[2020-08-06T11:07:24,970][INFO ][o.e.n.Node               ] [spoonguard] version[7.8.1], pid[41119], build[default/rpm/b5ca9c58fb664ca8bf9e4057fc229b3396bf3a89/2020-07-21T16:40:44.668009Z], OS[Linux/3.10.0-1127.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/11.0.7/11.0.7+10-LTS]
[2020-08-06T11:07:24,984][INFO ][o.e.n.Node               ] [spoonguard] JVM home [/usr/lib/jvm/java-11-openjdk-11.0.7.10-4.el7_8.x86_64]
[2020-08-06T11:07:24,984][INFO ][o.e.n.Node               ] [spoonguard] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms4g, -Xmx4g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.io.tmpdir=/tmp/elasticsearch-2171854729630780484, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=2147483648, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm, -Des.bundled_jdk=true]
[2020-08-06T11:07:27,271][INFO ][c.f.s.s.SignalsPainlessExtension] [spoonguard] Loaded script whitelist: org.elasticsearch.painless.spi.Whitelist@5a4c98d7
[2020-08-06T11:07:27,284][WARN ][c.f.s.SearchGuardPlugin  ] [spoonguard] Search Guard plugin installed but disabled. This can expose your configuration (including passwords) to the public.
[2020-08-06T11:07:27,287][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [aggs-matrix-stats]
[2020-08-06T11:07:27,287][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [analysis-common]
[2020-08-06T11:07:27,287][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [constant-keyword]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [flattened]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [frozen-indices]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [ingest-common]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [ingest-geoip]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [ingest-user-agent]
[2020-08-06T11:07:27,288][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [kibana]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [lang-expression]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [lang-mustache]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [lang-painless]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [mapper-extras]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [parent-join]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [percolator]
[2020-08-06T11:07:27,289][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [rank-eval]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [reindex]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [repository-url]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [search-business-rules]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [searchable-snapshots]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [spatial]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [systemd]
[2020-08-06T11:07:27,290][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [tasks]
[2020-08-06T11:07:27,291][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [transform]
[2020-08-06T11:07:27,291][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [transport-netty4]
[2020-08-06T11:07:27,291][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [vectors]
[2020-08-06T11:07:27,291][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-analytics]
[2020-08-06T11:07:27,298][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-async-search]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-autoscaling]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-ccr]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-core]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-deprecation]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-enrich]
[2020-08-06T11:07:27,299][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-eql]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-graph]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-identity-provider]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-ilm]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-logstash]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-ml]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-monitoring]
[2020-08-06T11:07:27,300][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-ql]
[2020-08-06T11:07:27,301][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-rollup]
[2020-08-06T11:07:27,301][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-security]
[2020-08-06T11:07:27,301][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-sql]
[2020-08-06T11:07:27,301][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-voting-only-node]
[2020-08-06T11:07:27,301][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded module [x-pack-watcher]
[2020-08-06T11:07:27,302][INFO ][o.e.p.PluginsService     ] [spoonguard] loaded plugin [search-guard-7]
[2020-08-06T11:07:27,356][INFO ][o.e.e.NodeEnvironment    ] [spoonguard] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [35.6gb], net total_space [40.9gb], types [rootfs]
[2020-08-06T11:07:27,357][INFO ][o.e.e.NodeEnvironment    ] [spoonguard] heap size [3.9gb], compressed ordinary object pointers [true]
[2020-08-06T11:07:27,482][INFO ][o.e.n.Node               ] [spoonguard] node name [spoonguard], node ID [T7fJV3yCQWWJkmAiv6rN2A], cluster name [spoonguard]
[2020-08-06T11:07:31,342][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [spoonguard] [controller/41287] [Main.cc@115] controller (64 bit): Version 7.8.1 (Build d0d3f60f03220d) Copyright (c) 2020 Elasticsearch BV
[2020-08-06T11:07:32,044][INFO ][o.e.d.DiscoveryModule    ] [spoonguard] using discovery type [zen] and seed hosts providers [settings]
[2020-08-06T11:07:33,000][INFO ][o.e.n.Node               ] [spoonguard] initialized
[2020-08-06T11:07:33,001][INFO ][o.e.n.Node               ] [spoonguard] starting ...
