[2020-08-05T14:58:53,207][INFO ][o.e.n.Node ] [spoonguard] version[7.8.1], pid[98879], build[default/rpm/b5ca9c58fb664ca8bf9e4057fc229b3396bf3a89/2020-07-21T16:40:44.668009Z], OS[Linux/3.10.0-1127.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/11.0.7/11.0.7+10-LTS] [2020-08-05T14:58:53,210][INFO ][o.e.n.Node ] [spoonguard] JVM home [/usr/lib/jvm/java-11-openjdk-11.0.7.10-4.el7_8.x86_64] [2020-08-05T14:58:53,211][INFO ][o.e.n.Node ] [spoonguard] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms4g, -Xmx4g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.io.tmpdir=/tmp/elasticsearch-18254560680818709123, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=2147483648, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=default, -Des.distribution.type=rpm, -Des.bundled_jdk=true] [2020-08-05T14:58:55,518][INFO ][c.f.s.s.SignalsPainlessExtension] [spoonguard] Loaded script whitelist: org.elasticsearch.painless.spi.Whitelist@18d30e7 [2020-08-05T14:58:55,562][INFO ][c.f.s.SearchGuardPlugin ] [spoonguard] ES Config path is /etc/elasticsearch [2020-08-05T14:58:55,710][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] JVM supports TLSv1.3 [2020-08-05T14:58:55,711][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] Config directory is /etc/elasticsearch/, from there the key- and truststore files are resolved relatively [2020-08-05T14:58:56,370][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] TLS Transport Client Provider : JDK [2020-08-05T14:58:56,370][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] TLS Transport Server Provider : JDK [2020-08-05T14:58:56,370][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] TLS HTTP Provider : JDK [2020-08-05T14:58:56,371][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2, TLSv1.1] [2020-08-05T14:58:56,371][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [spoonguard] Enabled TLS protocols for HTTP layer : [TLSv1.3, TLSv1.2, TLSv1.1] [2020-08-05T14:58:56,613][INFO ][c.f.s.SearchGuardPlugin ] [spoonguard] Clustername: spoonguard [2020-08-05T14:58:56,651][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/.elasticsearch.keystore.initial_md5sum has insecure file permissions (should be 0600) [2020-08-05T14:58:56,651][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] Directory /etc/elasticsearch/certs has insecure file permissions (should be 0700) [2020-08-05T14:58:56,651][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/certs/spoonguard.is.ed.ac.uk-crt.pem has insecure file permissions (should be 0600) [2020-08-05T14:58:56,652][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/certs/spoonguard.is.ed.ac.uk-key.pem has insecure file permissions (should be 0600) [2020-08-05T14:58:56,652][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/certs/eduni2.pem has insecure file permissions (should be 0600) [2020-08-05T14:58:56,652][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/certs/spoonguard.is.ed.ac.uk-key.bak has insecure file permissions (should be 0600) [2020-08-05T14:58:56,652][WARN ][c.f.s.SearchGuardPlugin ] [spoonguard] File /etc/elasticsearch/certs/spoonguard.is.ed.ac.uk.pk8 has insecure file permissions (should be 0600) [2020-08-05T14:58:56,688][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [aggs-matrix-stats] [2020-08-05T14:58:56,689][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [analysis-common] [2020-08-05T14:58:56,689][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [constant-keyword] [2020-08-05T14:58:56,689][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [flattened] [2020-08-05T14:58:56,689][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [frozen-indices] [2020-08-05T14:58:56,689][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [ingest-common] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [ingest-geoip] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [ingest-user-agent] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [kibana] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [lang-expression] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [lang-mustache] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [lang-painless] [2020-08-05T14:58:56,690][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [mapper-extras] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [parent-join] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [percolator] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [rank-eval] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [reindex] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [repository-url] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [search-business-rules] [2020-08-05T14:58:56,691][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [searchable-snapshots] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [spatial] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [systemd] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [tasks] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [transform] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [transport-netty4] [2020-08-05T14:58:56,692][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [vectors] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-analytics] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-async-search] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-autoscaling] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-ccr] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-core] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-deprecation] [2020-08-05T14:58:56,693][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-enrich] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-eql] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-graph] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-identity-provider] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-ilm] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-logstash] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-ml] [2020-08-05T14:58:56,694][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-monitoring] [2020-08-05T14:58:56,695][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-ql] [2020-08-05T14:58:56,695][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-rollup] [2020-08-05T14:58:56,696][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-security] [2020-08-05T14:58:56,696][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-sql] [2020-08-05T14:58:56,696][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-voting-only-node] [2020-08-05T14:58:56,696][INFO ][o.e.p.PluginsService ] [spoonguard] loaded module [x-pack-watcher] [2020-08-05T14:58:56,697][INFO ][o.e.p.PluginsService ] [spoonguard] loaded plugin [search-guard-7] [2020-08-05T14:58:56,724][INFO ][c.f.s.SearchGuardPlugin ] [spoonguard] Disabled https compression by default to mitigate BREACH attacks. You can enable it by setting 'http.compression: true' in elasticsearch.yml [2020-08-05T14:58:56,740][INFO ][o.e.e.NodeEnvironment ] [spoonguard] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [35.6gb], net total_space [40.9gb], types [rootfs] [2020-08-05T14:58:56,741][INFO ][o.e.e.NodeEnvironment ] [spoonguard] heap size [3.9gb], compressed ordinary object pointers [true] [2020-08-05T14:58:56,839][INFO ][o.e.n.Node ] [spoonguard] node name [spoonguard], node ID [T7fJV3yCQWWJkmAiv6rN2A], cluster name [spoonguard] [2020-08-05T14:59:01,051][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [spoonguard] [controller/99047] [Main.cc@115] controller (64 bit): Version 7.8.1 (Build d0d3f60f03220d) Copyright (c) 2020 Elasticsearch BV [2020-08-05T14:59:01,403][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Configured categories on rest layer to ignore: [AUTHENTICATED, GRANTED_PRIVILEGES] [2020-08-05T14:59:01,406][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Configured categories on transport layer to ignore: [AUTHENTICATED, GRANTED_PRIVILEGES] [2020-08-05T14:59:01,406][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Configured Users to ignore: [kibanaserver] [2020-08-05T14:59:01,406][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Configured Users to ignore for read compliance events: [kibanaserver] [2020-08-05T14:59:01,407][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Configured Users to ignore for write compliance events: [kibanaserver] [2020-08-05T14:59:01,413][ERROR][c.f.s.a.s.SinkProvider ] [spoonguard] Default endpoint could not be created, auditlog will not work properly. [2020-08-05T14:59:01,414][WARN ][c.f.s.a.r.AuditMessageRouter] [spoonguard] No default storage available, audit log may not work properly. Please check configuration. [2020-08-05T14:59:01,414][INFO ][c.f.s.a.i.AuditLogImpl ] [spoonguard] Message routing enabled: