ERROR: for es01  Container "xxxxxxxxxxxx" is unhealthy

Issue
docker-compose erroring out when instantiating container - error below
tested on Ubuntu 20.04.4 LTS and 18.04.6 LTS VM - clean installs
hypervisor XCPng 8.2
Docker version 20.10.7, build 20.10.7-0ubuntu5~18.04.3
docker-compose version 1.17.1, build unknown
looks like an issue bringing up interfaces
what am I missing here? Any assistance warmly rcvd.
Cheers...
error
Starting dockermain_setup_1 ... done
ERROR: for es01  Container "a38b229c83c2" is unhealthy.
ERROR: Encountered errors while bringing up the project.
interfaces
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:5f:29:16:ae brd ff:ff:ff:ff:ff:ff
inet <IP_ADDRESS>/16 brd <IP_ADDRESS> scope global docker0
valid_lft forever preferred_lft forever
4: br-7b6c673229b7: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default
link/ether 02:42:2d:80:34:45 brd ff:ff:ff:ff:ff:ff
inet <IP_ADDRESS>/16 brd <IP_ADDRESS> scope global br-7b6c673229b7
valid_lft forever preferred_lft forever
inet6 fe80::42:2dff:fe80:3445/64 scope link
valid_lft forever preferred_lft forever
syslog
Mar 26 09:37:30 mrc-node-a5 kernel: [ 2150.140883] br-7b6c673229b7: port 1(veth1fe0cf8) entered blocking state
Mar 26 09:37:30 mrc-node-a5 kernel: [ 2150.140884] br-7b6c673229b7: port 1(veth1fe0cf8) entered disabled state
Mar 26 09:37:30 mrc-node-a5 kernel: [ 2150.141031] device veth1fe0cf8 entered promiscuous mode
Mar 26 09:37:30 mrc-node-a5 systemd-udevd[17589]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
Mar 26 09:37:30 mrc-node-a5 systemd-udevd[17589]: Could not generate persistent MAC address for veth23b82c5: No such file or directory
Mar 26 09:37:30 mrc-node-a5 systemd-networkd[2630]: veth1fe0cf8: Link UP
Mar 26 09:37:30 mrc-node-a5 systemd-timesyncd[2699]: Network configuration changed, trying to establish connection.
Mar 26 09:37:30 mrc-node-a5 kernel: [ 2150.142612] IPv6: ADDRCONF(NETDEV_UP): veth1fe0cf8: link is not ready
Mar 26 09:37:30 mrc-node-a5 networkd-dispatcher[1227]: WARNING:Unknown index 8 seen, reloading interface list
Mar 26 09:37:30 mrc-node-a5 systemd-udevd[17591]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
Mar 26 09:37:30 mrc-node-a5 systemd-udevd[17591]: Could not generate persistent MAC address for veth1fe0cf8: No such file or directory
Mar 26 09:37:30 mrc-node-a5 dockerd[14398]: time="2022-03-26T09:37:30.501182725Z" level=info msg="No non-localhost DNS nameservers are left in resolv.conf. Using default external servers: [nameserver <IP_ADDRESS> nameserver <IP_ADDRESS>]"
Mar 26 09:37:30 mrc-node-a5 dockerd[14398]: time="2022-03-26T09:37:30.501619765Z" level=info msg="IPv6 enabled; Adding default IPv6 external servers: [nameserver 2001:4860:4860::8888 nameserver 2001:4860:4860::8844]"
Mar 26 09:37:30 mrc-node-a5 containerd[13883]: time="2022-03-26T09:37:30.529884353Z" level=info msg="starting signal loop" namespace=moby path=/run/containerd/io.containerd.runtime.v2.task/moby/a38b229c83c27d75d3d70982f84665f4ef094667919c056c3793a9b90be712f2 pid=17612
Mar 26 09:37:30 mrc-node-a5 systemd-timesyncd[2699]: Synchronized to time server <IP_ADDRESS>:123 (ntp.ubuntu.com).
Mar 26 09:37:31 mrc-node-a5 systemd-timesyncd[2699]: Network configuration changed, trying to establish connection.
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.662400] eth0: renamed from veth23b82c5
Mar 26 09:37:31 mrc-node-a5 systemd-networkd[2630]: veth1fe0cf8: Gained carrier
Mar 26 09:37:31 mrc-node-a5 systemd-networkd[2630]: br-7b6c673229b7: Gained carrier
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.680713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1fe0cf8: link becomes ready
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.680761] br-7b6c673229b7: port 1(veth1fe0cf8) entered blocking state
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.680764] br-7b6c673229b7: port 1(veth1fe0cf8) entered forwarding state
Mar 26 09:37:31 mrc-node-a5 dockerd[14398]: time="2022-03-26T09:37:31.166589765Z" level=info msg="ignoring event" container=a38b229c83c27d75d3d70982f84665f4ef094667919c056c3793a9b90be712f2 module=libcontainerd namespace=moby topic=/tasks/delete type="*events.TaskDelete"
Mar 26 09:37:31 mrc-node-a5 containerd[13883]: time="2022-03-26T09:37:31.166818308Z" level=info msg="shim disconnected" id=a38b229c83c27d75d3d70982f84665f4ef094667919c056c3793a9b90be712f2
Mar 26 09:37:31 mrc-node-a5 containerd[13883]: time="2022-03-26T09:37:31.166904591Z" level=warning msg="cleaning up after shim disconnected" id=a38b229c83c27d75d3d70982f84665f4ef094667919c056c3793a9b90be712f2 namespace=moby
Mar 26 09:37:31 mrc-node-a5 containerd[13883]: time="2022-03-26T09:37:31.166929693Z" level=info msg="cleaning up dead shim"
Mar 26 09:37:31 mrc-node-a5 containerd[13883]: time="2022-03-26T09:37:31.174186189Z" level=warning msg="cleanup warnings time="2022-03-26T09:37:31Z" level=info msg="starting signal loop" namespace=moby pid=17721\n"
Mar 26 09:37:31 mrc-node-a5 systemd-networkd[2630]: veth1fe0cf8: Lost carrier
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.830830] br-7b6c673229b7: port 1(veth1fe0cf8) entered disabled state
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.831548] veth23b82c5: renamed from eth0
Mar 26 09:37:31 mrc-node-a5 systemd-udevd[17749]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
Mar 26 09:37:31 mrc-node-a5 systemd-networkd[2630]: veth1fe0cf8: Link DOWN
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.860827] br-7b6c673229b7: port 1(veth1fe0cf8) entered disabled state
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.864005] device veth1fe0cf8 left promiscuous mode
Mar 26 09:37:31 mrc-node-a5 kernel: [ 2150.864009] br-7b6c673229b7: port 1(veth1fe0cf8) entered disabled state
Mar 26 09:37:31 mrc-node-a5 networkd-dispatcher[1227]: WARNING:Unknown index 7 seen, reloading interface list
Mar 26 09:37:31 mrc-node-a5 networkd-dispatcher[1227]: ERROR:Unknown interface index 7 seen even after reload
Mar 26 09:37:31 mrc-node-a5 systemd-timesyncd[2699]: Synchronized to time server <IP_ADDRESS>:123 (ntp.ubuntu.com).
Mar 26 09:37:31 mrc-node-a5 systemd-networkd[2630]: br-7b6c673229b7: Lost carrier
Mar 26 09:37:31 mrc-node-a5 systemd-timesyncd[2699]: Network configuration changed, trying to establish connection.
Mar 26 09:37:31 mrc-node-a5 systemd-timesyncd[2699]: Synchronized to time server <IP_ADDRESS>:123 (ntp.ubuntu.com).

