[2018-02-02T15:12:34,833][INFO ][o.e.n.Node               ] [NODE-1] initializing ...
[2018-02-02T15:12:34,988][INFO ][o.e.e.NodeEnvironment    ] [NODE-1] using [1] data paths, mounts [[/elasticsearch/data (/dev/sda1)]], net usable_space [52.7gb], net total_space [62.7gb], types [ext4]
[2018-02-02T15:12:34,989][INFO ][o.e.e.NodeEnvironment    ] [NODE-1] heap size [1.9gb], compressed ordinary object pointers [true]
[2018-02-02T15:12:35,006][INFO ][o.e.n.Node               ] [NODE-1] node name [NODE-1], node ID [eObuvPPATKG_KlDlr__J7A]
[2018-02-02T15:12:35,006][INFO ][o.e.n.Node               ] [NODE-1] version[6.1.1], pid[21], build[bd92e7f/2017-12-17T20:23:25.338Z], OS[Linux/4.9.60-linuxkit-aufs/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/1.8.0_151/25.151-b12]
[2018-02-02T15:12:35,007][INFO ][o.e.n.Node               ] [NODE-1] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -XX:+HeapDumpOnOutOfMemoryError, -Des.network.host=0.0.0.0, -Des.logger.level=INFO, -Xms2g, -Xmx2g, -Des.path.home=/elasticsearch, -Des.path.conf=/elasticsearch/config]
[2018-02-02T15:12:36,265][INFO ][c.f.s.SearchGuardPlugin  ] ES Config path is /elasticsearch/config
[2018-02-02T15:12:36,419][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: io.netty.internal.tcnative.SSL
[2018-02-02T15:12:36,751][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] Config directory is /elasticsearch/config/, from there the key- and truststore files are resolved relatively
[2018-02-02T15:12:36,773][INFO ][c.f.s.s.u.SSLCertificateHelper] No alias given, use the first one: node-1
[2018-02-02T15:12:36,778][WARN ][c.f.s.s.u.SSLCertificateHelper] Certificate chain for alias node-1 contains a root certificate
[2018-02-02T15:12:36,840][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] TLS Transport Client Provider : JDK
[2018-02-02T15:12:36,840][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] TLS Transport Server Provider : JDK
[2018-02-02T15:12:36,840][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] TLS HTTP Provider             : null
[2018-02-02T15:12:36,841][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] Enabled TLS protocols for transport layer : [TLSv1.2, TLSv1.1]
[2018-02-02T15:12:36,841][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] Enabled TLS protocols for HTTP layer      : [TLSv1.2, TLSv1.1]
[2018-02-02T15:12:37,189][INFO ][c.f.s.SearchGuardPlugin  ] Clustername: elasticsearch-default
[2018-02-02T15:12:37,280][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,281][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,281][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/sg_internal_users.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,281][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/sg_roles_mapping.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,282][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/sg_action_groups.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,282][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,283][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/NODE-1-signed.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,283][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana-keystore.p12 has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,283][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats.crtfull.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,284][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana.all.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,284][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,284][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/.ts_pwd has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,285][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats-keystore.p12 has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,285][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,286][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/NODE-1-keystore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,286][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic.crtfull.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,286][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic.crt.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,286][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana.crtfull.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,287][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash.key.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,287][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash-keystore.p12 has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,287][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana.crt.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,288][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats-keystore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,288][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic.all.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,288][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/ca has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,289][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,289][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/ca/signing-ca has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,289][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/02.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,289][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/private/signing-ca.key has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,290][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/04.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,290][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/05.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,290][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/ca/signing-ca/db has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,291][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.crt.srl.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,291][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.db.attr.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,291][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.db.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,292][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.db has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,292][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.crt.srl has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,292][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.db.attr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,293][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/db/signing-ca.crl.srl has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,293][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/03.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,293][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca/01.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,294][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca.crt has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,294][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca.crt has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,295][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/chain-ca.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,295][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,295][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,296][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/ca/root-ca has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,296][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/02.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,296][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/private/root-ca.key has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,297][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/ca/root-ca/db has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,297][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.db has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,297][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.db.