[2018-01-05 08:00:08,263][INFO ][http ] [nlhrl1ccrnn01] Using [org.elasticsearch.http.netty.NettyHttpServerTransport] as http transport, overridden by [search-guard-ssl] [2018-01-05 08:00:08,367][INFO ][transport ] [nlhrl1ccrnn01] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2018-01-05 08:00:08,367][INFO ][transport ] [nlhrl1ccrnn01] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2018-01-05 08:00:09,713][INFO ][node ] [nlhrl1ccrnn01] initialized [2018-01-05 08:00:09,713][INFO ][node ] [nlhrl1ccrnn01] starting ... [2018-01-05 08:00:09,871][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [nlhrl1ccrnn01] publish_address {nlhrl1ccrnn01/192.168.62.66:9300}, bound_addresses {0.0.0.0:9300} [2018-01-05 08:00:09,924][INFO ][discovery ] [nlhrl1ccrnn01] nlhrl1ccrnn01/lesZw6GQSCqsl8mvbGKPCQ [2018-01-05 08:00:09,924][DEBUG][action.admin.cluster.health] [nlhrl1ccrnn01] no known master node, scheduling a retry [2018-01-05 08:00:12,946][INFO ][cluster.service ] [nlhrl1ccrnn01] new_master {nlhrl1ccrnn01}{lesZw6GQSCqsl8mvbGKPCQ}{192.168.62.66}{nlhrl1ccrnn01/192.168.62.66:9300}{master=true}, reason: zen-disco-join(elected_as_master, [0] joins received) [2018-01-05 08:00:13,030][INFO ][http ] [nlhrl1ccrnn01] publish_address {nlhrl1ccrnn01/192.168.62.66:9200}, bound_addresses {0.0.0.0:9200} [2018-01-05 08:00:13,033][INFO ][node ] [nlhrl1ccrnn01] started [2018-01-05 08:00:13,038][INFO ][cluster.routing.allocation.decider] [nlhrl1ccrnn01] updating [cluster.routing.allocation.enable] from [ALL] to [NONE] [2018-01-05 08:00:13,076][INFO ][license.plugin.core ] [nlhrl1ccrnn01] - valid [2018-01-05 08:00:13,087][INFO ][gateway ] [nlhrl1ccrnn01] recovered [4] indices into cluster_state [2018-01-05 08:00:13,842][INFO ][cluster.routing.allocation] [nlhrl1ccrnn01] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[ccr][3]] ...]). [2018-01-05 08:11:29,504][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 08:11:47,276][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 08:11:47,662][WARN ][com.floragunn.searchguard.configuration.PrivilegesEvaluator] Cannot resolve [starfleetinfos] so we use the raw values [2018-01-05 08:11:47,667][INFO ][rest.suppressed ] /starfleetinfos Params: {index=starfleetinfos} [starfleetinfos] IndexNotFoundException[no such index] at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver$WildcardExpressionResolver.resolve(IndexNameExpressionResolver.java:586) at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:133) at org.elasticsearch.cluster.metadata.IndexNameExpressionResolver.concreteIndices(IndexNameExpressionResolver.java:77) at org.elasticsearch.action.admin.indices.get.TransportGetIndexAction.checkBlock(TransportGetIndexAction.java:64) at org.elasticsearch.action.admin.indices.get.TransportGetIndexAction.checkBlock(TransportGetIndexAction.java:48) at org.elasticsearch.action.support.master.TransportMasterNodeAction$AsyncSingleAction.doStart(TransportMasterNodeAction.java:129) at org.elasticsearch.action.support.master.TransportMasterNodeAction$AsyncSingleAction.start(TransportMasterNodeAction.java:121) at org.elasticsearch.action.support.master.TransportMasterNodeAction.doExecute(TransportMasterNodeAction.java:93) at org.elasticsearch.action.support.master.TransportMasterNodeAction.doExecute(TransportMasterNodeAction.java:50) at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:101) at com.floragunn.searchguard.filter.SearchGuardFilter.apply(SearchGuardFilter.java:249) at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:99) at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77) at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:58) at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:351) at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:52) at org.elasticsearch.rest.BaseRestHandler$HeadersAndContextCopyClient.doExecute(BaseRestHandler.java:83) at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:351) at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.execute(AbstractClient.java:1187) at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.getIndex(AbstractClient.java:1287) at org.elasticsearch.rest.action.admin.indices.get.RestGetIndicesAction.handleRequest(RestGetIndicesAction.java:83) at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:54) at org.elasticsearch.rest.RestController.executeHandler(RestController.java:207) at org.elasticsearch.rest.RestController$RestHandlerFilter.process(RestController.java:281) at org.elasticsearch.rest.RestController$ControllerFilterChain.continueProcessing(RestController.java:262) at com.floragunn.searchguard.filter.SearchGuardRestFilter.process(SearchGuardRestFilter.java:46) at org.elasticsearch.rest.RestController$ControllerFilterChain.continueProcessing(RestController.java:265) at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:176) at org.elasticsearch.http.HttpServer.internalDispatchRequest(HttpServer.java:128) at org.elasticsearch.http.HttpServer$Dispatcher.dispatchRequest(HttpServer.java:86) at org.elasticsearch.http.netty.NettyHttpServerTransport.dispatchRequest(NettyHttpServerTransport.java:385) at com.floragunn.searchguard.ssl.http.netty.SearchGuardSSLNettyHttpServerTransport.dispatchRequest(SearchGuardSSLNettyHttpServerTransport.java:122) at org.elasticsearch.http.netty.HttpRequestHandler.messageReceived(HttpRequestHandler.java:63) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.messageReceived(HttpPipeliningHandler.java:60) at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:88) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.handler.codec.http.HttpChunkAggregator.messageReceived(HttpChunkAggregator.java:145) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.handler.codec.http.HttpContentDecoder.messageReceived(HttpContentDecoder.java:108) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:296) at