ukncsc / lme

Logging Made Easy

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Services now stopped

shokcwave opened this issue · comments

Hi i have recently attempted to upgrade from v0.2 to v0.3 following these instructions
All seems to run through OK however i now seem to be in a similar position as Issue 87

When i run the command docker stack ps lme i get a few services that have failed

ubuntu@lmedbserver:~$ sudo docker stack ps lme
ID NAME IMAGE NODE DESIRED STATE CURRENT STATE ERROR PORTS
z7uypez9jbrg lme_kibana.1 docker.elastic.co/kibana/kibana:7.8.0 lmedbserver Running Running 47 seconds ago
p3g70ga057fl _ lme_kibana.1 docker.elastic.co/kibana/kibana:7.8.0 lmedbserver Shutdown Failed 53 seconds ago "task: non-zero exit (1)"
i9cplat6b98u _ lme_kibana.1 docker.elastic.co/kibana/kibana:7.8.0 lmedbserver Shutdown Failed about a minute ago "task: non-zero exit (1)"
fi7f1pxr3obv _ lme_kibana.1 docker.elastic.co/kibana/kibana:7.8.0 lmedbserver Shutdown Failed 2 minutes ago "task: non-zero exit (1)"
ifx17lj1d0gj _ lme_kibana.1 docker.elastic.co/kibana/kibana:7.8.0 lmedbserver Shutdown Failed 3 minutes ago "task: non-zero exit (1)"
6gbfzdb7nurq lme_logstash.1 docker.elastic.co/logstash/logstash:7.8.0 lmedbserver Running Running 3 hours ago
on8nfcgt8gfx lme_elasticsearch.1 docker.elastic.co/elasticsearch/elasticsearch:7.8.0 lmedbserver Running Running 3 hours ago
hdl1a4m9deg9 lme_logstash.1 docker.elastic.co/logstash/logstash:7.8.0 lmedbserver Shutdown Failed 3 hours ago "No such container: lme_logsta…"
szpw4w9kxfok lme_elasticsearch.1 docker.elastic.co/elasticsearch/elasticsearch:7.8.0 lmedbserver Shutdown Failed 3 hours ago "No such container: lme_elasti…"
6i1u4k05t5ox lme_logstash.1 docker.elastic.co/logstash/logstash:7.8.0 lmedbserver Shutdown Failed 3 hours ago "No such container: lme_logsta…"
jlw7pko5xqho lme_elasticsearch.1 docker.elastic.co/elasticsearch/elasticsearch:7.8.0 lmedbserver Shutdown Failed 3 hours ago "No such container: lme_elasti…"

If I then run the commands
docker service logs lme_logstash
docker service logs lme_elasticsearch
docker service logs lme_kibana

