[2024-02-04T00:33:37,297][INFO ][o.e.c.s.

ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4400915, reason:
ApplyCommitRequest{term=515, version=4400915, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T00:33:59,519][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4400917, reason:
ApplyCommitRequest{term=515, version=4400917, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T00:58:38,241][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4400930,
reason: ApplyCommitRequest{term=515, version=4400930, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T00:58:38,311][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[.monitoring-kibana-7-2024.02.03][0]] failed to perform indices:data/write/bulk[s]
on replica [.monitoring-kibana-7-2024.02.03][0], node[_S6DZh96TlKMkWbmcAAdDw], [R],
s[STARTED], a[id=oW128u18QGGd5Rq6e-3HnA]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[_S6DZh96TlKMkWbmcAAdDw]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
 at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND06][10.95.130.163:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T00:58:38,311][INFO ][o.e.i.s.IndexShard ] [VMS1ESND01]
[.monitoring-beats-7-2024.02.04][0] primary-replica resync completed with 0
operations
[2024-02-04T00:58:40,309][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4400935,
reason: ApplyCommitRequest{term=515, version=4400935, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T01:39:28,113][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4401509,
reason: ApplyCommitRequest{term=515, version=4401509, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T01:39:30,208][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4401516,
reason: ApplyCommitRequest{term=515, version=4401516, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T02:34:09,343][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4402095, reason:
ApplyCommitRequest{term=515, version=4402095, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T02:34:31,700][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4402097, reason:
ApplyCommitRequest{term=515, version=4402097, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T03:01:33,578][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4402110,
reason: ApplyCommitRequest{term=515, version=4402110, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T03:01:36,120][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4402115,
reason: ApplyCommitRequest{term=515, version=4402115, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T03:43:37,883][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4402680,
reason: ApplyCommitRequest{term=515, version=4402680, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T03:43:40,910][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4402685,
reason: ApplyCommitRequest{term=515, version=4402685, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T04:34:41,576][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4403266, reason:
ApplyCommitRequest{term=515, version=4403266, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T04:35:03,845][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4403268, reason:
ApplyCommitRequest{term=515, version=4403268, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T05:04:45,333][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4403286,
reason: ApplyCommitRequest{term=515, version=4403286, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T05:05:06,620][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4403296,
reason: ApplyCommitRequest{term=515, version=4403296, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T05:05:15,727][WARN ][r.suppressed ] [VMS1ESND01] path:
/winlogbeat-*,logs-endpoint.events.*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=winlogbeat-*,logs-endpoint.events.*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException:
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:402) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsync
Action.java:184) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearch
Action.java:668) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeLocalSearch(TransportS
earchAction.java:489) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.lambda$executeRequest$3(Trans
portSearchAction.java:283) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:103)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:76)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeRequest(TransportSearc
hAction.java:324) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:212) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:91) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:173) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:42)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$3(SecurityActionFilter.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor.interce
pt(SearchRequestInterceptor.java:22) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor.inte
rcept(BulkShardRequestInterceptor.java:77) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor.interce
pt(UpdateRequestInterceptor.java:24) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor.interce
pt(ResizeRequestInterceptor.java:87) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
.intercept(IndicesAliasesRequestInterceptor.java:107) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.runRequestInterceptors(
AuthorizationService.java:385) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.handleIndexActionAuthor
izationResult(AuthorizationService.java:362) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
9(AuthorizationService.java:302) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:684) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:659) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.buildIndicesAccessControl(RBACEng
ine.java:556) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$authorizeIndexAction$3(RBA
CEngine.java:320) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.resolveIndexNames(Autho
rizationService.java:599) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
6(AuthorizationService.java:290) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.loadAuthorizedIndices(RBACEngine.
java:367) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
5(AuthorizationService.java:286) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
8(AuthorizationService.java:289) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.authorizeIndexAction(RBACEngine.j
ava:311) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(Authori
zationService.java:300) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(Aut
horizationService.java:265) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$1(Auth
orizationService.java:229) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$1
(RBACEngine.java:127) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$8(
CompositeRolesStore.java:234) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(Composite
RolesStore.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.getRoles(RBACEngine.java:133) [x-
pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngi
ne.java:121) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(Authorization
Service.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.authorizeReques
t(SecurityActionFilter.java:181) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$4(SecurityActionFilter.java:159) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$a
uthenticateAsync$2(AuthenticationService.java:330) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$l
ookForExistingAuthentication$6(AuthenticationService.java:391) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lookForE
xistingAuthentication(AuthenticationService.java:402) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.authenti
cateAsync(AuthenticationService.java:327) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.access$0
00(AuthenticationService.java:268) [x-pack-security-7.12.0.jar:7.12.0]
 at
org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(Authentic
ationService.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(S
ecurityActionFilter.java:154) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityA
ctionFilter.java:106) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:86)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:66)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:54)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.ParentTaskAssigningClient.doExecute(ParentTaskAssigningCli
ent.java:52) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.search(AbstractClient.java:539)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.search(BasicQueryClie
nt.java:74) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.query(BasicQueryClien
t.java:61) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.plan.physical.EsQueryExec.execute(EsQueryExec.java:66)
[x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.session.EqlSession.lambda$eql$0(EqlSession.java:70) [x-
pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.index.IndexResolver.lambda$resolveAsMergedMapping$3(Inde
xResolver.java:287) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction.lambda$doExecut
e$1(TransportFieldCapabilitiesAction.java:78) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:93) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
 at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:283)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:273)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleRe
sponse(TransportService.java:1280) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$DirectResponseChannel.processResponse(
TransportService.java:1358) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$DirectResponseChannel.sendResponse(Tra
nsportService.java:1338) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.
