Elk error user not found - Исправление ошибок и поиск оптимальных решений проблем

Вступление

Это руководство структурировано как ряд общих проблем и потенциальных решений этих проблем, а также шаги, которые помогут вам убедиться, что различные компоненты вашего стека ELK функционируют должным образом. Поэтому не стесняйтесь переходить к разделам, которые имеют отношение к проблемам, с которыми вы сталкиваетесь.

Проблема: Kibana Нет шаблона индекса по умолчанию Предупреждение

При доступе к Kibana через веб-браузер вы можете встретить страницу с таким предупреждением:

Kibana warning:Warning No default index pattern. You must select or create one to continue.
...
Unable to fetch mapping. Do you have indices matching the pattern?

Вот скриншот предупреждения:

изображение: https: //assets.digitalocean.com/articles/elk/troubleshoot-no-default-index-pattern.png [Предупреждение: нет шаблона индекса по умолчанию. Вы должны выбрать или создать один, чтобы продолжить.]

«Невозможно получить сопоставление» означает, что Elasticsearch не содержит записей, соответствующих шаблону + logstash - * + по умолчанию. Как правило, это означает, что ваши журналы не хранятся в Elasticsearch из-за проблем со связью между Logstash и Elasticsearch и / или из вашего поставщика журналов (например, Filebeat) в Logstash. Другими словами, ваши журналы по какой-то причине не проходят через цепочку от Filebeat до Logstash и Elasticsearch.

изображение: https: //assets.digitalocean.com/articles/elk/elk-infrastructure.png [Стек ELK]

Если вы сконфигурировали Logstash для использования шаблона индекса не по умолчанию, вы можете решить эту проблему, указав правильный шаблон индекса в текстовом поле.

Проблема: Kibana Невозможно подключиться к Elasticsearch

При доступе к Kibana через веб-браузер вы можете встретить страницу с этой ошибкой:

Kibana error:Fatal Error
Kibana: Unable to connect to Elasticsearch

Error: Unable to connect to Elasticsearch
Error: Bad Gateway
...

Вот скриншот ошибки:

изображение: https: //assets.digitalocean.com/articles/elk/troubleshoot-unable-connect-elasticsearch.png [Невозможно подключиться к Elasticsearch]

Это означает, что Kibana не может подключиться к Elasticsearch. Возможно, Elasticsearch не запущен, или Kibana может быть настроен на поиск Elasticsearch на неверном хосте и порте.

Чтобы решить эту проблему, убедитесь, что Elasticsearch запущен, следуя разделам устранения неполадок Elasticsearch. Затем убедитесь, что Kibana настроен для подключения к хосту и порту, на котором работает Elasticsearch.

Например, если Elasticsearch работает на + localhost + на порту + 9200 +, убедитесь, что Kibana настроен соответствующим образом.

Откройте файл конфигурации Kibana:

sudo vi /opt/kibana/config/kibana.yml

Затем убедитесь, что +asticsearch_url + установлен правильно.

/opt/kibana/config/kibana.yml excerpt:# The Elasticsearch instance to use for all your queries.
elasticsearch_url: "http://localhost:9200"

Сохранить и выйти.

Теперь перезапустите сервис Kibana, чтобы изменения вступили в силу:

sudo service kibana restart

После перезапуска Kibana откройте Kibana в веб-браузере и убедитесь, что ошибка устранена.

Проблема: Кибана недоступна

Компонент Nginx стека ELK служит обратным прокси-сервером для Kibana. Если Nginx не работает или не настроен должным образом, вы не сможете получить доступ к интерфейсу Kibana. Однако, поскольку остальные компоненты ELK не зависят от Nginx, они вполне могут нормально функционировать.

Причина: Nginx не работает

Если Nginx не работает, и вы пытаетесь получить доступ к вашему стеку ELK в веб-браузере, вы можете увидеть ошибку, похожую на эту:

Nginx Error:This webpage is not available
ERR_CONNECTION_REFUSED

Обычно это означает, что Nginx не работает.

Вы можете проверить состояние службы Nginx с помощью этой команды:

sudo service nginx status

Если он сообщает, что служба не запущена или не распознается, устраните проблему, следуя инструкциям на https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana- elk-stack-on-ubuntu-14-04 # install-nginx [раздел установки Nginx] учебника по стеку ELK. Если он сообщает, что служба запущена, вам необходимо перенастроить Nginx, следуя тем же инструкциям.

Причина: Nginx работает, но не может подключиться к Kibana

Если Kibana недоступен, и вы получаете сообщение об ошибке +502 Bad Gateway, Nginx работает, но не может подключиться к Kibana.

изображение: https: //assets.digitalocean.com/articles/elk/troubleshoot-nginx-502.png [Nginx 502 Bad Gateway]

Первый шаг к решению этой проблемы — проверить, работает ли Kibana с помощью этой команды:

sudo service kibana status

sudo tail /var/log/nginx/error.log

Это должно сказать вам точно, почему Nginx не может подключиться к Kibana.

Причина: невозможно аутентифицировать пользователя

Если у вас включена базовая аутентификация, и у вас возникают проблемы при прохождении шага аутентификации, вам следует просмотреть журналы ошибок Nginx, чтобы определить специфику проблемы.

изображение: https: //assets.digitalocean.com/articles/elk/troubleshoot-unable-to-authenticate.png [Требуется аутентификация]

Чтобы посмотреть последние ошибки Nginx, используйте эту команду:

sudo tail /var/log/nginx/error.log

Если вы видите ошибку + user not found, пользователь не существует в файле` + htpasswd`. Этот тип ошибки указан в следующей записи журнала:

Nginx error logs (user was not found):2015/10/26 12:11:57 [error] 3933#0: *242 user "NonExistentUser" was not found in "/etc/nginx/htpasswd.users", client: 108.60.145.130, server: example.com, request: "GET / HTTP/1.1", host: "45.55.252.231"

Если вы видите ошибку «+ несоответствие пароля +», пользователь существует, но вы ввели неверный пароль. Этот тип ошибки указан в следующей записи журнала:

Nginx error logs (user password mismatch):2015/10/26 12:12:56 [error] 3933#0: *242 user "kibanaadmin": password mismatch, client: 108.60.145.130, server: example.com, request: "GET / HTTP/1.1", host: "45.55.252.231"

Решение этих двух ошибок состоит в том, чтобы либо предоставить правильную информацию для входа в систему, либо изменить существующий файл + htpasswd + с помощью имен пользователей, которые вы ожидаете существовать. Например, чтобы создать или перезаписать пользователя с именем + kibanaadmin + в файле + htpasswd.users +, используйте эту команду:

sudo htpasswd /etc/nginx/htpasswd.users

Затем введите желаемый пароль и подтвердите его.

Если вы видите ошибку + Нет такого файла или каталога, файл` + htpasswd`, указанный в конфигурации Nginx, не существует. Этот тип ошибки указан в следующей записи журнала:

Nginx error logs (htpasswd file does not exist):2015/10/26 12:17:38 [error] 3933#0: *266 open() "/etc/nginx/htpasswd.users" failed (2: No such file or directory), client: 108.60.145.130, server: example.com, request: "GET / HTTP/1.1", host: "45.55.252.231"

Здесь вы должны создать новый файл + / etc / nginx / htpasswd.users + и добавить в него пользователя (+ kibanaadmin + в этом примере) с помощью этой команды:

sudo htpasswd -c /etc/nginx/htpasswd.users

Введите новый пароль и подтвердите его.

Теперь попробуйте выполнить аутентификацию только что созданного вами пользователя.

Logstash: как проверить, работает ли он

Если Logstash не запущен, вы не сможете получать и анализировать журналы от грузоотправителей, таких как Filebeat, и хранить обработанные журналы в Elasticsearch. Этот раздел покажет вам, как проверить, нормально ли работает Logstash.

Убедитесь, что служба работает

Самое основное, что нужно проверить — это статус статуса Logstash:

sudo service logstash status

Если Logstash запущен, вы увидите этот вывод:

Logstash status (OK):logstash is running

В противном случае, если служба не запущена, вы увидите это сообщение:

Logstash status (Bad):logstash is not running

Если Logstash не работает, попробуйте запустить его с помощью этой команды:

sudo service logstash start

Затем проверьте его статус снова, через несколько секунд. Logstash — это Java-приложение, и оно будет сообщать о том, что оно «работает», в течение нескольких секунд после каждой попытки запуска, поэтому важно подождать несколько секунд, прежде чем проверять состояние «не работает». Если он сообщает, что «не работает», он, вероятно, неправильно настроен. Следующие два раздела посвящены устранению распространенных проблем Logstash.

Проблема: Logstash не работает

Если Logstash не работает, существует несколько возможных причин. В этом разделе будут рассмотрены различные распространенные случаи, когда Logstash не будет работать, и предложены возможные решения.

Причина. Конфигурация содержит синтаксическую ошибку.

Если в файлах конфигурации Logstash есть ошибки, которые находятся в каталоге + / etc / logstash / conf.d +, служба не сможет запуститься должным образом. Лучше всего проверить журналы Logstash на наличие подсказок о том, почему он не работает.

Откройте два сеанса терминала на вашем сервере, чтобы вы могли просматривать журналы Logstash при попытке запустить службу.

В первом терминальном сеансе мы рассмотрим журналы:

tail -f /var/log/logstash/logstash.log

Это покажет последние несколько записей журнала, а также любые будущие записи журнала.

Во втором терминальном сеансе попробуйте запустить службу Logstash:

sudo service logstash start

Вернитесь к первому сеансу терминала, чтобы просмотреть журналы, которые генерируются при запуске Logstash.

Если вы видите записи журнала, которые включают сообщения об ошибках, попробуйте прочитать сообщения, чтобы выяснить, что происходит не так. Вот пример журналов ошибок, которые вы можете увидеть, если в конфигурации Logstash есть синтаксическая ошибка (несоответствующие фигурные скобки):

Logstash logs (Syntax error):...
{:timestamp=>"2015-10-28T11:51:09.205000-0400", :message=>"Error: Expected one of #, => at line 12, column 6 (byte 209) after input {n  lumberjack {n    port => 5043n    type => "logs"n    ssl_certificate => "/etc/pki/tls/certs/logstash-forwarder.crt"n    ssl_key => "/etc/pki/tls/private/logstash-forwarder.key"n  n}nnnfilter {n  if "}
{:timestamp=>"2015-10-28T11:51:09.228000-0400", :message=>"You may be interested in the '--configtest' flag which you cannuse to validate logstash's configuration before you choosento restart a running system."}

Последнее сообщение о том, что мы можем быть заинтересованы в проверке конфигурации, указывает на то, что конфигурация содержит синтаксическую ошибку. Предыдущее сообщение содержит более конкретное сообщение об ошибке, в данном случае об отсутствии закрывающей фигурной скобки в разделе + input + конфигурации. Чтобы решить эту проблему, отредактируйте оскорбительную часть вашей конфигурации Logstash:

sudo vi /etc/logstash/conf.d/

Найдите строку с неправильным входом и исправьте ее, затем сохраните и выйдите.

