How To Configure Elastic

#1) ----------------------------------
C:\elasticsearch-8.4.2>bin\elasticsearch-create-enrollment-token.bat --scope kibana
ERROR: [xpack.security.enrollment.enabled] must be set to `true` to create an

enrollment token
C:\elasticsearch-8.4.2>.\bin\elasticsearch.bat
[2022-09-25T20:21:25,805][INFO ][o.e.n.Node ] [ALEJANDRO]
version[8.4.2], pid[20168],
build[zip/89f8c6d8429db93b816403ee75e5c270b43a940a/2022-09-14T16:26:04.382547801Z],
OS[Windows 11/10.0/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server
VM/18.0.2.1/18.0.2.1+1-1]
[2022-09-25T20:21:25,809][INFO ][o.e.n.Node ] [ALEJANDRO] JVM home
[C:\elasticsearch-8.4.2\jdk], using bundled JDK [true]
[2022-09-25T20:21:25,810][INFO ][o.e.n.Node ] [ALEJANDRO] JVM
arguments [-Des.networkaddress.cache.ttl=60, -
Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:
+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -
Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -
Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -
Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -
Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-
opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=C:\Users\xande\
AppData\Local\Temp\elasticsearch, -XX:+HeapDumpOnOutOfMemoryError, -XX:
+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid
%p.log,
-Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,fil
esize=64m, -Xms7858m, -Xmx7858m, -XX:MaxDirectMemorySize=4120903680, -
XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -
XX:G1ReservePercent=15, -Des.distribution.type=zip, --module-path=C:\elasticsearch-
8.4.2\lib, --add-modules=jdk.net, -Djdk.module.main=org.elasticsearch.server]
[2022-09-25T20:21:30,274][INFO ][c.a.c.i.j.JacksonVersion ] [ALEJANDRO] Package
versions: jackson-annotations=2.13.2, jackson-core=2.13.2, jackson-
databind=2.13.2.2, jackson-dataformat-xml=2.13.2, jackson-datatype-jsr310=2.13.2,
azure-core=1.27.0, Troubleshooting version conflicts:
https://aka.ms/azsdk/java/dependency/troubleshoot
[2022-09-25T20:21:33,965][INFO ][o.e.p.PluginsService ] [ALEJANDRO] loaded
module [aggs-matrix-stats]
module [analysis-common]
module [constant-keyword]
module [data-streams]
module [frozen-indices]
module [ingest-attachment]
module [ingest-common]
module [ingest-geoip]
module [ingest-user-agent]
module [kibana]
module [lang-expression]
module [lang-mustache]
module [lang-painless]
module [legacy-geo]
module [mapper-extras]
module [mapper-version]
module [old-lucene-versions]
module [parent-join]
module [percolator]
module [rank-eval]
module [reindex]
module [repositories-metering-api]
module [repository-azure]
module [repository-encrypted]
module [repository-gcs]
module [repository-s3]
module [repository-url]
module [runtime-fields-common]
module [search-business-rules]
module [searchable-snapshots]
module [snapshot-based-recoveries]
module [snapshot-repo-test-kit]
module [spatial]
module [transform]
module [transport-netty4]
module [unsigned-long]
module [vector-tile]
module [wildcard]
module [x-pack-aggregate-metric]
module [x-pack-analytics]
module [x-pack-async]
module [x-pack-async-search]
module [x-pack-autoscaling]
module [x-pack-ccr]
module [x-pack-core]
module [x-pack-deprecation]
module [x-pack-enrich]
module [x-pack-eql]
module [x-pack-fleet]
module [x-pack-graph]
module [x-pack-identity-provider]
module [x-pack-ilm]
module [x-pack-logstash]
module [x-pack-ml]
module [x-pack-monitoring]
module [x-pack-ql]
module [x-pack-rollup]
module [x-pack-security]
module [x-pack-shutdown]
module [x-pack-sql]
module [x-pack-stack]
module [x-pack-text-structure]
module [x-pack-voting-only-node]
module [x-pack-watcher]
[2022-09-25T20:21:33,989][INFO ][o.e.p.PluginsService ] [ALEJANDRO] no plugins
loaded
[2022-09-25T20:21:36,040][INFO ][o.e.e.NodeEnvironment ] [ALEJANDRO] using [1]
data paths, mounts [[Windows (C:)]], net usable_space [74gb], net total_space
[237.5gb], types [NTFS]
[2022-09-25T20:21:36,041][INFO ][o.e.e.NodeEnvironment ] [ALEJANDRO] heap size
[7.6gb], compressed ordinary object pointers [true]
[2022-09-25T20:21:36,048][INFO ][o.e.n.Node ] [ALEJANDRO] node name
[ALEJANDRO], node ID [UhvpVuCZRVSnFxLfiKYJWQ], cluster name [elasticsearch], roles
[ingest, data_frozen, ml, data_hot, transform, data_content, data_warm, master,
remote_cluster_client, data, data_cold]
[2022-09-25T20:21:38,186][INFO ][o.e.x.s.Security ] [ALEJANDRO] Security is
enabled
[2022-09-25T20:21:38,374][INFO ][o.e.x.s.a.s.FileRolesStore] [ALEJANDRO] parsed [0]
roles from file [C:\elasticsearch-8.4.2\config\roles.yml]
[2022-09-25T20:21:38,934][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ALEJANDRO]