java:41) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ChannelActionListener.onResponse(ChannelActionList
ener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ChannelActionListener.onResponse(ChannelActionList
ener.java:16) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionRunnable.lambda$supply$0(ActionRunnable.java:47)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.action.ActionRunnable$2.doRun(ActionRunnable.java:62)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search
rejected due to missing shards [[winlogbeat-domaincontroller-dc-alias-2023.12.18-
000082][0], [winlogbeat-domaincontroller-dc-alias-2023.12.28-000085][0]]. Consider
using `allow_partial_search_results` setting to bypass this error.
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAc
tion.java:211) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:397) [elasticsearch-7.12.0.jar:7.12.0]
... 186 more
[2024-02-04T05:05:15,743][WARN ][r.suppressed ] [VMS1ESND01] path:
/winlogbeat-*,logs-endpoint.events.*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=winlogbeat-*,logs-endpoint.events.*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException:
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:402) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsync
Action.java:184) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearch
Action.java:668) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeLocalSearch(TransportS
earchAction.java:489) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.lambda$executeRequest$3(Trans
portSearchAction.java:283) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:103)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:76)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeRequest(TransportSearc
hAction.java:324) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:212) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:91) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:173) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:42)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$3(SecurityActionFilter.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor.interce
pt(SearchRequestInterceptor.java:22) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor.inte
rcept(BulkShardRequestInterceptor.java:77) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor.interce
pt(UpdateRequestInterceptor.java:24) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor.interce
pt(ResizeRequestInterceptor.java:87) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
.intercept(IndicesAliasesRequestInterceptor.java:107) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.runRequestInterceptors(
AuthorizationService.java:385) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.handleIndexActionAuthor
izationResult(AuthorizationService.java:362) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
9(AuthorizationService.java:302) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:684) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:659) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.buildIndicesAccessControl(RBACEng
ine.java:556) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$authorizeIndexAction$3(RBA
CEngine.java:320) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.resolveIndexNames(Autho
rizationService.java:599) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
6(AuthorizationService.java:290) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.loadAuthorizedIndices(RBACEngine.
java:367) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
5(AuthorizationService.java:286) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
8(AuthorizationService.java:289) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.authorizeIndexAction(RBACEngine.j
ava:311) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(Authori
zationService.java:300) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(Aut
horizationService.java:265) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$1(Auth
orizationService.java:229) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$1
(RBACEngine.java:127) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$8(
CompositeRolesStore.java:234) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(Composite
RolesStore.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.getRoles(RBACEngine.java:133) [x-
pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngi
ne.java:121) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(Authorization
Service.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.authorizeReques
t(SecurityActionFilter.java:181) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$4(SecurityActionFilter.java:159) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$a
uthenticateAsync$2(AuthenticationService.java:330) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$l
ookForExistingAuthentication$6(AuthenticationService.java:391) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lookForE
xistingAuthentication(AuthenticationService.java:402) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.authenti
cateAsync(AuthenticationService.java:327) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.access$0
00(AuthenticationService.java:268) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(Authentic
ationService.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(S
ecurityActionFilter.java:154) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityA
ctionFilter.java:106) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77)
[elasticsearch-7.12.0.jar:7.12.0]
 at
org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:86)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:66)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:54)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.ParentTaskAssigningClient.doExecute(ParentTaskAssigningCli
ent.java:52) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.search(AbstractClient.java:539)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.search(BasicQueryClie
nt.java:74) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.query(BasicQueryClien
t.java:61) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.plan.physical.EsQueryExec.execute(EsQueryExec.java:66)
[x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.session.EqlSession.lambda$eql$0(EqlSession.java:70) [x-
pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.index.IndexResolver.lambda$resolveAsMergedMapping$3(Inde
xResolver.java:287) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction.lambda$doExecut
e$1(TransportFieldCapabilitiesAction.java:78) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:93) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:283)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:273)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleRe
sponse(TransportService.java:1280) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.doHandleResponse(InboundHandler.java:291
) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handleResponse(InboundHandler.java:275)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.messageReceived(InboundHandler.java:128)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.inboundMessage(InboundHandler.java:84)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TcpTransport.inboundMessage(TcpTransport.java:690)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.forwardFragments(InboundPipeline.java:1
31) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.doHandleBytes(InboundPipeline.java:106)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.handleBytes(InboundPipeline.java:71)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4Me
ssageChannelHandler.java:63) [transport-netty4-client-7.12.0.jar:7.12.0]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.logging.LoggingHandler.channelRead(LoggingHandler.java:271)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMe
ssageDecoder.java:501) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:44
0) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:2
76) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
 at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipel
ine.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java
:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChann
el.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.
java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.49.Final.jar:4.1.49.Final]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search
rejected due to missing shards [[winlogbeat-domaincontroller-dc-alias-2023.12.18-
000082][0], [winlogbeat-domaincontroller-dc-alias-2023.12.28-000085][0]]. Consider
using `allow_partial_search_results` setting to bypass this error.