ubuntu@lmedbserver:~$ sudo docker service logs lme_logstash
[sudo] password for ubuntu:
lme_logstash.1.6gbfzdb7nurq@lmedbserver | 2021/03/04 08:01:04 Setting 'xpack.monitoring.enabled' from environment.
lme_logstash.1.6gbfzdb7nurq@lmedbserver | OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
lme_logstash.1.6gbfzdb7nurq@lmedbserver | WARNING: An illegal reflective access operation has occurred
lme_logstash.1.6gbfzdb7nurq@lmedbserver | WARNING: Illegal reflective access by com.headius.backport9.modules.Modules (file:/usr/share/logstash/logstash-core/lib/jars/jruby-complete-9.2.11.1.jar) to method sun.nio.ch.NativeThread.signal(long)
lme_logstash.1.6gbfzdb7nurq@lmedbserver | WARNING: Please consider reporting this to the maintainers of com.headius.backport9.modules.Modules
lme_logstash.1.6gbfzdb7nurq@lmedbserver | WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
lme_logstash.1.6gbfzdb7nurq@lmedbserver | WARNING: All illegal access operations will be denied in a future release
lme_logstash.1.6gbfzdb7nurq@lmedbserver | Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:01:57,674][INFO ][logstash.setting.writabledirectory] Creating directory {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:01:57,739][INFO ][logstash.setting.writabledirectory] Creating directory {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:01:58,413][INFO ][logstash.runner ] Starting Logstash {"logstash.version"=>"7.8.0", "jruby.version"=>"jruby 9.2.11.1 (2.5.7) 2020-03-25 b1f55b1a40 OpenJDK 64-Bit Server VM 11.0.7+10-LTS on 11.0.7+10-LTS +indy +jit [linux-x86_64]"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:01:58,437][INFO ][logstash.agent ] No persistent UUID file found. Generating new UUID {:uuid=>"63fc6121-9fc5-4efa-b196-946798f071c5", :path=>"/usr/share/logstash/data/uuid"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:01,547][INFO ][org.reflections.Reflections] Reflections took 54 ms to scan 1 urls, producing 21 keys and 41 values
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,358][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://logstash_writer:xxxxxx@elasticsearch:9200/]}}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,728][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [https://logstash_writer:xxxxxx@elasticsearch:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,742][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://elasticsearch:9200"]}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,755][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://logstash_writer:xxxxxx@elasticsearch:9200/]}}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,765][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [https://logstash_writer:xxxxxx@elasticsearch:9200/][Manticore::SocketException] Connection refused (Connection refused)"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,779][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://elasticsearch:9200"]}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:04,947][INFO ][logstash.filters.geoip ][main] Using geoip database {:path=>"/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-6.0.3-java/vendor/GeoLite2-City.mmdb"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:05,193][INFO ][logstash.filters.geoip ][main] Using geoip database {:path=>"/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-filter-geoip-6.0.3-java/vendor/GeoLite2-City.mmdb"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:05,269][INFO ][logstash.javapipeline ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>8, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>1000, "pipeline.sources"=>["/usr/share/logstash/pipeline/logstash.conf", "/usr/share/logstash/pipeline/logstash_custom.conf"], :thread=>"#<Thread:0xa64aa91 run>"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:08,151][INFO ][logstash.inputs.beats ][main] Beats inputs: Starting input listener {:address=>"0.0.0.0:5044"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,131][INFO ][logstash.javapipeline ][main] Pipeline started {"pipeline.id"=>"main"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,158][INFO ][logstash.inputs.syslog ][main][f7bf43e387bb03747a2a67019a969cbae4081f612951607d4b861f9c180c9e4f] Starting syslog tcp listener {:address=>"0.0.0.0:12514"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,161][INFO ][logstash.inputs.syslog ][main][f7bf43e387bb03747a2a67019a969cbae4081f612951607d4b861f9c180c9e4f] Starting syslog udp listener {:address=>"0.0.0.0:12514"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,254][INFO ][logstash.agent ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,291][INFO ][org.logstash.beats.Server][main][c002cde065fbb7d4616e1ecff2e0f1158fdf7464fd316382777b2001269af269] Starting server on port: 5044
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:09,946][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:15,491][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:15,512][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:16,502][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:16,527][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:21,537][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:21,544][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:26,551][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:26,554][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:31,563][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:31,634][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :error=>"Got response code '401' contacting Elasticsearch at URL 'https://elasticsearch:9200/'"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,918][WARN ][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,918][WARN ][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=>"https://logstash_writer:xxxxxx@elasticsearch:9200/"}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,950][INFO ][logstash.outputs.elasticsearch][main] ES Output version determined {:es_version=>7}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,951][INFO ][logstash.outputs.elasticsearch][main] ES Output version determined {:es_version=>7}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,951][WARN ][logstash.outputs.elasticsearch][main] Detected a 6.x and above cluster: the type event field won't be used to determine the document _type {:es_version=>7}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:02:36,952][WARN ][logstash.outputs.elasticsearch][main] Detected a 6.x and above cluster: the type event field won't be used to determine the document _type {:es_version=>7}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:03:06,822][INFO ][logstash.outputs.elasticsearch][main] Using default mapping template
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:03:06,825][INFO ][logstash.outputs.elasticsearch][main] Using default mapping template
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:03:07,008][INFO ][logstash.outputs.elasticsearch][main] Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@Version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
lme_logstash.1.6gbfzdb7nurq@lmedbserver | [2021-03-04T08:03:07,008][INFO ][logstash.outputs.elasticsearch][main] Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@Version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}