Теперь на втором терминале запустите сервис Logstash:

sudo service logstash start

Если проблема была решена, новых записей в журнале не должно быть (Logstash не регистрирует успешный запуск). Через несколько секунд проверьте состояние службы Logstash:

sudo service logstash status

Если он работает, вы решили проблему.

У вас может быть другая проблема с конфигурацией, чем в нашем примере. Мы рассмотрим некоторые другие распространенные проблемы конфигурации Logstash. Как всегда, если вы можете понять, что означает ошибка, попробуйте исправить ее самостоятельно.

Причина: файлы SSL не существуют

Другая распространенная причина, по которой Logstash не работает, — это проблема с сертификатом SSL и файлами ключей. Например, если они не существуют там, где их указывает конфигурация Logstash, в ваших журналах будет отображаться ошибка, подобная этой:

Logstash logs (SSL key file does not exist):{:timestamp=>"2017-12-01T16:51:31.656000+0000", :message=>"Invalid setting for beats input plugin:nn  input {n    beats {n      # This setting must be a pathn      # File does not exist or cannot be opened /etc/pki/tls/certs/logstash-forwarder.crtn      ssl_certificate => "/etc/pki/tls/certs/logstash-forwarder.crt"n      ...n    }n  }", :level=>:error}
{:timestamp=>"2017-12-01T16:51:31.671000+0000", :message=>"Invalid setting for beats input plugin:nn  input {n    beats {n      # This setting must be a pathn      # File does not exist or cannot be opened /etc/pki/tls/private/logstash-forwarder.keyn      ssl_key => "/etc/pki/tls/private/logstash-forwarder.key"n      ...n    }n  }", :level=>:error}
{:timestamp=>"2017-12-01T16:51:31.685000+0000", :message=>"Error: Something is wrong with your configuration.", :level=>:error}

Чтобы решить эту конкретную проблему, вам необходимо убедиться, что у вас есть файл ключа SSL (https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-4-on -ubuntu-14-04 # generate-ssl-сертификаты [сгенерировать один], если вы забыли), и что он находится в правильном месте (+ / etc / pki / tls / private / logstash-forwarder.key +, в примере). Если у вас уже есть файл ключа, обязательно переместите его в нужное место и убедитесь, что конфигурация Logstash указывает на него.

Теперь запустите сервис Logstash:

sudo service logstash start

Если проблема была решена, новых записей в журнале не должно быть. Через несколько секунд проверьте состояние службы Logstash:

sudo service logstash status

Если он работает, вы решили проблему.

Проблема: Logstash работает, но не хранит журналы в Elasticsearch

Если Logstash работает, но не хранит журналы в Elasticsearch, это потому, что он не может достичь Elasticsearch. Как правило, это результат Elasticsearch не работает. В этом случае в журналах Logstash будут отображаться такие сообщения об ошибках:

Logstash logs (Elasticsearch isn't running):{:timestamp=>"2017-12-01T16:53:29.571000+0000", :message=>"Connection refused (Connection refused)", :class=>"Manticore::SocketException", :backtrace=>[], :level=>:error}

В этом случае убедитесь, что Elasticsearch запущен, следуя инструкциям по устранению неполадок Elasticsearch.

Вы также можете увидеть такие ошибки:

Logstash logs (Logstash is configured to send its output to the wrong host):{:timestamp=>"2017-12-01T16:56:26.274000+0000", :message=>"Attempted to send a bulk request to Elasticsearch configured at '["http://localhost:9200/"]', but Elasticsearch appears to be unreachable or down!", :error_message=>"Connection refused (Connection refused)", :class=>"Manticore::SocketException", :client_config=>{:hosts=>["http://localhost:9200/"], :ssl=>nil, :transport_options=>{:socket_timeout=>0, :request_timeout=>0, :proxy=>nil, :ssl=>{}}, :transport_class=>Elasticsearch::Transport::Transport::HTTP::Manticore, :logger=>nil, :tracer=>nil, :reload_connections=>false, :retry_on_failure=>false, :reload_on_failure=>false, :randomize_hosts=>false}, :level=>:error}
{:timestamp=>"2017-12-01T16:57:49.090000+0000", :message=>"SIGTERM received. Shutting down the pipeline.", :level=>:warn}

Это указывает на то, что раздел + output + вашей конфигурации Logstash может указывать на неправильный хост. Чтобы решить эту проблему, убедитесь, что Elasticsearch запущен, и проверьте свою конфигурацию Logstash:

sudo vi /etc/logstash/conf.d/30-elasticsearch-output.conf

Убедитесь, что строка + hosts ⇒ [" "] + указывает на хост, на котором выполняется Elasticsearch

Logstash output configuration excerptoutput {
 elasticsearch {
   hosts => ["localhost:9200"]
   sniffing => true
. . .

Сохранить и выйти. В этом примере предполагается, что Elasticsearch работает на + localhost +.

Перезапустите сервис Logstash.

sudo service logstash restart

Затем проверьте журналы Logstash на наличие ошибок.

Filebeat: как проверить, работает ли он

Filebeat запускается на ваших * клиентских * компьютерах и отправляет журналы на ваш сервер ELK. Если Filebeat не запущен, вы не сможете отправлять свои различные журналы в Logstash. В результате журналы не будут храниться в Elasticsearch и не будут отображаться в Kibana. Этот раздел покажет вам, как проверить, работает ли Filebeat нормально.

Убедитесь, что журналы успешно отправлены

Самый простой способ определить, правильно ли Filebeat отправляет журналы в Logstash, — это проверить ошибки Filebeat в журнале системного журнала.

sudo tail /var/log/syslog | grep filebeat

Если все настроено правильно, вы должны увидеть некоторые записи в журнале при остановке или запуске процесса Filebeat, но больше ничего.

Если вы не видите никаких записей в журнале, вы должны убедиться, что Filebeat работает.

Убедитесь, что служба работает

Самое основное, что нужно проверить — это статус Filebeat:

sudo service filebeat status

Если Filebeat запущен, вы увидите этот вывод:

Output* filebeat is running

В противном случае, если служба не запущена, вы увидите это сообщение:

Output * filebeat is not running

Если Filebeat не работает, попробуйте запустить его с помощью этой команды:

sudo service filebeat start

Затем проверьте статус снова. Если это не решит проблему, следующие разделы помогут вам устранить проблемы с Filebeat. Мы рассмотрим типичные проблемы Filebeat и способы их решения.

Проблема: Filebeat не работает

Если Filebeat не работает на вашем * клиентском * компьютере, существует несколько возможных причин. В этом разделе будут рассмотрены различные распространенные случаи, когда Filebeat не будет работать, и предложены возможные решения.

Причина. Конфигурация содержит синтаксическую ошибку.

Если Filebeat имеет ошибки в своем файле конфигурации, который находится по адресу + / etc / filebeat / filebeat.yml +, служба не сможет запуститься должным образом. Он сразу выйдет с ошибками вроде следующего:

OutputLoading config file error: YAML config parsing failed on /etc/filebeat/filebeat.yml: yaml: line 13: could not find expected ':'. Exiting.

После редактирования конфигурации Filebeat попробуйте снова запустить службу:

sudo service filebeat start

Если вы не видите сообщения об ошибке, проблема устранена.

Причина: SSL-сертификат отсутствует или недействителен

Для обмена данными между Filebeat и Logstash требуется SSL-сертификат для аутентификации и шифрования. Если Filebeat не запускается должным образом, вы должны проверить системный журнал на наличие ошибок, подобных следующим:

OutputError Initialising publisher: open /etc/pki/tls/certs/logstash-forwarder.crt: no such file or directory

Это указывает на то, что файл + logstash-forwarder.crt + находится не в соответствующем месте. Чтобы решить эту проблему, скопируйте сертификат SSL с сервера ELK на свой клиентский компьютер, следуя соответствующим подразделам https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and- kibana-elk-stack-on-ubuntu-14-04 # set-up-filebeat- (добавить-клиент-серверы) [раздел Настройка Filebeat (Добавить клиентские серверы)] учебника по стеку ELK.

Поместив соответствующий файл сертификата SSL в нужное место, попробуйте снова запустить Filebeat.

Если сертификат SSL недействителен, журналы должны выглядеть следующим образом:

syslog (Certificate is invalid):transport.go:125: SSL client failed to connect with: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "elk.example.com")

Убедившись, что сертификат действителен и находится в правильном месте, вам нужно будет перезапустить Logstash (на сервере ELK), чтобы заставить его использовать новый ключ SSL:

sudo service logstash restart

Затем запустите Filebeat (на клиентском компьютере):

sudo service filebeat start

Проверьте журналы еще раз, чтобы убедиться, что проблема была решена.

Проблема: Filebeat не может подключиться к Logstash

Если Logstash (на сервере ELK) недоступен Filebeat (ваш клиентский сервер), вы увидите записи журнала ошибок, например:

syslog  (Connection refused):transport.go:125: SSL client failed to connect with: dial tcp 203.0.113.4:5044: getsockopt: connection refused

Распространенные причины недоступности Logstash:

Logstash не работает (на сервере ELK)
Брандмауэры на любом сервере блокируют соединение через порт + 5043 +
Filebeat не настроен с правильным IP-адресом, именем хоста или портом

Чтобы решить эту проблему, сначала убедитесь, что Logstash работает на сервере ELK, следуя разделам устранения неполадок Logstash этого руководства. Во-вторых, убедитесь, что межсетевой экран не блокирует сетевой трафик. В-третьих, убедитесь, что Filebeat настроен с правильным IP-адресом (или именем хоста) и портом сервера ELK.

Конфигурация Filebeat может быть отредактирована с помощью этой команды:

sudo vi /etc/filebeat/filebeat.yml

Убедившись в правильности информации о подключении Logstash, попробуйте перезапустить Filebeat:

sudo service filebeat restart

Проверьте журналы Filebeat еще раз, чтобы убедиться, что проблема была решена.

Elasticsearch: как проверить, работает ли он

Если Elasticsearch не работает, ни один из вашего стека ELK не будет работать. Logstash не сможет добавлять новые журналы в Elasticsearch, а Kibana не сможет получать журналы из Elasticsearch для создания отчетов. Этот раздел покажет вам, как проверить, работает ли Elasticsearch нормально.

Убедитесь, что служба работает

Самое основное, что нужно проверить — это статус службы Elasticsearch:

sudo service elasticsearch status

Если Elasticsearch запущен, вы увидите этот вывод:

Elasticsearch status (OK): * elasticsearch is running

В противном случае, если служба не запущена, вы увидите это сообщение:

Elasticsearch status (Bad): * elasticsearch is not running

В этом случае вы должны следовать следующим нескольким разделам, посвященным устранению неполадок Elasticsearch.

Убедитесь, что он отвечает на запросы HTTP

По умолчанию Elasticsearch отвечает на HTTP-запросы на порт + 9200 + (это можно настроить в своем файле конфигурации, указав новое значение + http.port +). Мы можем использовать + curl + для отправки запросов и получения полезной информации от Elasticsearch.