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAc
tion.java:211) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:397) [elasticsearch-7.12.0.jar:7.12.0]
... 211 more
[2024-02-04T05:05:15,864][WARN ][r.suppressed ] [VMS1ESND01] path:
/winlogbeat-*,logs-endpoint.events.*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=winlogbeat-*,logs-endpoint.events.*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException:
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
 at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:402) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsync
Action.java:184) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearch
Action.java:668) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeLocalSearch(TransportS
earchAction.java:489) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.lambda$executeRequest$3(Trans
portSearchAction.java:283) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:103)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:76)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeRequest(TransportSearc
hAction.java:324) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:212) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:91) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:173) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:42)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$3(SecurityActionFilter.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor.interce
pt(SearchRequestInterceptor.java:22) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor.inte
rcept(BulkShardRequestInterceptor.java:77) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor.interce
pt(UpdateRequestInterceptor.java:24) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor.interce
pt(ResizeRequestInterceptor.java:87) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
.intercept(IndicesAliasesRequestInterceptor.java:107) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.runRequestInterceptors(
AuthorizationService.java:385) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.handleIndexActionAuthor
izationResult(AuthorizationService.java:362) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
9(AuthorizationService.java:302) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:684) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:659) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.buildIndicesAccessControl(RBACEng
ine.java:556) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$authorizeIndexAction$3(RBA
CEngine.java:320) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.resolveIndexNames(Autho
rizationService.java:599) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
6(AuthorizationService.java:290) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.loadAuthorizedIndices(RBACEngine.
java:367) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
5(AuthorizationService.java:286) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
8(AuthorizationService.java:289) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.authorizeIndexAction(RBACEngine.j
ava:311) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(Authori
zationService.java:300) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(Aut
horizationService.java:265) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$1(Auth
orizationService.java:229) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$1
(RBACEngine.java:127) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$8(
CompositeRolesStore.java:234) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(Composite
RolesStore.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.getRoles(RBACEngine.java:133) [x-
pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngi
ne.java:121) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(Authorization
Service.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.authorizeReques
t(SecurityActionFilter.java:181) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$4(SecurityActionFilter.java:159) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$a
uthenticateAsync$2(AuthenticationService.java:330) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$l
ookForExistingAuthentication$6(AuthenticationService.java:391) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lookForE
xistingAuthentication(AuthenticationService.java:402) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.authenti
cateAsync(AuthenticationService.java:327) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.access$0
00(AuthenticationService.java:268) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(Authentic
ationService.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(S
ecurityActionFilter.java:154) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityA
ctionFilter.java:106) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:86)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:66)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:54)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.ParentTaskAssigningClient.doExecute(ParentTaskAssigningCli
ent.java:52) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.search(AbstractClient.java:539)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.search(BasicQueryClie
nt.java:74) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.query(BasicQueryClien
t.java:61) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.plan.physical.EsQueryExec.execute(EsQueryExec.java:66)
[x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.session.EqlSession.lambda$eql$0(EqlSession.java:70) [x-
pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.index.IndexResolver.lambda$resolveAsMergedMapping$3(Inde
xResolver.java:287) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction.lambda$doExecut
e$1(TransportFieldCapabilitiesAction.java:78) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:93) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:283)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:273)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleRe
sponse(TransportService.java:1280) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.doHandleResponse(InboundHandler.java:291
) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handleResponse(InboundHandler.java:275)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.messageReceived(InboundHandler.java:128)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.inboundMessage(InboundHandler.java:84)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TcpTransport.inboundMessage(TcpTransport.java:690)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.forwardFragments(InboundPipeline.java:1
31) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.doHandleBytes(InboundPipeline.java:106)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.handleBytes(InboundPipeline.java:71)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4Me
ssageChannelHandler.java:63) [transport-netty4-client-7.12.0.jar:7.12.0]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.logging.LoggingHandler.channelRead(LoggingHandler.java:271)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMe
ssageDecoder.java:501) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:44
0) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:2
76) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
 at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipel
ine.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java
:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChann
el.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.
java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.49.Final.jar:4.1.49.Final]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search
rejected due to missing shards [[winlogbeat-domaincontroller-dc-alias-2023.12.18-
000082][0], [winlogbeat-domaincontroller-dc-alias-2023.12.28-000085][0]]. Consider
using `allow_partial_search_results` setting to bypass this error.