I am having the same issue

Hi @enarcee the docker-compose I'm using is 1.25.0, I would recommend upgrading to that
I would also try it on another hypervisor (plain old KVM) just to see if there is any issue there as well
Please also attach more docker logs

I am having the same issue with 1.25.0

found a solution
you have to set the passwords in the .env file

Great, happy that you found a solution.
The current docker docs need some TLC, ill try to get to that soon.

unfortunately it still does not work.
It seems that different services can not authenticate.
or do not reach each other
Kibana Logs:
[2022-03-28T21:07:13.472+00:00][INFO ][plugins-service] Plugin "metricsEntities" is disabled.
[2022-03-28T21:07:13.718+00:00][INFO ][http.server.Preboot] http server running at http://<IP_ADDRESS>:5601
[2022-03-28T21:07:13.808+00:00][INFO ][plugins-system.preboot] Setting up [1] plugins: [interactiveSetup]
[2022-03-28T21:07:13.883+00:00][WARN ][config.deprecation] The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false" to adopt the future behavior before upgrading.
[2022-03-28T21:07:14.219+00:00][INFO ][plugins-system.standard] Setting up [112] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,sharedUX,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,fileUpload,ingestPipelines,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,savedObjectsManagement,console,controls,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,rollup,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,maps,dashboardEnhanced,expressionTagcloud,expressionPie,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,dataViewFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,dataViewManagement]
[2022-03-28T21:07:14.254+00:00][INFO ][plugins.taskManager] TaskManager is identified by the Kibana UUID: df44e9df-fb7b-4283-9941-330e77fa9883
[2022-03-28T21:07:14.667+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.668+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
[2022-03-28T21:07:14.721+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.722+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
[2022-03-28T21:07:14.782+00:00][WARN ][plugins.reporting.config] Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.784+00:00][WARN ][plugins.reporting.config] Found 'server.host: "<IP_ADDRESS>"' in Kibana configuration. Reporting is not able to use this as the Kibana server hostname. To enable PNG/PDF Reporting to work, 'xpack.reporting.kibanaServer.hostname: localhost' is automatically set in the configuration. You can prevent this message by adding 'xpack.reporting.kibanaServer.hostname: localhost' in kibana.yml.
[2022-03-28T21:07:14.816+00:00][WARN ][plugins.encryptedSavedObjects] Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.853+00:00][WARN ][plugins.actions] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.885+00:00][WARN ][plugins.alerting] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2022-03-28T21:07:14.920+00:00][INFO ][plugins.ruleRegistry] Installing common resources shared between all indices
[2022-03-28T21:07:16.324+00:00][INFO ][plugins.screenshotting.config] Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.
[2022-03-28T21:07:22.745+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED <IP_ADDRESS>:9200
[2022-03-28T21:07:26.099+00:00][INFO ][plugins.screenshotting.chromium] Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell
[2022-03-28T21:07:37.508+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: missing authentication credentials for REST request [/_nodes?filter_path=nodes..version%2Cnodes..http.publish_address%2Cnodes.*.ip]
[2022-03-28T21:27:14.922+00:00][ERROR][plugins.ruleRegistry] Error: Timeout: it took more than 1200000ms
at Timeout._onTimeout (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:54:20)
at listOnTimeout (node:internal/timers:557:17)
at processTimers (node:internal/timers:500:7)
[2022-03-28T21:27:14.931+00:00][ERROR][plugins.ruleRegistry] Error: Failure installing common resources shared between all indices. Timeout: it took more than 1200000ms
at ResourceInstaller.installWithTimeout (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:63:13)
at ResourceInstaller.installCommonResources (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:77:5)
es01 Logs:
{"@timestamp":"2022-03-29T08:59:55.351Z", "log.level": "INFO", "message":"version[8.1.0], pid[6], build[default/docker/3700f7679f7d95e36da0b43762189bab189bc53a/2022-03-03T14:20:00.690422633Z], OS[Linux/4.9.0-18-amd64/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T08:59:55.364Z", "log.level": "INFO", "message":"JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T08:59:55.364Z", "log.level": "INFO", "message":"JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-9599185348138897738, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms512m, -Xmx512m, -XX:MaxDirectMemorySize=268435456, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.499Z", "log.level": "INFO", "message":"loaded module [aggs-matrix-stats]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.499Z", "log.level": "INFO", "message":"loaded module [analysis-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.500Z", "log.level": "INFO", "message":"loaded module [constant-keyword]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.501Z", "log.level": "INFO", "message":"loaded module [data-streams]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.501Z", "log.level": "INFO", "message":"loaded module [frozen-indices]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.502Z", "log.level": "INFO", "message":"loaded module [ingest-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.503Z", "log.level": "INFO", "message":"loaded module [ingest-geoip]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.510Z", "log.level": "INFO", "message":"loaded module [ingest-user-agent]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.511Z", "log.level": "INFO", "message":"loaded module [kibana]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.511Z", "log.level": "INFO", "message":"loaded module [lang-expression]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.513Z", "log.level": "INFO", "message":"loaded module [lang-mustache]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.513Z", "log.level": "INFO", "message":"loaded module [lang-painless]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.514Z", "log.level": "INFO", "message":"loaded module [legacy-geo]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.514Z", "log.level": "INFO", "message":"loaded module [mapper-extras]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.515Z", "log.level": "INFO", "message":"loaded module [mapper-version]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.515Z", "log.level": "INFO", "message":"loaded module [old-lucene-versions]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.516Z", "log.level": "INFO", "message":"loaded module [parent-join]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.516Z", "log.level": "INFO", "message":"loaded module [percolator]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.517Z", "log.level": "INFO", "message":"loaded module [rank-eval]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.517Z", "log.level": "INFO", "message":"loaded module [reindex]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.517Z", "log.level": "INFO", "message":"loaded module [repositories-metering-api]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.519Z", "log.level": "INFO", "message":"loaded module [repository-azure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.519Z", "log.level": "INFO", "message":"loaded module [repository-encrypted]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.520Z", "log.level": "INFO", "message":"loaded module [repository-gcs]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.520Z", "log.level": "INFO", "message":"loaded module [repository-s3]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.520Z", "log.level": "INFO", "message":"loaded module [repository-url]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.521Z", "log.level": "INFO", "message":"loaded module [runtime-fields-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.521Z", "log.level": "INFO", "message":"loaded module [search-business-rules]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.521Z", "log.level": "INFO", "message":"loaded module [searchable-snapshots]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.522Z", "log.level": "INFO", "message":"loaded module [snapshot-based-recoveries]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.522Z", "log.level": "INFO", "message":"loaded module [snapshot-repo-test-kit]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.522Z", "log.level": "INFO", "message":"loaded module [spatial]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.524Z", "log.level": "INFO", "message":"loaded module [transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.524Z", "log.level": "INFO", "message":"loaded module [transport-netty4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.525Z", "log.level": "INFO", "message":"loaded module [unsigned-long]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.525Z", "log.level": "INFO", "message":"loaded module [vector-tile]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.526Z", "log.level": "INFO", "message":"loaded module [vectors]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.526Z", "log.level": "INFO", "message":"loaded module [wildcard]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.526Z", "log.level": "INFO", "message":"loaded module [x-pack-aggregate-metric]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.527Z", "log.level": "INFO", "message":"loaded module [x-pack-analytics]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.528Z", "log.level": "INFO", "message":"loaded module [x-pack-async]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.528Z", "log.level": "INFO", "message":"loaded module [x-pack-async-search]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.528Z", "log.level": "INFO", "message":"loaded module [x-pack-autoscaling]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.529Z", "log.level": "INFO", "message":"loaded module [x-pack-ccr]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.529Z", "log.level": "INFO", "message":"loaded module [x-pack-core]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.530Z", "log.level": "INFO", "message":"loaded module [x-pack-deprecation]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.530Z", "log.level": "INFO", "message":"loaded module [x-pack-enrich]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.530Z", "log.level": "INFO", "message":"loaded module [x-pack-eql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.531Z", "log.level": "INFO", "message":"loaded module [x-pack-fleet]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.532Z", "log.level": "INFO", "message":"loaded module [x-pack-graph]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.532Z", "log.level": "INFO", "message":"loaded module [x-pack-identity-provider]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.532Z", "log.level": "INFO", "message":"loaded module [x-pack-ilm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.533Z", "log.level": "INFO", "message":"loaded module [x-pack-logstash]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.533Z", "log.level": "INFO", "message":"loaded module [x-pack-ml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.534Z", "log.level": "INFO", "message":"loaded module [x-pack-monitoring]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.534Z", "log.level": "INFO", "message":"loaded module [x-pack-ql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.534Z", "log.level": "INFO", "message":"loaded module [x-pack-rollup]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.535Z", "log.level": "INFO", "message":"loaded module [x-pack-security]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.535Z", "log.level": "INFO", "message":"loaded module [x-pack-shutdown]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.536Z", "log.level": "INFO", "message":"loaded module [x-pack-sql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.536Z", "log.level": "INFO", "message":"loaded module [x-pack-stack]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.538Z", "log.level": "INFO", "message":"loaded module [x-pack-text-structure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.539Z", "log.level": "INFO", "message":"loaded module [x-pack-voting-only-node]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.539Z", "log.level": "INFO", "message":"loaded module [x-pack-watcher]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.541Z", "log.level": "INFO", "message":"no plugins loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.615Z", "log.level": "INFO", "message":"using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/sda1)]], net usable_space [453.5gb], net total_space [483.2gb], types [ext4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.616Z", "log.level": "INFO", "message":"heap size [512mb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:01.796Z", "log.level": "INFO", "message":"node name [es01], node ID [tSyt6JPdRw615RHiY2_yDA], cluster name [es-docker-cluster], roles [data_hot, ml, data_frozen, ingest, data_cold, data, remote_cluster_client, master, data_warm, data_content, transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:15.467Z", "log.level": "INFO", "message":"[controller/311] [Main.cc@123] controller (64 bit): Version 8.1.0 (Build 36e2300340f08a) Copyright (c) 2022 Elasticsearch BV", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"ml-cpp-log-tail-thread","log.logger":"org.elasticsearch.xpack.ml.process.logging.CppLogMessageHandler","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:15.784Z", "log.level": "INFO", "message":"Security is enabled", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.Security","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:16.506Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:16.537Z", "log.level": "INFO", "message":"parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authz.store.FileRolesStore","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:20.155Z", "log.level": "INFO", "message":"creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=1mb, factors={es.