Отправьте HTTP-запрос GET, используя curl, с помощью этой команды (при условии, что ваш Elasticsearch может быть достигнут в + localhost +):

Если Elasticsearch запущен, вы должны увидеть ответ, который выглядит примерно так:

Output{
 "name" : "Hildegarde",
 "cluster_name" : "elasticsearch",
 "cluster_uuid" : "E8q9kr-0RxycYhSLNx8xeA",
 "version" : {
   "number" : "2.4.6",
   "build_hash" : "5376dca9f70f3abef96a77f4bb22720ace8240fd",
   "build_timestamp" : "2017-07-18T12:17:44Z",
   "build_snapshot" : false,
   "lucene_version" : "5.5.4"
 },
 "tagline" : "You Know, for Search"
}

Вы также можете проверить работоспособность вашего кластера Elasticsearch с помощью этой команды:

curl localhost:9200/_cluster/health?pretty

Ваш вывод должен выглядеть примерно так:

Output{
 "cluster_name" : "elasticsearch",
 "status" : "yellow",
 "timed_out" : false,
 "number_of_nodes" : 1,
 "number_of_data_nodes" : 1,
 "active_primary_shards" : 6,
 "active_shards" : 6,
 "relocating_shards" : 0,
 "initializing_shards" : 0,
 "unassigned_shards" : 6,
 "delayed_unassigned_shards" : 0,
 "number_of_pending_tasks" : 0,
 "number_of_in_flight_fetch" : 0,
 "task_max_waiting_in_queue_millis" : 0,
 "active_shards_percent_as_number" : 50.0
}

Обратите внимание, что если ваш кластер Elasticsearch состоит из одного узла, ваш кластер, вероятно, будет иметь статус «+ желтый ». Это нормально для кластера с одним узлом; вы можете перейти в состояние « green +», добавив хотя бы еще один узел в ваш кластер Elasticsearch.

Проблема: Elasticsearch не работает

Если Elasticsearch не запущен, существует множество возможных причин. В этом разделе будут рассмотрены различные распространенные случаи, когда Elasticsearch не будет работать, и предложены возможные решения.

Причина: это никогда не было начато

Если Elasticsearch не запущен, он, возможно, не был запущен в первую очередь; Elasticsearch не запускается автоматически после установки. Решение этой проблемы состоит в том, чтобы вручную запустить его в первый раз:

sudo service elasticsearch start

Это должно сообщить, что Elasticsearch запускается. Подождите около 10 секунд, затем проверьте статус статуса Elasticsearch еще раз.

Причина: служба Elasticsearch не была включена, и сервер перезагрузился

Если Elasticsearch работал нормально, но больше не работает, возможно, он не включен должным образом. По умолчанию служба Elasticsearch не включена для запуска при загрузке, вы должны явно включить Elasticsearch для запуска при загрузке:

sudo update-rc.d elasticsearch defaults 95 10

Elasticsearch теперь должен автоматически запускаться при загрузке. Проверьте, работает ли он, перезагрузив сервер.

Причина: Elasticsearch неверно настроен

Если Elasticsearch имеет ошибки в своем файле конфигурации, который находится в + / etc /asticsearch /asticsearch.yml +, служба не сможет запуститься должным образом. Лучше всего проверить журналы ошибок Elasticsearch, чтобы понять, почему он не работает.

Откройте два сеанса терминала на вашем сервере, чтобы вы могли просматривать журналы Elasticsearch при попытке запустить службу.

В первом терминальном сеансе мы рассмотрим журналы:

tail -f /var/log/elasticsearch/elasticsearch.log

Это покажет последние несколько записей журнала, а также любые будущие записи журнала.

Во втором терминальном сеансе попробуйте запустить службу Elasticsearch:

sudo service elasticsearch start

Вернитесь к первому сеансу терминала, чтобы просмотреть журналы, которые генерируются при запуске Elasticsearch.

Если вы видите записи журнала, которые указывают на ошибки или исключения (например, + ERROR,` + Exception` или + error), попробуйте найти строку, которая указывает, что вызвало ошибку. Вот пример журналов ошибок, которые вы увидите, если Elasticsearch + network.host + установлен на имя хоста или IP-адрес, который не разрешается:

Elasticsearch logs (Bad):...
[2015-10-27 15:24:43,495][INFO ][node                     ] [Shadrac] starting ...
[2015-10-27 15:24:43,626][ERROR][bootstrap                ] [Shadrac] Exception
org.elasticsearch.transport.BindTransportException: Failed to resolve host [null]
   at org.elasticsearch.transport.netty.NettyTransport.bindServerBootstrap(NettyTransport.java:402)
   at org.elasticsearch.transport.netty.NettyTransport.doStart(NettyTransport.java:283)
   at org.elasticsearch.common.component.AbstractLifecycleComponent.start(AbstractLifecycleComponent.java:85)
   at org.elasticsearch.transport.TransportService.doStart(TransportService.java:153)
   at org.elasticsearch.common.component.AbstractLifecycleComponent.start(AbstractLifecycleComponent.java:85)
   at org.elasticsearch.node.internal.InternalNode.start(InternalNode.java:257)
   at org.elasticsearch.bootstrap.Bootstrap.start(Bootstrap.java:160)
   at org.elasticsearch.bootstrap.Bootstrap.main(Bootstrap.java:248)
   at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:32)
Caused by: java.net.UnknownHostException: : unknown error
...

Обратите внимание, что последняя строка примеров журналов указывает, что произошла ошибка + UnknownHostException: +. Этот конкретный пример указывает, что + network.host + установлен в + invalid_hostname +, что ни к чему не приводит. В установке с одним узлом Elasticsearch это должно быть установлено на + localhost + или + 127.0.0.1 +.

Чтобы решить эту проблему, отредактируйте файл конфигурации Elasticsearch:

sudo vi /etc/elasticsearch/elasticsearch.yml

Найдите строку с плохим входом и исправьте ее. В случае примера мы должны найти строку, которая определяет + network.host: invalid_hostname + и изменить ее так, чтобы она выглядела следующим образом:

/etc/elasticsearch/elasticsearch.yml выдержка

Сохранить и выйти.

Теперь на втором терминале запустите сервис Elasticsearch:

sudo service elasticsearch start

Если проблема была решена, вы должны увидеть журналы без ошибок, которые указывают, что Elasticsearch запущен. Это может выглядеть примерно так:

Elasticsearch logs (Good):...
[2015-10-27 15:29:21,980][INFO ][node                     ] [Garrison Kane] initializing ...
[2015-10-27 15:29:22,084][INFO ][plugins                  ] [Garrison Kane] loaded [], sites []
[2015-10-27 15:29:22,124][INFO ][env                      ] [Garrison Kane] using [1] data paths, mounts [[/ (/dev/vda1)]], net usable_space [52.1gb], net total_space [58.9gb], types [ext4]
[2015-10-27 15:29:24,532][INFO ][node                     ] [Garrison Kane] initialized
[2015-10-27 15:29:24,533][INFO ][node                     ] [Garrison Kane] starting ...
[2015-10-27 15:29:24,646][INFO ][transport                ] [Garrison Kane] bound_address {inet[/127.0.0.1:9300]}, publish_address {inet[localhost/127.0.0.1:9300]}
[2015-10-27 15:29:24,682][INFO ][discovery                ] [Garrison Kane] elasticsearch/WJvkRFnbQ5mLTgOatk0afQ
[2015-10-27 15:29:28,460][INFO ][cluster.service          ] [Garrison Kane] new_master [Garrison Kane][WJvkRFnbQ5mLTgOatk0afQ][elk-run][inet[localhost/127.0.0.1:9300]], reason: zen-disco-join (elected_as_master)
[2015-10-27 15:29:28,561][INFO ][http                     ] [Garrison Kane] bound_address {inet[/127.0.0.1:9200]}, publish_address {inet[localhost/127.0.0.1:9200]}
[2015-10-27 15:29:28,562][INFO ][node                     ] [Garrison Kane] started
...

Теперь, если вы проверите статус Elasticsearch, и вы должны увидеть, что он работает нормально.

У вас может быть другая проблема с конфигурацией, чем в нашем примере. Если вам удалось выяснить, что означает ошибка, попробуйте исправить ее самостоятельно. Если это не помогло, попробуйте поискать в Интернете отдельные строки ошибок, которые не содержат информацию, относящуюся к вашему серверу (например, IP-адрес или автоматически сгенерированное имя узла Elasticsearch).

Заключение

Надеемся, что это руководство по устранению неполадок помогло вам решить любые проблемы, возникающие при настройке стека ELK. Если у вас есть какие-либо вопросы или предложения, оставьте их в комментариях ниже!

