[2017-02-17 12:45:58,526][INFO ][node ] [Sekhmet] version[2.4.3], pid[1097], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-17 12:45:58,527][INFO ][node ] [Sekhmet] initializing ... [2017-02-17 12:45:59,591][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin not available [2017-02-17 12:45:59,596][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-17 12:45:59,596][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-17 12:45:59,596][INFO ][plugins ] [Sekhmet] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-17 12:45:59,663][INFO ][env ] [Sekhmet] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [6.7gb], net total_space [9.9gb], spins? [unknown], types [rootfs] [2017-02-17 12:45:59,664][INFO ][env ] [Sekhmet] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-17 12:45:59,664][WARN ][env ] [Sekhmet] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-17 12:45:59,723][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-17 12:46:00,375][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] AES-256 not supported, max key length for AES is 128 bit.. That is not an issue, it just limits possible encryption strength. To enable AES 256 install 'Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files' [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-17 12:46:00,428][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-17 12:46:00,763][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-17 12:46:00,765][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-17 12:46:00,936][INFO ][transport ] [Sekhmet] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-17 12:46:00,936][INFO ][transport ] [Sekhmet] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-17 12:46:03,452][INFO ][node ] [Sekhmet] initialized [2017-02-17 12:46:03,452][INFO ][node ] [Sekhmet] starting ... [2017-02-17 12:46:03,536][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Sekhmet] publish_address {10.240.0.24:9300}, bound_addresses {[::]:9300} [2017-02-17 12:46:03,540][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Sekhmet] Check if searchguard index exists ... [2017-02-17 12:46:03,547][DEBUG][action.admin.indices.exists.indices] [Sekhmet] no known master node, scheduling a retry [2017-02-17 12:46:03,553][INFO ][discovery ] [Sekhmet] elasticsearch/VmS-n-TYSE6Av2rfRUa-RQ [2017-02-17 12:46:06,701][INFO ][cluster.service ] [Sekhmet] new_master {Sekhmet}{VmS-n-TYSE6Av2rfRUa-RQ}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-17 12:46:06,786][INFO ][http ] [Sekhmet] publish_address {10.240.0.24:9200}, bound_addresses {[::]:9200} [2017-02-17 12:46:06,786][INFO ][node ] [Sekhmet] started [2017-02-17 12:46:06,801][INFO ][gateway ] [Sekhmet] recovered [0] indices into cluster_state [2017-02-17 12:46:06,812][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Sekhmet] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-17 13:09:17,171][INFO ][node ] [Sekhmet] stopping ... [2017-02-17 13:09:17,180][INFO ][node ] [Sekhmet] stopped [2017-02-17 13:09:17,180][INFO ][node ] [Sekhmet] closing ... [2017-02-17 13:09:17,191][INFO ][node ] [Sekhmet] closed [2017-02-17 18:07:50,290][INFO ][node ] [Tremolo] version[2.4.3], pid[5029], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-17 18:07:50,291][INFO ][node ] [Tremolo] initializing ... [2017-02-17 18:07:51,294][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-17 18:07:51,315][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-17 18:07:51,315][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-17 18:07:51,316][INFO ][plugins ] [Tremolo] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-17 18:07:51,358][INFO ][env ] [Tremolo] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [5.7gb], net total_space [9.9gb], spins? [unknown], types [rootfs] [2017-02-17 18:07:51,358][INFO ][env ] [Tremolo] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-17 18:07:51,358][WARN ][env ] [Tremolo] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-17 18:07:51,462][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-17 18:07:52,032][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-17 18:07:52,107][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] AES-256 not supported, max key length for AES is 128 bit.. That is not an issue, it just limits possible encryption strength. To enable AES 256 install 'Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files' [2017-02-17 18:07:52,108][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 18:07:52,108][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 18:07:52,108][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-17 18:07:52,108][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-17 18:07:52,108][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-17 18:07:52,482][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-17 18:07:52,485][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-17 18:07:52,693][INFO ][transport ] [Tremolo] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-17 18:07:52,694][INFO ][transport ] [Tremolo] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-17 18:07:55,831][INFO ][node ] [Tremolo] initialized [2017-02-17 18:07:55,831][INFO ][node ] [Tremolo] starting ... [2017-02-17 18:07:56,014][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Tremolo] publish_address {10.240.0.24:9300}, bound_addresses {[::]:9300} [2017-02-17 18:07:56,019][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Tremolo] Check if searchguard index exists ... [2017-02-17 18:07:56,039][DEBUG][action.admin.indices.exists.indices] [Tremolo] no known master node, scheduling a retry [2017-02-17 18:07:56,057][INFO ][discovery ] [Tremolo] elasticsearch/80MpoSYiS2yLwba4oQuvng [2017-02-17 18:07:59,273][INFO ][cluster.service ] [Tremolo] new_master {Tremolo}{80MpoSYiS2yLwba4oQuvng}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-17 18:07:59,389][INFO ][http ] [Tremolo] publish_address {10.240.0.24:9200}, bound_addresses {[::]:9200} [2017-02-17 18:07:59,390][INFO ][node ] [Tremolo] started [2017-02-17 18:07:59,406][INFO ][gateway ] [Tremolo] recovered [0] indices into cluster_state [2017-02-17 18:07:59,407][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Tremolo] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-17 18:38:28,961][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized (you may need to run sgadmin) [2017-02-17 18:54:03,974][INFO ][node ] [Tremolo] stopping ... [2017-02-17 18:54:03,983][INFO ][node ] [Tremolo] stopped [2017-02-17 18:54:03,983][INFO ][node ] [Tremolo] closing ... [2017-02-17 18:54:03,995][INFO ][node ] [Tremolo] closed [2017-02-17 18:54:07,141][INFO ][node ] [USAgent] version[2.4.3], pid[9076], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-17 18:54:07,142][INFO ][node ] [USAgent] initializing ... [2017-02-17 18:54:08,210][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-17 18:54:08,233][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-17 18:54:08,233][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-17 18:54:08,234][INFO ][plugins ] [USAgent] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-17 18:54:08,291][INFO ][env ] [USAgent] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [5.8gb], net total_space [9.9gb], spins? [unknown], types [rootfs] [2017-02-17 18:54:08,291][INFO ][env ] [USAgent] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-17 18:54:08,292][WARN ][env ] [USAgent] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-17 18:54:08,386][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-17 18:54:08,967][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-17 18:54:09,039][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] AES-256 not supported, max key length for AES is 128 bit.. That is not an issue, it just limits possible encryption strength. To enable AES 256 install 'Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files' [2017-02-17 18:54:09,039][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 18:54:09,039][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 18:54:09,039][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-17 18:54:09,040][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-17 18:54:09,040][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-17 18:54:09,423][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-17 18:54:09,425][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-17 18:54:09,623][INFO ][transport ] [USAgent] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-17 18:54:09,623][INFO ][transport ] [USAgent] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-17 18:54:12,879][INFO ][node ] [USAgent] initialized [2017-02-17 18:54:12,880][INFO ][node ] [USAgent] starting ... [2017-02-17 18:54:13,093][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [USAgent] publish_address {10.240.0.24:9300}, bound_addresses {[::]:9300} [2017-02-17 18:54:13,098][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [USAgent] Check if searchguard index exists ... [2017-02-17 18:54:13,118][DEBUG][action.admin.indices.exists.indices] [USAgent] no known master node, scheduling a retry [2017-02-17 18:54:13,136][INFO ][discovery ] [USAgent] elasticsearch/M_SqmwLXSzqxkfmHvsISqw [2017-02-17 18:54:16,475][INFO ][cluster.service ] [USAgent] new_master {USAgent}{M_SqmwLXSzqxkfmHvsISqw}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-17 18:54:16,585][INFO ][http ] [USAgent] publish_address {10.240.0.24:9200}, bound_addresses {[::]:9200} [2017-02-17 18:54:16,585][INFO ][node ] [USAgent] started [2017-02-17 18:54:16,604][INFO ][gateway ] [USAgent] recovered [0] indices into cluster_state [2017-02-17 18:54:16,605][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [USAgent] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-17 19:45:00,717][INFO ][node ] [USAgent] stopping ... [2017-02-17 19:45:00,728][INFO ][node ] [USAgent] stopped [2017-02-17 19:45:00,728][INFO ][node ] [USAgent] closing ... [2017-02-17 19:45:00,747][INFO ][node ] [USAgent] closed [2017-02-17 19:51:40,549][INFO ][node ] [Gregor Shapanka] version[2.4.3], pid[1006], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-17 19:51:40,564][INFO ][node ] [Gregor Shapanka] initializing ... [2017-02-17 19:51:41,823][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-17 19:51:41,828][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-17 19:51:41,828][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-17 19:51:41,829][INFO ][plugins ] [Gregor Shapanka] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-17 19:51:41,873][INFO ][env ] [Gregor Shapanka] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [5.6gb], net total_space [9.9gb], spins? [unknown], types [rootfs] [2017-02-17 19:51:41,873][INFO ][env ] [Gregor Shapanka] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-17 19:51:41,873][WARN ][env ] [Gregor Shapanka] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-17 19:51:41,950][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-17 19:51:42,539][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] AES-256 not supported, max key length for AES is 128 bit.. That is not an issue, it just limits possible encryption strength. To enable AES 256 install 'Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files' [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-17 19:51:42,602][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-17 19:51:42,933][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-17 19:51:42,934][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-17 19:51:43,104][INFO ][transport ] [Gregor Shapanka] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-17 19:51:43,104][INFO ][transport ] [Gregor Shapanka] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-17 19:51:45,789][INFO ][node ] [Gregor Shapanka] initialized [2017-02-17 19:51:45,789][INFO ][node ] [Gregor Shapanka] starting ... [2017-02-17 19:51:45,908][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Gregor Shapanka] publish_address {10.240.0.24:9300}, bound_addresses {[::]:9300} [2017-02-17 19:51:45,912][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Gregor Shapanka] Check if searchguard index exists ... [2017-02-17 19:51:45,918][DEBUG][action.admin.indices.exists.indices] [Gregor Shapanka] no known master node, scheduling a retry [2017-02-17 19:51:45,923][INFO ][discovery ] [Gregor Shapanka] elasticsearch/nlGsLGbhTWClTiOZa8iJrg [2017-02-17 19:51:49,142][INFO ][cluster.service ] [Gregor Shapanka] new_master {Gregor Shapanka}{nlGsLGbhTWClTiOZa8iJrg}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-17 19:51:49,207][INFO ][http ] [Gregor Shapanka] publish_address {10.240.0.24:9200}, bound_addresses {[::]:9200} [2017-02-17 19:51:49,207][INFO ][node ] [Gregor Shapanka] started [2017-02-17 19:51:49,223][INFO ][gateway ] [Gregor Shapanka] recovered [0] indices into cluster_state [2017-02-17 19:51:49,223][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Gregor Shapanka] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-17 19:52:55,991][INFO ][node ] [Gregor Shapanka] stopping ... [2017-02-17 19:52:56,000][INFO ][node ] [Gregor Shapanka] stopped [2017-02-17 19:52:56,000][INFO ][node ] [Gregor Shapanka] closing ... [2017-02-17 19:52:56,010][INFO ][node ] [Gregor Shapanka] closed [2017-02-17 19:56:02,420][INFO ][node ] [Nekra] version[2.4.3], pid[1430], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-17 19:56:02,421][INFO ][node ] [Nekra] initializing ... [2017-02-17 19:56:03,226][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-17 19:56:03,245][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-17 19:56:03,245][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-17 19:56:03,246][INFO ][plugins ] [Nekra] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-17 19:56:03,278][INFO ][env ] [Nekra] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [5.6gb], net total_space [9.9gb], spins? [unknown], types [rootfs] [2017-02-17 19:56:03,278][INFO ][env ] [Nekra] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-17 19:56:03,278][WARN ][env ] [Nekra] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-17 19:56:03,335][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-17 19:56:03,780][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-17 19:56:03,826][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 19:56:03,826][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-17 19:56:03,826][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-17 19:56:03,826][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-17 19:56:03,826][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-17 19:56:04,137][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-17 19:56:04,139][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-17 19:56:04,304][INFO ][transport ] [Nekra] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-17 