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=4mb, heap_size=512mb}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.netty4.NettyAllocator","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:20.214Z", "log.level": "INFO", "message":"using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.indices.recovery.RecoverySettings","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:20.282Z", "log.level": "INFO", "message":"using discovery type [multi-node] and seed hosts providers [settings]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.discovery.DiscoveryModule","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:23.243Z", "log.level": "INFO", "message":"initialized", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:23.244Z", "log.level": "INFO", "message":"starting ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:23.390Z", "log.level": "INFO", "message":"persistent cache index loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.searchablesnapshots.cache.full.PersistentCache","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:23.392Z", "log.level": "INFO", "message":"deprecation component started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.deprecation.logging.DeprecationIndexingComponent","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:23.591Z", "log.level": "INFO", "message":"publish_address {<IP_ADDRESS>:9300}, bound_addresses {<IP_ADDRESS>:9300}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.TransportService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:25.327Z", "log.level": "INFO", "message":"bound or publishing to a non-loopback address, enforcing bootstrap checks", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:25.408Z", "log.level": "INFO", "message":"cluster UUID [rV9mYhOGTxunt8nBQfvt-A]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.cluster.coordination.Coordinator","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:29.475Z", "log.level": "INFO", "message":"master node changed {previous [], current [{es02}{g9Oqbnp5R4qLGkhe61I2Ag}{kSLKgZQNQAiPhBAAbqgEow}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{cdfhilmrstw}]}, added {{es02}{g9Oqbnp5R4qLGkhe61I2Ag}{kSLKgZQNQAiPhBAAbqgEow}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{cdfhilmrstw}}, term: 12, version: 234, reason: ApplyCommitRequest{term=12, version=234, sourceNode={es02}{g9Oqbnp5R4qLGkhe61I2Ag}{kSLKgZQNQAiPhBAAbqgEow}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{cdfhilmrstw}{ml.machine_memory=8374788096, xpack.installed=true, ml.max_jvm_size=536870912}}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:29.507Z", "log.level": "INFO", "message":"publish_address {<IP_ADDRESS>:9200}, bound_addresses {<IP_ADDRESS>:9200}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.http.AbstractHttpServerTransport","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:29.508Z", "log.level": "INFO", "message":"started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:31.663Z", "log.level": "INFO", "message":"license [0de81af4-e8fc-43b1-a6e2-56cbfa00e4ec] mode [basic] - valid", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.license.LicenseService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:31.664Z", "log.level": "INFO", "message":"license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:32.514Z", "log.level": "INFO", "message":"added {{es03}{T-8YofBkRr6Vz8-VJ1IEnw}{6qzcqDSjTWConXFBWuuQ9w}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{cdfhilmrstw}}, term: 12, version: 237, reason: ApplyCommitRequest{term=12, version=237, sourceNode={es02}{g9Oqbnp5R4qLGkhe61I2Ag}{kSLKgZQNQAiPhBAAbqgEow}{<IP_ADDRESS>}{<IP_ADDRESS>:9300}{cdfhilmrstw}{ml.machine_memory=8374788096, xpack.installed=true, ml.max_jvm_size=536870912}}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:34.363Z", "log.level": "INFO", "message":"refresh keys", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.TokenService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:34.965Z", "log.level": "INFO", "message":"refreshed keys", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.TokenService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:41.182Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][generic][T#1]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:41.461Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][transport_worker][T#5]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:41.620Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:45.150Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:00:51.820Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:01:02.146Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][transport_worker][T#8]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
{"@timestamp":"2022-03-29T09:01:09.905Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es01][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"rV9mYhOGTxunt8nBQfvt-A","elasticsearch.node.id":"tSyt6JPdRw615RHiY2_yDA","elasticsearch.node.name":"es01","elasticsearch.cluster.name":"es-docker-cluster"}
Logstash Logs:
Using bundled JDK: /usr/share/logstash/jdk
Warning: no jvm.options file found.
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
[INFO ] 2022-03-29 09:01:02.389 [main] runner - Starting Logstash {"logstash.version"=>"8.1.0", "jruby.version"=>"jruby <IP_ADDRESS> (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.13+8 on 11.0.13+8 +jit [linux-x86_64]"}
[INFO ] 2022-03-29 09:01:02.409 [main] runner - JVM bootstrap flags: [-Dls.cgroup.cpuacct.path.override=/, -Dls.cgroup.cpu.path.override=/, -Xmx1G, -Xms1G]
[INFO ] 2022-03-29 09:01:02.503 [main] settings - Creating directory {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"}
[INFO ] 2022-03-29 09:01:02.508 [main] settings - Creating directory {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"}
[INFO ] 2022-03-29 09:01:03.639 [LogStash::Runner] agent - No persistent UUID file found. Generating new UUID {:uuid=>"aff85f5e-5a8c-4460-95b3-7a1d0edfcea8", :path=>"/usr/share/logstash/data/uuid"}
[WARN ] 2022-03-29 09:01:07.068 [LogStash::Runner] pipelineregisterhook - Internal collectors option for Logstash monitoring is deprecated and targeted for removal in the next major version.
Please configure Metricbeat to monitor Logstash. Documentation can be found at:
https://www.elastic.co/guide/en/logstash/current/monitoring-with-metricbeat.html
[INFO ] 2022-03-29 09:01:08.226 [LogStash::Runner] licensereader - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://elastic:xxxxxx@es01:9200/]}}
[WARN ] 2022-03-29 09:01:09.939 [LogStash::Runner] licensereader - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://elastic:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[ERROR] 2022-03-29 09:01:10.086 [LogStash::Runner] licensereader - Unable to retrieve license information from license server {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/_xpack'"}
[ERROR] 2022-03-29 09:01:10.099 [LogStash::Runner] internalpipelinesource - Failed to fetch X-Pack information from Elasticsearch. This is likely due to failure to reach a live Elasticsearch cluster.
[INFO ] 2022-03-29 09:01:10.245 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600, :ssl_enabled=>false}
[INFO ] 2022-03-29 09:01:17.135 [Converge PipelineAction::Create] Reflections - Reflections took 126 ms to scan 1 urls, producing 120 keys and 417 values
[INFO ] 2022-03-29 09:01:19.843 [Converge PipelineAction::Create] javapipeline - Pipeline pfelk is configured with pipeline.ecs_compatibility: v8 setting. All plugins in this pipeline will default to ecs_compatibility => v8 unless explicitly configured otherwise.
[INFO ] 2022-03-29 09:01:19.851 [[pfelk]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://es01:9200"]}
[INFO ] 2022-03-29 09:01:19.878 [[pfelk]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://pfelk_logstash:xxxxxx@es01:9200/]}}
[WARN ] 2022-03-29 09:01:19.939 [[pfelk]-pipeline-manager] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:01:19.943 [[pfelk]-pipeline-manager] elasticsearch - Elasticsearch Output configured with ecs_compatibility => v8, which resolved to an UNRELEASED preview of version 8.0.0 of the Elastic Common Schema. Once ECS v8 and an updated release of this plugin are publicly available, you will need to update this plugin to resolve this warning.
[WARN ] 2022-03-29 09:01:19.944 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:25.005 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[INFO ] 2022-03-29 09:01:25.811 [[pfelk]-pipeline-manager] downloadmanager - new database version detected? true