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAc
tion.java:211) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:397) [elasticsearch-7.12.0.jar:7.12.0]
... 211 more
[2024-02-04T05:05:15,973][WARN ][r.suppressed ] [VMS1ESND01] path:
/winlogbeat-*,logs-endpoint.events.*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=winlogbeat-*,logs-endpoint.events.*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException:
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:402) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsync
Action.java:184) [elasticsearch-7.12.0.jar:7.12.0]
 at
org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearch
Action.java:668) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeLocalSearch(TransportS
earchAction.java:489) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.lambda$executeRequest$3(Trans
portSearchAction.java:283) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:103)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:76)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeRequest(TransportSearc
hAction.java:324) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:212) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:91) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:173) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:42)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$3(SecurityActionFilter.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor.interce
pt(SearchRequestInterceptor.java:22) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor.inte
rcept(BulkShardRequestInterceptor.java:77) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor.interce
pt(UpdateRequestInterceptor.java:24) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor.interce
pt(ResizeRequestInterceptor.java:87) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
.intercept(IndicesAliasesRequestInterceptor.java:107) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.runRequestInterceptors(
AuthorizationService.java:385) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.handleIndexActionAuthor
izationResult(AuthorizationService.java:362) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
9(AuthorizationService.java:302) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:684) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:659) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.buildIndicesAccessControl(RBACEng
ine.java:556) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$authorizeIndexAction$3(RBA
CEngine.java:320) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.resolveIndexNames(Autho
rizationService.java:599) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
6(AuthorizationService.java:290) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.loadAuthorizedIndices(RBACEngine.
java:367) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
5(AuthorizationService.java:286) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
8(AuthorizationService.java:289) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.authorizeIndexAction(RBACEngine.j
ava:311) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(Authori
zationService.java:300) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(Aut
horizationService.java:265) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$1(Auth
orizationService.java:229) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$1
(RBACEngine.java:127) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$8(
CompositeRolesStore.java:234) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(Composite
RolesStore.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.getRoles(RBACEngine.java:133) [x-
pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngi
ne.java:121) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(Authorization
Service.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.authorizeReques
t(SecurityActionFilter.java:181) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$4(SecurityActionFilter.java:159) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$a
uthenticateAsync$2(AuthenticationService.java:330) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$l
ookForExistingAuthentication$6(AuthenticationService.java:391) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lookForE
xistingAuthentication(AuthenticationService.java:402) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.authenti
cateAsync(AuthenticationService.java:327) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.access$0
00(AuthenticationService.java:268) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(Authentic
ationService.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(S
ecurityActionFilter.java:154) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityA
ctionFilter.java:106) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:86)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:66)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:54)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.ParentTaskAssigningClient.doExecute(ParentTaskAssigningCli
ent.java:52) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.search(AbstractClient.java:539)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.search(BasicQueryClie
nt.java:74) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.query(BasicQueryClien
t.java:61) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.plan.physical.EsQueryExec.execute(EsQueryExec.java:66)
[x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.session.EqlSession.lambda$eql$0(EqlSession.java:70) [x-
pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.index.IndexResolver.lambda$resolveAsMergedMapping$3(Inde
xResolver.java:287) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction.lambda$doExecut
e$1(TransportFieldCapabilitiesAction.java:78) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:93) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:283)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:273)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleRe
sponse(TransportService.java:1280) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.doHandleResponse(InboundHandler.java:291
) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handleResponse(InboundHandler.java:275)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.messageReceived(InboundHandler.java:128)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.inboundMessage(InboundHandler.java:84)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TcpTransport.inboundMessage(TcpTransport.java:690)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.forwardFragments(InboundPipeline.java:1
31) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.doHandleBytes(InboundPipeline.java:106)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.handleBytes(InboundPipeline.java:71)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4Me
ssageChannelHandler.java:63) [transport-netty4-client-7.12.0.jar:7.12.0]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.logging.LoggingHandler.channelRead(LoggingHandler.java:271)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMe
ssageDecoder.java:501) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:44
0) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:2
76) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipel
ine.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
 at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java
:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChann
el.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.
java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.49.Final.jar:4.1.49.Final]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search
rejected due to missing shards [[winlogbeat-domaincontroller-dc-alias-2023.12.18-
000082][0], [winlogbeat-domaincontroller-dc-alias-2023.12.28-000085][0]]. Consider
using `allow_partial_search_results` setting to bypass this error.
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAc
tion.java:211) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:397) [elasticsearch-7.12.0.jar:7.12.0]
... 211 more
[2024-02-04T05:05:16,079][WARN ][r.suppressed ] [VMS1ESND01] path:
/logs-endpoint.events.*,winlogbeat-*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=logs-endpoint.events.*,winlogbeat-*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException:
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:402) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsync
Action.java:184) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeSearch(TransportSearch
Action.java:668) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeLocalSearch(TransportS
earchAction.java:489) [elasticsearch-7.12.0.jar:7.12.0]
 at
org.elasticsearch.action.search.TransportSearchAction.lambda$executeRequest$3(Trans
portSearchAction.java:283) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:103)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:76)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.executeRequest(TransportSearc
hAction.java:324) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:212) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.TransportSearchAction.doExecute(TransportSearchActi
on.java:91) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:173) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ActionFilter$Simple.apply(ActionFilter.java:42)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$3(SecurityActionFilter.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.SearchRequestInterceptor.interce
pt(SearchRequestInterceptor.java:22) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.BulkShardRequestInterceptor.inte
rcept(BulkShardRequestInterceptor.java:77) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.FieldAndDocumentLevelSecurityReq
uestInterceptor.intercept(FieldAndDocumentLevelSecurityRequestInterceptor.java:77)
[x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.UpdateRequestInterceptor.interce
pt(UpdateRequestInterceptor.java:24) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.ResizeRequestInterceptor.interce
pt(ResizeRequestInterceptor.java:87) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$runRequestInterc
eptors$14(AuthorizationService.java:379) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture$1.doRun(ListenableFuture.