19:56:04,304][INFO ][transport ] [Nekra] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-17 19:56:07,110][INFO ][node ] [Nekra] initialized [2017-02-17 19:56:07,110][INFO ][node ] [Nekra] starting ... [2017-02-17 19:56:07,292][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Nekra] publish_address {10.240.0.24:9300}, bound_addresses {[::]:9300} [2017-02-17 19:56:07,296][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] Check if searchguard index exists ... [2017-02-17 19:56:07,302][DEBUG][action.admin.indices.exists.indices] [Nekra] no known master node, scheduling a retry [2017-02-17 19:56:07,308][INFO ][discovery ] [Nekra] elasticsearch/pRteXY99TWyxyGZtUAkBJQ [2017-02-17 19:56:10,444][INFO ][cluster.service ] [Nekra] new_master {Nekra}{pRteXY99TWyxyGZtUAkBJQ}{10.240.0.24}{10.240.0.24:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-17 19:56:10,508][INFO ][http ] [Nekra] publish_address {10.240.0.24:9200}, bound_addresses {[::]:9200} [2017-02-17 19:56:10,508][INFO ][node ] [Nekra] started [2017-02-17 19:56:10,527][INFO ][gateway ] [Nekra] recovered [0] indices into cluster_state [2017-02-17 19:56:10,528][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Nekra] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-20 15:02:15,060][INFO ][node ] [Shen Kuei] version[2.4.3], pid[5009], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-20 15:02:15,061][INFO ][node ] [Shen Kuei] initializing ... [2017-02-20 15:02:15,737][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-20 15:02:15,744][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-20 15:02:15,744][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-20 15:02:15,745][INFO ][plugins ] [Shen Kuei] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-20 15:02:15,772][INFO ][env ] [Shen Kuei] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [197.6gb], net total_space [199.9gb], spins? [unknown], types [rootfs] [2017-02-20 15:02:15,772][INFO ][env ] [Shen Kuei] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-20 15:02:15,772][WARN ][env ] [Shen Kuei] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-20 15:02:15,834][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-20 15:02:16,101][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-20 15:02:16,128][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-20 15:02:16,128][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-20 15:02:16,128][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-20 15:02:16,128][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-20 15:02:16,128][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-20 15:02:16,440][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-20 15:02:16,443][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-20 15:02:16,527][INFO ][transport ] [Shen Kuei] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-20 15:02:16,527][INFO ][transport ] [Shen Kuei] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-20 15:02:18,095][INFO ][node ] [Shen Kuei] initialized [2017-02-20 15:02:18,095][INFO ][node ] [Shen Kuei] starting ... [2017-02-20 15:02:18,205][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Shen Kuei] publish_address {10.100.0.21:9300}, bound_addresses {[::]:9300} [2017-02-20 15:02:18,210][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Shen Kuei] Check if searchguard index exists ... [2017-02-20 15:02:18,218][DEBUG][action.admin.indices.exists.indices] [Shen Kuei] no known master node, scheduling a retry [2017-02-20 15:02:18,226][INFO ][discovery ] [Shen Kuei] elasticsearch/9oIkoFNmSUiZbxq3M64ikQ [2017-02-20 15:02:21,355][INFO ][cluster.service ] [Shen Kuei] new_master {Shen Kuei}{9oIkoFNmSUiZbxq3M64ikQ}{10.100.0.21}{10.100.0.21:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-20 15:02:21,373][INFO ][http ] [Shen Kuei] publish_address {10.100.0.21:9200}, bound_addresses {[::]:9200} [2017-02-20 15:02:21,373][INFO ][node ] [Shen Kuei] started [2017-02-20 15:02:21,401][INFO ][gateway ] [Shen Kuei] recovered [0] indices into cluster_state [2017-02-20 15:02:21,401][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Shen Kuei] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-20 15:05:38,063][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:05:42,841][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:05:47,937][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:09:47,682][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:09:52,463][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:18:32,882][INFO ][node ] [Shen Kuei] stopping ... [2017-02-20 15:18:32,893][INFO ][node ] [Shen Kuei] stopped [2017-02-20 15:18:32,893][INFO ][node ] [Shen Kuei] closing ... [2017-02-20 15:18:32,897][INFO ][node ] [Shen Kuei] closed [2017-02-20 15:25:57,959][INFO ][node ] [Dum-Dum Dugan] version[2.4.3], pid[7622], build[d38a34e/2016-12-07T16:28:56Z] [2017-02-20 15:25:57,960][INFO ][node ] [Dum-Dum Dugan] initializing ... [2017-02-20 