[WARN ] 2022-03-29 09:01:30.037 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:01:35.064 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[INFO ] 2022-03-29 09:01:37.954 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:37.955 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-ASN.mmdb"}
[WARN ] 2022-03-29 09:01:37.960 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:38.003 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:38.003 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-City.mmdb"}
[WARN ] 2022-03-29 09:01:38.006 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.116 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.274 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:38.440 [[pfelk]-pipeline-manager] json - ECS compatibility is enabled but target option was not specified. This may cause fields to be set at the top-level of the event where they are likely to clash with the Elastic Common Schema. It is recommended to set the target option to avoid potential schema conflicts (if your data is ECS compliant or non-conflicting, feel free to ignore this message)
[WARN ] 2022-03-29 09:01:38.503 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.539 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:38.571 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:38.571 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-City.mmdb"}
[WARN ] 2022-03-29 09:01:38.572 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.605 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.706 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.749 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.792 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:38.830 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:38.830 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-ASN.mmdb"}
[WARN ] 2022-03-29 09:01:38.832 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:38.897 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:38.898 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-City.mmdb"}
[INFO ] 2022-03-29 09:01:38.899 [[pfelk]-pipeline-manager] databasemanager - By not manually configuring a database path with database =>, you accepted and agreed MaxMind EULA. For more details please visit https://www.maxmind.com/en/geolite2/eula
[INFO ] 2022-03-29 09:01:38.900 [[pfelk]-pipeline-manager] geoip - Using geoip database {:path=>"/usr/share/logstash/data/plugins/filters/geoip/1648544484/GeoLite2-ASN.mmdb"}
[WARN ] 2022-03-29 09:01:38.905 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:38.934 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:39.524 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[WARN ] 2022-03-29 09:01:39.556 [[pfelk]-pipeline-manager] grok - ECS v8 support is a preview of the unreleased ECS v8, and uses the v1 patterns. When Version 8 of the Elastic Common Schema becomes available, this plugin will need to be updated
[INFO ] 2022-03-29 09:01:39.668 [[pfelk]-pipeline-manager] javapipeline - Starting pipeline {:pipeline_id=>"pfelk", "pipeline.workers"=>8, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>1000, "pipeline.sources"=>["/etc/pfelk/conf.d/01-inputs.pfelk", "/etc/pfelk/conf.d/05-apps.pfelk", "/etc/pfelk/conf.d/20-interfaces.pfelk", "/etc/pfelk/conf.d/30-geoip.pfelk", "/etc/pfelk/conf.d/37-enhanced_user_agent.pfelk", "/etc/pfelk/conf.d/38-enhanced_url.pfelk", "/etc/pfelk/conf.d/45-enhanced_private.pfelk", "/etc/pfelk/conf.d/49-cleanup.pfelk", "/etc/pfelk/conf.d/50-outputs.pfelk"], :thread=>"#<Thread:0x30adac0d@/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:129 run>"}
[WARN ] 2022-03-29 09:01:40.144 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:01:40.207 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] licensereader - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://elastic:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[ERROR] 2022-03-29 09:01:40.462 [monitoring-license-manager] licensereader - Unable to retrieve license information from license server {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/_xpack'"}
[WARN ] 2022-03-29 09:01:45.216 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[INFO ] 2022-03-29 09:01:46.197 [[pfelk]-pipeline-manager] javapipeline - Pipeline Java execution initialization time {"seconds"=>6.53}
[INFO ] 2022-03-29 09:01:46.227 [[pfelk]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=>"pfelk"}
[INFO ] 2022-03-29 09:01:46.235 [Ruby-0-Thread-31: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-syslog-3.6.0/lib/logstash/inputs/syslog.rb:151] syslog - Starting syslog udp listener {:address=>"<IP_ADDRESS>:5140"}
[INFO ] 2022-03-29 09:01:46.235 [Ruby-0-Thread-32: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-syslog-3.6.0/lib/logstash/inputs/syslog.rb:155] syslog - Starting syslog tcp listener {:address=>"<IP_ADDRESS>:5140"}
[INFO ] 2022-03-29 09:01:46.323 [Agent thread] agent - Pipelines running {:count=>1, :running_pipelines=>[:pfelk], :non_running_pipelines=>[]}
[WARN ] 2022-03-29 09:01:50.242 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:01:55.262 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:00.296 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:05.327 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:10.358 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[ERROR] 2022-03-29 09:02:10.360 [monitoring-license-manager] licensereader - Unable to retrieve license information from license server {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/_xpack'"}
[WARN ] 2022-03-29 09:02:10.361 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] licensereader - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://elastic:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:15.395 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:20.425 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:25.445 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:30.474 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:35.505 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[ERROR] 2022-03-29 09:02:40.374 [monitoring-license-manager] licensereader - Unable to retrieve license information from license server {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/_xpack'"}
[WARN ] 2022-03-29 09:02:40.533 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:40.654 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] licensereader - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://elastic:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:45.571 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:50.608 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:02:55.637 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:03:00.662 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:03:05.685 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[ERROR] 2022-03-29 09:03:10.384 [monitoring-license-manager] licensereader - Unable to retrieve license information from license server {:message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/_xpack'"}
[WARN ] 2022-03-29 09:03:10.718 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:03:10.943 [Ruby-0-Thread-1: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] licensereader - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://elastic:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:03:15.746 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}
[WARN ] 2022-03-29 09:03:20.772 [Ruby-0-Thread-10: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-11.4.1-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:213] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error {:url=>"https://pfelk_logstash:xxxxxx@es01:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'https://es01:9200/'"}