java:101) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.notifyListener(Listenable
Future.java:95) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.lambda$done$0(ListenableF
uture.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.ArrayList.forEach(ArrayList.java:1511) [?:?]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.done(ListenableFuture.jav
a:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.BaseFuture.set(BaseFuture.java:133)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ListenableFuture.onResponse(ListenableFutu
re.java:116) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.StepListener.innerOnResponse(StepListener.java:53)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.NotifyOnceListener.onResponse(NotifyOnceListener.java:29)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.interceptor.IndicesAliasesRequestInterceptor
.intercept(IndicesAliasesRequestInterceptor.java:107) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.runRequestInterceptors(
AuthorizationService.java:385) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.handleIndexActionAuthor
izationResult(AuthorizationService.java:362) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
9(AuthorizationService.java:302) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:684) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$AuthorizationResultList
ener.onResponse(AuthorizationService.java:659) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.buildIndicesAccessControl(RBACEng
ine.java:556) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$authorizeIndexAction$3(RBA
CEngine.java:320) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.resolveIndexNames(Autho
rizationService.java:599) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
6(AuthorizationService.java:290) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.la
mbda$getAsync$0(AuthorizationService.java:722) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.loadAuthorizedIndices(RBACEngine.
java:367) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
5(AuthorizationService.java:286) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorizeAction$
8(AuthorizationService.java:289) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService$CachingAsyncSupplier.ge
tAsync(AuthorizationService.java:720) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.authorizeIndexAction(RBACEngine.j
ava:311) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorizeAction(Authori
zationService.java:300) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.maybeAuthorizeRunAs(Aut
horizationService.java:265) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.lambda$authorize$1(Auth
orizationService.java:229) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.lambda$resolveAuthorizationInfo$1
(RBACEngine.java:127) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.lambda$getRoles$8(
CompositeRolesStore.java:234) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.buildAndCacheRoleF
orApiKey(CompositeRolesStore.java:337) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.store.CompositeRolesStore.getRoles(Composite
RolesStore.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.getRoles(RBACEngine.java:133) [x-
pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.RBACEngine.resolveAuthorizationInfo(RBACEngi
ne.java:121) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authz.AuthorizationService.authorize(Authorization
Service.java:231) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.authorizeReques
t(SecurityActionFilter.java:181) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$4(SecurityActionFilter.java:159) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$a
uthenticateAsync$2(AuthenticationService.java:330) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lambda$l
ookForExistingAuthentication$6(AuthenticationService.java:391) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.lookForE
xistingAuthentication(AuthenticationService.java:402) [x-pack-security-
7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.authenti
cateAsync(AuthenticationService.java:327) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService$Authenticator.access$0
00(AuthenticationService.java:268) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.authc.AuthenticationService.authenticate(Authentic
ationService.java:161) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.applyInternal(S
ecurityActionFilter.java:154) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.apply(SecurityA
ctionFilter.java:106) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$RequestFilterChain.proceed(Transpo
rtAction.java:171) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:149)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction.execute(TransportAction.java:77)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.node.NodeClient.executeLocally(NodeClient.java:86)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.node.NodeClient.doExecute(NodeClient.java:66)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at org.elasticsearch.client.FilterClient.doExecute(FilterClient.java:54)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.ParentTaskAssigningClient.doExecute(ParentTaskAssigningCli
ent.java:52) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.execute(AbstractClient.java:402)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.client.support.AbstractClient.search(AbstractClient.java:539)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.search(BasicQueryClie
nt.java:74) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.execution.search.BasicQueryClient.query(BasicQueryClien
t.java:61) [x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.plan.physical.EsQueryExec.execute(EsQueryExec.java:66)
[x-pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.eql.session.EqlSession.lambda$eql$0(EqlSession.java:70) [x-
pack-eql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.util.ActionListeners.lambda$map$0(ActionListeners.java:2
4) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.ql.index.IndexResolver.lambda$resolveAsMergedMapping$3(Inde
xResolver.java:287) [x-pack-ql-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$1.onResponse(ActionListener.java:117)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction.lambda$doExecut
e$1(TransportFieldCapabilitiesAction.java:78) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:93) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesAction$1.onResponse(Tr
ansportFieldCapabilitiesAction.java:87) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
83) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.TransportAction$1.onResponse(TransportAction.java:
77) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.ContextPreservingActionListener.onResponse(Context
PreservingActionListener.java:32) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.xpack.security.action.filter.SecurityActionFilter.lambda$applyInt
ernal$2(SecurityActionFilter.java:165) [x-pack-security-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListener$3.onResponse(ActionListener.java:167)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:283)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.fieldcaps.TransportFieldCapabilitiesIndexAction$AsyncShard
sAction$1.handleResponse(TransportFieldCapabilitiesIndexAction.java:273)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleRe
sponse(TransportService.java:1280) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.doHandleResponse(InboundHandler.java:291
) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handleResponse(InboundHandler.java:275)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.messageReceived(InboundHandler.java:128)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.inboundMessage(InboundHandler.java:84)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TcpTransport.inboundMessage(TcpTransport.java:690)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.forwardFragments(InboundPipeline.java:1
31) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.doHandleBytes(InboundPipeline.java:106)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.handleBytes(InboundPipeline.java:71)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4Me
ssageChannelHandler.java:63) [transport-netty4-client-7.12.0.jar:7.12.0]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.logging.LoggingHandler.channelRead(LoggingHandler.java:271)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMe
ssageDecoder.java:501) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:44
0) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:2
76) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipel
ine.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
 at
io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java
:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChann
el.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.