ubuntu@lmedbserver:~$ sudo docker service logs lme_elasticsearch
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | Created elasticsearch keystore in /usr/share/elasticsearch/config/elasticsearch.keystore
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:32,052Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "version[7.8.0], pid[11], build[default/docker/757314695644ea9a1dc2fecd26d1a43856725e65/2020-06-14T19:35:50.234439Z], OS[Linux/4.15.0-136-generic/amd64], JVM[AdoptOpenJDK/OpenJDK 64-Bit Server VM/14.0.1/14.0.1+7]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:32,056Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "JVM home [/usr/share/elasticsearch/jdk]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:32,057Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -Xms1g, -Xmx1g, -XX:+UseG1GC, -XX:G1ReservePercent=25, -XX:InitiatingHeapOccupancyPercent=30, -Djava.io.tmpdir=/tmp/elasticsearch-15485681243089884289, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms25g, -Xmx25g, -XX:MaxDirectMemorySize=13421772800, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,405Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [aggs-matrix-stats]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,405Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [analysis-common]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,405Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [constant-keyword]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,405Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [flattened]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,406Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [frozen-indices]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,406Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [ingest-common]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,406Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [ingest-geoip]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,406Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [ingest-user-agent]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,407Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [kibana]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,407Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [lang-expression]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,407Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [lang-mustache]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,407Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [lang-painless]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,407Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [mapper-extras]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,408Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [parent-join]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,408Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [percolator]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,408Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [rank-eval]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,408Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [reindex]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,409Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [repository-url]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,409Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [search-business-rules]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,409Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [searchable-snapshots]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,409Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [spatial]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,409Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [tasks]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,410Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [transform]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,410Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [transport-netty4]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,410Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [vectors]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,410Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-analytics]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,411Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-async-search]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,411Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-autoscaling]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,411Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-ccr]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,411Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-core]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,411Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-deprecation]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,412Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-enrich]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,412Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-eql]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,412Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-graph]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,412Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-identity-provider]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,412Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-ilm]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,413Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-logstash]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,413Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-ml]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,413Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-monitoring]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,413Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-ql]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,414Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-rollup]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,414Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-security]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,414Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-sql]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,414Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-voting-only-node]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,415Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "loaded module [x-pack-watcher]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,415Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "no plugins loaded" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,586Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/sda2)]], net usable_space [1.7tb], net total_space [1.9tb], types [ext4]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:37,587Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "heap size [25gb], compressed ordinary object pointers [true]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:01:53,013Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "node name [es01], node ID [tjuTYHjUT2aeNBB-yjL2bg], cluster name [loggingmadeeasy-es]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "deprecation", "timestamp": "2021-03-04T08:01:58,436Z", "level": "WARN", "component": "o.e.d.c.s.Settings", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[xpack.monitoring.enabled] setting was deprecated in Elasticsearch and will be removed in a future release! See the breaking changes documentation for the next major version." }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:01,876Z", "level": "INFO", "component": "o.e.x.s.a.s.FileRolesStore", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:03,482Z", "level": "INFO", "component": "o.e.x.m.p.l.CppLogMessageHandler", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[controller/500] [Main.cc@110] controller (64 bit): Version 7.8.0 (Build 58ff6912e20047) Copyright (c) 2020 Elasticsearch BV" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:04,842Z", "level": "DEBUG", "component": "o.e.a.ActionModule", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "Using REST wrapper from plugin org.elasticsearch.xpack.security.Security" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:05,139Z", "level": "INFO", "component": "o.e.d.DiscoveryModule", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "using discovery type [zen] and seed hosts providers [settings]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:06,720Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "initialized" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:06,720Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "starting ..." }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:07,131Z", "level": "INFO", "component": "o.e.t.TransportService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "publish_address {10.0.0.3:9300}, bound_addresses {0.0.0.0:9300}" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:08,498Z", "level": "INFO", "component": "o.e.b.BootstrapChecks", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "bound or publishing to a non-loopback address, enforcing bootstrap checks" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:08,502Z", "level": "INFO", "component": "o.e.c.c.Coordinator", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "cluster UUID [OnqmHD0tRx-Rd_0uO5mTWw]" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:08,825Z", "level": "INFO", "component": "o.e.c.s.MasterService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "elected-as-master ([1] nodes joined)[{es01}{tjuTYHjUT2aeNBB-yjL2bg}{KTts-6uITF2dbDs-XHqPbQ}{10.0.0.3}{10.0.0.3:9300}{dilmrt}{ml.machine_memory=33719611392, xpack.installed=true, transform.node=true, ml.max_open_jobs=20} elect leader, BECOME_MASTER_TASK, FINISH_ELECTION], term: 64, version: 78689, delta: master node changed {previous [], current [{es01}{tjuTYHjUT2aeNBB-yjL2bg}{KTts-6uITF2dbDs-XHqPbQ}{10.0.0.3}{10.0.0.3:9300}{dilmrt}{ml.machine_memory=33719611392, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]}" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:09,161Z", "level": "INFO", "component": "o.e.c.s.ClusterApplierService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "master node changed {previous [], current [{es01}{tjuTYHjUT2aeNBB-yjL2bg}{KTts-6uITF2dbDs-XHqPbQ}{10.0.0.3}{10.0.0.3:9300}{dilmrt}{ml.machine_memory=33719611392, xpack.installed=true, transform.node=true, ml.max_open_jobs=20}]}, term: 64, version: 78689, reason: Publication{term=64, version=78689}" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:09,599Z", "level": "INFO", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "publish_address {10.0.0.3:9200}, bound_addresses {0.0.0.0:9200}", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:09,599Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "started", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:13,513Z", "level": "WARN", "component": "o.e.d.SeedHostsResolver", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "timed out after [5s] resolving host [es01]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:15,445Z", "level": "ERROR", "component": "o.e.x.s.a.e.NativeUsersStore", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "security index is unavailable. short circuiting retrieval of user [logstash_writer]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:15,507Z", "level": "ERROR", "component": "o.e.x.s.a.e.NativeUsersStore", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "security index is unavailable. short circuiting retrieval of user [logstash_writer]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:16,498Z", "level": "ERROR", "component": "o.e.x.s.a.e.NativeUsersStore", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "security index is unavailable. short circuiting retrieval of user [logstash_writer]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:16,522Z", "level": "ERROR", "component": "o.e.x.s.a.e.NativeUsersStore", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "security index is unavailable. short circuiting retrieval of user [logstash_writer]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:16,826Z", "level": "INFO", "component": "o.e.l.LicenseService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "license [3236fdf6-d32a-4aca-aa75-b9d841d488a2] mode [basic] - valid", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:16,828Z", "level": "INFO", "component": "o.e.x.s.s.SecurityStatusChangeListener", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "Active license is now [BASIC]; Security is enabled", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:02:16,838Z", "level": "INFO", "component": "o.e.g.GatewayService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "recovered [208] indices into cluster_state", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "deprecation", "timestamp": "2021-03-04T08:03:07,929Z", "level": "WARN", "component": "o.e.d.a.b.BulkRequestParser", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[types removal] Specifying types in bulk requests is deprecated.", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:10,143Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] create_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:10,335Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:15,051Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:15,106Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:24,370Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:24,393Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:28,697Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:28,716Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:35,327Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,273Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,277Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,282Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,289Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,568Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,580Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,595Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,604Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,633Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,964Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:37,987Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:38,004Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:38,501Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:38,542Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:38,810Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:39,152Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:39,168Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:39,189Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:03:39,201Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:04:46,951Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-02.03.2021/mHd4kQl-QQWbjhf8PJtD0w] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:04:47,160Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-02.03.2021/mHd4kQl-QQWbjhf8PJtD0w] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:07:59,567Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:08:11,339Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:08:47,666Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:10:33,282Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:15:23,549Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:15:24,978Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:15:24,982Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:15:25,416Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:16:37,707Z", "level": "INFO", "component": "o.e.c.r.a.AllocationService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[.apm-agent-configuration][0]]]).", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:21:33,429Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:32:33,734Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:36:20,733Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:36:32,021Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T08:45:03,678Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-03.03.2021/-8lfaZ88TiiIDWsPs1x-wQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T09:11:59,410Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-04.03.2021/zN5rMFe1QG64JuLc1fbNJQ] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T09:56:59,060Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-01.03.2021/04Gqh50NQ2683igqK7orBA] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T09:56:59,267Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-01.03.2021/04Gqh50NQ2683igqK7orBA] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }
lme_elasticsearch.1.on8nfcgt8gfx@lmedbserver | {"type": "server", "timestamp": "2021-03-04T09:56:59,290Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "loggingmadeeasy-es", "node.name": "es01", "message": "[winlogbeat-26.02.2021/kS3HlwG5SG6EFSZ29EVa1g] update_mapping [_doc]", "cluster.uuid": "OnqmHD0tRx-Rd_0uO5mTWw", "node.id": "tjuTYHjUT2aeNBB-yjL2bg" }