Try to clear all the ES/Kibana state and re-launch, it could be that on the first time you ran it some of them got initialized with the wrong password/data.

It's the little things..."three little words"
see you have already updated doco
setting passwords in .env = issue resolved
thanks for the prompt support

Thank you @a3ilson


Respect min/max/default values

Resolume should respect the min/max/default values assigned to the int/float parameters in TouchDesigner. Also drop down menus (ie: blend modes on a Composite TOP) would be bonus points. Lemme get you a ko-fi...

Min and max may not be possible due to how resolume handles parameter construction, in the new commits this may or may not work.

latest release v0.2-beta3: int and float parameters do not show up at all now in Resolume. Switch, string, and bool still work.

Odd, I'm testing with that version locally and it appears fine. Please make sure you update your TouchEngine DLL as that may be the cause of the problem.

Just wanted to chime in and say I'm running into the same problem with float parameters not showing up. I've used the latest TouchEngine DLL, Running Resolume Avenue 7.19 and TouchDesigner 2023.11760

Could you clarify which if you are using FX or source? Try deleting the
touchengine.dll and getting the latest one from the repo.
On Sun, Jul 7, 2024 at 7:22 PM OrdinaireX @.***> wrote:

Just wanted to chime in and say I'm running into the same problem with
float parameters not showing up. I've used the latest TouchEngine DLL,
Running Resolume Avenue 7.19 and TouchDesigner 2023.11760
—
Reply to this email directly, view it on GitHub
https://github.com/medcelerate/FFGLTouchEngine/issues/8#issuecomment-2212612829,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHYKRGMOTRKRF6SOILLWYN3ZLHEUJAVCNFSM6AAAAABKOVO3TSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJSGYYTEOBSHE
.
You are receiving this because you modified the open/close state.Message
ID: @.***>

I'm using source and the demo files provided. The touchengine.dll is coming from [v0.2-beta3.zip]

I can confirm that float functionality is working with the setup in [v0.2-beta1.zip]

Ah ok, I think I know what the issue could be.

@OrdinaireX I've made a new build, but I am unable to reproduce the behavior on any of the included tox's as source.

Hey the new version works well, thanks!

Indeed, newest version is working well. int/float pars are back and showing label instead of par name! min/max/default still seem to be non-functional.