Источник

Positions_increment_gap must be positive; got plugins, index AnnotatedTextFieldMapper.java Key=value pairs are not supported in annotations plugins, index AnnotatedTextFieldMapper.java Unsupported encoding parsing annotated text plugins, index AnnotatedTextFieldMapper.java No bucket defined for s3 repository repositories, repository-s3, repository, plugins S3Repository.java Glacier storage class is not supported repositories, storage, repository-s3, plugins S3BlobStore.java `» + storageClass + «` is not a valid S3 Storage Class. repositories, storage, repository-s3, plugins S3BlobStore.java CannedACL is not valid: » + cannedACL + « repositories, repository-s3, plugins S3BlobStore.java Setting » + setting.getKey() + » is not defined for repository repositories, plugins, repository-gcs GoogleCloudStorageRepository.java Setting » + setting.getKey() + » is empty for repository repositories, plugins, repository-gcs GoogleCloudStorageRepository.java Bucket » + bucketName + » does not exist repositories, plugins, repository-gcs GoogleCloudStorageBlobStore.java Unable to check if bucket » + bucketName + » exists repositories, plugins, repository-gcs GoogleCloudStorageBlobStore.java The required field option is missing plugins CustomSuggestionBuilder.java Property null_value cannot be null. plugins, index ICUCollationKeywordFieldMapper.java Setting doc_values cannot be modified for field » + name + « plugins, index Murmur3FieldMapper.java Setting index cannot be modified for field » + name + « plugins, index Murmur3FieldMapper.java Murmur3 fields are not searchable: » + name() + « plugins, index Murmur3FieldMapper.java Setting is set but and are not discovery-ec2, plugins, discovery Ec2ClientSettings.java If you want to use an azure repository; you need to define a client configuration. repositories, plugins, client, repository-azure, azure AzureRepositoryPlugin.java Azure Proxy port or host have been set but proxy type is not defined. repositories, azure, repository-azure, plugins AzureStorageSettings.java Azure Proxy type has been set but proxy host or port is not defined. repositories, azure, repository-azure, plugins AzureStorageSettings.java Azure proxy host is unknown. repositories, azure, repository-azure, plugins AzureStorageSettings.java Neither a secret key nor a shared access token was set. repositories, azure, repository-azure, plugins AzureStorageSettings.java Both a secret as well as a shared access token were set. repositories, azure, repository-azure, plugins AzureStorageSettings.java Unable to find client with name » + clientName + « repositories, plugins, client, repository-azure, azure AzureStorageService.java Invalid azure client settings with name » + clientName + « settings, repositories, plugins, client, repository-azure, azure AzureStorageService.java Error parsing document in field plugins, document AttachmentProcessor.java No longer master. source: » + source + « master, cluster ClusterStateTaskListener.java Non-failed nodes do not form a quorum cluster Publication.java Disconnected during check cluster LeaderChecker.java Node » + currentNodes.getLocalNode() + » not master for join request node, cluster JoinTaskExecutor.java Rejecting » + request + » since local state is request, cluster FollowersChecker.java Join validation on cluster state join, cluster JoinHelper.java Join target is not initialised yet join, cluster JoinHelper.java Join target is a follower join, cluster JoinHelper.java Received a newer join from join, cluster JoinHelper.java Became follower cluster JoinHelper.java OnFollowerCheckRequest: current term is cluster Coordinator.java No longer leading this publication’s term: cluster Coordinator.java Received cluster state from cluster Coordinator.java Local node is not part of initial configuration node, cluster Coordinator.java Not enough nodes discovered to form a quorum in the initial configuration cluster Coordinator.java Node is no longer master for term node, master, cluster Coordinator.java Publication cluster Coordinator.java Publishing failed cluster Coordinator.java Publication failed cluster Coordinator.java Rejecting » + request + » as there is already a leader request, cluster PreVoteCollector.java Have no local cluster state cluster PublicationTransportHandler.java Incoming term cluster CoordinationState.java Ignored join as term has not been incremented yet after reboot join, cluster CoordinationState.java Incoming last accepted term cluster CoordinationState.java Incoming last accepted version version, cluster CoordinationState.java Rejecting join since this node has not received its initial configuration yet join, node, cluster CoordinationState.java Election not won cluster CoordinationState.java Cannot start publishing next value before accepting previous one cluster CoordinationState.java Incoming term » + clusterState.term() + » does not match current term cluster CoordinationState.java Incoming cluster state version version, cluster CoordinationState.java Only allow reconfiguration while not already reconfiguring cluster CoordinationState.java Only allow reconfiguration if joinVotes have quorum for new config join, cluster CoordinationState.java Incoming version version, cluster CoordinationState.java Incoming term » + applyCommit.getTerm() + » does not match current term cluster CoordinationState.java Incoming term » + applyCommit.getTerm() + » does not match last accepted term cluster CoordinationState.java Delayed reroute » + reason + » cancelled routing, cluster BatchedRerouteService.java No commands routing, allocation, cluster AllocationCommands.java Expected field name to be named commands; got instead routing, allocation, cluster AllocationCommands.java Commands should follow with an array element routing, allocation, cluster AllocationCommands.java Expected either field name commands; or start array; got instead routing, allocation, cluster AllocationCommands.java Allocation command is malformed; done parsing a command; routing, allocation, cluster AllocationCommands.java Allocation command is malformed; got instead routing, allocation, cluster AllocationCommands.java command does not support field routing, allocation, cluster MoveAllocationCommand.java command does not support complex json tokens routing, allocation, cluster MoveAllocationCommand.java command missing the index parameter routing, allocation, cluster, index MoveAllocationCommand.java command missing the shard parameter routing, shard, allocation, cluster MoveAllocationCommand.java command missing the from_node parameter routing, allocation, cluster MoveAllocationCommand.java command missing the to_node parameter routing, allocation, cluster MoveAllocationCommand.java command missing the node parameter routing, node, allocation, cluster CancelAllocationCommand.java Failed to build json for alias request request, metadata, alias, cluster AliasMetadata.java Cannot delete indices that are being snapshotted: delete, indices, metadata, cluster MetadataDeleteIndexService.java Must not start with ‘_’. metadata, cluster IndexNameExpressionResolver.java Invalid dynamic name expression . metadata, cluster IndexNameExpressionResolver.java Invalid dynamic name expression . missing closing « metadata, cluster IndexNameExpressionResolver.java Invalid dynamic name expression . missing date format metadata, cluster IndexNameExpressionResolver.java Invalid dynamic name expression . date math placeholder is open ended metadata, cluster IndexNameExpressionResolver.java Nothing captured metadata, cluster IndexNameExpressionResolver.java An index exists with the same name as the alias metadata, alias, cluster, index AliasValidator.java Global composable templates may not specify the setting metadata, cluster MetadataIndexTemplateService.java Index template » + name + » specifies component templates metadata, template, cluster, index MetadataIndexTemplateService.java Failed to parse mapping: metadata, cluster MetadataIndexTemplateService.java Cannot close indices that are being snapshotted: indices, metadata, cluster MetadataIndexStateService.java Must be lowercase metadata, cluster MetadataCreateIndexService.java Already exists as alias metadata, alias, cluster MetadataCreateIndexService.java Failed to parse repository ; expected object repository, metadata, cluster RepositoriesMetadata.java Failed to parse repository ; unknown type repository, metadata, cluster RepositoriesMetadata.java Failed to parse repository ; incompatible params repository, metadata, cluster RepositoriesMetadata.java Failed to parse repository ; unknown field repository, metadata, cluster RepositoriesMetadata.java Failed to parse repository repository, metadata, cluster RepositoriesMetadata.java Failed to parse repository ; missing repository type repository, metadata, cluster RepositoriesMetadata.java Failed to parse repositories repositories, metadata, cluster RepositoriesMetadata.java Unknown key for index template metadata, template, cluster, index IndexTemplateMetadata.java Timed out waiting for completion of TaskManager.java Expected a string but found instead TaskId.java Recovery was cancelled recovery, indices RemoteRecoveryTargetHandler.java Recovery was canceled reason » + reason + « recovery, indices RecoverySourceHandler.java Source node does not have the shard listed in its state as allocated on the node recovery, source, shard, indices, node RecoverySourceHandler.java Snapshot failed recovery, indices, snapshot RecoverySourceHandler.java SendFileStep failed recovery, indices RecoverySourceHandler.java Phase2 failed recovery, indices RecoverySourceHandler.java Prepare target for translog failed recovery, indices RecoverySourceHandler.java Source shard » + routingEntry + » is not an active primary recovery, routing, source, shard, indices PeerRecoverySourceService.java Source shard is not marked yet as relocating to » + request.targetNode() + « recovery, source, shard, indices, request PeerRecoverySourceService.java Recovery with same target already registered; waiting for recovery, indices PeerRecoverySourceService.java Cannot reestablish recovery; recovery id recovery, indices PeerRecoverySourceService.java Mapping updates are not allowed » + operation + « recovery, indices, mapping RecoveryTarget.java Failed to clean after recovery recovery, indices RecoveryTarget.java Failed to retry recovery recovery, indices RecoveriesCollection.java Failed to prepare shard for recovery recovery, indices, shard PeerRecoveryTargetService.java Timed out waiting for mapping updates recovery, indices, mapping PeerRecoveryTargetService.java Unexpected error recovery, indices PeerRecoveryTargetService.java Source shard is closed recovery, indices, source, shard PeerRecoveryTargetService.java Can’t open connection to a null node node TcpTransport.java General node connection failure node TcpTransport.java Failed to resolve host TcpTransport.java Failed to resolve publish address TcpTransport.java Failed to auto-resolve publish port» + profileExplanation + «; multiple bound addresses TcpTransport.java This is not an HTTP port TcpTransport.java Connect_exception TcpTransport.java Connect_timeout» + connectionProfile.getConnectTimeout() + « TcpTransport.java Can’t connect to a null node node ClusterConnectionManager.java A channel closed while connecting ClusterConnectionManager.java Failed execution TransportFuture.java Handshake failed because connection reset TransportHandshaker.java Handshake_timeout» + timeout + « TransportHandshaker.java Failure to send TransportHandshaker.java Handshake failed. unexpected remote node TransportService.java Failure to send TransportService.java Action » + action + » not found TransportService.java Handshake failed. unexpected remote cluster name ProxyConnectionStrategy.java Task with id » + taskId + » already exist task, persistent PersistentTasksClusterService.java The task with id » + id + » and allocation id » + allocationId + » not found task, allocation, persistent PersistentTasksClusterService.java The task with id doesn’t exist task, persistent PersistentTasksClusterService.java The task with id and allocation id doesn’t exist task, allocation, persistent PersistentTasksClusterService.java Trying to override task with id » + taskId + « task, persistent PersistentTasksCustomMetadata.java Cannot reassign task with id » + taskId + «; the task no longer exists task, persistent PersistentTasksCustomMetadata.java Cannot update task with id » + taskId + «; the task no longer exists task, persistent PersistentTasksCustomMetadata.java Cannot remove task with id » + taskId + «; the task no longer exists task, persistent PersistentTasksCustomMetadata.java Index name was not set index SnapshotShardFailure.java Index shard was not set shard, index SnapshotShardFailure.java Unexpected token » + token + « SnapshotInfo.java Cannot create snapshot in a readonly repository repository, snapshot SnapshotsService.java No longer master master SnapshotsService.java Failed to update cluster state during snapshot finalization snapshot, cluster SnapshotsService.java Failed to remove snapshot from cluster state snapshot, cluster SnapshotsService.java Pipeline Pipeline.java