{"type": "server", "timestamp": "2026-02-23T17:21:48,895Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "version[7.17.0], pid[7], build[default/docker/bee86328705acaa9a6daede7140defd4d9ec56bd/2022-01-28T08:36:04.875279988Z], OS[Linux/6.8.0-100-generic/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.1/17.0.1+12]" }
{"type": "server", "timestamp": "2026-02-23T17:21:48,898Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]" }
{"type": "server", "timestamp": "2026-02-23T17:21:48,898Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-8810739464652718375, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms2g, -Xmx2g, -XX:MaxDirectMemorySize=1073741824, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,244Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [aggs-matrix-stats]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,244Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [analysis-common]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,244Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [constant-keyword]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,244Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [frozen-indices]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,244Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [ingest-common]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [ingest-geoip]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [ingest-user-agent]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [kibana]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [lang-expression]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [lang-mustache]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [lang-painless]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,245Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [legacy-geo]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [mapper-extras]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [mapper-version]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [parent-join]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [percolator]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [rank-eval]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [reindex]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,246Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [repositories-metering-api]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [repository-encrypted]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [repository-url]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [runtime-fields-common]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [search-business-rules]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [searchable-snapshots]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [snapshot-repo-test-kit]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,247Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [spatial]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [transform]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [transport-netty4]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [unsigned-long]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [vector-tile]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [vectors]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [wildcard]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,248Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-aggregate-metric]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-analytics]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-async]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-async-search]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-autoscaling]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-ccr]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-core]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,249Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-data-streams]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-deprecation]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-enrich]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-eql]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-fleet]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-graph]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-identity-provider]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,250Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-ilm]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-logstash]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-ml]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-monitoring]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-ql]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-rollup]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-security]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,251Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-shutdown]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-sql]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-stack]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-text-structure]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-voting-only-node]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "loaded module [x-pack-watcher]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,252Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "no plugins loaded" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,283Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "using [1] data paths, mounts [[/ (overlay)]], net usable_space [370.7gb], net total_space [435.7gb], types [overlay]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,283Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "heap size [2gb], compressed ordinary object pointers [true]" }
{"type": "server", "timestamp": "2026-02-23T17:21:50,294Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "node name [0b3fe4dfe25f], node ID [hMZ1GpArT0WbbPsVNfevDw], cluster name [docker-cluster], roles [transform, data_frozen, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest]" }
{"type": "server", "timestamp": "2026-02-23T17:21:52,902Z", "level": "INFO", "component": "o.e.x.m.p.l.CppLogMessageHandler", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[controller/222] [Main.cc@122] controller (64 bit): Version 7.17.0 (Build 447aed7cba032c) Copyright (c) 2022 Elasticsearch BV" }
{"type": "server", "timestamp": "2026-02-23T17:21:53,171Z", "level": "INFO", "component": "o.e.x.s.a.s.FileRolesStore", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]" }
{"type": "server", "timestamp": "2026-02-23T17:21:53,679Z", "level": "INFO", "component": "o.e.i.g.ConfigDatabases", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/usr/share/elasticsearch/config/ingest-geoip] for changes" }
{"type": "server", "timestamp": "2026-02-23T17:21:53,680Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "initialized database registry, using geoip-databases directory [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,001Z", "level": "INFO", "component": "o.e.t.NettyAllocator", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,040Z", "level": "INFO", "component": "o.e.d.DiscoveryModule", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "using discovery type [single-node] and seed hosts providers [settings]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,301Z", "level": "INFO", "component": "o.e.g.DanglingIndicesState", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,574Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "initialized" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,574Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "starting ..." }
{"type": "server", "timestamp": "2026-02-23T17:21:54,613Z", "level": "INFO", "component": "o.e.x.s.c.f.PersistentCache", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "persistent cache index loaded" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,613Z", "level": "INFO", "component": "o.e.x.d.l.DeprecationIndexingComponent", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "deprecation component started" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,667Z", "level": "INFO", "component": "o.e.t.TransportService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "publish_address {198.18.14.5:9300}, bound_addresses {[::]:9300}" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,672Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating template [.monitoring-alerts-7] with version [7]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,677Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating template [.monitoring-es] with version [7]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,678Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating template [.monitoring-kibana] with version [7]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,680Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating template [.monitoring-logstash] with version [7]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,683Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "creating template [.monitoring-beats] with version [7]" }