ubuntu@lmedbserver:$ sudo docker service logs lme_kibana
lme_kibana.1.ryeaiun3kwt6@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:48:34Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: apm_oss"}
lme_kibana.1.ryeaiun3kwt6@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:48:34Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: triggers_actions_ui"}
lme_kibana.1.qesiq9lq0g2p@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:46:38Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: apm_oss"}
lme_kibana.1.qesiq9lq0g2p@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:46:38Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: triggers_actions_ui"}
lme_kibana.1.qesiq9lq0g2p@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:47:19Z","tags":["fatal","root"],"pid":8,"message":"{ Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:61:19)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30)\n at DistinctUntilChangedSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:55:26)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at ReplaySubject._subscribe (/usr/share/kibana/node_modules/rxjs/internal/ReplaySubject.js:76:28)\n at ReplaySubject.Observable._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:44:25)\n at ReplaySubject.Subject._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Subject.js:102:51)\n at ReplaySubject.Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:30:22)\n at MapSubscriber.shareReplayOperation (/usr/share/kibana/node_modules/rxjs/internal/operators/shareReplay.js:44:32)\n at Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:25:31)\n at MapOperator.call (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:32:23)\n cause:\n { Error: value has length [9] but it must have a minimum length of [32].\n at StringType.onError (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:91:20)\n at module.exports.internals.Any.Type.schema.error (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:51:53)\n at finish (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:529:50)\n at module.exports.internals.Any._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:656:28)\n at internals.Alternatives._base (/usr/share/kibana/node_modules/joi/lib/types/alternatives/index.js:50:38)\n at internals.Alternatives._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._base (/usr/share/kibana/node_modules/joi/lib/types/object/index.js:212:45)\n at type._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._validateWithOptions (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:674:29)\n at module.exports.internals.Any.root.validate (/usr/share/kibana/node_modules/joi/lib/index.js:146:23)\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:56:72)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30) cause: undefined, path: [ 'encryptionKey' ] } }"}
lme_kibana.1.qesiq9lq0g2p@lmedbserver |
lme_kibana.1.qesiq9lq0g2p@lmedbserver | FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].
lme_kibana.1.qesiq9lq0g2p@lmedbserver |
lme_kibana.1.p99xgo9olt0i@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:44:54Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: apm_oss"}
lme_kibana.1.p99xgo9olt0i@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:44:54Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: triggers_actions_ui"}
lme_kibana.1.ii1o1o3jkebk@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:45:46Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: apm_oss"}
lme_kibana.1.p99xgo9olt0i@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:45:33Z","tags":["fatal","root"],"pid":8,"message":"{ Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:61:19)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30)\n at DistinctUntilChangedSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:55:26)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at ReplaySubject._subscribe (/usr/share/kibana/node_modules/rxjs/internal/ReplaySubject.js:76:28)\n at ReplaySubject.Observable._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:44:25)\n at ReplaySubject.Subject._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Subject.js:102:51)\n at ReplaySubject.Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:30:22)\n at MapSubscriber.shareReplayOperation (/usr/share/kibana/node_modules/rxjs/internal/operators/shareReplay.js:44:32)\n at Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:25:31)\n at MapOperator.call (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:32:23)\n cause:\n { Error: value has length [9] but it must have a minimum length of [32].