[2020-08-06T11:07:33,152][INFO ][o.e.t.TransportService   ] [spoonguard] publish_address {192.168.153.12:9300}, bound_addresses {192.168.153.12:9300}
[2020-08-06T11:07:33,495][INFO ][o.e.b.BootstrapChecks    ] [spoonguard] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2020-08-06T11:07:33,497][INFO ][o.e.c.c.Coordinator      ] [spoonguard] cluster UUID [rFGJ5KZQR1KQYO-tU7x5gA]
[2020-08-06T11:07:33,603][INFO ][o.e.c.s.MasterService    ] [spoonguard] elected-as-master ([1] nodes joined)[{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{puXkxaHURUWjLayS7jZlmg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 4, version: 73, delta: master node changed {previous [], current [{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{puXkxaHURUWjLayS7jZlmg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]}
[2020-08-06T11:07:33,673][INFO ][o.e.c.s.ClusterApplierService] [spoonguard] master node changed {previous [], current [{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{puXkxaHURUWjLayS7jZlmg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]}, term: 4, version: 73, reason: Publication{term=4, version=73}
[2020-08-06T11:07:33,763][INFO ][o.e.h.AbstractHttpServerTransport] [spoonguard] publish_address {192.168.153.12:9200}, bound_addresses {192.168.153.12:9200}
[2020-08-06T11:07:33,764][INFO ][o.e.n.Node               ] [spoonguard] started
[2020-08-06T11:07:33,769][INFO ][c.f.s.SearchGuardPlugin  ] [spoonguard] Node started
[2020-08-06T11:07:33,769][INFO ][c.f.s.SearchGuardPlugin  ] [spoonguard] 0 Search Guard modules loaded so far: []
[2020-08-06T11:07:34,049][INFO ][o.e.l.LicenseService     ] [spoonguard] license [b6338e32-3bbc-4dd8-ba91-508c72755ce1] mode [basic] - valid
[2020-08-06T11:07:34,059][INFO ][o.e.g.GatewayService     ] [spoonguard] recovered [5] indices into cluster_state
[2020-08-06T11:07:34,666][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.signals_watches][0]]]).
[2020-08-06T11:08:04,385][WARN ][o.e.c.r.a.AllocationService] [spoonguard] [.signals_accounts][0] marking unavailable shards as stale: [8Mgrl1-qS76F6wA14qQ6Zw]
[2020-08-06T11:08:04,414][WARN ][o.e.c.r.a.AllocationService] [spoonguard] [.signals_watches_state][0] marking unavailable shards as stale: [N0zAtUXDQ3ep2JWUOMkfcg]
[2020-08-06T11:08:04,414][WARN ][o.e.c.r.a.AllocationService] [spoonguard] [.signals_settings][0] marking unavailable shards as stale: [BevRaUrYSoy9GLe1wBzwYA]
[2020-08-06T11:08:04,641][WARN ][o.e.c.r.a.AllocationService] [spoonguard] [.signals_watches][0] marking unavailable shards as stale: [RydHu4xgSiSiiG-oXrkIZg]
[2020-08-06T11:09:06,827][INFO ][o.e.c.r.a.AllocationService] [spoonguard] updating number_of_replicas to [1] for indices [searchguard]
[2020-08-06T11:09:06,828][INFO ][o.e.c.s.MasterService    ] [spoonguard] node-join[{spoonguard-2}{hu_5zLalT2qZdMhW8OtllQ}{ISe5cG-QQ72iKlWeaW1kFA}{192.168.153.13}{192.168.153.13:9300}{dilmrt}{ml.machine_memory=16637550592, ml.max_open_jobs=20, xpack.installed=true, transform.node=true} join existing leader], term: 4, version: 83, delta: added {{spoonguard-2}{hu_5zLalT2qZdMhW8OtllQ}{ISe5cG-QQ72iKlWeaW1kFA}{192.168.153.13}{192.168.153.13:9300}{dilmrt}{ml.machine_memory=16637550592, ml.max_open_jobs=20, xpack.installed=true, transform.node=true}}
[2020-08-06T11:09:07,084][INFO ][o.e.c.s.ClusterApplierService] [spoonguard] added {{spoonguard-2}{hu_5zLalT2qZdMhW8OtllQ}{ISe5cG-QQ72iKlWeaW1kFA}{192.168.153.13}{192.168.153.13:9300}{dilmrt}{ml.machine_memory=16637550592, ml.max_open_jobs=20, xpack.installed=true, transform.node=true}}, term: 4, version: 83, reason: Publication{term=4, version=83}
[2020-08-06T11:09:08,152][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.signals_settings][0]]]).