[controller/2072] [Main.cc@123] controller (64 bit): Version 8.4.2 (Build
158cee2efc2db4) Copyright (c) 2022 Elasticsearch BV
[2022-09-25T20:21:39,511][INFO ][o.e.t.n.NettyAllocator ] [ALEJANDRO] creating
NettyAllocator with the following configs: [name=elasticsearch_configured,
chunk_size=1mb, suggested_max_allocation_size=1mb,
factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true,
g1gc_region_size=4mb}]
[2022-09-25T20:21:39,531][INFO ][o.e.i.r.RecoverySettings ] [ALEJANDRO] using rate
limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2022-09-25T20:21:39,559][INFO ][o.e.d.DiscoveryModule ] [ALEJANDRO] using
discovery type [multi-node] and seed hosts providers [settings]
[2022-09-25T20:21:40,464][INFO ][o.e.n.Node ] [ALEJANDRO] initialized
[2022-09-25T20:21:40,465][INFO ][o.e.n.Node ] [ALEJANDRO]
starting ...
[2022-09-25T20:21:40,474][INFO ][o.e.x.s.c.f.PersistentCache] [ALEJANDRO]
persistent cache index loaded
[2022-09-25T20:21:40,475][INFO ][o.e.x.d.l.DeprecationIndexingComponent]
[ALEJANDRO] deprecation component started
[2022-09-25T20:21:40,630][INFO ][o.e.t.TransportService ] [ALEJANDRO]
publish_address {127.0.0.1:9300}, bound_addresses {127.0.0.1:9300}, {[::1]:9300}
[2022-09-25T20:21:40,752][INFO ][o.e.c.c.ClusterBootstrapService] [ALEJANDRO] this
node has not joined a bootstrapped cluster yet; [cluster.initial_master_nodes] is
set to [ALEJANDRO]
[2022-09-25T20:21:40,759][INFO ][o.e.c.c.Coordinator ] [ALEJANDRO] setting
initial configuration to VotingConfiguration{UhvpVuCZRVSnFxLfiKYJWQ}
[2022-09-25T20:21:40,904][INFO ][o.e.c.s.MasterService ] [ALEJANDRO] elected-as-
master ([1] nodes joined)[_FINISH_ELECTION_, {ALEJANDRO}{UhvpVuCZRVSnFxLfiKYJWQ}
{C8n2rU2uQ0GLDZt8GE37Jw}{ALEJANDRO}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}
completing election], term: 1, version: 1, delta: master node changed {previous [],
current [{ALEJANDRO}{UhvpVuCZRVSnFxLfiKYJWQ}{C8n2rU2uQ0GLDZt8GE37Jw}{ALEJANDRO}
{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]}
[2022-09-25T20:21:40,955][INFO ][o.e.c.c.CoordinationState] [ALEJANDRO] cluster
UUID set to [n_H1NO4hTHOVkUZQciGftw]
[2022-09-25T20:21:41,016][INFO ][o.e.c.s.ClusterApplierService] [ALEJANDRO] master
node changed {previous [], current [{ALEJANDRO}{UhvpVuCZRVSnFxLfiKYJWQ}
{C8n2rU2uQ0GLDZt8GE37Jw}{ALEJANDRO}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}]},
term: 1, version: 1, reason: Publication{term=1, version=1}
[2022-09-25T20:21:41,042][INFO ][o.e.r.s.FileSettingsService] [ALEJANDRO] starting
file settings watcher ...
[2022-09-25T20:21:41,047][INFO ][o.e.r.s.FileSettingsService] [ALEJANDRO] file
settings service up and running [tid=71]
[2022-09-25T20:21:41,088][INFO ][o.e.h.AbstractHttpServerTransport] [ALEJANDRO]
publish_address {192.168.1.171:9200}, bound_addresses {[::]:9200}
[2022-09-25T20:21:41,089][INFO ][o.e.n.Node ] [ALEJANDRO] started
{ALEJANDRO}{UhvpVuCZRVSnFxLfiKYJWQ}{C8n2rU2uQ0GLDZt8GE37Jw}{ALEJANDRO}{127.0.0.1}
{127.0.0.1:9300}{cdfhilmrstw}{ml.machine_memory=16479817728,
ml.max_jvm_size=8241807360, ml.allocated_processors=16, xpack.installed=true}
[2022-09-25T20:21:41,103][INFO ][o.e.g.GatewayService ] [ALEJANDRO] recovered
[0] indices into cluster_state
[2022-09-25T20:21:41,242][INFO ][o.e.c.m.MetadataIndexTemplateService] [ALEJANDRO]
adding component template [.deprecation-indexing-settings]
adding index template [ilm-history] for index patterns [ilm-history-5*]
adding index template [.watch-history-16] for index patterns [.watcher-history-16*]
adding component template [.deprecation-indexing-mappings]
adding index template [.slm-history] for index patterns [.slm-history-5*]
adding component template [metrics-settings]
adding component template [synthetics-mappings]
adding component template [data-streams-mappings]
adding component template [metrics-mappings]
adding component template [logs-mappings]
adding component template [synthetics-settings]
adding component template [logs-settings]
adding index template [.monitoring-es-mb] for index patterns [.monitoring-es-8-*]