Pipeline » + id + » cannot have an empty on_failure option defined Pipeline.java Processor_type CompoundProcessor.java Pipeline is missing IngestService.java Processor doesn’t support one or more provided configuration parameters ConfigurationUtils.java Local node found node, discovery HandshakingTransportAddressConnector.java Non-master-eligible node found node, discovery HandshakingTransportAddressConnector.java Attempting to remove non-existent snapshots from repository data repositories, repository RepositoryData.java Expected array for » + field + « repositories RepositoryData.java Start object expected indices repositories RepositoryData.java Start object expected index» + indexName + « repositories, index RepositoryData.java Start array expected snapshots repositories RepositoryData.java Detected a corrupted repository; index repositories, index RepositoryData.java Start object expected » + INDEX_METADATA_IDENTIFIERS + « repositories RepositoryData.java Version string expected min_version repositories, version RepositoryData.java Unknown field name » + field + « repositories RepositoryData.java Start object expected repositories RepositoryData.java Failed to create repository repositories, repository RepositoriesService.java Cannot be empty repositories RepositoriesService.java Must not contain ‘#’ repositories RepositoriesService.java Repository is not in started state repositories, repository, blobstore BlobStoreRepository.java Cannot create blob store repositories, blobstore BlobStoreRepository.java Cannot delete snapshot from a readonly repository repositories, delete, snapshot, repository, blobstore BlobStoreRepository.java Failed to delete snapshots repositories, delete, blobstore BlobStoreRepository.java Concurrent modification of the index-N file; expected current generation repositories, blobstore BlobStoreRepository.java Cannot run cleanup on readonly repository repositories, repository, blobstore BlobStoreRepository.java Failed to update snapshot in repository repositories, repository, snapshot, blobstore BlobStoreRepository.java Failed to get snapshots repositories, blobstore BlobStoreRepository.java Failed to read global metadata repositories, metadata, blobstore BlobStoreRepository.java Could not determine repository generation from root blobs repositories, repository, blobstore BlobStoreRepository.java Unexpected exception when loading repository data repositories, repository, blobstore BlobStoreRepository.java Failed marking repository state as corrupted repositories, repository, blobstore BlobStoreRepository.java Could not read repository data from index blob repositories, repository, blobstore, index BlobStoreRepository.java Failed to execute cluster state update » + source + « repositories, source, blobstore, cluster BlobStoreRepository.java Failed to finalize snapshot deletion repositories, snapshot, blobstore BlobStoreRepository.java Missing location repositories FsRepository.java Location repositories FsRepository.java Unexpected token » + token + «; expected StoredScriptSource.java Unexpected token » + token + «; expected ; StoredScriptSource.java Unexpected field » + name + «; expected StoredScriptSource.java Unable to find script » + id + » in cluster state cluster ScriptService.java Stored script » + id + » does not exist and cannot be deleted ScriptMetadata.java Unexpected token » + token + «; expected ; ; ScriptMetadata.java Failed to compile » + type + » script » + id + » using lang » + lang + « ScriptCache.java Script Too many dynamic script compilations within; max: ScriptCache.java Failed to decompress source source, search SearchHit.java Failed to convert source to a json string source, search SearchHit.java Missing explanation value search SearchHit.java Missing explanation description search SearchHit.java Failed to build inner_hits search SearchService.java Failed to create sort elements sort, search SearchService.java Disabling track_total_hits is not allowed in a scroll context scroll, search SearchService.java Failed to create aggregators search SearchService.java Failed to create SuggestionSearchContext search SearchService.java Failed to create RescoreSearchContext search SearchService.java Failed to create SearchContextHighlighter search SearchService.java `search_after` cannot be used in a scroll context. scroll, search SearchService.java `from` parameter must be set to 0 when `search_after` is used. search SearchService.java `slice` cannot be used outside of a scroll context scroll, search SearchService.java `stored_fields` cannot be disabled if version is requested version, search SearchService.java `stored_fields` cannot be disabled if _source is requested search SearchService.java Cannot use `collapse` in a scroll context scroll, search SearchService.java Cannot use `collapse` in conjunction with `search_after` search SearchService.java Cannot use `collapse` in conjunction with `rescore` search SearchService.java Expected » + XContentParser.Token.VALUE_STRING + » or parser, search SearchAfterBuilder.java Expected » + XContentParser.Token.START_ARRAY + » in parser, search SearchAfterBuilder.java Suggestion does not support » + currentFieldName + « search SuggestionBuilder.java Missing suggestion object search SuggestionBuilder.java Unexpected token » + token + » after » + fieldName + « search SuggestBuilder.java Suggesterterm parsing failed on » + currentFieldName + « search TermSuggestionBuilder.java Geo context must be an object or string search GeoQueryContext.java Referenced field must be mapped to geo_point search GeoContextMapping.java Only two values lon; lat expected search GeoContextMapping.java Latitude must be a numeric value search GeoContextMapping.java Expected at least one context mapping search, mapping ContextMappings.java Expected a list or an entry of context mapping search, mapping ContextMappings.java Unknown context type» + type + « search ContextMappings.java Missing » + paramName + » in context mapping search, mapping ContextMappings.java Nested failed to find nested object under path » + nestedPath + « sort, search SortBuilder.java Nested nested object under path » + nestedPath + » is not of nested type sort, search SortBuilder.java Expected » + FILTER_FIELD.getPreferredName() + » element. sort, search SortBuilder.java Custom script sort type » + type + » not supported sort, search ScriptSortBuilder.java We only support AVG; MEDIAN and SUM on number based fields sort, search FieldSortBuilder.java No mapping found for » + fieldName + » in order to sort on sort, search, mapping FieldSortBuilder.java Invalid alias filter filter, search, alias ShardSearchRequest.java Unknown alias name was passed to alias Filter filter, search, alias ShardSearchRequest.java Failed to parse / load source source, search SourceLookup.java Failed to load field search LeafFieldsLookup.java Invalid token in inner_hits array search CollapseBuilder.java Could not parse inner query search, query QueryRescorerBuilder.java Rescore doesn’t support » + fieldName + « search RescorerBuilder.java Missing rescore type search RescorerBuilder.java Unknown key for a search FetchSourceContext.java Unknown key for a » + token + » in » + currentFieldName + «. search FetchSourceContext.java Expected one of » + XContentParser.Token.VALUE_BOOLEAN + «; parser, search FetchSourceContext.java Expected search SearchSourceBuilder.java Unexpected token » + token + » found after the main object. search SearchSourceBuilder.java Unknown key for a » + token + » in search SearchSourceBuilder.java Expected » + XContentParser.Token.START_OBJECT + » in parser, search SearchSourceBuilder.java Could not initialize aggregators search, aggregations AggregationPhase.java Failed to build aggregation » + aggregator.name() + « search, aggregations AggregationPhase.java No found for value search, aggregations Aggregator.java Invalid aggregation order path » + path + «. search, aggregations InternalOrder.java Invalid aggregation name search, aggregations AggregatorFactories.java Aggregation definition for » + aggregationName + » starts with a search, aggregations AggregatorFactories.java Found two aggregation type definitions in search, aggregations AggregatorFactories.java Expected » + XContentParser.Token.START_OBJECT + » under parser, search, aggregations AggregatorFactories.java Missing definition for aggregation » + aggregationName + « search, aggregations AggregatorFactories.java Cannot find an key » + aggName + » in » + name + « search, aggregations InternalMultiBucketAggregation.java _count must be the last element in the path search, aggregations InternalMultiBucketAggregation.java _key must be the last element in the path search, aggregations InternalMultiBucketAggregation.java Cannot find an aggregation named » + aggName + » in search, aggregations InternalMultiBucketAggregation.java Encountered more than one weight for a search, aggregations WeightedAvgAggregator.java Aggregator » + name + » of type search, aggregations TopHitsAggregationBuilder.java Registry miss-match — expected MetricAggregatorSupplier; found search, aggregations StatsAggregatorFactory.java Registry miss-match — expected CardinalityAggregatorSupplier; found search, aggregations CardinalityAggregatorFactory.java Registry miss-match — expected PercentilesAggregatorSupplier; found search, aggregations PercentilesAggregatorFactory.java Registry miss-match — expected search, aggregations GeoCentroidAggregatorFactory.java Registry miss-match — expected ExtendedStatsAggregatorProvider; found search, aggregations ExtendedStatsAggregatorFactory.java Registry miss-match — expected MedianAbsoluteDeviationAggregatorSupplier; found search, aggregations MedianAbsoluteDeviationAggregatorFactory.java Missing required field search, aggregations DerivativePipelineAggregationBuilder.java Invalid gap policy: » + text + «; accepted values: search, aggregations BucketHelpers.java Unexpected token » + token + » in » + reducerName + «. search, aggregations BucketSelectorPipelineAggregationBuilder.java Can’t collect more than search, aggregations BucketsAggregator.java Iteration order of » + bucketOrds + » changed without mutating. search, aggregations BucketsAggregator.java Missing start of array in include/exclude clause search, aggregations IncludeExclude.java Array elements in include/exclude clauses should be string values search, aggregations IncludeExclude.java Merging/Reducing the aggregations failed when computing the aggregation search, aggregations InternalMappedRareTerms.java Aggregation » + name + » cannot support regular expression style search, aggregations TermsAggregatorFactory.java Registry miss-match — expected TermsAggregatorSupplier; found search, aggregations TermsAggregatorFactory.java Dense ords don’t know how to collect from many buckets search, aggregations GlobalOrdinalsStringTermsAggregator.java Registry miss-match — expected SignificantTermsAggregatorSupplier; found search, aggregations SignificantTermsAggregatorFactory.java Registry miss-match — expected RareTermsAggregatorSupplier; found search, aggregations RareTermsAggregatorFactory.java Failed to parse percentage significance heuristic. expected an empty object; search, aggregations PercentageScore.java Registry miss-match — expected MissingAggregatorSupplier; found search, aggregations MissingAggregatorFactory.java Invalid source type: source, search, aggregations CompositeValuesSourceParserHelper.java Sampler aggregation must be used with child aggregations. search, aggregations SamplerAggregator.java Failed to initialse filter search, filter, aggregations FilterAggregatorFactory.java Failed to initialse filters for aggregation » + name() + « search, filter, aggregations FiltersAggregatorFactory.java Registry miss-match — expected IpRangeAggregatorSupplier; found search, aggregations BinaryRangeAggregatorFactory.java Registry miss-match — expected RangeAggregatorSupplier; found search, aggregations AbstractRangeAggregatorFactory.java Malformed search, aggregations GeoDistanceAggregationBuilder.java Ranges must contain objects; but hit a search, aggregations IpRangeAggregationBuilder.java Unexpected ip range parameter: » + parser.currentName() + « parser, search, aggregations IpRangeAggregationBuilder.java Reverse_nested nested path » + path + » is not nested search, aggregations ReverseNestedAggregationBuilder.java Unexpected token » + token + » in » + aggregationName + «. search, aggregations ReverseNestedAggregationBuilder.java Nested nested path » + path + » is not nested search, aggregations NestedAggregationBuilder.java Missing path field for nested aggregation » + aggregationName + « search, aggregations NestedAggregationBuilder.java Aggregation » + parent.name() + » cannot have a global » + «sub-aggregation search, aggregations GlobalAggregatorFactory.java Registry miss-match — expected DateHistogramAggregationSupplier; found search, aggregations DateHistogramAggregatorFactory.java Registry miss-match — expected HistogramAggregatorSupplier; found search, aggregations HistogramAggregatorFactory.java Registry miss-match — expected AutoDateHistogramAggregationSupplier; found search, aggregations AutoDateHistogramAggregatorFactory.java