\n at StringType.onError (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:91:20)\n at module.exports.internals.Any.Type.schema.error (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:51:53)\n at finish (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:529:50)\n at module.exports.internals.Any._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:656:28)\n at internals.Alternatives._base (/usr/share/kibana/node_modules/joi/lib/types/alternatives/index.js:50:38)\n at internals.Alternatives._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._base (/usr/share/kibana/node_modules/joi/lib/types/object/index.js:212:45)\n at type._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._validateWithOptions (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:674:29)\n at module.exports.internals.Any.root.validate (/usr/share/kibana/node_modules/joi/lib/index.js:146:23)\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:56:72)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30) cause: undefined, path: [ 'encryptionKey' ] } }"}
lme_kibana.1.ii1o1o3jkebk@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:45:46Z","tags":["warning","plugins-discovery"],"pid":8,"message":"Expect plugin "id" in camelCase, but found: triggers_actions_ui"}
lme_kibana.1.p99xgo9olt0i@lmedbserver |
lme_kibana.1.p99xgo9olt0i@lmedbserver | FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].
lme_kibana.1.ii1o1o3jkebk@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:46:25Z","tags":["fatal","root"],"pid":8,"message":"{ Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:61:19)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30)\n at DistinctUntilChangedSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:55:26)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at ReplaySubject._subscribe (/usr/share/kibana/node_modules/rxjs/internal/ReplaySubject.js:76:28)\n at ReplaySubject.Observable._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:44:25)\n at ReplaySubject.Subject._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Subject.js:102:51)\n at ReplaySubject.Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:30:22)\n at MapSubscriber.shareReplayOperation (/usr/share/kibana/node_modules/rxjs/internal/operators/shareReplay.js:44:32)\n at Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:25:31)\n at MapOperator.call (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:32:23)\n cause:\n { Error: value has length [9] but it must have a minimum length of [32].\n at StringType.onError (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:91:20)\n at module.exports.internals.Any.Type.schema.error (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:51:53)\n at finish (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:529:50)\n at module.exports.internals.Any._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:656:28)\n at internals.Alternatives._base (/usr/share/kibana/node_modules/joi/lib/types/alternatives/index.js:50:38)\n at internals.Alternatives._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._base (/usr/share/kibana/node_modules/joi/lib/types/object/index.js:212:45)\n at type._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._validateWithOptions (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:674:29)\n at module.exports.internals.Any.root.validate (/usr/share/kibana/node_modules/joi/lib/index.js:146:23)\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:56:72)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30) cause: undefined, path: [ 'encryptionKey' ] } }"}
lme_kibana.1.ii1o1o3jkebk@lmedbserver |
lme_kibana.1.ii1o1o3jkebk@lmedbserver | FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].
lme_kibana.1.s9grwqirc250@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:47:34Z","tags":["warning","plugins-discovery"],"pid":9,"message":"Expect plugin "id" in camelCase, but found: apm_oss"}
lme_kibana.1.ii1o1o3jkebk@lmedbserver |
lme_kibana.1.s9grwqirc250@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:47:34Z","tags":["warning","plugins-discovery"],"pid":9,"message":"Expect plugin "id" in camelCase, but found: triggers_actions_ui"}
lme_kibana.1.p99xgo9olt0i@lmedbserver |