adding index template [.monitoring-logstash-mb] for index patterns [.monitoring-
logstash-8-*]
adding index template [.monitoring-ent-search-mb] for index patterns [.monitoring-
ent-search-8-*]
adding index template [.monitoring-beats-mb] for index patterns [.monitoring-beats-
8-*]
adding index template [.monitoring-kibana-mb] for index patterns [.monitoring-
kibana-8-*]
adding index template [.ml-state] for index patterns [.ml-state*]
adding index template [.ml-notifications-000002] for index patterns [.ml-
notifications-000002]
adding index template [.ml-anomalies-] for index patterns [.ml-anomalies-*]
adding index template [.ml-stats] for index patterns [.ml-stats-*]
adding template [.monitoring-es] for index patterns [.monitoring-es-7-*]
adding template [.monitoring-alerts-7] for index patterns [.monitoring-alerts-7]
adding template [.monitoring-logstash] for index patterns [.monitoring-logstash-7-
*]
adding template [.monitoring-kibana] for index patterns [.monitoring-kibana-7-*]
adding template [.monitoring-beats] for index patterns [.monitoring-beats-7-*]
adding index template [metrics] for index patterns [metrics-*-*]
adding index template [.deprecation-indexing-template] for index patterns [.logs-
deprecation.*]
adding index template [synthetics] for index patterns [synthetics-*-*]
adding index template [logs] for index patterns [logs-*-*]
[2022-09-25T20:21:41,744][INFO ][o.e.x.i.a.TransportPutLifecycleAction] [ALEJANDRO]
adding index lifecycle policy [180-days-default]
adding index lifecycle policy [watch-history-ilm-policy-16]
adding index lifecycle policy [ilm-history-ilm-policy]
adding index lifecycle policy [logs]
adding index lifecycle policy [.deprecation-indexing-ilm-policy]
adding index lifecycle policy [metrics]
adding index lifecycle policy [synthetics]
adding index lifecycle policy [slm-history-ilm-policy]
adding index lifecycle policy [.monitoring-8-ilm-policy]
adding index lifecycle policy [ml-size-based-ilm-policy]
adding index lifecycle policy [.fleet-actions-results-ilm-policy]
[2022-09-25T20:21:42,665][INFO ][o.e.l.LicenseService ] [ALEJANDRO] license
[4f7a197d-f009-4f12-bb37-6a8359bec352] mode [basic] - valid
[2022-09-25T20:21:42,666][INFO ][o.e.x.s.a.Realms ] [ALEJANDRO] license
mode is [basic], currently licensed security realms are
[reserved/reserved,file/default_file,native/default_native]
[2022-09-25T20:21:42,903][WARN ][o.e.x.s.t.n.SecurityNetty4HttpServerTransport]
[ALEJANDRO] received plaintext http traffic on an https channel, closing connection
Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:51773}
[2022-09-25T20:21:50,123][INFO ][o.e.x.s.InitialNodeSecurityAutoConfiguration]
[ALEJANDRO] HTTPS has been configured with automatically generated certificates,
and the CA's hex-encoded SHA-256 fingerprint is
[a9f49d535d28394520f67b0a85cf54fe44926f598a119e459917a1b646ac8dca]
[2022-09-25T20:21:50,133][INFO ][o.e.x.s.s.SecurityIndexManager] [ALEJANDRO]
security index does not exist, creating [.security-7] with alias [.security]
[2022-09-25T20:21:50,141][INFO ][o.e.x.s.e.InternalEnrollmentTokenGenerator]
[ALEJANDRO] Will not generate node enrollment token because node is only bound on
localhost for transport and cannot connect to nodes from other hosts
security index does not exist, creating [.security-7] with alias [.security]
[2022-09-25T20:21:50,172][INFO ][o.e.c.m.MetadataCreateIndexService] [ALEJANDRO]
[.security-7] creating index, cause [api], templates [], shards [1]/[0]
[2022-09-25T20:21:50,355][INFO ][o.e.c.r.a.AllocationService] [ALEJANDRO]
current.health="GREEN" message="Cluster health status changed from [YELLOW] to
[GREEN] (reason: [shards started [[.security-7][0]]])." previous.health="YELLOW"
reason="shards started [[.security-7][0]]"
-----------------------------------------------------------------------------------
---------------------
-> Elasticsearch security features have been automatically configured!
-> Authentication is enabled and cluster connections are encrypted.
-> Password for the elastic user (reset with `bin/elasticsearch-reset-password -u