false [2020-08-05T14:59:01,417][WARN ][c.f.s.c.ComplianceConfig ] [spoonguard] If you plan to use field masking pls configure searchguard.compliance.salt to be a random string of 16 chars length identical on all nodes [2020-08-05T14:59:01,418][INFO ][c.f.s.c.ComplianceConfig ] [spoonguard] PII configuration [auditLogPattern=null, auditLogIndex=null]: {} [2020-08-05T14:59:02,325][INFO ][o.e.d.DiscoveryModule ] [spoonguard] using discovery type [zen] and seed hosts providers [settings] [2020-08-05T14:59:03,370][INFO ][o.e.n.Node ] [spoonguard] initialized [2020-08-05T14:59:03,370][INFO ][o.e.n.Node ] [spoonguard] starting ... [2020-08-05T14:59:03,534][INFO ][o.e.t.TransportService ] [spoonguard] publish_address {192.168.153.12:9300}, bound_addresses {192.168.153.12:9300} [2020-08-05T14:59:03,848][INFO ][o.e.b.BootstrapChecks ] [spoonguard] bound or publishing to a non-loopback address, enforcing bootstrap checks [2020-08-05T14:59:03,851][INFO ][o.e.c.c.Coordinator ] [spoonguard] cluster UUID [rFGJ5KZQR1KQYO-tU7x5gA] [2020-08-05T14:59:03,956][INFO ][o.e.c.r.a.AllocationService] [spoonguard] updating number_of_replicas to [0] for indices [searchguard] [2020-08-05T14:59:03,960][INFO ][o.e.c.s.MasterService ] [spoonguard] elected-as-master ([1] nodes joined)[{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{CwQwv4xxQKK9aJQuLnx9dg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 3, version: 65, delta: master node changed {previous [], current [{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{CwQwv4xxQKK9aJQuLnx9dg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]} [2020-08-05T14:59:04,043][INFO ][o.e.c.s.ClusterApplierService] [spoonguard] master node changed {previous [], current [{spoonguard}{T7fJV3yCQWWJkmAiv6rN2A}{CwQwv4xxQKK9aJQuLnx9dg}{192.168.153.12}{192.168.153.12:9300}{dilmrt}{ml.machine_memory=16637550592, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]}, term: 3, version: 65, reason: Publication{term=3, version=65} [2020-08-05T14:59:04,207][INFO ][o.e.h.AbstractHttpServerTransport] [spoonguard] publish_address {192.168.153.12:9200}, bound_addresses {192.168.153.12:9200} [2020-08-05T14:59:04,208][INFO ][o.e.n.Node ] [spoonguard] started [2020-08-05T14:59:04,212][INFO ][c.f.s.SearchGuardPlugin ] [spoonguard] Node started [2020-08-05T14:59:04,212][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Check if searchguard index exists ... [2020-08-05T14:59:04,212][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2020-08-05T14:59:04,218][INFO ][c.f.s.SearchGuardPlugin ] [spoonguard] 6 Search Guard modules loaded so far: [Module [type=MULTITENANCY, implementing class=com.floragunn.searchguard.configuration.PrivilegesInterceptorImpl], Module [type=REST_MANAGEMENT_API, implementing class=com.floragunn.searchguard.dlic.rest.api.SearchGuardRestApiActions], Module [type=AUDITLOG, implementing class=com.floragunn.searchguard.auditlog.impl.AuditLogImpl], Module [type=DLSFLS, implementing class=com.floragunn.searchguard.configuration.SearchGuardFlsDlsIndexSearcherWrapper], Module [type=UNKNOWN, implementing class=com.floragunn.signals.Signals], Module [type=UNKNOWN, implementing class=com.floragunn.signals.api.SignalsApiActions]] [2020-08-05T14:59:04,218][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Background init thread started. Install default config?: false [2020-08-05T14:59:04,429][INFO ][o.e.l.LicenseService ] [spoonguard] license [b6338e32-3bbc-4dd8-ba91-508c72755ce1] mode [basic] - valid [2020-08-05T14:59:04,444][INFO ][o.e.g.GatewayService ] [spoonguard] recovered [5] indices into cluster_state [2020-08-05T14:59:05,215][INFO ][o.e.c.r.a.AllocationService] [spoonguard] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.signals_watches][0]]]). [2020-08-05T14:59:05,227][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:05,245][INFO ][c.f.s.Signals ] [spoonguard] Initializing Signals [2020-08-05T14:59:05,411][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:05,479][INFO ][c.f.s.i.InternalAuthTokenProvider] [spoonguard] Updating signing key for com.floragunn.searchguard.internalauthtoken.InternalAuthTokenProvider@760b92c6 [2020-08-05T14:59:05,574][INFO ][c.f.s.i.InternalAuthTokenProvider] [spoonguard] Updating encryption key for com.floragunn.searchguard.internalauthtoken.InternalAuthTokenProvider@760b92c6 [2020-08-05T14:59:05,606][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:05,623][INFO ][c.f.s.SignalsTenant ] [spoonguard] Initializing alerting tenant _main nodeFilter: null [2020-08-05T14:59:05,628][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:05,686][INFO ][o.q.c.SchedulerSignalerImpl] [spoonguard] Initialized Scheduler Signaller of type: class org.quartz.core.SchedulerSignalerImpl [2020-08-05T14:59:05,687][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Quartz Scheduler v.2.3.1 created. [2020-08-05T14:59:05,716][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Jobs loaded: [] [2020-08-05T14:59:05,716][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Scheduler signals/_main is initialized. Jobs: 0 Active Triggers: 0 [2020-08-05T14:59:05,719][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler meta-data: Quartz Scheduler (v2.3.1) 'signals/_main' with instanceId 'signals/_main' Scheduler class: 'org.quartz.core.QuartzScheduler' - running locally. NOT STARTED. Currently in standby mode. Number of jobs executed: 0 Using thread pool 'org.quartz.simpl.SimpleThreadPool' - with 3 threads. Using job-store 'com.floragunn.searchsupport.jobs.core.IndexJobStateStore' - which supports persistence. and is clustered. [2020-08-05T14:59:05,720][INFO ][o.q.c.QuartzScheduler ] [spoonguard] JobFactory set to: com.floragunn.searchsupport.jobs.execution.AuthorizingJobDecorator$DecoratingJobFactory@6a97d41c [2020-08-05T14:59:05,721][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/_main_$_signals/_main started. [2020-08-05T14:59:05,721][INFO ][c.f.s.SignalsTenant ] [spoonguard] Initializing alerting tenant admin_tenant nodeFilter: null [2020-08-05T14:59:05,723][INFO ][o.q.c.SchedulerSignalerImpl] [spoonguard] Initialized Scheduler Signaller of type: class org.quartz.core.SchedulerSignalerImpl [2020-08-05T14:59:05,723][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Quartz Scheduler v.2.3.1 created. [2020-08-05T14:59:05,727][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Jobs loaded: [] [2020-08-05T14:59:05,727][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Scheduler signals/admin_tenant is initialized. Jobs: 0 Active Triggers: 0 [2020-08-05T14:59:05,728][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler meta-data: Quartz Scheduler (v2.3.1) 'signals/admin_tenant' with instanceId 'signals/admin_tenant' Scheduler class: 'org.quartz.core.QuartzScheduler' - running locally. NOT STARTED. Currently in standby mode. Number of jobs executed: 0 Using thread pool 'org.quartz.simpl.SimpleThreadPool' - with 3 threads. Using job-store 'com.floragunn.searchsupport.jobs.core.IndexJobStateStore' - which supports persistence. and is clustered. [2020-08-05T14:59:05,728][INFO ][o.q.c.QuartzScheduler ] [spoonguard] JobFactory set to: com.floragunn.searchsupport.jobs.execution.AuthorizingJobDecorator$DecoratingJobFactory@5c04ebe5 [2020-08-05T14:59:05,728][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/admin_tenant_$_signals/admin_tenant started. [2020-08-05T14:59:05,735][INFO ][c.f.s.c.ComplianceConfig ] [spoonguard] Compliance features are enabled [2020-08-05T14:59:05,736][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Search Guard License Info: SearchGuardLicense [uid=00000000-0000-0000-0000-000000000000, type=TRIAL, features=[COMPLIANCE], issueDate=2020-08-05, expiryDate=2020-10-04, issuedTo=The world, issuer=floragunn GmbH, startDate=2020-08-05, majorVersion=7, clusterName=*, allowedNodeCount=2147483647, msgs=[], expiresInDays=60, isExpired=false, valid=true, action=, prodUsage=Yes, one cluster with all commercial features and unlimited nodes per cluster., clusterService=org.elasticsearch.cluster.service.ClusterService@5243a948, getMsgs()=[], getExpiresInDays()=60, isExpired()=false, isValid()=true, getAction()=, getProdUsage()=Yes, one cluster with all commercial features and unlimited nodes per cluster.] [2020-08-05T14:59:05,736][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Search Guard License Type: TRIAL, valid [2020-08-05T14:59:05,736][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Node 'spoonguard' initialized [2020-08-05T14:59:07,410][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:09,908][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:12,411][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:14,915][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:17,419][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:18,811][WARN ][o.e.c.r.a.AllocationService] [spoonguard] [searchguard][0] marking unavailable shards as stale: [mbOueWObQQuiZ4FfvfTqJw] [2020-08-05T14:59:19,197][INFO ][c.f.s.c.ComplianceConfig ] [spoonguard] Compliance features are enabled [2020-08-05T14:59:19,197][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Search Guard License Info: SearchGuardLicense [uid=00000000-0000-0000-0000-000000000000, type=TRIAL, features=[COMPLIANCE], issueDate=2020-08-05, expiryDate=2020-10-04, issuedTo=The world, issuer=floragunn GmbH, startDate=2020-08-05, majorVersion=7, clusterName=*, allowedNodeCount=2147483647, msgs=[], expiresInDays=60, isExpired=false, valid=true, action=, prodUsage=Yes, one cluster with all commercial features and unlimited nodes per cluster., clusterService=org.elasticsearch.cluster.service.ClusterService@5243a948, getMsgs()=[], getExpiresInDays()=60, isExpired()=false, isValid()=true, getAction()=, getProdUsage()=Yes, one cluster with all commercial features and unlimited nodes per cluster.] [2020-08-05T14:59:19,197][INFO ][c.f.s.c.ConfigurationRepository] [spoonguard] Search Guard License Type: TRIAL, valid [2020-08-05T14:59:19,923][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:22,425][ERROR][c.f.s.a.BackendRegistry ] [spoonguard] Not yet initialized (you may need to run sgadmin) [2020-08-05T14:59:24,310][INFO ][c.f.s.a.s.SinkProvider ] [spoonguard] Closing DebugSink [2020-08-05T14:59:24,311][INFO ][o.e.n.Node ] [spoonguard] stopping ... [2020-08-05T14:59:24,327][INFO ][o.e.x.w.WatcherService ] [spoonguard] stopping watch service, reason [shutdown initiated] [2020-08-05T14:59:24,329][INFO ][o.e.x.w.WatcherLifeCycleService] [spoonguard] watcher has stopped and shutdown [2020-08-05T14:59:24,467][INFO ][c.f.s.j.SchedulerBuilder ] [spoonguard] Shutting down scheduler org.quartz.impl.StdScheduler@4e7f45e because node is going down [2020-08-05T14:59:24,468][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [spoonguard] [controller/99047] [Main.cc@155] ML controller exiting [2020-08-05T14:59:24,468][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Shutdown of IndexJobStateStore [schedulerName=signals/_main, statusIndexName=.signals_watches_trigger_state, jobConfigSource=IndexJobConfigSource [indexName=.signals_watches, jobFactory=com.floragunn.signals.watch.Watch$JobConfigFactory@2168a83c, jobDistributor=JobDistributor signals/_main], jobFactory=com.floragunn.signals.watch.Watch$JobConfigFactory@2168a83c] [2020-08-05T14:59:24,470][INFO ][o.e.x.m.p.NativeController] [spoonguard] Native controller process has stopped - no new native processes can be started [2020-08-05T14:59:24,470][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/_main_$_signals/_main shutting down. [2020-08-05T14:59:24,472][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/_main_$_signals/_main paused. [2020-08-05T14:59:24,688][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/_main_$_signals/_main shutdown complete. [2020-08-05T14:59:24,689][INFO ][c.f.s.j.SchedulerBuilder ] [spoonguard] Shutdown complete [2020-08-05T14:59:24,689][INFO ][c.f.s.j.SchedulerBuilder ] [spoonguard] Shutting down scheduler org.quartz.impl.StdScheduler@5179e0b6 because node is going down [2020-08-05T14:59:24,689][INFO ][c.f.s.j.c.IndexJobStateStore] [spoonguard] Shutdown of IndexJobStateStore [schedulerName=signals/admin_tenant, statusIndexName=.signals_watches_trigger_state, jobConfigSource=IndexJobConfigSource [indexName=.signals_watches, jobFactory=com.floragunn.signals.watch.Watch$JobConfigFactory@4b866025, jobDistributor=JobDistributor signals/admin_tenant], jobFactory=com.floragunn.signals.watch.Watch$JobConfigFactory@4b866025] [2020-08-05T14:59:24,690][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/admin_tenant_$_signals/admin_tenant shutting down. [2020-08-05T14:59:24,691][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/admin_tenant_$_signals/admin_tenant paused. [2020-08-05T14:59:24,733][INFO ][o.q.c.QuartzScheduler ] [spoonguard] Scheduler signals/admin_tenant_$_signals/admin_tenant shutdown complete. [2020-08-05T14:59:24,733][INFO ][c.f.s.j.SchedulerBuilder ] [spoonguard] Shutdown complete [2020-08-05T14:59:24,799][INFO ][o.e.n.Node ] [spoonguard] stopped [2020-08-05T14:59:24,800][INFO ][o.e.n.Node ] [spoonguard] closing ... [2020-08-05T14:59:24,820][INFO ][o.e.n.Node ] [spoonguard] closed