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,298][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.crt.srl has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,298][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.crl.srl has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,298][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.db.attr.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,299][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.crt.srl.old has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,299][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/db/root-ca.db.attr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,300][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/root-ca/01.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,300][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/ca/signing-ca.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,300][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic-keystore.p12 has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,301][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/NODE-1-keystore.p12 has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,301][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/etc has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,302][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/etc/signing-ca.conf has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,302][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/etc/root-ca.conf has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,302][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash.crtfull.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,303][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash.crt.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,303][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats.all.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,304][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/certs has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,304][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/truststore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,304][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats-signed.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,305][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana.key.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,305][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic-keystore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,306][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/.ca_pwd has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,306][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats.key.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,306][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/searchguard/ssl/crl has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,307][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,307][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash-keystore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,307][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/NODE-1.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,308][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash.csr has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,308][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic-signed.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,309][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/beats.crt.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,309][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana-signed.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,309][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash-signed.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,310][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/logstash.all.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,310][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/kibana-keystore.jks has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,311][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/elastic.key.pem has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,311][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/ssl/.ks_pwd has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,312][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/sg_roles.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,312][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/searchguard/sg_config.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,312][WARN ][c.f.s.SearchGuardPlugin  ] Directory /elasticsearch/config/scripts has insecure file permissions (should be 0700)
[2018-02-02T15:12:37,313][WARN ][c.f.s.SearchGuardPlugin  ] File /elasticsearch/config/elasticsearch.yml has insecure file permissions (should be 0600)
[2018-02-02T15:12:37,380][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [aggs-matrix-stats]
[2018-02-02T15:12:37,381][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [analysis-common]
[2018-02-02T15:12:37,381][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [ingest-common]
[2018-02-02T15:12:37,381][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [lang-expression]
[2018-02-02T15:12:37,382][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [lang-mustache]
[2018-02-02T15:12:37,382][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [lang-painless]
[2018-02-02T15:12:37,382][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [mapper-extras]
[2018-02-02T15:12:37,383][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [parent-join]
[2018-02-02T15:12:37,383][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [percolator]
[2018-02-02T15:12:37,383][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [reindex]
[2018-02-02T15:12:37,383][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [repository-url]
[2018-02-02T15:12:37,384][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [transport-netty4]
[2018-02-02T15:12:37,384][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded module [tribe]
[2018-02-02T15:12:37,385][INFO ][o.e.p.PluginsService     ] [NODE-1] loaded plugin [search-guard-6]
[2018-02-02T15:12:40,327][INFO ][c.f.s.a.i.AuditLogImpl   ] Configured categories on rest layer to ignore: [AUTHENTICATED, GRANTED_PRIVILEGES]
[2018-02-02T15:12:40,328][INFO ][c.f.s.a.i.AuditLogImpl   ] Configured categories on transport layer to ignore: [AUTHENTICATED, GRANTED_PRIVILEGES]
[2018-02-02T15:12:40,329][INFO ][c.f.s.a.i.AuditLogImpl   ] Configured Users to ignore: [kibanaserver]
[2018-02-02T15:12:40,329][INFO ][c.f.s.a.i.AuditLogImpl   ] Configured Requests to ignore: []
[2018-02-02T15:12:40,330][INFO ][c.f.s.a.i.AuditLogImpl   ] Audit Log available but disabled
[2018-02-02T15:12:40,628][DEBUG][o.e.a.ActionModule       ] Using REST wrapper from plugin com.floragunn.searchguard.SearchGuardPlugin
[2018-02-02T15:12:40,897][INFO ][o.e.d.DiscoveryModule    ] [NODE-1] using discovery type [zen]
[2018-02-02T15:12:42,188][INFO ][c.f.s.SearchGuardPlugin  ] 4 Search Guard modules loaded so far: [Module [type=REST_MANAGEMENT_API, implementing class=com.floragunn.searchguard.dlic.rest.api.SearchGuardRestApiActions], Module [type=MULTITENANCY, implementing class=com.floragunn.searchguard.configuration.PrivilegesInterceptorImpl], Module [type=AUDITLOG, implementing class=com.floragunn.searchguard.auditlog.impl.AuditLogImpl], Module [type=DLSFLS, implementing class=com.floragunn.searchguard.configuration.SearchGuardFlsDlsIndexSearcherWrapper]]
[2018-02-02T15:12:42,189][INFO ][o.e.n.Node               ] [NODE-1] initialized
[2018-02-02T15:12:42,190][INFO ][o.e.n.Node               ] [NODE-1] starting ...
[2018-02-02T15:12:42,403][INFO ][o.e.t.TransportService   ] [NODE-1] publish_address {172.22.0.5:9300}, bound_addresses {0.0.0.0:9300}
[2018-02-02T15:12:42,426][INFO ][o.e.b.BootstrapChecks    ] [NODE-1] bound or publishing to a non-loopback or non-link-local address, enforcing bootstrap checks
[2018-02-02T15:12:42,448][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Check if searchguard index exists ...