elastic`):
hV5jGfvJrUn-=Y1JUCeq
-> HTTP CA certificate SHA-256 fingerprint:

a9f49d535d28394520f67b0a85cf54fe44926f598a119e459917a1b646ac8dca
-> Configure Kibana to use this cluster:

* Run Kibana and click the configuration link in the terminal when Kibana starts.
* Copy the following enrollment token and paste it into Kibana in your browser
(valid for the next 30 minutes):
eyJ2ZXIiOiI4LjQuMiIsImFkciI6WyIxOTIuMTY4LjEuMTcxOjkyMDAiXSwiZmdyIjoiYTlmNDlkNTM1ZDI
4Mzk0NTIwZjY3YjBhODVjZjU0ZmU0NDkyNmY1OThhMTE5ZTQ1OTkxN2ExYjY0NmFjOGRjYSIsImtleSI6Il
BKWVpkb01CdGVIYkZfTjlRUmhJOmNlS2JZSndnUnhhbHJPaERlVnpIbHcifQ==
-> Configure other nodes to join this cluster:

* On this node:
- Create an enrollment token with `bin/elasticsearch-create-enrollment-token -s
node`.
- Uncomment the transport.host setting at the end of config/elasticsearch.yml.
- Restart Elasticsearch.
* On other nodes:
- Start Elasticsearch with `bin/elasticsearch --enrollment-token <token>`, using
the enrollment token that you generated.
-----------------------------------------------------------------------------------
---------------------
[.geoip_databases] creating index, cause [auto(bulk api)], templates [], shards
[1]/[0]
[GREEN] (reason: [shards started [[.geoip_databases][0]]])."
previous.health="YELLOW" reason="shards started [[.geoip_databases][0]]"
[2022-09-25T20:24:01,865][INFO ][o.e.i.g.GeoIpDownloader ] [ALEJANDRO]
successfully downloaded geoip database [GeoLite2-ASN.mmdb]
[2022-09-25T20:24:02,003][INFO ][o.e.i.g.DatabaseNodeService] [ALEJANDRO]
successfully loaded geoip database file [GeoLite2-ASN.mmdb]
[2022-09-25T20:25:12,074][ERROR][o.e.i.g.GeoIpDownloader ] [ALEJANDRO] error
downloading geoip database [GeoLite2-City.mmdb]java.net.SocketTimeoutException:
Read timed out
at java.base/sun.nio.ch.NioSocketImpl.timedRead(NioSocketImpl.java:280)
at java.base/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:306)
at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:347)
at java.base/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:800)
at java.base/java.net.Socket$SocketInputStream.read(Socket.java:966)
See logs for more details.
[2022-09-25T20:25:34,997][INFO ][o.e.x.s.a.f.FileUserPasswdStore] [ALEJANDRO] users
file [C:\elasticsearch-8.4.2\config\users] changed. updating users...
[2022-09-25T20:25:35,004][INFO ][o.e.x.s.a.f.FileUserRolesStore] [ALEJANDRO] users
roles file [C:\elasticsearch-8.4.2\config\users_roles] changed. updating users
roles...
[2022-09-25T20:25:40,016][INFO ][o.e.x.s.a.f.FileUserPasswdStore] [ALEJANDRO] users
file [C:\elasticsearch-8.4.2\config\users] changed. updating users...
[2022-09-25T20:25:40,018][INFO ][o.e.x.s.a.f.FileUserRolesStore] [ALEJANDRO] users
roles file [C:\elasticsearch-8.4.2\config\users_roles] changed. updating users
roles...
[.kibana_task_manager_8.4.2_001] creating index, cause [api], templates [], shards
[1]/[1]
[2022-09-25T20:25:52,124][INFO ][o.e.c.r.a.AllocationService] [ALEJANDRO] updating
number_of_replicas to [0] for indices [.kibana_task_manager_8.4.2_001]
[.kibana_8.4.2_001] creating index, cause [api], templates [], shards [1]/[1]
number_of_replicas to [0] for indices [.kibana_8.4.2_001]
[GREEN] (reason: [shards started [[.kibana_8.4.2_001][0]]])."
previous.health="YELLOW" reason="shards started [[.kibana_8.4.2_001][0]]"
adding index lifecycle policy [.alerts-ilm-policy]
adding component template [.alerts-technical-mappings]
adding component template [.alerts-ecs-mappings]
[.apm-agent-configuration] creating index, cause [api], templates [], shards
[1]/[1]
number_of_replicas to [0] for indices [.apm-agent-configuration]
[.apm-custom-link] creating index, cause [api], templates [], shards [1]/[1]
number_of_replicas to [0] for indices [.apm-custom-link]
[.kibana_security_session_1] creating index, cause [api], templates [], shards
[1]/[0]
adding component template [.alerts-observability.uptime.alerts-mappings]
adding component template [.alerts-observability.metrics.alerts-mappings]
adding component template [.alerts-observability.logs.alerts-mappings]
adding component template [.alerts-security.alerts-mappings]
adding component template [.alerts-observability.apm.alerts-mappings]
[GREEN] (reason: [shards started [[.apm-agent-configuration][0], [.apm-custom-link]
[0], [.kibana_security_session_1][0]]])." previous.health="YELLOW" reason="shards
started [[.apm-agent-configuration][0], [.apm-custom-link][0],
[.kibana_security_session_1][0]]"
[2022-09-25T20:25:57,557][INFO ][o.e.c.m.MetadataMappingService] [ALEJANDRO]
[.kibana_task_manager_8.4.2_001/cnF3AlVvQa6hL0QbF0FSWg] update_mapping [_doc]