lme_kibana.1.s9grwqirc250@lmedbserver | {"type":"log","@timestamp":"2021-03-04T10:48:20Z","tags":["fatal","root"],"pid":9,"message":"{ Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:61:19)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30)\n at DistinctUntilChangedSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:55:26)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at ReplaySubject._subscribe (/usr/share/kibana/node_modules/rxjs/internal/ReplaySubject.js:76:28)\n at ReplaySubject.Observable._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:44:25)\n at ReplaySubject.Subject._trySubscribe (/usr/share/kibana/node_modules/rxjs/internal/Subject.js:102:51)\n at ReplaySubject.Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:30:22)\n at MapSubscriber.shareReplayOperation (/usr/share/kibana/node_modules/rxjs/internal/operators/shareReplay.js:44:32)\n at Observable.subscribe (/usr/share/kibana/node_modules/rxjs/internal/Observable.js:25:31)\n at MapOperator.call (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:32:23)\n cause:\n { Error: value has length [9] but it must have a minimum length of [32].\n at StringType.onError (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:91:20)\n at module.exports.internals.Any.Type.schema.error (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:51:53)\n at finish (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:529:50)\n at module.exports.internals.Any._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:656:28)\n at internals.Alternatives._base (/usr/share/kibana/node_modules/joi/lib/types/alternatives/index.js:50:38)\n at internals.Alternatives._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._base (/usr/share/kibana/node_modules/joi/lib/types/object/index.js:212:45)\n at type._validate (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:614:37)\n at type._validateWithOptions (/usr/share/kibana/node_modules/joi/lib/types/any/index.js:674:29)\n at module.exports.internals.Any.root.validate (/usr/share/kibana/node_modules/joi/lib/index.js:146:23)\n at ObjectType.validate (/usr/share/kibana/node_modules/@kbn/config-schema/target/out/types/type.js:56:72)\n at ConfigService.validateAtPath (/usr/share/kibana/src/core/server/config/config_service.js:188:19)\n at MapSubscriber.getDistinctConfig.pipe.config [as project] (/usr/share/kibana/src/core/server/config/config_service.js:196:81)\n at MapSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/map.js:49:35)\n at MapSubscriber.Subscriber.next (/usr/share/kibana/node_modules/rxjs/internal/Subscriber.js:66:18)\n at DistinctUntilChangedSubscriber._next (/usr/share/kibana/node_modules/rxjs/internal/operators/distinctUntilChanged.js:69:30) cause: undefined, path: [ 'encryptionKey' ] } }"}
lme_kibana.1.s9grwqirc250@lmedbserver |
lme_kibana.1.s9grwqirc250@lmedbserver | FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].
lme_kibana.1.s9grwqirc250@lmedbserver |
ubuntu@lmedbserver:
$

any help is appreciated
Mark

commented

Hello. I can see that there's a few errors in your logs that indicate your docker-compose file is not fully formed.

FATAL Error: [config validation of [xpack.encryptedSavedObjects].encryptionKey]: value has length [9] but it must have a minimum length of [32].

Indicates that the kibanakey (line 64 of docker-compose-stack.yml) has not been generated and replaced. You can generate a new one and swap it in your live.yml file with the following command (as per the deploy.sh) script

$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 42 | head -n 1)

Thanks for the quick response, when i try to run the command you provided i receive the following error.

Last login: Thu Mar 4 10:06:36 2021 from 10.242.2.2
ubuntu@lmedbserver:$ $(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 42 | head -n 1)
grIkNMw4O8ggzs4lrfKC9d4XVoPLKablkZRJA6Oujq: command not found
ubuntu@lmedbserver:
$

commented

you need to run that command to generate a 32 char length random string, then amend your docker-compose-stack-live.yml file (line 64)

So instead of:

XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: kibanakey

it reads something like:

XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY: randomkeythatwasgeneratedfromthecommand

Thank you, i'm still new to linux so still learning the commands etc.
i have generated the key as you say and the amended the yml file, i think re-ran the update process and it appears to be working now.

thank you for you help
Mark