[2018-02-02T15:12:42,461][DEBUG][o.e.a.a.i.e.i.TransportIndicesExistsAction] [NODE-1] no known master node, scheduling a retry
[2018-02-02T15:12:45,561][INFO ][o.e.c.s.MasterService    ] [NODE-1] zen-disco-elected-as-master ([0] nodes joined), reason: new_master {NODE-1}{eObuvPPATKG_KlDlr__J7A}{83xTLYxuT0eWqHZ_OO_cRg}{172.22.0.5}{172.22.0.5:9300}
[2018-02-02T15:12:45,571][INFO ][o.e.c.s.ClusterApplierService] [NODE-1] new_master {NODE-1}{eObuvPPATKG_KlDlr__J7A}{83xTLYxuT0eWqHZ_OO_cRg}{172.22.0.5}{172.22.0.5:9300}, reason: apply cluster state (from master [master {NODE-1}{eObuvPPATKG_KlDlr__J7A}{83xTLYxuT0eWqHZ_OO_cRg}{172.22.0.5}{172.22.0.5:9300} committed version [1] source [zen-disco-elected-as-master ([0] nodes joined)]])
[2018-02-02T15:12:45,617][INFO ][c.f.s.h.SearchGuardNonSslHttpServerTransport] [NODE-1] publish_address {172.22.0.5:9200}, bound_addresses {0.0.0.0:9200}
[2018-02-02T15:12:45,618][INFO ][o.e.n.Node               ] [NODE-1] started
[2018-02-02T15:12:46,094][INFO ][o.e.g.GatewayService     ] [NODE-1] recovered [3] indices into cluster_state
[2018-02-02T15:12:47,360][INFO ][o.e.c.r.a.AllocationService] [NODE-1] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[searchguard][0], [.kibana][0]] ...]).
[2018-02-02T15:12:47,494][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Search Guard License Info: SearchGuardLicense [uid=00000000-0000-0000-0000-000000000000, type=TRIAL, issueDate=2018-01-28, expiryDate=2018-03-31, issuedTo=The world, issuer=floragunn GmbH, startDate=2018-01-28, majorVersion=6, clusterName=*, allowedNodeCount=2147483647, msgs=[], expiresInDays=56, isExpired=false, valid=true, action=, prodUsage=Yes, one cluster with all commercial features and unlimited nodes per cluster., clusterService=org.elasticsearch.cluster.service.ClusterService@1aa3062d, getMsgs()=[], getExpiresInDays()=56, isExpired()=false, isValid()=true, getAction()=, getProdUsage()=Yes, one cluster with all commercial features and unlimited nodes per cluster.]
[2018-02-02T15:12:47,497][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Search Guard License Type: TRIAL, valid
[2018-02-02T15:12:47,498][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Node 'NODE-1' initialized
[2018-02-02T15:12:48,386][WARN ][c.f.s.a.BackendRegistry  ] Authentication finally failed for elastic
[2018-02-02T15:13:05,833][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Search Guard License Info: SearchGuardLicense [uid=00000000-0000-0000-0000-000000000000, type=TRIAL, issueDate=2018-01-28, expiryDate=2018-03-31, issuedTo=The world, issuer=floragunn GmbH, startDate=2018-01-28, majorVersion=6, clusterName=*, allowedNodeCount=2147483647, msgs=[], expiresInDays=56, isExpired=false, valid=true, action=, prodUsage=Yes, one cluster with all commercial features and unlimited nodes per cluster., clusterService=org.elasticsearch.cluster.service.ClusterService@1aa3062d, getMsgs()=[], getExpiresInDays()=56, isExpired()=false, isValid()=true, getAction()=, getProdUsage()=Yes, one cluster with all commercial features and unlimited nodes per cluster.]
[2018-02-02T15:13:05,834][INFO ][c.f.s.c.IndexBaseConfigurationRepository] Search Guard License Type: TRIAL, valid
[2018-02-02T15:13:41,265][INFO ][c.f.s.c.PrivilegesEvaluator] No cluster-level perm match for User [name=kibana, roles=[kibana_user], requestedTenant=null] [IndexType [index=.kibana, type=*]] [Action [[indices:admin/template/put]]] [RolesChecked [kibana_user]]
[2018-02-02T15:13:41,266][INFO ][c.f.s.c.PrivilegesEvaluator] No permissions for {}