java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.49.Final.jar:4.1.49.Final]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search
rejected due to missing shards [[winlogbeat-domaincontroller-dc-alias-2023.12.18-
000082][0], [winlogbeat-domaincontroller-dc-alias-2023.12.28-000085][0]]. Consider
using `allow_partial_search_results` setting to bypass this error.
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAc
tion.java:211) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSear
chAsyncAction.java:397) [elasticsearch-7.12.0.jar:7.12.0]
... 211 more
[2024-02-04T05:05:16,209][WARN ][r.suppressed ] [VMS1ESND01] path:
/winlogbeat-*,logs-endpoint.events.*,logs-windows.*/_eql/search, params:
{allow_no_indices=true, index=winlogbeat-*,logs-endpoint.events.*,logs-windows.*}
org.elasticsearch.action.search.SearchPhaseExecutionException: Partial shards
failure
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseFailure(AbstractSe
archAsyncAction.java:636) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.executeNextPhase(Abstract
SearchAsyncAction.java:372) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearc
hAsyncAction.java:669) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onShardFailure(AbstractSe
archAsyncAction.java:440) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.access$000(AbstractSearch
AsyncAction.java:62) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction$1.onFailure(AbstractSearc
hAsyncAction.java:289) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.ActionListenerResponseHandler.handleException(ActionListen
erResponseHandler.java:48) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$6.handleException(TransportService.jav
a:745) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TransportService$ContextRestoreResponseHandler.handleEx
ception(TransportService.java:1290) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.lambda$handleException$3(InboundHandler.
java:317) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.EsExecutors$DirectExecutorService.execute(
EsExecutors.java:215) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handleException(InboundHandler.java:315)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.handlerResponseError(InboundHandler.java
:307) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.messageReceived(InboundHandler.java:126)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundHandler.inboundMessage(InboundHandler.java:84)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.TcpTransport.inboundMessage(TcpTransport.java:690)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.forwardFragments(InboundPipeline.java:1
31) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.doHandleBytes(InboundPipeline.java:106)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.InboundPipeline.handleBytes(InboundPipeline.java:71)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.transport.netty4.Netty4MessageChannelHandler.channelRead(Netty4Me
ssageChannelHandler.java:63) [transport-netty4-client-7.12.0.jar:7.12.0]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.logging.LoggingHandler.channelRead(LoggingHandler.java:271)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1518) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1267)
[netty-handler-4.1.49.Final.jar:4.1.49.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1314) [netty-
handler-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMe
ssageDecoder.java:501) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:44
0) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:2
76) [netty-codec-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandl
erContext.java:357) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipel
ine.java:1410) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:379) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHan
dlerContext.java:365) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java
:919) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChann
el.java:163) [netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:615)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:578)
[netty-transport-4.1.49.Final.jar:4.1.49.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) [netty-
transport-4.1.49.Final.jar:4.1.49.Final]
at
io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.
java:989) [netty-common-4.1.49.Final.jar:4.1.49.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
[netty-common-4.1.49.Final.jar:4.1.49.Final]
at java.lang.Thread.run(Thread.java:832) [?:?]