{"type": "server", "timestamp": "2026-02-23T17:21:54,848Z", "level": "INFO", "component": "o.e.c.c.Coordinator", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "setting initial configuration to VotingConfiguration{hMZ1GpArT0WbbPsVNfevDw}" }
{"type": "server", "timestamp": "2026-02-23T17:21:55,089Z", "level": "INFO", "component": "o.e.c.s.MasterService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "elected-as-master ([1] nodes joined)[{0b3fe4dfe25f}{hMZ1GpArT0WbbPsVNfevDw}{JGa_-ESYQKadQGgLFJzszg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{0b3fe4dfe25f}{hMZ1GpArT0WbbPsVNfevDw}{JGa_-ESYQKadQGgLFJzszg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw}]}" }
{"type": "server", "timestamp": "2026-02-23T17:21:55,164Z", "level": "INFO", "component": "o.e.c.c.CoordinationState", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "cluster UUID set to [W3kJPHRtQ76r7K7C2ZE5ww]" }
{"type": "server", "timestamp": "2026-02-23T17:21:55,237Z", "level": "INFO", "component": "o.e.c.s.ClusterApplierService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "master node changed {previous [], current [{0b3fe4dfe25f}{hMZ1GpArT0WbbPsVNfevDw}{JGa_-ESYQKadQGgLFJzszg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw}]}, term: 1, version: 1, reason: Publication{term=1, version=1}" }
{"type": "server", "timestamp": "2026-02-23T17:21:55,274Z", "level": "INFO", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "publish_address {198.18.14.5:9200}, bound_addresses {[::]:9200}", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,275Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "started", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,368Z", "level": "INFO", "component": "o.e.g.GatewayService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "recovered [0] indices into cluster_state", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,511Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.ml-anomalies-] for index patterns [.ml-anomalies-*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,605Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.ml-notifications-000002] for index patterns [.ml-notifications-000002]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,682Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.ml-state] for index patterns [.ml-state*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,778Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.ml-stats] for index patterns [.ml-stats-*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,859Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [synthetics-mappings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:55,935Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [synthetics-settings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,012Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [metrics-mappings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,093Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [data-streams-mappings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,169Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [logs-mappings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,252Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [metrics-settings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,323Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [logs-settings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,441Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.watch-history-13] for index patterns [.watcher-history-13*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,518Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [ilm-history] for index patterns [ilm-history-5*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,600Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.slm-history] for index patterns [.slm-history-5*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,676Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [.deprecation-indexing-settings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,761Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding component template [.deprecation-indexing-mappings]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,842Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [synthetics] for index patterns [synthetics-*-*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,918Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [metrics] for index patterns [metrics-*-*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:56,990Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [logs] for index patterns [logs-*-*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,064Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index template [.deprecation-indexing-template] for index patterns [.logs-deprecation.*]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,133Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [ml-size-based-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,203Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [logs]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,276Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [metrics]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,344Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [synthetics]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,415Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [7-days-default]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,496Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [365-days-default]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,562Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [90-days-default]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,630Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [30-days-default]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,711Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [180-days-default]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,776Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [watch-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,846Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [ilm-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,912Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [slm-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:57,989Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,084Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[provider_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,213Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding index lifecycle policy [.fleet-actions-results-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,419Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updating geoip databases", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,420Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "fetching geoip databases overview from [https://geoip.elastic.co/v1/database?elastic_geoip_service_tos=agree]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,563Z", "level": "INFO", "component": "o.e.l.LicenseService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "license [2fa51dd2-9d56-4261-83ad-8464264d1bb2] mode [basic] - valid", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,564Z", "level": "INFO", "component": "o.e.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Active license is now [BASIC]; Security is disabled", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,565Z", "level": "WARN", "component": "o.e.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security.", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "deprecation.elasticsearch", "timestamp": "2026-02-23T17:21:58,566Z", "level": "CRITICAL", "component": "o.e.d.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "The default behavior of disabling security on basic licenses is deprecated. In a later version of Elasticsearch, the value of [xpack.security.enabled] will default to \"true\" , regardless of the license level. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security, or explicitly disable security by setting [xpack.security.enabled] to false in elasticsearch.yml", "key": "security_implicitly_disabled", "category": "security", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,753Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[owner_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,871Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001] creating index, cause [initialize_data_stream], templates [.deprecation-indexing-template], shards [1]/[1]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,873Z", "level": "INFO", "component": "o.e.c.r.a.AllocationService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updating number_of_replicas to [0] for indices [.