[2020-08-06T11:11:54,183][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [.kibana_task_manager_1] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:11:54,308][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [.kibana_1] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:11:54,678][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [spoonguard] adding index lifecycle policy [kibana-event-log-policy]
[2020-08-06T11:11:54,779][INFO ][o.e.c.m.MetadataIndexTemplateService] [spoonguard] adding template [.kibana-event-log-7.8.1-template] for index patterns [.kibana-event-log-7.8.1-*]
[2020-08-06T11:11:54,881][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [.kibana-event-log-7.8.1-000001] creating index, cause [api], templates [.kibana-event-log-7.8.1-template], shards [1]/[1], mappings [_doc]
[2020-08-06T11:11:54,965][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [null] to [{"phase":"new","action":"complete","name":"complete"}] in policy [kibana-event-log-policy]
[2020-08-06T11:11:55,033][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"new","action":"complete","name":"complete"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-indexing-complete"}] in policy [kibana-event-log-policy]
[2020-08-06T11:11:55,098][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-indexing-complete"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] in policy [kibana-event-log-policy]
[2020-08-06T11:11:55,737][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.kibana-event-log-7.8.1-000001][0]]]).
[2020-08-06T11:11:56,418][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [ilm-history-2-000001] creating index, cause [api], templates [ilm-history], shards [1]/[0], mappings [_doc]
[2020-08-06T11:11:56,419][INFO ][o.e.c.r.a.AllocationService] [spoonguard] updating number_of_replicas to [1] for indices [ilm-history-2-000001]
[2020-08-06T11:11:56,465][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [null] to [{"phase":"new","action":"complete","name":"complete"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:11:56,577][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"new","action":"complete","name":"complete"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-indexing-complete"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:11:56,608][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-indexing-complete"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:11:56,703][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [.apm-agent-configuration] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:11:56,783][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [.apm-custom-link] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:11:57,551][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.apm-custom-link][0]]]).
[2020-08-06T11:12:36,303][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_task_manager_1/F_83JctNRSCQbFj-3VC6AA] update_mapping [_doc]
[2020-08-06T11:12:36,718][INFO ][o.e.c.m.MetadataIndexTemplateService] [spoonguard] adding template [.management-beats] for index patterns [.management-beats]
[2020-08-06T11:12:36,788][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:17:33,750][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] to [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:33,779][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-follow-shard-tasks"}] to [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:17:33,808][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:33,840][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"pause-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:17:33,871][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:33,921][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"close-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:17:33,954][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:33,986][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"unfollow-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:17:34,042][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:34,081][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"open-follower-index"}] to [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:17:34,109][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [.kibana-event-log-7.8.1-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [kibana-event-log-policy]
[2020-08-06T11:17:34,139][INFO ][o.e.x.i.IndexLifecycleTransition] [spoonguard] moving index [ilm-history-2-000001] from [{"phase":"hot","action":"unfollow","name":"wait-for-yellow-step"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [ilm-history-ilm-policy]
[2020-08-06T11:22:31,113][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [kibana_sample_data_logs] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:22:31,309][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[kibana_sample_data_logs][0]]]).
[2020-08-06T11:22:31,411][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [kibana_sample_data_logs/kh83sc7TTZSv8WALMVWXXg] update_mapping [_doc]
[2020-08-06T11:22:40,815][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:40,900][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:40,987][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:41,082][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:41,160][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:41,239][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:22:42,256][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]
[2020-08-06T11:51:00,396][INFO ][o.e.c.m.MetadataCreateIndexService] [spoonguard] [kibana_sample_data_flights] creating index, cause [api], templates [], shards [1]/[1], mappings [_doc]
[2020-08-06T11:51:01,938][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[kibana_sample_data_flights][0]]]).
[2020-08-06T11:51:07,029][INFO ][o.e.c.m.MetadataMappingService] [spoonguard] [.kibana_1/kBvRP7_OTT2XAY3neQT0Gg] update_mapping [_doc]