15:25:58,587][INFO ][com.floragunn.searchguard.ssl.SearchGuardSSLPlugin] Search Guard 2 plugin also available [2017-02-20 15:25:58,597][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Clustername: elasticsearch [2017-02-20 15:25:58,597][INFO ][com.floragunn.searchguard.SearchGuardPlugin] Node [null] is a transportClient: false/tribeNode: false/tribeNodeClient: false [2017-02-20 15:25:58,599][INFO ][plugins ] [Dum-Dum Dugan] modules [reindex, lang-expression, lang-groovy], plugins [search-guard-ssl, search-guard-2], sites [] [2017-02-20 15:25:58,633][INFO ][env ] [Dum-Dum Dugan] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [197.6gb], net total_space [199.9gb], spins? [unknown], types [rootfs] [2017-02-20 15:25:58,633][INFO ][env ] [Dum-Dum Dugan] heap size [1.9gb], compressed ordinary object pointers [true] [2017-02-20 15:25:58,633][WARN ][env ] [Dum-Dum Dugan] max file descriptors [4096] for elasticsearch process likely too low, consider increasing to at least [65536] [2017-02-20 15:25:58,689][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Open SSL not available (this is not an error, we simply fallback to built-in JDK SSL) because of java.lang.ClassNotFoundException: org.apache.tomcat.jni.SSL [2017-02-20 15:25:58,957][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] Config directory is /opt/elastic/ElasticSearch/elasticsearch-2.4.3/config/, from there the key- and truststore files are resolved relatively [2017-02-20 15:25:58,982][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportClientProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-20 15:25:58,982][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransportServerProvider:JDK with ciphers [TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] [2017-02-20 15:25:58,983][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTPProvider:null with ciphers [] [2017-02-20 15:25:58,983][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslTransport protocols [TLSv1.2, TLSv1.1] [2017-02-20 15:25:58,983][INFO ][com.floragunn.searchguard.ssl.DefaultSearchGuardKeyStore] sslHTTP protocols [TLSv1.2, TLSv1.1] [2017-02-20 15:25:59,322][INFO ][com.floragunn.searchguard.configuration.ConfigurationModule] FLS/DLS valve not bound (noop) [2017-02-20 15:25:59,325][INFO ][com.floragunn.searchguard.auditlog.AuditLogModule] Auditlog not available [2017-02-20 15:25:59,489][INFO ][transport ] [Dum-Dum Dugan] Using [com.floragunn.searchguard.transport.SearchGuardTransportService] as transport service, overridden by [search-guard2] [2017-02-20 15:25:59,490][INFO ][transport ] [Dum-Dum Dugan] Using [com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] as transport, overridden by [search-guard-ssl] [2017-02-20 15:26:01,326][INFO ][node ] [Dum-Dum Dugan] initialized [2017-02-20 15:26:01,326][INFO ][node ] [Dum-Dum Dugan] starting ... [2017-02-20 15:26:01,463][INFO ][com.floragunn.searchguard.transport.SearchGuardTransportService] [Dum-Dum Dugan] publish_address {10.100.0.21:9300}, bound_addresses {[::]:9300} [2017-02-20 15:26:01,469][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Dum-Dum Dugan] Check if searchguard index exists ... [2017-02-20 15:26:01,478][DEBUG][action.admin.indices.exists.indices] [Dum-Dum Dugan] no known master node, scheduling a retry [2017-02-20 15:26:01,485][INFO ][discovery ] [Dum-Dum Dugan] elasticsearch/wj5UVAxETLKTqo-pvJOc8Q [2017-02-20 15:26:04,650][INFO ][cluster.service ] [Dum-Dum Dugan] new_master {Dum-Dum Dugan}{wj5UVAxETLKTqo-pvJOc8Q}{10.100.0.21}{10.100.0.21:9300}, reason: zen-disco-join(elected_as_master, [0] joins received) [2017-02-20 15:26:04,677][INFO ][http ] [Dum-Dum Dugan] publish_address {10.100.0.21:9200}, bound_addresses {[::]:9200} [2017-02-20 15:26:04,678][INFO ][node ] [Dum-Dum Dugan] started [2017-02-20 15:26:04,716][INFO ][gateway ] [Dum-Dum Dugan] recovered [0] indices into cluster_state [2017-02-20 15:26:04,716][INFO ][com.floragunn.searchguard.action.configupdate.TransportConfigUpdateAction] [Dum-Dum Dugan] searchguard index does not exist yet, so no need to load config on node startup. Use sgadmin to initialize cluster [2017-02-20 15:26:57,976][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:29:07,122][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized (you may need to run sgadmin) [2017-02-20 15:29:16,825][ERROR][com.floragunn.searchguard.auth.BackendRegistry] Not yet initialized (you may need to run sgadmin) [2017-02-20 15:29:46,967][WARN ][com.floragunn.searchguard.ssl.transport.SearchGuardSSLNettyTransport] [Dum-Dum Dugan] Someone speaks plaintext instead of ssl, will close the channel [2017-02-20 15:31:24,456][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:31:29,232][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]] [2017-02-20 15:38:48,792][ERROR][com.floragunn.searchguard.transport.SearchGuardTransportService] Cannot authenticate User [name=CN=kirk,OU=client,O=client,L=Test,C=DE, roles=[]]