org.jboss.netty.handler.codec.frame.FrameDecoder.unfoldAndFireMessageReceived(FrameDecoder.java:459) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:536) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:296) at org.jboss.netty.handler.codec.frame.FrameDecoder.unfoldAndFireMessageReceived(FrameDecoder.java:462) at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:443) at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745) [2018-01-05 08:27:01,234][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 08:27:02,049][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 08:31:05,642][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 09:01:06,711][WARN ][com.floragunn.searchguard.auth.BackendRegistry] Headers: Context: [cursor, index: 0, key: _sg_ssl_protocol, value: TLSv1.2]=null [cursor, index: 5, key: _sg_ssl_cipher, value: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256]=null [2018-01-05 09:01:07,070][WARN ][com.floragunn.searchguard.configuration.PrivilegesEvaluator] indices:admin/settings/update for searchguard index is not allowed for a regular user [2018-01-05 09:01:07,072][INFO ][rest.suppressed ] /searchguard/_settings Params: {index=searchguard} ElasticsearchSecurityException[no permissions for indices:admin/settings/update] at com.floragunn.searchguard.filter.SearchGuardFilter.apply(SearchGuardFilter.java:252) at org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:99) at org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77) at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:58) at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:351) at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:52) at org.elasticsearch.rest.BaseRestHandler$HeadersAndContextCopyClient.doExecute(BaseRestHandler.java:83) at org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:351) at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.execute(AbstractClient.java:1187) at org.elasticsearch.client.support.AbstractClient$IndicesAdmin.updateSettings(AbstractClient.java:1567) at org.elasticsearch.rest.action.admin.indices.settings.RestUpdateSettingsAction.handleRequest(RestUpdateSettingsAction.java:83) at org.elasticsearch.rest.BaseRestHandler.handleRequest(BaseRestHandler.java:54) at org.elasticsearch.rest.RestController.executeHandler(RestController.java:207) at org.elasticsearch.rest.RestController$RestHandlerFilter.process(RestController.java:281) at org.elasticsearch.rest.RestController$ControllerFilterChain.continueProcessing(RestController.java:262) at com.floragunn.searchguard.filter.SearchGuardRestFilter.process(SearchGuardRestFilter.java:46) at org.elasticsearch.rest.RestController$ControllerFilterChain.continueProcessing(RestController.java:265) at org.elasticsearch.rest.RestController.dispatchRequest(RestController.java:176) at org.elasticsearch.http.HttpServer.internalDispatchRequest(HttpServer.java:128) at org.elasticsearch.http.HttpServer$Dispatcher.dispatchRequest(HttpServer.java:86) at org.elasticsearch.http.netty.NettyHttpServerTransport.dispatchRequest(NettyHttpServerTransport.java:385) at com.floragunn.searchguard.ssl.http.netty.SearchGuardSSLNettyHttpServerTransport.dispatchRequest(SearchGuardSSLNettyHttpServerTransport.java:122) at org.elasticsearch.http.netty.HttpRequestHandler.messageReceived(HttpRequestHandler.java:63) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.http.netty.pipelining.HttpPipeliningHandler.messageReceived(HttpPipeliningHandler.java:60) at org.jboss.netty.channel.SimpleChannelHandler.handleUpstream(SimpleChannelHandler.java:88) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.handler.codec.http.HttpChunkAggregator.messageReceived(HttpChunkAggregator.java:145) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.handler.codec.http.HttpContentDecoder.messageReceived(HttpContentDecoder.java:108) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:296) at org.jboss.netty.handler.codec.frame.FrameDecoder.unfoldAndFireMessageReceived(FrameDecoder.java:459) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.callDecode(ReplayingDecoder.java:536) at org.jboss.netty.handler.codec.replay.ReplayingDecoder.messageReceived(ReplayingDecoder.java:435) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.elasticsearch.common.netty.OpenChannelsHandler.handleUpstream(OpenChannelsHandler.java:75) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline$DefaultChannelHandlerContext.sendUpstream(DefaultChannelPipeline.java:791) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:296) at org.jboss.netty.handler.codec.frame.FrameDecoder.unfoldAndFireMessageReceived(FrameDecoder.java:462) at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:443) at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:303) at org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:70) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:564) at org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:559) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:268) at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:255) at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:88) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.process(AbstractNioWorker.java:108) at org.jboss.netty.channel.socket.nio.AbstractNioSelector.run(AbstractNioSelector.java:337) at org.jboss.netty.channel.socket.nio.AbstractNioWorker.run(AbstractNioWorker.java:89) at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:178) at org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:108) at org.jboss.netty.util.internal.DeadLockProofWorker$1.run(DeadLockProofWorker.java:42) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) at java.lang.Thread.run(Thread.java:745)