Value source of type » + this.value() + » is not supported by scripts source, search, aggregations CoreValuesSourceType.java Invalid path element » + element + » in path » + path + « search, aggregations AggregationPath.java ValuesSource type source, search, aggregations MultiValuesSource.java Unregistered Aggregation » + aggregationName + « search, aggregations ValuesSourceRegistry.java Can’t round a BYTES search, aggregations ValuesSource.java Can’t round a GEO_POINT search, aggregations ValuesSource.java Unsupported script value » + o + «; expected a number; date; or boolean search, aggregations ScriptDoubleValues.java Thread interrupted while trying to obtain shard lock shard, thread NodeEnvironment.java Failed to parse float setting » + setting + » with value » + sValue + « settings Settings.java Failed to parse double setting » + setting + » with value » + sValue + « settings Settings.java Failed to parse int setting » + setting + » with value » + sValue + « settings Settings.java Failed to parse long setting » + setting + » with value » + sValue + « long, settings Settings.java Failed to get setting group for » + settingPrefix + » setting prefix and setting settings Settings.java Failed to parse version setting » + setting + » with value » + sValue + « version, settings Settings.java Failed to load settings from » + source + « source, settings Settings.java Failed to load settings from » + resourceName + « settings Settings.java Fuzziness wrongly configured . Must be 0 < lower value <= higher value. Fuzziness.java Failed to find low and high distance values Fuzziness.java Percentage should be in 0-100; got MemorySizeValue.java Failed to parse as a double MemorySizeValue.java Failed to parse SizeValue.java Ratio should be in 0-1.0; got RatioValue.java Invalid ratio or percentage RatioValue.java Failed to parse setting with value as a size in bytes ByteSizeValue.java Unknown field found XContentParserUtils.java Unknown token found XContentParserUtils.java Failed to parse object: empty key XContentParserUtils.java Failed to parse content to map XContentHelper.java should be a hash but was of type: XContentMapValues.java Interruption via Thread#interrupt() is unsupported. Use CancellableThreads#cancel() instead CancellableThreads.java AtomicArrays can only be copied to arrays of the same size AtomicArray.java Could not read the current timestamp JodaDateMathParser.java Operator not supported for date math JodaDateMathParser.java Truncated date math JodaDateMathParser.java Rounding `/` can only be used on single unit types JodaDateMathParser.java Unit not supported for date math JodaDateMathParser.java Failed to parse date field with format JodaDateMathParser.java Shape must be an object consisting of type and coordinates GeometryParser.java Failed to parse bounding box. Expected start object but found GeoBoundingBox.java Failed to parse WKT bounding box. GeoBoundingBox.java Failed to parse WKT bounding box GeoBoundingBox.java Failed to parse bounding box. unexpected field GeoBoundingBox.java Failed to parse bounding box. field name expected but found GeoBoundingBox.java Failed to parse bounding box. Conflicting definition found GeoBoundingBox.java Failed to parse ; expected 2 or 3 coordinates GeoPoint.java Latitude must be a number GeoPoint.java Longitude must be a number GeoPoint.java Invalid WKT format GeoPoint.java Geo_point supports only POINT among WKT primitives; GeoPoint.java Exception parsing coordinates: found Z value but GeoPoint.java Error parsing geopoint GeoUtils.java Geohash must be a string GeoUtils.java Field must be either ; or GeoUtils.java Token not allowed GeoUtils.java Field must be either lat/lon or geohash GeoUtils.java and must be valid double values GeoUtils.java Field missing GeoUtils.java Geo_point field type does not accept > 3 dimensions GeoUtils.java Numeric value expected GeoUtils.java Geo_point expected GeoUtils.java Geometries not included GeoJson.java Parameter coordinates is not supported for type GeoJson.java Coordinates not included GeoJson.java Radius is not specified GeoJson.java Unsuppoted shape type GeoJson.java Parameter geometries is not supported for type GeoJson.java Parameter orientation is not supported for type GeoJson.java Parameter radius is not supported for type GeoJson.java Exception parsing coordinates: number of dimensions do not match GeoJson.java Geo coordinates must be numbers GeoJson.java Geo coordinates greater than 3 dimensions are not supported GeoJson.java Multipoint data provided when single point data expected. GeoShapeType.java Single coordinate found when expecting an array of GeoShapeType.java No data provided for multipoint object when expecting GeoShapeType.java Invalid number of points in LineString (found — must be >= 2) GeoShapeType.java Invalid number of lines in MultiLineString (found — must be >= 1) GeoShapeType.java Invalid number of points in LinearRing (found — must be >= ) GeoShapeType.java Invalid LinearRing found (coordinates are not closed) GeoShapeType.java Exception parsing coordinates: GeoJsonParser.java Shape type not included GeoJsonParser.java Field is supported for only GeoJsonParser.java Coordinates cannot be specified as objects GeoJsonParser.java Geometries must be an array of geojson objects GeoJsonParser.java Expected geometry type but found GeoWKTParser.java Expected: » + RPAREN + » but found: GeoWKTParser.java Invalid number of points in LinearRing (found — must be >= 4) GeoWKTParser.java Expected word but found: GeoWKTParser.java Invalid number found: GeoWKTParser.java Expected number but found: GeoWKTParser.java Expected » + EMPTY + » or GeoWKTParser.java Expected » + RPAREN + » but found: GeoWKTParser.java Expected » + COMMA + » but found: GeoWKTParser.java Expected » + COMMA + » or GeoWKTParser.java Expected end of WKT string but found additional text: GeoWKTParser.java Cannot parse empty date JavaDateMathParser.java Failed to parse date field with format : JavaDateMathParser.java Timed out while waiting for a dynamic mapping update bulk, mapping TransportShardBulkAction.java No parameter named and type ARRAY MultiTermVectorsRequest.java No parameter named and type OBJECT MultiTermVectorsRequest.java _mtermvectors: Parameter not supported MultiTermVectorsRequest.java Failed to parse term vectors request. field fields must be an array request TermVectorsRequest.java Failed to parse term vectors request. request TermVectorsRequest.java Failed to parse term vectors request. unknown field request TermVectorsRequest.java Expecting the analyzer at to be a String; but found instead TermVectorsRequest.java Failed to generate » + source + « admin, source, settings, cluster ClusterUpdateSettingsRequest.java Timed out waiting for voting config exclusions admin, cluster TransportAddVotingConfigExclusionsAction.java Snapshot could not be read admin, snapshot, cluster TransportGetSnapshotsAction.java Task is not found admin, node, task, cluster TransportCancelTasksAction.java Task isn’t running and hasn’t stored its results admin, node, task, cluster TransportGetTaskAction.java Data_stream matching » + request.name + » not found admin, indices, request GetDataStreamAction.java Data_streams matching » + request.name + » not found admin, indices, request DeleteDataStreamAction.java Cannot delete data streams that are being snapshotted: delete, admin, indices DeleteDataStreamAction.java Failed to generate » + mappingSource + « admin, indices, source, mapping PutMappingRequest.java Problems parsing filter admin, indices, alias IndicesAliasesRequest.java Failed to generate » + filter + « admin, indices, alias, filter IndicesAliasesRequest.java Cannot upgrade indices because the following indices are missing primary shards admin, shards, upgrade, indices TransportUpgradeAction.java Unknown key in the template admin, indices, template PutIndexTemplateRequest.java Failed to parse aliases admin, indices, template, aliases PutIndexTemplateRequest.java Index template matching » + request.name() + » not found index, indices, template, admin, request TransportGetComposableIndexTemplateAction.java Component template matching » + request.name() + » not found admin, request, template, indices TransportGetComponentTemplateAction.java Key settings must be an object admin, indices CreateIndexRequest.java Unknown key for create index admin, indices, index CreateIndexRequest.java Illegal type for _source: MultiGetRequest.java Failed to parse multi get request. unknown field request MultiGetRequest.java Source definition may not contain source MultiGetRequest.java Unexpected token while parsing source settings source, settings MultiGetRequest.java Error while communicating with remote cluster » + clusterAlias + « alias, search, cluster TransportSearchAction.java Query»; «no nodes to search on search SearchScrollAsyncAction.java Phase failed search SearchScrollAsyncAction.java All shards failed shards, search SearchScrollAsyncAction.java ; Shard failures shard, search AbstractSearchAsyncAction.java Task doesn’t support this operation task TransportTasksAction.java Task is missing task TransportTasksAction.java Failed node » + nodeId + « node TransportTasksAction.java Timeout waiting for ; request: TransportInstanceSingleOperationAction.java Expected mapper parsing failures. got replication TransportWriteAction.java Actual shard is not a primary replication, shard TransportReplicationAction.java Shard is not in primary mode replication, shard TransportReplicationAction.java Timeout: ; request: replication TransportReplicationAction.java Unknown node » + nodeId + « replication, node TransportReplicationAction.java Operation » + actionName + » failed broadcast, node TransportBroadcastByNodeAction.java Failed to generate index IndexRequest.java Bad regex in » + SETTING_CORS_ALLOW_ORIGIN.getKey() + «: » + origin + « CorsHandler.java Failed to resolve host » + Arrays.toString(bindHosts) + « AbstractHttpServerTransport.java Failed to auto-resolve http publish port; multiple bound addresses AbstractHttpServerTransport.java Analyzer » + name + » contains filters analysis, index NamedAnalyzer.java Unexpected token blobstore, index BlobStoreIndexShardSnapshots.java Unknown array blobstore, index BlobStoreIndexShardSnapshots.java Unknown object blobstore, index BlobStoreIndexShardSnapshots.java Unknown parameter blobstore, index BlobStoreIndexShardSnapshot.java Unexpected token blobstore, index BlobStoreIndexShardSnapshot.java Missing or invalid file name » + name + « blobstore, index BlobStoreIndexShardSnapshot.java Missing or invalid physical file name » + physicalName + « blobstore, index BlobStoreIndexShardSnapshot.java Missing or invalid file length blobstore, index BlobStoreIndexShardSnapshot.java Missing or invalid written_by » + writtenByStr + « blobstore, index BlobStoreIndexShardSnapshot.java Missing checksum for name » + name + « blobstore, index BlobStoreIndexShardSnapshot.java Unknown parameter incremental_file_count blobstore, index BlobStoreIndexShardSnapshot.java Malformed content; must start with an object index DocumentParser.java Malformed content; after first object; either the type field index DocumentParser.java Failed to parse; document is empty index, document DocumentParser.java Failed to parse index DocumentParser.java Object mapping for » + mapper.name() + » tried to parse field mapping, index DocumentParser.java Field » + currentFieldName + » is a metadata field and cannot be added inside metadata, index DocumentParser.java Object mapping for » + mapper.name() + » with array for mapping, index DocumentParser.java Object mapping » + parentMapper.name() + » trying to serialize a value with mapping, index DocumentParser.java It is forbidden to create dynamic nested objects ( index DocumentParser.java Cannot add a value for field index DocumentParser.java Failed to parse field of type in document with id ». index, document FieldMapper.java Template must have match; path_match or match_mapping_type set template, index DynamicTemplate.java Template must have mapping set template, mapping, index DynamicTemplate.java is not configurable index NestedPathFieldMapper.java Analyzer » + propNode.toString() + » not found for field » + name + « node, index TypeParsers.java Analyzer on field » + name + » must be set when search_analyzer is set index TypeParsers.java Analyzer and search_analyzer on field index TypeParsers.java + propName + must not have a null value index TypeParsers.java Meta must be an object; got index TypeParsers.java Meta can’t have more than 5 entries; but got » + meta.size() + » on field index TypeParsers.java Meta keys can’t be longer than 20 chars; but got index TypeParsers.java Meta values can’t be longer than 50 chars; but got index TypeParsers.java Meta values can’t be null (field » + name + «) index TypeParsers.java Meta values can only be strings; but got index TypeParsers.java Copy_to in multi fields is not allowed. Found the copy_to in field » + name + « index TypeParsers.java Expected map for property fields on field » + propNode + » or node, index TypeParsers.java Field name » + multiFieldName + » which is a multi field of » + name + » cannot index TypeParsers.java