Default should work, min and max use the UI min max and not the clamp
values, but also resolume may not be able to reset the ranges dynamically.
On Mon, Jul 8, 2024 at 12:09 AM j4s0n @.***> wrote:

Indeed, newest version is working well. int/float pars are back and
showing label instead of par name! min/max/default still seem to be
non-functional.
—
Reply to this email directly, view it on GitHub
https://github.com/medcelerate/FFGLTouchEngine/issues/8#issuecomment-2212984553,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AHYKRGKDZ7XQEQFQZ63ZRC3ZLIGJLAVCNFSM6AAAAABKOVO3TSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJSHE4DINJVGM
.
You are receiving this because you modified the open/close state.Message
ID: @.***>

Closing due to limitation on the ffgl sdk.


Added C++ example code in GetDeviceGammaRamp function.

I faced many issues, so many would have faced, that, the LPVOID is not actually required for storing the gamma values. The lpRamp variable can be a WORD Array of 3x256 elements. We can just pass the array into the function, and it will update it.
This example will save a lot of people's time and hardwork.

@charitra1022 : Thanks for your contribution! The author(s) have been notified to review your proposed change.

Example codes are really helpful in documentations. It saved lots of time and efforts!
Please add this to the documentation, it will be a great great help!
If the format requirements are not met, I'll make the required edits.


fix: polling timeout

Before, we have always selected the first resource, that's why we restarted the loop again.
With this fix, we are now looping correctly over all resources in each event.
This PR is brought to you by great teamwork from @ninabauer  @Tessg22 and me :)

This probably needs further testing, because I am unsure if we can just remove the part about the "timer"

/lgtm


Support IPv6 for nerdctl network

Fix #1547
FYI: cni-ipam
Tasks:

[x] Support in the network create command.
[x] Support --ip6 argument for the container run command.
[x] Integration tests.
[x] Documentation.
[ ] ...

Signed-off-by: Hanchin Hsieh<EMAIL_ADDRESS>

this may inspire you https://github.com/containerd/nerdctl/pull/127/files :-D

@containerd/nerdctl-maintainers Hey guys I'm encountering issues.
The CI cannot pass when allocating the IPv6 address but test cases work well locally on my laptop. Later @Zheaoli figured out that the problem is lacking IPv6 support in test runners. And I reproduced the scene on the local host after disabling IPv6 support and confirmed that.
The matter is that GHA seems not to support IPv6 on test runners yet (and not going to) according to actions/runner-images#668.
Any ideas?

Blocking by lacking IPv6 test support. There is proposal #2031

Blocked by lacking IPv6 test support. There is proposal #2031

I think we can merge this PR without CI as an experimental feature.

Blocked by lacking IPv6 test support. There is proposal #2031

the runners support IPv6 , you can run IPv6 internally in the machine, we have CI on kind running ipv6 only clusters.
What is not supported is IPv6 connectivity, the runners can not communicate externally with IPv6

can you rebase and push again the PR to take a look at the logs of the failures?

Fine. I will take a look later today.

it is a permissions problem
ailed (add): failed to set bridge addr: could not add IP address

it looks like a permission problems , I can't remember now but I think that you may need to tune a bit more the way you run the tests inside the container
https://github.com/containerd/nerdctl/blob/ce742c94c68897f07f94c7d68c84d1b52b23fce2/.github/workflows/test.yml#L105

Thanks @yuchanns @AkihiroSuda
amazing


needs update to be able to run on new lvgl master

Does not compile any more because of changes to the SDL driver

Updated!

There is still a problem:
I did:
git clone --recursive https://github.com/lvgl/lv_port_pc_eclipse.git
cd lv_port_pc_eclipse.git
mkdir build
cd build
cmake ..
and get this:

I've fixed the Cmake error. Noe looking into  lv_example_label_4.

I've fixed the example too.
It's workaround now because lv_canvas supports only native color formats (RGB) now. Later it should support any color format again.

Thanks!
Working now.

Annnd it broke again :)


Create .npmignore

This does not resolve #105 but could prevent yarn-error.log get added in accidentally in future

yarn-error.log is never published in tsdx package.
https://github.com/palmerhq/tsdx/blob/master/package.json#L28-L31
You need to add files to generated package.json.

hmm, it got published in current version and the file is in templates folder

I see. It's because templates is included to files. Then this solution is probably ok. Will think more.

This was fixed in the latest release


BUG: reading of room's time restrictions not working well

reading of fromTime and toTime in room options showing blank fields.

we decide to delete fromTime and toTime in room options, and decide to implement this in another way, by close the room in the reservation page in specific time.
so no there is no bug
d8b97ed50b7624cd9170996a73bc8d137521dffe


Incorrect Validation of Type Reference for Decorators

Bug Report 🐛

Type reference decorators are validated incorrectly, causing errors during parsing by the model manager. The error observed indicates that the type is unable to be fetched
The observed error indicates that the type is incorrectly flagged as undeclared within the model file, even though it is actually an imported type reference.
 IllegalModelException: Undeclared type "Level" in "Decorator level on manager". File 'hr.cto':
      at ModelFile.resolveType (node_modules/@accordproject/concerto-core/lib/introspect/modelfile.js:318:27)
      at /Users/runner/work/concerto-codegen/concerto-codegen/node_modules/@accordproject/concerto-core/lib/introspect/decorator.js:103:16
      at Array.forEach (<anonymous>)
      at Decorator.validate (node_modules/@accordproject/concerto-core/lib/introspect/decorator.js:101:18)
      at RelationshipDeclaration.validate (node_modules/@accordproject/concerto-core/lib/introspect/decorated.js:114:36)
      at RelationshipDeclaration.validate (node_modules/@accordproject/concerto-core/lib/introspect/property.js:139:15)
      at RelationshipDeclaration.validate (node_modules/@accordproject/concerto-core/lib/introspect/relationshipdeclaration.js:55:15)
      at ParticipantDeclaration.validate (node_modules/@accordproject/concerto-core/lib/introspect/classdeclaration.js:285:23)
      at ModelFile.validate (node_modules/@accordproject/concerto-core/lib/introspect/modelfile.js:294:30)
      at BaseModelManager.validateModelFiles (node_modules/@accordproject/concerto-core/lib/basemodelmanager.js:411:33)
      at BaseModelManager.addModelFiles (node_modules/@accordproject/concerto-core/lib/basemodelmanager.js:392:22)
      at ModelManager.filter (node_modules/@accordproject/concerto-core/lib/basemodelmanager.js:863:22)
      at Context.<anonymous> (test/common/graph.js:86:55)
      at process.processImmediate (node:internal/timers:476:21)