[.kibana_8.4.2_001/pp60NMkySaC2672_RgEY2g] update_mapping [_doc]
adding index lifecycle policy [kibana-event-log-policy]
adding index lifecycle policy [.preview.alerts-security.alerts-policy]
adding index template [.kibana-event-log-8.4.2-template] for index patterns
[.kibana-event-log-8.4.2-*]
adding component template [.preview.alerts-security.alerts-mappings]
[.kibana-event-log-8.4.2-000001] creating index, cause [api], templates [.kibana-
event-log-8.4.2-template], shards [1]/[1]
number_of_replicas to [0] for indices [.kibana-event-log-8.4.2-000001]
[2022-09-25T20:25:58,562][INFO ][o.e.x.i.IndexLifecycleTransition] [ALEJANDRO]
moving index [.kibana-event-log-8.4.2-000001] from [null] to
[{"phase":"new","action":"complete","name":"complete"}] in policy [kibana-event-
log-policy]
[GREEN] (reason: [shards started [[.kibana-event-log-8.4.2-000001][0]]])."
previous.health="YELLOW" reason="shards started [[.kibana-event-log-8.4.2-000001]
[0]]"
moving index [.kibana-event-log-8.4.2-000001] from
[{"phase":"new","action":"complete","name":"complete"}] to
[{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}]
in policy [kibana-event-log-policy]
moving index [.kibana-event-log-8.4.2-000001] from
to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy
[kibana-event-log-policy]
adding index lifecycle policy [kibana-reporting]
adding component template [.fleet_agent_id_verification-1]
adding component template [.fleet_globals-1]
[.ds-ilm-history-5-2022.09.25-000001] creating index, cause
[initialize_data_stream], templates [ilm-history], shards [1]/[0]
[2022-09-25T20:26:03,380][INFO ][o.e.c.m.MetadataCreateDataStreamService]
[ALEJANDRO] adding data stream [ilm-history-5] with write index [.ds-ilm-history-5-
2022.09.25-000001], backing indices [], and aliases []
moving index [.ds-ilm-history-5-2022.09.25-000001] from [null] to
[{"phase":"new","action":"complete","name":"complete"}] in policy [ilm-history-ilm-
policy]
[GREEN] (reason: [shards started [[.ds-ilm-history-5-2022.09.25-000001][0]]])."
previous.health="YELLOW" reason="shards started [[.ds-ilm-history-5-2022.09.25-
000001][0]]"
moving index [.ds-ilm-history-5-2022.09.25-000001] from
[{"phase":"new","action":"complete","name":"complete"}] to
in policy [ilm-history-ilm-policy]
moving index [.ds-ilm-history-5-2022.09.25-000001] from
to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy
[ilm-history-ilm-policy]
adding index lifecycle policy [synthetics-synthetics.browser_network-
default_policy]
adding index lifecycle policy [synthetics-synthetics.tcp-default_policy]
adding index lifecycle policy [synthetics-synthetics.http-default_policy]
adding index lifecycle policy [synthetics-synthetics.browser_screenshot-
default_policy]
adding index lifecycle policy [synthetics-synthetics.browser-default_policy]
adding index lifecycle policy [synthetics-synthetics.icmp-default_policy]
adding component template [synthetics-browser.network@custom]
adding component template [synthetics-browser@custom]
adding component template [synthetics-browser.screenshot@custom]
adding component template [synthetics-tcp@custom]
adding component template [synthetics-browser.screenshot@package]
adding component template [synthetics-icmp@package]
adding component template [synthetics-http@package]
adding component template [synthetics-browser@package]
adding component template [synthetics-tcp@package]
adding component template [synthetics-http@custom]
adding component template [synthetics-icmp@custom]
adding component template [synthetics-browser.network@package]
adding index template [synthetics-browser.screenshot] for index patterns
[synthetics-browser.screenshot-*]
adding index template [synthetics-browser] for index patterns [synthetics-browser-
*]
adding index template [synthetics-tcp] for index patterns [synthetics-tcp-*]
adding index template [synthetics-http] for index patterns [synthetics-http-*]
adding index template [synthetics-icmp] for index patterns [synthetics-icmp-*]
adding index template [synthetics-browser.network] for index patterns [synthetics-
browser.network-*]
[2022-09-25T20:26:17,197][ERROR][o.e.i.g.GeoIpDownloader ] [ALEJANDRO] error
downloading geoip database [GeoLite2-Country.mmdb]java.net.SocketTimeoutException:
Read timed out
at java.base/sun.nio.ch.NioSocketImpl.timedRead(NioSocketImpl.java:280)
at java.base/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:306)
at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:347)
at java.base/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:800)
at java.base/java.net.Socket$SocketInputStream.read(Socket.java:966)
See logs for more details.