Caused by: org.elasticsearch.action.NoShardAvailableActionException: [VMS3ESND06]
[10.95.130.163:9300][indices:data/read/open_reader_context]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onShardFailure(AbstractSe
archAsyncAction.java:473) ~[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.search.AbstractSearchAsyncAction.onShardFailure(AbstractSe
archAsyncAction.java:422) [elasticsearch-7.12.0.jar:7.12.0]
... 44 more
[2024-02-04T05:48:42,528][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4403866,
reason: ApplyCommitRequest{term=515, version=4403866, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T05:48:42,559][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[winlogbeat-domaincontroller-dc-alias-2024.02.02-000097][0]] failed to perform
indices:data/write/bulk[s] on replica [winlogbeat-domaincontroller-dc-alias-
2024.02.02-000097][0], node[MrxwEz7FQlSME0h4Cbl5hA], [R], s[STARTED],
a[id=H73B7BLgTBWYLU5NAR9Y1w]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[MrxwEz7FQlSME0h4Cbl5hA]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND03][10.95.130.162:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T05:48:44,693][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4403871,
reason: ApplyCommitRequest{term=515, version=4403871, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T06:35:13,606][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4404468, reason:
ApplyCommitRequest{term=515, version=4404468, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T06:35:36,161][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4404470, reason:
ApplyCommitRequest{term=515, version=4404470, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T07:08:14,084][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4404489,
reason: ApplyCommitRequest{term=515, version=4404489, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T07:08:16,786][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4404496,
reason: ApplyCommitRequest{term=515, version=4404496, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T07:52:39,189][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4405062,
reason: ApplyCommitRequest{term=515, version=4405062, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T07:52:41,876][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4405069,
reason: ApplyCommitRequest{term=515, version=4405069, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T08:35:45,994][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4405649, reason:
ApplyCommitRequest{term=515, version=4405649, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T08:36:08,736][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4405651, reason:
ApplyCommitRequest{term=515, version=4405651, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T09:56:23,922][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4405696,
reason: ApplyCommitRequest{term=515, version=4405696, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T09:56:24,020][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[winlogbeat-domaincontroller-dc-alias-2024.02.02-000097][0]] failed to perform
indices:data/write/bulk[s] on replica [winlogbeat-domaincontroller-dc-alias-
2024.02.02-000097][0], node[MrxwEz7FQlSME0h4Cbl5hA], [R], s[STARTED],
a[id=xNrgEVRIRm2ptqFNOQOccQ]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[MrxwEz7FQlSME0h4Cbl5hA]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
 at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND03][10.95.130.162:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T09:56:24,118][INFO ][o.e.i.s.IndexShard ] [VMS1ESND01]
[.monitoring-kibana-7-2024.02.04][0] primary-replica resync completed with 0
operations
[2024-02-04T09:56:26,587][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4405703,
reason: ApplyCommitRequest{term=515, version=4405703, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T10:00:14,216][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406174,
reason: ApplyCommitRequest{term=515, version=4406174, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T10:00:16,681][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406181,
reason: ApplyCommitRequest{term=515, version=4406181, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T10:36:18,596][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4406780, reason:
ApplyCommitRequest{term=515, version=4406780, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T10:36:40,696][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4406782, reason:
ApplyCommitRequest{term=515, version=4406782, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:01:26,933][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406826,
reason: ApplyCommitRequest{term=515, version=4406826, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:01:29,282][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406833,
reason: ApplyCommitRequest{term=515, version=4406833, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:03:18,529][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406975,
reason: ApplyCommitRequest{term=515, version=4406975, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:03:21,311][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4406983,
reason: ApplyCommitRequest{term=515, version=4406983, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:36:50,525][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4407733, reason:
ApplyCommitRequest{term=515, version=4407733, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T12:37:12,257][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4407735, reason:
ApplyCommitRequest{term=515, version=4407735, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:06:21,296][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4408054,
reason: ApplyCommitRequest{term=515, version=4408054, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:06:23,275][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4408060,
reason: ApplyCommitRequest{term=515, version=4408060, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:06:52,025][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4408077,
reason: ApplyCommitRequest{term=515, version=4408077, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:06:54,477][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4408083,
reason: ApplyCommitRequest{term=515, version=4408083, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:37:22,143][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4409027, reason:
ApplyCommitRequest{term=515, version=4409027, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T14:37:24,561][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4409029, reason:
ApplyCommitRequest{term=515, version=4409029, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:10:57,906][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4409093,
reason: ApplyCommitRequest{term=515, version=4409093, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:11:00,202][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4409097,
reason: ApplyCommitRequest{term=515, version=4409097, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:11:00,260][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[winlogbeat-domaincontroller-dc-alias-2024.02.02-000097][0]] failed to perform
indices:data/write/bulk[s] on replica [winlogbeat-domaincontroller-dc-alias-