Expected Behavior

A type reference should be recognized as a valid type, correctly linked to its imported model, without triggering validation errors.
Current Behavior

The type reference decorator fails to pass the validation process, causing an IllegalModelException to be thrown.
Possible Solution

Steps to Reproduce

Apply a type reference decorator to a model.
Attempt to process the model using a model manager.
Observe the decorator validation process.
An IllegalModelException is thrown during validation.

Context (Environment)

Desktop

OS: [e.g. macOS] macOS
Browser: [e.g. Chrome, Safari]
Version: [e.g. 0.22.15] 3.19.2

Detailed Description

Possible Implementation

The cause of this bug appears to be that we filter the model manager using the dependency graph, but the dependency graph doesn't contain the edge from the decorator to the Level enum - so I think the root cause is in the dependency graph construction. We therefore throw away the Level enum but it is being used by the decorator.


Transfer URL over to Ghost site

Is this the main digitalcommons.coop front page you mean? @MelissaMc20

Yes? @wu-lee It needs to be digitalcommon.coop not ghost.digitalcommons.coop

Ok. Will do this when it's ready to go live.


Spelling, grammar, and whitespace fixes to docs

Thank you for this very useful module! I noticed a few typos and such in the documentation, so I thought I'd submit this trivial PR. Best wishes!

Thanks for your contributions. @esabol


Develop Assessment Tools

[ ] - Create tools to evaluate the effectiveness of educational programs
[ ] - Design quizzes, surveys, and feedback forms
[ ] - Analyze assessment data to identify areas for improvement
[ ]

@clentafrica/wg-education

@clentafrica/wg-education bringing this up your radar


361 provide instructions for the customer to check that weve completed the contract requirements

Closes #361

@fizruk Thanks for the review! You've earned +15 points for this: +25 as a basis; -10 for too few (0) comments.  Your running balance is +263.

@deemp Thanks for the contribution! You've earned +20 points for this: +30 as a basis; -10 for too few (0) comments. Please, keep them coming. Your running balance is +110.


Fix eh safety ssues

please use guard type to destroy resources in the destructors instead of using destroy directly


add ticket's stage check

An existing ticket should not have stage done or cancelled, otherwise a new tickets should be created

done in #29


[TEST janino] v3.1.12 VS v3.1.9

What changes were proposed in this pull request?
Why are the changes needed?
Does this PR introduce any user-facing change?
How was this patch tested?
Was this patch authored or co-authored using generative AI tooling?

performance comparison:

https://janino-compiler.github.io/janino/

Are there any conclusions from this test?

Are there any conclusions from this test?

From the testing, it seems that there is no significant difference in performance.
Regarding the version of janino, we seem to be lagging behind a lot, as follows:

Since this component is very critical, if there is no noticeable performance enhancement or critical bug fix, I recommend maintaining the use of the current version.
cc @cloud-fan @dongjoon-hyun

Actually, it has some bug fixes, such as typical ones:
spark compilation failed with ArrayIndexOutOfBoundsException

Actually, it has some bug fixes, such as typical ones: Fixed issue spark compilation failed with ArrayIndexOutOfBoundsException

Can we add the corresponding test cases in the current pr ?

Will you continue to push forward this one?


Improve documentation

Just a cordial request for documentation to at least explain the meaning of the configuration parameters.  It's very difficult to determine what the values should be, as some of them are non-standard parameters that can't be found in any of the documentation for LDAP.
Also, I wouldn't want to suggest changes that will break backward compatibility. But please consider at least providing as an option, configuration using the parameters typical of most other applications that support LDAP authentication. Namely:

host/server (LDAP server)
port
auth method
base dn
uid
bind dn
bind password

I realize some of these are provided, I just wanted to list them all. I don't know if anonymous bind is supported, but it doesn't appear to be based on my attempts to use it. It would be nice to have that. The URL field is a bit unusual, as most applications require only a simple URL, and provide additional fields for the other parameters.
I realize this issue description seems a bit broad, but I believe it's all coherent in the sense that the use of atypical configuration fields is what makes additional documentation so necessary. If more typical fields were used, the documentation could be less verbose.

I agree.  Using an administrative bind is a terrible security practice.  I am not sure about other LDAP servers, but OpenLDAP supports a "find and bind" operation that attempts to bind using the provided credentials.  If the authorization is sucessful, it binds, otherwise return failure.  This obviates the need to keep administrative credentials stored on the webserver.

Me too，I want to know what the filter string should be? In pythonic it will be "(&(objectclass=posixAccount)(uid=%(username)s)),
%(username)s) represent the username the client input, So what string is it?

Even I want to use anonymous bind but not sure how to use it.

I would recommend this as an alternative https://github.com/authelia/authelia
dont recall if allows anonymous bind, but it’s certainly much better for protecting your frontends