security index does not exist, creating [.security-profile-8] with alias
[.security-profile]
[.security-profile-8] creating index, cause [api], templates [], shards [1]/[0]
[GREEN] (reason: [shards started [[.security-profile-8][0]]])."
previous.health="YELLOW" reason="shards started [[.security-profile-8][0]]"
#2) ----------------------------------
Could not rename log file 'logs/gc.log' to 'logs/gc.log.02' (Permission denied).
Terminate batch job (Y/N)?
^C
BaWWNkb01CdGVIYkZfTjlzUml5OlRWazctUUthVENpWXA0eGFDdTA1VUEifQ==
C:\elasticsearch-8.4.2>
#3) ----------------------------------
C:\kibana-8.4.2>.\bin\kibana.bat
[2022-09-25T20:16:00.512+01:00][INFO ][node] Kibana process configured with roles:
[background_tasks, ui]
[2022-09-25T20:16:12.250+01:00][INFO ][http.server.Preboot] http server running at
http://localhost:5601
[2022-09-25T20:16:12.279+01:00][INFO ][plugins-system.preboot] Setting up [1]
plugins: [interactiveSetup]
[2022-09-25T20:16:12.281+01:00][INFO ][preboot] "interactiveSetup" plugin is
holding setup: Validating Elasticsearch connection configuration…
[2022-09-25T20:16:12.305+01:00][INFO ][root] Holding setup until preboot stage is
completed.
i Kibana has not been configured.
Go to http://localhost:5601/?code=920871 to get started.
[2022-09-25T20:25:50.384+01:00][INFO ][cli] Reloading Kibana configuration (reason:

configuration might have changed during preboot stage).
[2022-09-25T20:25:50.394+01:00][INFO ][cli] Reloaded Kibana configuration (reason:
configuration might have changed during preboot stage).
[2022-09-25T20:25:50.430+01:00][WARN ][config.deprecation] The default mechanism
for Reporting privileges will work differently in future versions, which will
affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false"
to adopt the future behavior before upgrading.
[2022-09-25T20:25:50.598+01:00][INFO ][plugins-system.standard] Setting up [121]
plugins:
[translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,fea
tures,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManage
r,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced
,screenshotMode,banners,newsfeed,fieldFormats,expressions,dataViews,charts,esUiShar
ed,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advan
cedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,scree
nshotting,telemetry,licenseManagement,eventLog,actions,console,bfetch,data,watcher,
reporting,fileUpload,ingestPipelines,alerting,unifiedSearch,savedObjects,graph,save
dObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionR
evealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,eventAnn
otation,dataViewFieldEditor,triggersActionsUi,transform,stackAlerts,ruleRegistry,di
scover,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleM
anagement,cloudSecurityPosture,discoverEnhanced,aiops,visualizations,canvas,visType
Xy,visTypeVislib,visTypeVega,visTypeTimeseries,rollup,visTypeTimelion,visTypeTagclo
ud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnh
anced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionM
etricVis,expressionLegacyMetricVis,expressionHeatmap,expressionGauge,lens,osquery,m
aps,dataVisualizer,ml,cases,timelines,sessionView,kubernetesSecurity,securitySoluti
on,visTypeGauge,sharedUX,observability,synthetics,infra,upgradeAssistant,monitoring
,logstash,enterpriseSearch,apm,dataViewManagement]
[2022-09-25T20:25:50.613+01:00][INFO ][plugins.taskManager] TaskManager is
identified by the Kibana UUID: e30cd597-4131-4b4c-b16f-d4536fe2c232
[2022-09-25T20:25:50.672+01:00][WARN ][plugins.security.config] Generating a random
key for xpack.security.encryptionKey. To prevent sessions from being invalidated on
restart, please set xpack.security.encryptionKey in the kibana.yml or use the
bin/kibana-encryption-keys command.
[2022-09-25T20:25:50.672+01:00][WARN ][plugins.security.config] Session cookies
will be transmitted over insecure connections. This is not recommended.
[2022-09-25T20:25:50.692+01:00][WARN ][plugins.security.config] Generating a random
key for xpack.security.encryptionKey. To prevent sessions from being invalidated on
restart, please set xpack.security.encryptionKey in the kibana.yml or use the
[2022-09-25T20:25:50.692+01:00][WARN ][plugins.security.config] Session cookies
will be transmitted over insecure connections. This is not recommended.
[2022-09-25T20:25:50.698+01:00][WARN ][plugins.encryptedSavedObjects] Saved objects
encryption key is not set. This will severely limit Kibana functionality. Please
set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the
[2022-09-25T20:25:50.711+01:00][WARN ][plugins.actions] APIs are disabled because
the Encrypted Saved Objects plugin is missing encryption key. Please set
xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-
encryption-keys command.
[2022-09-25T20:25:50.789+01:00][WARN ][plugins.reporting.config] Generating a
random key for xpack.reporting.encryptionKey. To prevent sessions from being
invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml
or use the bin/kibana-encryption-keys command.
[2022-09-25T20:25:50.795+01:00][WARN ][plugins.alerting] APIs are disabled because
the Encrypted Saved Objects plugin is missing encryption key. Please set
xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-
encryption-keys command.
[2022-09-25T20:25:50.836+01:00][INFO ][plugins.ruleRegistry] Installing common
resources shared between all indices
[2022-09-25T20:25:50.895+01:00][INFO ][plugins.cloudSecurityPosture] Registered
task successfully [Task: cloud_security_posture-stats_task]
[2022-09-25T20:25:51.982+01:00][INFO ][plugins.screenshotting.config] Chromium
sandbox provides an additional layer of protection, and is supported for Win32 OS.
Automatically enabling Chromium sandbox.
[2022-09-25T20:25:52.078+01:00][INFO ][savedobjects-service] Waiting until all
Elasticsearch nodes are compatible with Kibana before starting saved objects
migrations...
[2022-09-25T20:25:52.079+01:00][INFO ][savedobjects-service] Starting saved objects
migrations
[2022-09-25T20:25:52.110+01:00][INFO ][savedobjects-service] [.kibana] INIT ->
CREATE_NEW_TARGET. took: 19ms.
[2022-09-25T20:25:52.112+01:00][INFO ][savedobjects-service] [.kibana_task_manager]
INIT -> CREATE_NEW_TARGET. took: 17ms.
CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 303ms.
[2022-09-25T20:25:52.485+01:00][INFO ][savedobjects-service] [.kibana]
CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 375ms.
MARK_VERSION_INDEX_READY -> DONE. took: 135ms.
Migration completed after 456ms
[2022-09-25T20:25:52.730+01:00][INFO ][savedobjects-service] [.kibana]
MARK_VERSION_INDEX_READY -> DONE. took: 245ms.
[2022-09-25T20:25:52.730+01:00][INFO ][savedobjects-service] [.kibana] Migration