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,876Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateDataStreamService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding data stream [.logs-deprecation.elasticsearch-default] with write index [.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001], backing indices [], and aliases []", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:58,950Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updating geoip database [GeoLite2-ASN.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:59,304Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[transactions_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:59,564Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001] from [null] to [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:59,729Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001/Gp9TODy-Rs-H3X6VKwpMiw] update_mapping [_doc]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:59,823Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[notifications_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:21:59,937Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[.geoip_databases] creating index, cause [auto(bulk api)], templates [], shards [1]/[0]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:00,443Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001] from [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] to [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:00,541Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.02.23-000001] from [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] to [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"check-rollover-ready\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:01,237Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "downloading geoip database [GeoLite2-ASN.mmdb] to [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-ASN.mmdb.tmp.gz]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:01,250Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updated geoip database [GeoLite2-ASN.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:01,262Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updating geoip database [GeoLite2-City.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:01,399Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-ASN.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:03,689Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "[.ds-ilm-history-5-2026.02.23-000001] creating index, cause [initialize_data_stream], templates [ilm-history], shards [1]/[0]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:03,692Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateDataStreamService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "adding data stream [ilm-history-5] with write index [.ds-ilm-history-5-2026.02.23-000001], backing indices [], and aliases []", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:03,836Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-ilm-history-5-2026.02.23-000001] from [null] to [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:04,153Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-ilm-history-5-2026.02.23-000001] from [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] to [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:04,331Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "moving index [.ds-ilm-history-5-2026.02.23-000001] from [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] to [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"check-rollover-ready\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:04,490Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "downloading geoip database [GeoLite2-City.mmdb] to [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-City.mmdb.tmp.gz]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:04,499Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updated geoip database [GeoLite2-City.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:04,500Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updating geoip database [GeoLite2-Country.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:05,086Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-City.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:05,866Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "downloading geoip database [GeoLite2-Country.mmdb] to [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-Country.mmdb.tmp.gz]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:05,873Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "updated geoip database [GeoLite2-Country.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T17:22:05,976Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-8810739464652718375/geoip-databases/hMZ1GpArT0WbbPsVNfevDw/GeoLite2-Country.mmdb]", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-23T20:17:25,467Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "invalid internal transport message format, got (4d,47,4c,4e), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/20.65.193.67:40598, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:30:00,003Z", "level": "INFO", "component": "o.e.x.s.SnapshotRetentionTask", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "starting SLM retention snapshot cleanup task", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:30:00,004Z", "level": "INFO", "component": "o.e.x.s.SnapshotRetentionTask", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "there are no repositories to fetch, SLM retention snapshot cleanup task complete", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:38:00,001Z", "level": "INFO", "component": "o.e.x.m.MlDailyMaintenanceService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "triggering scheduled [ML] maintenance tasks", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:38:00,012Z", "level": "INFO", "component": "o.e.x.m.a.TransportDeleteExpiredDataAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Deleting expired data", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:38:00,030Z", "level": "INFO", "component": "o.e.x.m.j.r.UnusedStatsRemover", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Successfully deleted [0] unused stats documents", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:38:00,030Z", "level": "INFO", "component": "o.e.x.m.a.TransportDeleteExpiredDataAction", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Completed deletion of expired ML data", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T01:38:00,030Z", "level": "INFO", "component": "o.e.x.m.MlDailyMaintenanceService", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "Successfully completed [ML] maintenance task: triggerDeleteExpiredDataTask", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T03:53:28,327Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,0), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/3.131.220.121:46276, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T03:54:19,295Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "invalid internal transport message format, got (53,53,48,2d), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/3.131.220.121:36018, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T03:55:26,387Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,0), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/3.131.220.121:36184, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T04:24:43,137Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/45.154.153.19:40106, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T04:28:47,282Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/62.133.46.4:33024, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T05:36:08,355Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/188.126.94.202:57740, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T05:36:31,082Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/154.47.30.13:42002, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T05:36:34,823Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/45.154.153.5:54726, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T05:36:39,636Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/173.244.32.16:58842, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T05:38:02,206Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "SSL/TLS request received but SSL/TLS is not enabled on this node, got (16,3,1,5), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/149.88.26.82:46226, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }
{"type": "server", "timestamp": "2026-02-24T07:18:22,750Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "0b3fe4dfe25f", "message": "invalid internal transport message format, got (3,0,0,2f), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/91.224.92.114:64053, profile=default}], closing connection", "cluster.uuid": "W3kJPHRtQ76r7K7C2ZE5ww", "node.id": "hMZ1GpArT0WbbPsVNfevDw"  }