-25T09:59:10,028][INFO ][o.e.x.s.a.s.FileRolesStore] [EC2AMAZ-D7KH0CR] parsed [0] roles from file [C:\elk2\elasticsearch-8.8.0\config\roles.yml] [2023-05-25T09:59:11,330][INFO ][o.e.x.p.ProfilingPlugin ] [EC2AMAZ-D7KH0CR] Profiling is enabled [2023-05-25T09:59:11,345][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-ASN.mmdb] [2023-05-25T09:59:11,352][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-ASN.mmdb_COPYRIGHT.txt] [2023-05-25T09:59:11,397][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-ASN.mmdb_elastic-geoip-database-service-agreement-LICENSE.txt] [2023-05-25T09:59:11,411][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-ASN.mmdb_LICENSE.txt] [2023-05-25T09:59:11,416][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-City.mmdb] [2023-05-25T09:59:11,419][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-City.mmdb_COPYRIGHT.txt] [2023-05-25T09:59:11,422][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-City.mmdb_elastic-geoip-database-service-agreement-LICENSE.txt] [2023-05-25T09:59:11,427][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-City.mmdb_LICENSE.txt] [2023-05-25T09:59:11,438][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-City.mmdb_README.txt] [2023-05-25T09:59:11,456][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-Country.mmdb] [2023-05-25T09:59:11,460][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-Country.mmdb_COPYRIGHT.txt] [2023-05-25T09:59:11,461][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-Country.mmdb_elastic-geoip-database-service-agreement-LICENSE.txt] [2023-05-25T09:59:11,484][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] deleting stale file [C:\Users\ADMINI~1\AppData\Local\Temp\2\elasticsearch\geoip-databases\n4hX5k0mT3CYavjXqo5MpQ\GeoLite2-Country.mmdb_LICENSE.txt] [2023-05-25T09:59:12,939][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: No SLF4J providers were found. [2023-05-25T09:59:12,955][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Defaulting to no-operation (NOP) logger implementation [2023-05-25T09:59:12,956][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: See https://www.slf4j.org/codes.html#noProviders for further details. [2023-05-25T09:59:12,956][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Class path contains SLF4J bindings targeting slf4j-api versions 1.7.x or earlier. [2023-05-25T09:59:12,956][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: Ignoring binding found at [jar:file:///C:/elk2/elasticsearch-8.8.0/modules/x-pack-security/log4j-slf4j-impl-2.19.0.jar!/org/slf4j/impl/StaticLoggerBinder.class] [2023-05-25T09:59:12,966][WARN ][stderr ] [EC2AMAZ-D7KH0CR] SLF4J: See https://www.slf4j.org/codes.html#ignoredBindings for an explanation. [2023-05-25T09:59:13,066][INFO ][o.e.t.n.NettyAllocator ] [EC2AMAZ-D7KH0CR] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}] [2023-05-25T09:59:13,129][INFO ][o.e.i.r.RecoverySettings ] [EC2AMAZ-D7KH0CR] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b] [2023-05-25T09:59:13,247][INFO ][o.e.d.DiscoveryModule ] [EC2AMAZ-D7KH0CR] using discovery type [multi-node] and seed hosts providers [settings] [2023-05-25T09:59:15,568][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] initialized [2023-05-25T09:59:15,584][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] starting ... [2023-05-25T09:59:15,685][INFO ][o.e.x.s.c.f.PersistentCache] [EC2AMAZ-D7KH0CR] persistent cache index loaded [2023-05-25T09:59:15,685][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [EC2AMAZ-D7KH0CR] deprecation component started [2023-05-25T09:59:15,950][INFO ][o.e.t.TransportService ] [EC2AMAZ-D7KH0CR] publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}, {[::1]:9300} [2023-05-25T09:59:18,905][WARN ][o.e.c.c.ClusterBootstrapService] [EC2AMAZ-D7KH0CR] this node is locked into cluster UUID [Pnx9XyOTRgy7mwZFIsrrGw] but [cluster.initial_master_nodes] is set to [EC2AMAZ-D7KH0CR]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts; for further information see https://www.elastic.co/guide/en/elasticsearch/reference/8.8/important-settings.html#initial_master_nodes [2023-05-25T09:59:19,716][INFO ][o.e.c.s.MasterService ] [EC2AMAZ-D7KH0CR] elected-as-master ([1] nodes joined in term 2)[_FINISH_ELECTION_, {EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}{kH9k-gzPSFSDrFPH5swJxQ}{EC2AMAZ-D7KH0CR}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.8.0} completing election], term: 2, version: 333, delta: master node changed {previous [], current [{EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}{kH9k-gzPSFSDrFPH5swJxQ}{EC2AMAZ-D7KH0CR}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.8.0}]} [2023-05-25T09:59:20,429][INFO ][o.e.c.s.ClusterApplierService] [EC2AMAZ-D7KH0CR] master node changed {previous [], current [{EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}{kH9k-gzPSFSDrFPH5swJxQ}{EC2AMAZ-D7KH0CR}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.8.0}]}, term: 2, version: 333, reason: Publication{term=2, version=333} [2023-05-25T09:59:20,477][INFO ][o.e.c.f.AbstractFileWatchingService] [EC2AMAZ-D7KH0CR] starting file watcher ... [2023-05-25T09:59:20,502][INFO ][o.e.c.c.NodeJoinExecutor ] [EC2AMAZ-D7KH0CR] node-join: [{EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}{kH9k-gzPSFSDrFPH5swJxQ}{EC2AMAZ-D7KH0CR}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.8.0}] with reason [completing election] [2023-05-25T09:59:20,518][INFO ][o.e.c.f.AbstractFileWatchingService] [EC2AMAZ-D7KH0CR] file settings service up and running [tid=61] [2023-05-25T09:59:20,599][INFO ][o.e.h.AbstractHttpServerTransport] [EC2AMAZ-D7KH0CR] publish_address {172.31.25.137:9200}, bound_addresses {[::]:9200} [2023-05-25T09:59:20,608][INFO ][o.e.n.Node ] [EC2AMAZ-D7KH0CR] started {EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}{kH9k-gzPSFSDrFPH5swJxQ}{EC2AMAZ-D7KH0CR}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.8.0}{ml.allocated_processors_double=2.0, ml.max_jvm_size=4294967296, ml.allocated_processors=2, ml.machine_memory=8589524992, xpack.installed=true} [2023-05-25T09:59:23,160][WARN ][o.e.x.s.a.ApiKeyAuthenticator] [EC2AMAZ-D7KH0CR] Authentication using apikey failed - apikey authentication for id 8E9GUogB4KkZX7tpaUQz encountered a failureorg.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized]; at org.elasticsearch.server@8.8.0/org.elasticsearch.cluster.block.ClusterBlocks.globalBlockedException(ClusterBlocks.java:177) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.checkGlobalBlock(TransportSingleShardAction.java:111) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.(TransportSingleShardAction.java:145) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:97) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:50) See logs for more details. [2023-05-25T09:59:23,600][WARN ][o.e.x.s.a.ApiKeyAuthenticator] [EC2AMAZ-D7KH0CR] Authentication using apikey failed - apikey authentication for id 8E9GUogB4KkZX7tpaUQz encountered a failureorg.elasticsearch.cluster.block.ClusterBlockException: blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized]; at org.elasticsearch.server@8.8.0/org.elasticsearch.cluster.block.ClusterBlocks.globalBlockedException(ClusterBlocks.java:177) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.checkGlobalBlock(TransportSingleShardAction.java:111) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.(TransportSingleShardAction.java:145) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:97) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:50) See logs for more details. [2023-05-25T09:59:23,966][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading legacy template [.monitoring-alerts-7] for [monitoring] from version [8070099] to version [8080099] [2023-05-25T09:59:24,013][WARN ][o.e.x.s.a.ApiKeyAuthenticator] [EC2AMAZ-D7KH0CR] Authentication using apikey failed - apikey authentication for id 8E9GUogB4KkZX7tpaUQz encountered a failureorg.elasticsearch.action.NoShardAvailableActionException: No shard available for [get [.security][8E9GUogB4KkZX7tpaUQz]: routing [null]] at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.perform(TransportSingleShardAction.java:201) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.start(TransportSingleShardAction.java:178) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:97) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:50) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:86) See logs for more details. [2023-05-25T09:59:24,017][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading legacy template [.monitoring-beats] for [monitoring] from version [8070099] to version [8080099] [2023-05-25T09:59:24,048][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading legacy template [.monitoring-es] for [monitoring] from version [8070099] to version [8080099] [2023-05-25T09:59:24,068][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading legacy template [.monitoring-kibana] for [monitoring] from version [8070099] to version [8080099] [2023-05-25T09:59:24,082][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading legacy template [.monitoring-logstash] for [monitoring] from version [8070099] to version [8080099] [2023-05-25T09:59:24,096][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.monitoring-beats-mb] for [monitoring] from version [8000104] to version [8000108] [2023-05-25T09:59:24,107][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.monitoring-es-mb] for [monitoring] from version [8000104] to version [8000108] [2023-05-25T09:59:24,107][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.monitoring-ent-search-mb] for [monitoring] from version [8000104] to version [8000108] [2023-05-25T09:59:24,107][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.monitoring-logstash-mb] for [monitoring] from version [8000104] to version [8000108] [2023-05-25T09:59:24,107][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.monitoring-kibana-mb] for [monitoring] from version [8000104] to version [8000108] [2023-05-25T09:59:24,122][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.ml-notifications-000002] for [ml] from version [8070199] to version [8080099] [2023-05-25T09:59:24,138][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.ml-anomalies-] for [ml] from version [8070199] to version [8080099] [2023-05-25T09:59:24,138][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.ml-state] for [ml] from version [8070199] to version [8080099] [2023-05-25T09:59:24,144][INFO ][o.e.x.c.t.IndexTemplateRegistry] [EC2AMAZ-D7KH0CR] upgrading composable template [.ml-stats] for [ml] from version [8070199] to version [8080099] [2023-05-25T09:59:24,247][INFO ][o.e.l.ClusterStateLicenseService] [EC2AMAZ-D7KH0CR] license [795a63ea-db1a-47bf-b368-713ea4adb7dd] mode [basic] - valid [2023-05-25T09:59:24,274][INFO ][o.e.x.s.a.Realms ] [EC2AMAZ-D7KH0CR] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native] [2023-05-25T09:59:24,282][INFO ][o.e.g.GatewayService ] [EC2AMAZ-D7KH0CR] recovered [64] indices into cluster_state [2023-05-25T09:59:24,927][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding template [.monitoring-alerts-7] for index patterns [.monitoring-alerts-7] [2023-05-25T09:59:25,022][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding template [.monitoring-beats] for index patterns [.monitoring-beats-7-*] [2023-05-25T09:59:25,071][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding template [.monitoring-es] for index patterns [.monitoring-es-7-*] [2023-05-25T09:59:25,154][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding template [.monitoring-kibana] for index patterns [.monitoring-kibana-7-*] [2023-05-25T09:59:25,214][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding template [.monitoring-logstash] for index patterns [.monitoring-logstash-7-*] [2023-05-25T09:59:25,435][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.monitoring-beats-mb] for index patterns [.monitoring-beats-8-*] [2023-05-25T09:59:25,593][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.monitoring-es-mb] for index patterns [.monitoring-es-8-*] [2023-05-25T09:59:25,688][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.monitoring-ent-search-mb] for index patterns [.monitoring-ent-search-8-*] [2023-05-25T09:59:25,799][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.monitoring-logstash-mb] for index patterns [.monitoring-logstash-8-*] [2023-05-25T09:59:26,006][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.monitoring-kibana-mb] for index patterns [.monitoring-kibana-8-*] [2023-05-25T09:59:26,086][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding component template [behavioral_analytics-events-settings] [2023-05-25T09:59:26,153][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding component template [behavioral_analytics-events-mappings] [2023-05-25T09:59:26,185][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.ml-notifications-000002] for index patterns [.ml-notifications-000002] [2023-05-25T09:59:26,230][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.ml-anomalies-] for index patterns [.ml-anomalies-*] [2023-05-25T09:59:26,310][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.ml-state] for index patterns [.ml-state*] [2023-05-25T09:59:26,347][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] updating index template [.ml-stats] for index patterns [.ml-stats-*] [2023-05-25T09:59:27,049][INFO ][o.e.c.m.MetadataIndexTemplateService] [EC2AMAZ-D7KH0CR] adding index template [behavioral_analytics-events-default] for index patterns [behavioral_analytics-events-*] [2023-05-25T09:59:28,595][WARN ][o.e.x.s.a.ApiKeyAuthenticator] [EC2AMAZ-D7KH0CR] Authentication using apikey failed - apikey authentication for id 8E9GUogB4KkZX7tpaUQz encountered a failureorg.elasticsearch.action.NoShardAvailableActionException: No shard available for [get [.security][8E9GUogB4KkZX7tpaUQz]: routing [null]] at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.perform(TransportSingleShardAction.java:201) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction$AsyncSingleAction.start(TransportSingleShardAction.java:178) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:97) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.single.shard.TransportSingleShardAction.doExecute(TransportSingleShardAction.java:50) at org.elasticsearch.server@8.8.0/org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:86) See logs for more details. [2023-05-25T09:59:28,841][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.security-7] (alias [.security]) mappings are not up-to-date and will be updated [2023-05-25T09:59:28,948][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.security-7/iua-WuycSEqugRmAWvE8sw] update_mapping [_doc] [2023-05-25T09:59:29,248][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [EC2AMAZ-D7KH0CR] adding index lifecycle policy [behavioral_analytics-events-default_policy] [2023-05-25T09:59:29,622][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.security-profile-8] (alias [.security-profile]) mappings are not up-to-date and will be updated [2023-05-25T09:59:29,645][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.security-profile-8/7nWxJItuQHmeaOMdMnOFZA] update_mapping [_doc] [2023-05-25T09:59:30,935][INFO ][o.e.h.n.s.HealthNodeTaskExecutor] [EC2AMAZ-D7KH0CR] Node [{EC2AMAZ-D7KH0CR}{n4hX5k0mT3CYavjXqo5MpQ}] is selected as the current health node. [2023-05-25T09:59:30,935][ERROR][o.e.i.g.GeoIpDownloader ] [EC2AMAZ-D7KH0CR] exception during geoip databases updateorg.elasticsearch.ElasticsearchException: not all primary shards of [.geoip_databases] index are active at org.elasticsearch.ingest.geoip@8.8.0/org.elasticsearch.ingest.geoip.GeoIpDownloader.updateDatabases(GeoIpDownloader.java:131) at org.elasticsearch.ingest.geoip@8.8.0/org.elasticsearch.ingest.geoip.GeoIpDownloader.runDownloader(GeoIpDownloader.java:279) at org.elasticsearch.ingest.geoip@8.8.0/org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:157) at org.elasticsearch.ingest.geoip@8.8.0/org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:56) at org.elasticsearch.server@8.8.0/org.elasticsearch.persistent.NodePersistentTasksExecutor$1.doRun(NodePersistentTasksExecutor.java:42) See logs for more details. [2023-05-25T09:59:32,030][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.transform-internal-007] (alias [null]) mappings are not up-to-date and will be updated [2023-05-25T09:59:32,378][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.transform-internal-007/dGA2S9-xQT2HmjbekcmOew] update_mapping [_doc] [2023-05-25T09:59:32,786][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-policies-leader-7] (alias [.fleet-policies-leader]) mappings are not up-to-date and will be updated [2023-05-25T09:59:32,786][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-artifacts-7] (alias [.fleet-artifacts]) mappings are not up-to-date and will be updated [2023-05-25T09:59:32,810][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-policies-leader-7/_TOycJXWR0mGQ6hj58kKww] update_mapping [_doc] [2023-05-25T09:59:32,818][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-artifacts-7/z-q8ZhqOQzq4eQXtU3SgsA] update_mapping [_doc] [2023-05-25T09:59:34,878][INFO ][o.e.x.t.t.TransformTask ] [EC2AMAZ-D7KH0CR] [endpoint.metadata_current-default-8.7.1] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":7,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}]. [2023-05-25T09:59:34,880][INFO ][o.e.x.t.t.TransformTask ] [EC2AMAZ-D7KH0CR] [endpoint.metadata_united-default-8.7.1] updating state for transform to [{"task_state":"started","indexer_state":"stopped","checkpoint":36,"progress":{"docs_indexed":0,"docs_processed":0},"should_stop_at_checkpoint":false}]. [2023-05-25T09:59:35,650][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-servers-7] (alias [.fleet-servers]) mappings are not up-to-date and will be updated [2023-05-25T09:59:35,747][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-servers-7/bIVOCCUGShCFye8n5FOzLQ] update_mapping [_doc] [2023-05-25T09:59:36,348][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-agents-7] (alias [.fleet-agents]) mappings are not up-to-date and will be updated [2023-05-25T09:59:36,348][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-enrollment-api-keys-7] (alias [.fleet-enrollment-api-keys]) mappings are not up-to-date and will be updated [2023-05-25T09:59:36,348][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.fleet-policies-7] (alias [.fleet-policies]) mappings are not up-to-date and will be updated [2023-05-25T09:59:36,365][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [EC2AMAZ-D7KH0CR] [endpoint.metadata_current-default-8.7.1] successfully completed and scheduled task in node operation [2023-05-25T09:59:36,380][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-agents-7/ghxuzKRWR4-Ct65GHp6y-A] update_mapping [_doc] [2023-05-25T09:59:36,685][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-enrollment-api-keys-7/gVsi7GUDRF2kYnPt8NtbIQ] update_mapping [_doc] [2023-05-25T09:59:37,052][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.fleet-policies-7/qUKPQc5EQyaJomI8DT-jiA] update_mapping [_doc] [2023-05-25T09:59:37,108][WARN ][o.e.x.t.t.TransformFailureHandler] [EC2AMAZ-D7KH0CR] [endpoint.metadata_current-default-8.7.1] Transform encountered an exception: [Failed to execute phase [query], ; org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards [[.ds-metrics-endpoint.metadata-default-2023.05.25-000001][0]]. Consider using `allow_partial_search_results` setting to bypass this error.]; Will automatically retry [1/10] [2023-05-25T09:59:38,690][INFO ][o.e.x.t.t.TransformPersistentTasksExecutor] [EC2AMAZ-D7KH0CR] [endpoint.metadata_united-default-8.7.1] successfully completed and scheduled task in node operation [2023-05-25T09:59:38,690][WARN ][o.e.x.t.t.TransformFailureHandler] [EC2AMAZ-D7KH0CR] [endpoint.metadata_united-default-8.7.1] Transform encountered an exception: [Failed to execute phase [query], ; org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards [[metrics-endpoint.metadata_current_default][0]]. Consider using `allow_partial_search_results` setting to bypass this error.]; Will automatically retry [1/10] [2023-05-25T09:59:41,464][INFO ][o.e.i.SystemIndexManager ] [EC2AMAZ-D7KH0CR] Index [.geoip_databases] (alias [null]) mappings are not up-to-date and will be updated [2023-05-25T09:59:42,318][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.geoip_databases/tYpvd3_CQOKV-45VapxAKg] update_mapping [_doc] [2023-05-25T09:59:42,833][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] successfully loaded geoip database file [GeoLite2-Country.mmdb] [2023-05-25T09:59:42,985][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] successfully loaded geoip database file [GeoLite2-ASN.mmdb] [2023-05-25T09:59:44,615][INFO ][o.e.i.g.DatabaseNodeService] [EC2AMAZ-D7KH0CR] successfully loaded geoip database file [GeoLite2-City.mmdb] [2023-05-25T09:59:50,919][INFO ][o.e.c.r.a.DiskThresholdMonitor] [EC2AMAZ-D7KH0CR] low disk watermark [85%] exceeded on [n4hX5k0mT3CYavjXqo5MpQ][EC2AMAZ-D7KH0CR][C:\elk2\elasticsearch-8.8.0\data] free: 4.1gb[13.9%], replicas will not be assigned to this node [2023-05-25T10:00:23,223][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] current.health="YELLOW" message="Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana-event-log-8.7.1-000001][0], [.apm-source-map][0], [.fleet-file-data-agent-000001][0]]])." previous.health="RED" reason="shards started [[.kibana-event-log-8.7.1-000001][0], [.apm-source-map][0], [.fleet-file-data-agent-000001][0]]" [2023-05-25T10:11:00,984][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_alerting_cases_8.8.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1] [2023-05-25T10:11:01,067][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_alerting_cases_8.8.0_reindex_temp] [2023-05-25T10:11:01,491][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_security_solution_8.8.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1] [2023-05-25T10:11:01,547][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_security_solution_8.8.0_reindex_temp] [2023-05-25T10:11:01,899][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_ingest_8.8.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1] [2023-05-25T10:11:01,899][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_ingest_8.8.0_reindex_temp] [2023-05-25T10:11:02,356][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_analytics_8.8.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1] [2023-05-25T10:11:02,360][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_analytics_8.8.0_reindex_temp] [2023-05-25T10:11:02,889][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_8.7.1_001/tKa9GUL4SFCb2ultmfDrUw]] [2023-05-25T10:11:03,677][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_8.7.1_001] [2023-05-25T10:11:03,820][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.kibana_task_manager_8.7.1_001/21k_YQI1TNu_VRbMB_GH9g] update_mapping [_doc] [2023-05-25T10:11:04,059][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_8.8.0_reindex_temp] creating index, cause [api], templates [], shards [1]/[1] [2023-05-25T10:11:04,078][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_8.8.0_reindex_temp] [2023-05-25T10:11:04,744][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.tasks] creating index, cause [auto(bulk api)], templates [], shards [1]/[1] [2023-05-25T10:11:04,754][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.tasks] [2023-05-25T10:11:06,084][INFO ][o.e.t.LoggingTaskListener] [EC2AMAZ-D7KH0CR] 17760 finished with response BulkByScrollResponse[took=18.7ms,timed_out=false,sliceId=null,updated=0,created=0,deleted=0,batches=0,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]] [2023-05-25T10:11:11,379][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_ingest_8.8.0_reindex_temp/1OhDoEO9QGW-M-4dhW4htA]] [2023-05-25T10:11:11,387][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_8.8.0_reindex_temp/hnevHzZATuCXnmVFfEnpUg]] [2023-05-25T10:11:11,859][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_alerting_cases_8.8.0_reindex_temp/JIaeWfh-TeufJJu4rtTguQ]] [2023-05-25T10:11:11,867][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_analytics_8.8.0_reindex_temp/U4mFVv83STWFocKZibo9xQ]] [2023-05-25T10:11:11,867][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] adding [index.blocks.write] block to indices [[.kibana_security_solution_8.8.0_reindex_temp/78G75BvfSfKx20FBq3u8BA]] [2023-05-25T10:11:12,360][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_8.8.0_reindex_temp] [2023-05-25T10:11:12,385][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_ingest_8.8.0_reindex_temp] [2023-05-25T10:11:12,568][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_analytics_8.8.0_reindex_temp] [2023-05-25T10:11:12,583][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_security_solution_8.8.0_reindex_temp] [2023-05-25T10:11:12,583][INFO ][o.e.c.m.MetadataIndexStateService] [EC2AMAZ-D7KH0CR] completed adding [index.blocks.write] block to indices [.kibana_alerting_cases_8.8.0_reindex_temp] [2023-05-25T10:11:12,758][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] applying create index request using existing index [.kibana_8.8.0_reindex_temp] metadata [2023-05-25T10:11:12,773][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_8.8.0_001] creating index, cause [clone_index], templates [], shards [1]/[1] [2023-05-25T10:11:12,789][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_8.8.0_001] [2023-05-25T10:11:13,109][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] applying create index request using existing index [.kibana_ingest_8.8.0_reindex_temp] metadata [2023-05-25T10:11:13,109][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_ingest_8.8.0_001] creating index, cause [clone_index], templates [], shards [1]/[1] [2023-05-25T10:11:13,182][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_ingest_8.8.0_001] [2023-05-25T10:11:13,182][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] current.health="RED" message="Cluster health status changed from [YELLOW] to [RED] (reason: [index [.kibana_ingest_8.8.0_001] created])." previous.health="YELLOW" reason="index [.kibana_ingest_8.8.0_001] created" [2023-05-25T10:11:13,672][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] applying create index request using existing index [.kibana_analytics_8.8.0_reindex_temp] metadata [2023-05-25T10:11:13,678][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_analytics_8.8.0_001] creating index, cause [clone_index], templates [], shards [1]/[1] [2023-05-25T10:11:13,684][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_analytics_8.8.0_001] [2023-05-25T10:11:14,173][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] applying create index request using existing index [.kibana_security_solution_8.8.0_reindex_temp] metadata [2023-05-25T10:11:14,204][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_security_solution_8.8.0_001] creating index, cause [clone_index], templates [], shards [1]/[1] [2023-05-25T10:11:14,218][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_security_solution_8.8.0_001] [2023-05-25T10:11:14,677][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] applying create index request using existing index [.kibana_alerting_cases_8.8.0_reindex_temp] metadata [2023-05-25T10:11:14,678][INFO ][o.e.c.m.MetadataCreateIndexService] [EC2AMAZ-D7KH0CR] [.kibana_alerting_cases_8.8.0_001] creating index, cause [clone_index], templates [], shards [1]/[1] [2023-05-25T10:11:14,678][INFO ][o.e.c.r.a.AllocationService] [EC2AMAZ-D7KH0CR] updating number_of_replicas to [0] for indices [.kibana_alerting_cases_8.8.0_001] [2023-05-25T10:11:15,547][INFO ][o.e.t.LoggingTaskListener] [EC2AMAZ-D7KH0CR] 18191 finished with response BulkByScrollResponse[took=434.3ms,timed_out=false,sliceId=null,updated=27,created=0,deleted=0,batches=1,versionConflicts=0,noops=0,retries=0,throttledUntil=0s,bulk_failures=[],search_failures=[]] [2023-05-25T10:11:15,594][INFO ][o.e.c.m.MetadataMappingService] [EC2AMAZ-D7KH0CR] [.kibana_task_manager_8.7.1_001/21k_YQI1TNu_VRbMB_GH9g] update_mapping [_doc]