completed after 639ms
[2022-09-25T20:25:52.735+01:00][INFO ][plugins-system.preboot] Stopping all
plugins.
[2022-09-25T20:25:52.736+01:00][INFO ][plugins-system.standard] Starting [121]
plugins:
[translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,fea
tures,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManage
r,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced
,screenshotMode,banners,newsfeed,fieldFormats,expressions,dataViews,charts,esUiShar
ed,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advan
cedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,scree
nshotting,telemetry,licenseManagement,eventLog,actions,console,bfetch,data,watcher,
reporting,fileUpload,ingestPipelines,alerting,unifiedSearch,savedObjects,graph,save
dObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionR
evealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,eventAnn
otation,dataViewFieldEditor,triggersActionsUi,transform,stackAlerts,ruleRegistry,di
scover,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleM
anagement,cloudSecurityPosture,discoverEnhanced,aiops,visualizations,canvas,visType
Xy,visTypeVislib,visTypeVega,visTypeTimeseries,rollup,visTypeTimelion,visTypeTagclo
ud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnh
anced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionM
etricVis,expressionLegacyMetricVis,expressionHeatmap,expressionGauge,lens,osquery,m
aps,dataVisualizer,ml,cases,timelines,sessionView,kubernetesSecurity,securitySoluti
on,visTypeGauge,sharedUX,observability,synthetics,infra,upgradeAssistant,monitoring
,logstash,enterpriseSearch,apm,dataViewManagement]
[2022-09-25T20:25:55.426+01:00][INFO ][plugins.monitoring.monitoring] config
sourced from: production cluster
[2022-09-25T20:25:56.495+01:00][INFO ][status] Kibana is now degraded
[2022-09-25T20:25:56.509+01:00][INFO ][http.server.Kibana] http server running at
http://localhost:5601
[2022-09-25T20:25:56.599+01:00][INFO ][plugins.monitoring.monitoring.kibana-
monitoring] Starting monitoring stats collection
[2022-09-25T20:25:56.599+01:00][INFO ][plugins.fleet] Beginning fleet setup
[2022-09-25T20:25:56.877+01:00][INFO ][plugins.ruleRegistry] Installed common
resources shared between all indices
[2022-09-25T20:25:56.879+01:00][INFO ][plugins.ruleRegistry] Installing resources
for index .alerts-security.alerts
for index .preview.alerts-security.alerts
for index .alerts-observability.uptime.alerts
for index .alerts-observability.logs.alerts
for index .alerts-observability.metrics.alerts
for index .alerts-observability.apm.alerts
[2022-09-25T20:25:57.426+01:00][INFO ][plugins.ruleRegistry] Installed resources
for index .alerts-observability.uptime.alerts
for index .alerts-observability.metrics.alerts
for index .alerts-observability.logs.alerts
for index .alerts-security.alerts
for index .alerts-observability.apm.alerts
[2022-09-25T20:25:57.731+01:00][INFO ][plugins.ml] Task ML:saved-objects-sync-task:
scheduled with interval 1h
for index .preview.alerts-security.alerts
[2022-09-25T20:25:59.389+01:00][INFO ][status] Kibana is now available (was
degraded)
[2022-09-25T20:25:59.405+01:00][INFO ][plugins.reporting.store] Creating ILM policy
for managing reporting indices: kibana-reporting
[2022-09-25T20:25:59.911+01:00][INFO ][plugins.ml] Task ML:saved-objects-sync-task:
1 ML saved object synced
[2022-09-25T20:26:00.306+01:00][INFO ][plugins.fleet] Fleet setup completed
[2022-09-25T20:26:00.318+01:00][INFO ][plugins.securitySolution] Dependent plugin
setup complete - Starting ManifestTask
[2022-09-25T20:26:02.196+01:00][INFO ][plugins.screenshotting.chromium] Browser
executable: C:\kibana-8.4.2\x-pack\plugins\screenshotting\chromium\chrome-win\
chrome.exe
[2022-09-25T20:26:04.758+01:00][INFO ][plugins.securitySolution.endpoint:metadata-
check-transforms-task:0.0.1] no endpoint installation found
[2022-09-25T20:26:05.813+01:00][INFO ][plugins.security.routes] Logging in with
provider "basic" (basic)
[2022-09-25T20:26:16.866+01:00][INFO ][plugins.synthetics] Installed synthetics
index templates
#token -----------------------------------------------------
Could not rename log file 'logs/gc.log' to 'logs/gc.log.02' (Permission denied).
Terminate batch job (Y/N)?
^C
BaWWNkb01CdGVIYkZfTjlzUml5OlRWazctUUthVENpWXA0eGFDdTA1VUEifQ==
C:\elasticsearch-8.4.2>

How To Configure Elastic

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

How To Configure Elastic

Uploaded by

Copyright:

Available Formats

#1) ----------------------------------

C:\elasticsearch-8.4.2>bin\elasticsearch-create-enrollment-token.bat --scope kibana

ERROR: [xpack.security.enrollment.enabled] must be set to `true` to create an

[2022-09-25T20:21:38,934][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [ALEJANDRO]

-> Password for the elastic user (reset with `bin/elasticsearch-reset-password -u

-> HTTP CA certificate SHA-256 fingerprint:

-> Configure Kibana to use this cluster:

-> Configure other nodes to join this cluster:

See logs for more details.

See logs for more details.

[2022-09-25T20:30:53,305][INFO ][o.e.c.m.MetadataMappingService] [ALEJANDRO]

i Kibana has not been configured.

Go to http://localhost:5601/?code=920871 to get started.

[2022-09-25T20:25:50.384+01:00][INFO ][cli] Reloading Kibana configuration (reason:

You might also like