2024.02.02-000097][0], node[MrxwEz7FQlSME0h4Cbl5hA], [R], s[STARTED],
a[id=OB63AtCnScqrCd-KjZGfJQ]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[MrxwEz7FQlSME0h4Cbl5hA]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
 Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND03][10.95.130.162:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T16:11:01,038][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4409099,
reason: ApplyCommitRequest{term=515, version=4409099, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:11:10,634][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4409100,
reason: ApplyCommitRequest{term=515, version=4409100, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:37:34,386][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4410005, reason:
ApplyCommitRequest{term=515, version=4410005, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T16:37:56,762][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4410007, reason:
ApplyCommitRequest{term=515, version=4410007, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:15:12,024][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4410081,
reason: ApplyCommitRequest{term=515, version=4410081, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:15:14,870][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4410086,
reason: ApplyCommitRequest{term=515, version=4410086, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:15:28,021][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4410107,
reason: ApplyCommitRequest{term=515, version=4410107, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:15:31,087][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4410117,
reason: ApplyCommitRequest{term=515, version=4410117, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:38:06,661][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4411034, reason:
ApplyCommitRequest{term=515, version=4411034, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T18:38:09,224][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4411036, reason:
ApplyCommitRequest{term=515, version=4411036, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:18:42,475][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4411199,
reason: ApplyCommitRequest{term=515, version=4411199, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:18:44,515][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4411204,
reason: ApplyCommitRequest{term=515, version=4411204, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:20:24,012][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4411411,
reason: ApplyCommitRequest{term=515, version=4411411, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:20:24,058][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[winlogbeat-domaincontroller-dc-alias-2024.02.02-000097][0]] failed to perform
indices:data/write/bulk[s] on replica [winlogbeat-domaincontroller-dc-alias-
2024.02.02-000097][0], node[MrxwEz7FQlSME0h4Cbl5hA], [R], s[STARTED], a[id=QV-
XHegbTXa_wgou-PngwA]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[MrxwEz7FQlSME0h4Cbl5hA]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND03][10.95.130.162:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T20:20:24,058][WARN ][o.e.a.b.TransportShardBulkAction] [VMS1ESND01]
[[winlogbeat-domaincontroller-dc-alias-2024.02.02-000097][0]] failed to perform
indices:data/write/bulk[s] on replica [winlogbeat-domaincontroller-dc-alias-
2024.02.02-000097][0], node[MrxwEz7FQlSME0h4Cbl5hA], [R], s[STARTED], a[id=QV-
XHegbTXa_wgou-PngwA]
org.elasticsearch.client.transport.NoNodeAvailableException: unknown node
[MrxwEz7FQlSME0h4Cbl5hA]
at
org.elasticsearch.action.support.replication.TransportReplicationAction$ReplicasPro
xy.performOn(TransportReplicationAction.java:1070) [elasticsearch-
7.12.0.jar:7.12.0]
 at
org.elasticsearch.action.support.replication.ReplicationOperation$3.tryAction(Repli
cationOperation.java:233) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.action.support.RetryableAction$1.doRun(RetryableAction.java:88)
[elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRun
nable.doRun(ThreadContext.java:732) [elasticsearch-7.12.0.jar:7.12.0]
at
org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java
:26) [elasticsearch-7.12.0.jar:7.12.0]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
[?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at
java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledT
hreadPoolExecutor.java:304) [?:?]
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1130)
[?:?]
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:630)
[?:?]
at java.lang.Thread.run(Thread.java:832) [?:?]
Suppressed: org.elasticsearch.transport.NodeDisconnectedException:
[VMS3ESND03][10.95.130.162:9300][indices:data/write/bulk[s][r]] disconnected
[2024-02-04T20:20:26,907][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4411421,
reason: ApplyCommitRequest{term=515, version=4411421, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:38:18,945][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4412325, reason:
ApplyCommitRequest{term=515, version=4412325, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T20:38:22,098][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4412327, reason:
ApplyCommitRequest{term=515, version=4412327, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:22:59,737][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4412628,
reason: ApplyCommitRequest{term=515, version=4412628, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:23:02,261][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND06}{_S6DZh96TlKMkWbmcAAdDw}{wY4nIK4rQ5aviNXCsDHhGw}
{VMS3ESND06.cmmp.hksarg}{10.95.130.163:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4412634,
reason: ApplyCommitRequest{term=515, version=4412634, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:25:36,545][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4413096,
reason: ApplyCommitRequest{term=515, version=4413096, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:25:39,276][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VMS3ESND03}{MrxwEz7FQlSME0h4Cbl5hA}{ty_ARPYxRfu2mBZYZDexLw}
{VMS3ESND03.cmmp.hksarg}{10.95.130.162:9300}{cdfhilmrstw}{rack_id=s3,
ml.machine_memory=34358706176, ml.max_open_jobs=20, xpack.installed=true,
ml.max_jvm_size=17179869184, transform.node=true}}, term: 515, version: 4413104,
reason: ApplyCommitRequest{term=515, version=4413104, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:38:31,975][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01]
removed {{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-
QSES-001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4413720, reason:
ApplyCommitRequest{term=515, version=4413720, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}
[2024-02-04T22:38:34,839][INFO ][o.e.c.s.ClusterApplierService] [VMS1ESND01] added
{{VM-W1V-QSES-001}{EXTuS9MZQrCFbM4zpvIf-w}{hpr4b9j9QlW5cwUSEachBQ}{VM-W1V-QSES-
001.cmmp.hksarg}{10.135.38.51:9300}{mv}{xpack.installed=true,
transform.node=false}}, term: 515, version: 4413722, reason:
ApplyCommitRequest{term=515, version=4413722, sourceNode={VMS2ESND02}
{rMlonbNNS1yHr3Swl8LOGg}{K7tWTDj9RLK1Nv7mtjZ_gw}{VMS2ESND02.cmmp.hksarg}
{10.95.11.162:9300}{cdfhilmrstw}{rack_id=s1s2, ml.machine_memory=34358706176,
ml.max_open_jobs=20, xpack.installed=true, ml.max_jvm_size=17179869184,
transform.node=true}}