Illegal field » + multiFieldName + «; only fields can be specified inside fields index TypeParsers.java No type specified for property » + multiFieldName + « index TypeParsers.java Type » + type + » cannot be used in multi field index TypeParsers.java No handler for type » + type + » declared on field » + multiFieldName + « handler, index TypeParsers.java Failed to parse index option index TypeParsers.java Wrong value for termVector » + termVector + » for field » + fieldName + « index TypeParsers.java Unknown Similarity type » + value + » for field » + name + « index TypeParsers.java Failed to serialize source for type » + type + « source, index DocumentMapper.java Failed to parse field of type index AbstractGeometryFieldMapper.java Normalizer » + normalizerName + » not found for field » + name + « index KeywordFieldMapper.java field type does not accept > 3 dimensions index AbstractPointGeometryFieldMapper.java + fieldType.name() + is configured for points only but a index LegacyGeoShapeIndexer.java Cannot normalize the point — not a number index GeoPointFieldMapper.java Property null_value is not supported for index RangeFieldMapper.java Error parsing field index RangeFieldMapper.java Failed to derive type index DocumentMapperParser.java Failed to parse mapping definition mapping, index DocumentMapperParser.java Malformed mapping; no type name found index DocumentMapperParser.java Points_only cannot be set to false for term strategy index LegacyGeoShapeFieldMapper.java Field parameter is not supported for field type index LegacyGeoShapeFieldMapper.java The path property must be specified for field » + name + «. index FieldAliasMapper.java The include_in_parent parameter can’t be updated on a nested object mapping mapping, index ObjectMapper.java The include_in_root parameter can’t be updated on a nested object mapping mapping, index ObjectMapper.java Properties must be a map type index ObjectMapper.java Trying to parse an object but has a different type index ObjectMapper.java No type specified for field » + fieldName + « index ObjectMapper.java No handler for type » + type + » declared on field » + fieldName + « handler, index ObjectMapper.java Expected map for property fields on field » + fieldName + » but got a index ObjectMapper.java The enabled parameter can’t be updated for the object mapping » + name() + « mapping, index ObjectMapper.java Epoch «+ formatter +» is not supported as dynamic date format index RootObjectMapper.java Dynamic template syntax error. An array of named objects is expected. template, index RootObjectMapper.java A dynamic template must be defined with a name template, index RootObjectMapper.java Failed to find type parsed » + mappingType + » for » + name + « mapping, index RootObjectMapper.java The `enabled` setting for the `_field_names` field has been deprecated and index FieldNamesFieldMapper.java The _source field is not searchable index SourceFieldMapper.java Binary field » + name() + » cannot be indexed index BinaryFieldMapper.java Binary fields do not support searching index BinaryFieldMapper.java Analyzer on completion field » + name + » must be set when search_analyzer is set index CompletionFieldMapper.java Completion field type must be indexed index CompletionFieldMapper.java The _version field is not searchable index VersionFieldMapper.java Can only use prefix queries on keyword; text and wildcard fields — not on index MappedFieldType.java Can only use wildcard queries on keyword; text and wildcard fields — not on index MappedFieldType.java Can only use regexp queries on keyword and text fields — not on index MappedFieldType.java Translog truncated index TranslogSnapshot.java Unable to get the earliest last modified time for the transaction log index Translog.java Failed to create new translog file index Translog.java Failed to write operation » + operation + « index Translog.java Checksum verification failed — expected: 0x index Translog.java Operation size must be at least 4 but was: index Translog.java Reached premature end of file; translog is truncated index Translog.java Translog header corrupted index TranslogHeader.java UUID length can’t be larger than the translog index TranslogHeader.java UUID length must be positive index TranslogHeader.java Translog header truncated index TranslogHeader.java Exception while syncing before creating a snapshot snapshot, index TranslogWriter.java Failed to parse failures array. At least one of reason;cause must be present reindex, index BulkByScrollResponse.java Unknown strategy » + strategyName + « query, index GeoShapeQueryBuilder.java Failed to find geo_point field » + fieldName + « query, index GeoDistanceQueryBuilder.java Field » + fieldName + » is not a geo_point field query, index GeoDistanceQueryBuilder.java Couldn’t validate latitude/ longitude values query, index GeoDistanceQueryBuilder.java Failed to parse query. unexpected field query, index GeoDistanceQueryBuilder.java Geo_distance requires ‘distance’ to be specified query, index GeoDistanceQueryBuilder.java Field_masking_span query must be of type span query query, index FieldMaskingSpanQueryBuilder.java Field_masking_span query does not support query, index FieldMaskingSpanQueryBuilder.java Field_masking_span must have query span query clause query, index FieldMaskingSpanQueryBuilder.java Field_masking_span must have field set for it query, index FieldMaskingSpanQueryBuilder.java Field » + fieldName + » does not support query, index VectorGeoPointShapeQueryProcessor.java Span_or clauses must be of type span query query, index SpanOrQueryBuilder.java Span_or query does not support » + currentFieldName + « query, index SpanOrQueryBuilder.java Span_or must include clauses query, index SpanOrQueryBuilder.java + QueryStringQueryBuilder.NAME + must be provided with a query query, index QueryStringQueryBuilder.java Query_string analyzer » + analyzer + » not found query, index QueryStringQueryBuilder.java Query_string quote_analyzer » + quoteAnalyzer + » not found query, index QueryStringQueryBuilder.java Failed to parse query » + this.queryString + « query, index QueryStringQueryBuilder.java + NAME + analyzer » + analyzer + » not found query, index MatchBoolPrefixQueryBuilder.java + SimpleQueryStringBuilder.NAME + analyzer query, index SimpleQueryStringBuilder.java + SimpleQueryStringBuilder.NAME + query text missing query, index SimpleQueryStringBuilder.java No text specified for text query query, index MatchQueryBuilder.java Span_near clauses must be of type span query query, index SpanNearQueryBuilder.java Span_near query does not support » + currentFieldName + « query, index SpanNearQueryBuilder.java Span_near must include clauses query, index SpanNearQueryBuilder.java + queryName + query doesn’t support multiple fields; found query, index SpanNearQueryBuilder.java Dis_max query does not support » + currentFieldName + « query, index DisMaxQueryBuilder.java Dis_max requires ‘queries’ field with at least one clause query, index DisMaxQueryBuilder.java Expected FIELD_NAME but got » + parser.currentToken() + « parser, query, index IntervalQueryBuilder.java Expected START_OBJECT but got » + parser.currentToken() + « parser, query, index IntervalQueryBuilder.java Missing intervals from interval query definition query, index IntervalQueryBuilder.java Nested query does not support » + currentFieldName + « query, index NestedQueryBuilder.java Boosting query does not support » + currentFieldName + « query, index BoostingQueryBuilder.java Boosting query requires ‘positive’ query to be set’ query, index BoostingQueryBuilder.java Boosting query requires ‘negative’ query to be set’ query, index BoostingQueryBuilder.java Failed to find query, index AbstractGeometryQueryBuilder.java Point specified twice. » + currentFieldName + « query, index AbstractGeometryQueryBuilder.java Unknown shape operation » + parser.text() + « parser, query, index AbstractGeometryQueryBuilder.java Unknown token query, index AbstractGeometryQueryBuilder.java Query does not support » + currentFieldName + « query, index AbstractGeometryQueryBuilder.java Mlt query does not support » + currentFieldName + « query, index MoreLikeThisQueryBuilder.java More_like_this requires ‘like’ to be specified query, index MoreLikeThisQueryBuilder.java More_like_this requires ‘fields’ to be non-empty query, index MoreLikeThisQueryBuilder.java Term query does not support array of values query, index TermQueryBuilder.java + TermsQueryBuilder.NAME + query requires a field name; query, index TermsQueryBuilder.java No value specified for terms query query, index TermsQueryBuilder.java Expected END_OBJECT but got » + parser.currentToken() + « parser, query, index IntervalsSourceProvider.java + NAME + unknown token » + token + « query, index TermsSetQueryBuilder.java + NAME + query does not support query, index TermsSetQueryBuilder.java + NAME + unknown token query, index TermsSetQueryBuilder.java Failed to find minimum_should_match field » + minimumShouldMatchField + « query, index TermsSetQueryBuilder.java Span_multi query does not support » + currentFieldName + « query, index SpanMultiTermQueryBuilder.java Span_containing big must be of type span query query, index SpanContainingQueryBuilder.java Span_containing little must be of type span query query, index SpanContainingQueryBuilder.java Span_not include must be of type span query query, index SpanNotQueryBuilder.java Span_not exclude must be of type span query query, index SpanNotQueryBuilder.java Span_not query does not support » + currentFieldName + « query, index SpanNotQueryBuilder.java Span_not must have include span query clause query, index SpanNotQueryBuilder.java Span_not must have exclude span query clause query, index SpanNotQueryBuilder.java Span_not can either use dist or pre & post (or none) query, index SpanNotQueryBuilder.java Failed to parse query type . unknown type. query, index MultiMatchQueryBuilder.java No text specified for multi_match query query, index MultiMatchQueryBuilder.java _na query malformed; must start with start_object query, index AbstractQueryBuilder.java _na query malformed; no field after start_object query, index AbstractQueryBuilder.java + queryName + query malformed; no start_object after query name query, index AbstractQueryBuilder.java Wrapper query malformed query, index WrapperQueryBuilder.java Wrapper query malformed; expected `query` but was query, index WrapperQueryBuilder.java Wrapper query has no query specified query, index WrapperQueryBuilder.java Could not parse inner script definition query, index InnerHitBuilder.java Could not parse inner _source definition query, index InnerHitBuilder.java Invalid token in the inner collapse query, index InnerHitBuilder.java Script query does not support » + currentFieldName + « query, index ScriptQueryBuilder.java Script must be provided with a script filter filter, query, index ScriptQueryBuilder.java Field » + name + » found and unsupported shape LinearRing query, index VectorGeoShapeQueryProcessor.java + fieldName + query, index SpanQueryBuilder.java No field mapping can be found for the field with name query, mapping, index QueryShardContext.java Failed to create query: query, index QueryShardContext.java Range query does not support » + currentFieldName + « query, index RangeQueryBuilder.java Unexpected token » + token + « query, index ConstantScoreQueryBuilder.java Constant_score requires a ‘filter’ element query, index ConstantScoreQueryBuilder.java Illegal latitude value for query, index GeoPolygonQueryBuilder.java Illegal longitude value for query, index GeoPolygonQueryBuilder.java Geo_polygon unexpected token type » + token.name() + « query, index GeoPolygonQueryBuilder.java Failed to parse query. query, index GeoBoundingBoxQueryBuilder.java Failed to parse query. bounding box not provided query, index GeoBoundingBoxQueryBuilder.java + ExistsQueryBuilder.NAME + must be provided with a field query, index ExistsQueryBuilder.java Span_within big must be of type span query query, index SpanWithinQueryBuilder.java Span_within little must be of type span query query, index SpanWithinQueryBuilder.java Span_within query does not support » + currentFieldName + « query, index SpanWithinQueryBuilder.java Span_within must include big query, index SpanWithinQueryBuilder.java Span_within must include little query, index SpanWithinQueryBuilder.java Span_first match must be of type span query query, index SpanFirstQueryBuilder.java Span_first query does not support » + currentFieldName + « query, index SpanFirstQueryBuilder.java Span_first must have match span query clause query, index SpanFirstQueryBuilder.java Span_first must have end set for it query, index SpanFirstQueryBuilder.java Script_score: the script could not be loaded query, index ScriptScoreFunctionBuilder.java query does not support » + currentFieldName + « query, index ScriptScoreFunctionBuilder.java requires ‘script’ field query, index ScriptScoreFunctionBuilder.java + NAME + required field ‘field’ missing query, index FieldValueFactorFunctionBuilder.java Failed to parse query. query is already defined. query, index FunctionScoreQueryBuilder.java Failed to parse query. array is not supported query, index FunctionScoreQueryBuilder.java Failed to parse query. field is not supported query, index FunctionScoreQueryBuilder.java Malformed score function score parameters. query, index DecayFunctionParser.java Random_score seed must be an int; long or string; not ‘ long, query, index RandomScoreFunctionBuilder.java Random_score seed must be an int/long or string; not ‘ query, index RandomScoreFunctionBuilder.java Unknown field query, index DecayFunctionBuilder.java Field is of type ; but only numeric types are supported. query, index DecayFunctionBuilder.java Parameter not supported! query, index DecayFunctionBuilder.java Both and must be set for numeric fields. query, index DecayFunctionBuilder.java and must be set for geo fields. query, index DecayFunctionBuilder.java must be set for date fields. query, index DecayFunctionBuilder.java Failed to recover from empty translog snapshot snapshot, index ReadOnlyEngine.java Couldn’t resolve version version, index Engine.java Failed to acquire searcher; source source, index Engine.java Failed to access searcher manager index Engine.java Failed to trim translog index NoOpEngine.java Failed to recover from translog index InternalEngine.java Failed to read operation from translog index InternalEngine.java Failed to roll translog index InternalEngine.java Failed to trim translog operations index InternalEngine.java Failed to commit engine index InternalEngine.java Snapshot is not allowed shard, snapshot, index IndexShard.java Operations only allowed when shard state is one of shard, index IndexShard.java Operation only allowed when shard state is one of shard, index IndexShard.java Operation only allowed when not closed shard, index IndexShard.java Operation only allowed when shard is active shard, index IndexShard.java Check index failed shard, index IndexShard.java Failed to recover from local shards shards, shard, index StoreRecovery.java Trying to recover when the shard is in backup state shard, index StoreRecovery.java Failed recovery recovery, shard, index StoreRecovery.java Failed to fetch index version after copying it over version, shard, index StoreRecovery.java Failed to recover from gateway shard, index StoreRecovery.java Interrupted while waiting for initial discovery state node, discovery Node.java Elasticsearch.yaml was deprecated in 5.5.0 and must be renamed to elasticsearch.yml node InternalSettingsPreparer.java Elasticsearch.json was deprecated in 5.5.0 and must be converted to elasticsearch.yml node InternalSettingsPreparer.java Failed to load settings from node, settings InternalSettingsPreparer.java Request body is required rest, request RestRequest.java Request body or source parameter is required rest, request, source RestRequest.java Request does not support » + parser.currentName() + « rest, parser, request RestActions.java Document not found » + index + «/» + id + « rest, index, document RestGetSourceAction.java Source not found » + index + «/» + id + « rest, source, index, document RestGetSourceAction.java Only allow store that can be opened or that throws a ShardLockObtainFailedException while being opened but got a shard PrimaryShardAllocator.java Total failure in fetching AsyncShardFetch.java Field » + field + » does not exist percolator PercolateQueryBuilder.java Expected field percolator PercolateQueryBuilder.java Percolator fields are not searchable directly; use a percolate query instead percolate, percolator, query PercolatorFieldMapper.java Missing url repositories URLRepository.java Unknown url protocol from URL » + url + « repositories URLRepository.java Cannot parse the specified url » + url + « repositories URLRepository.java Unsupported url protocol » + protocol + » from URL » + url + « repositories URLRepository.java Malformed URL blobstore URLBlobStore.java Cannot send message; event loop is shutting down. Netty4TcpChannel.java Runtime error PainlessScript.java Compile error PainlessScriptEngine.java ConvertToScriptException ScriptInjectionPhase.java Unsupported database type GeoIpProcessor.java Analyzer must be set for field » + name + » but wasn’t. index TokenCountFieldMapper.java Max_shingle_size must be at least » + MAX_SHINGLE_SIZE_LOWER_BOUND + » and at most index SearchAsYouTypeFieldMapper.java Has_child query does not support » + currentFieldName + « join, query HasChildQueryBuilder.java + NAME + no join field has been configured join, query HasChildQueryBuilder.java + NAME + join field join, query HasChildQueryBuilder.java Parent_id query does not support » + currentFieldName + « join, query ParentIdQueryBuilder.java + NAME + no join field found for index » + indexName + « join, query, index ParentIdQueryBuilder.java + NAME + no relation found for child » + type + « join, query ParentIdQueryBuilder.java Error parsing rank request request, index RankEvalSpec.java Value must be of type String: » + parameterName + « reindex, index RestUpdateByQueryAction.java Expected one of or fields; but found none reindex, index RestUpdateByQueryAction.java Failed to extract body. reindex, index RemoteScrollableHitSource.java Hit failed to parse _source reindex, index RemoteResponseParsers.java Error evaluating ExpressionScoreScript.java Link error ExpressionScriptEngine.java Cannot use expression with text variable using ExpressionAggregationScript.java Could not parse inline template template, mustache SearchTemplateRequest.java Error running mustache MustacheScriptEngine.java Error parsing regular expression file UserAgentParser.java Not a valid regular expression file UserAgentParser.java Malformed regular expression file; should continue with ‘array’ after ‘object’ UserAgentParser.java Malformed regular expression file; expecting ‘object’ UserAgentParser.java Malformed regular expression file; should continue with ‘field_name’ after ‘array’ UserAgentParser.java Unable to parse response body response, rest-high-level, client RestHighLevelClient.java Could not parse date/time. expected date field rest-high-level, client WatchStatusDateParser.java Could not parse watch status. failed to parse field rest-high-level, client WatchStatus.java Could not parse watch status. expecting field to hold a long rest-high-level, client WatchStatus.java Could not parse watch status. expecting field to hold a date rest-high-level, client WatchStatus.java Could not parse watch status. expecting field to hold a string rest-high-level, client WatchStatus.java Could not parse watch status. expecting field to be an object; rest-high-level, client WatchStatus.java Expected an object but found instead rest-high-level, client WatchStatus.java Could not parse action status for . missing required field rest-high-level, client ActionStatus.java Could not parse action status for . missing required field . rest-high-level, client ActionStatus.java Could not parse action status for . missing required field for unsuccessful rest-high-level, client ActionStatus.java Failed to parse object; unexpected structure rest-high-level, client PutPrivilegesResponse.java Failed to parse rules expression. expected to be an object but found instead parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. object contains multiple fields parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. field is not recognised in object parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. expected an object but found instead parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. object does not contain any fields parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. field requires an array parser, rest-high-level, client RoleMapperExpressionParser.java Failed to parse rules expression. expected a field value but found instead parser, rest-high-level, client RoleMapperExpressionParser.java Unexpected token rest-high-level, client NamedPolicy.java Failed to parse object: Expected START_OBJECT but was: rest-high-level, client GroupConfig.java Could not parse condition for watch . invalid definition. expected a field plugin ConditionRegistry.java Could not parse condition for watch . unknown condition type plugin ConditionRegistry.java Could not parse condition for watch . missing required condition type field plugin ConditionRegistry.java Could not parse date/time expected date field to not be null but was null plugin WatcherDateTimeUtils.java Could not parse date/time. expected date field to be either a number or a plugin WatcherDateTimeUtils.java Could not parse date/time. expected date field to be either a number or a string but plugin WatcherDateTimeUtils.java Could not parse time value . Time value cannot be negative. plugin WatcherDateTimeUtils.java Failed to parse time unit plugin WatcherDateTimeUtils.java Could not parse time value. expected either a string or a null value but found plugin WatcherDateTimeUtils.java Found redacted password in field plugin WatcherXContentParser.java Could not parse actions for watch . expected an object but found instead plugin ActionRegistry.java Could not parse action for watch . id contains whitespace plugin ActionRegistry.java Could not parse action /. failed to parse field as time value plugin ActionWrapper.java Could not parse action /. unknown action type plugin ActionWrapper.java Could not parse watch action /. missing action type plugin ActionWrapper.java Could not parse action status for /. unexpected field plugin ActionStatus.java Could not parse action status for /. missing required field plugin ActionStatus.java Could not parse action status for /. unexpected field . plugin ActionStatus.java Could not parse action status for /. missing required field . plugin ActionStatus.java Could not parse action status for /. missing required field for unsuccessful plugin ActionStatus.java Could not parse watch status for . failed to parse field plugin WatchStatus.java Could not parse watch status for . expecting field to hold a long plugin WatchStatus.java Could not parse watch status for . expecting field to hold a date plugin WatchStatus.java Could not parse watch status for . expecting field to hold a string plugin WatchStatus.java Could not parse watch status for . expecting field to be an object; plugin WatchStatus.java Could not parse transform for watch ; unknown transform type plugin TransformRegistry.java Could not parse transform for watch . expected an array of transform objects; plugin ChainTransform.java Could not parse transform for watch . expected a transform object; but plugin ChainTransform.java Invalid DiscoveryNode server_name » + configuredServerName + « plugin, node, discovery SecurityNetty4Transport.java Expected an object; but found token plugin XContentUtils.java Could not parse field. expected a string array but found null value instead plugin XContentUtils.java Could not parse field. expected a string array but found value instead plugin XContentUtils.java Could not parse field. expected a string array but one of the value in the plugin XContentUtils.java Failed to parse rules expression. field is not allowed within plugin ExpressionParser.java Expected object but found instead plugin PutPrivilegesRequestBuilder.java Expected the value for to be an object; but found instead plugin PutPrivilegesRequestBuilder.java Failed to parse change password request. unexpected field request, plugin ChangePasswordRequestBuilder.java Failed to parse add user request. unexpected field request, plugin PutUserRequestBuilder.java Failed to parse role . expected an object but found instead plugin RoleDescriptor.java Failed to parse role . unexpected field plugin RoleDescriptor.java Failed to parse role plugin RoleDescriptor.java Failed to parse privileges check . expected an object but found instead plugin RoleDescriptor.java Failed to parse privileges check . unexpected field plugin RoleDescriptor.java Failed to parse privileges check . All privilege fields ;; are missing plugin RoleDescriptor.java Field is not supported in a has_privileges request request, plugin RoleDescriptor.java Failed to parse indices privileges for role . expected field value indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . expected field value to indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . cannot be an empty indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . expected field indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . must not indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . expected but indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . expected or but got indices, plugin RoleDescriptor.java Failed to parse transient metadata for role . expected but got metadata, plugin RoleDescriptor.java Failed to parse indices privileges for role . unexpected field indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . missing required field indices, plugin RoleDescriptor.java Failed to parse indices privileges for role . requires if is given indices, plugin RoleDescriptor.java Failed to parse indices privileges for role — indices, plugin RoleDescriptor.java Failed to parse application privileges for role . expected field value plugin RoleDescriptor.java Failed to parse application privileges for role . expected field value to plugin RoleDescriptor.java Failed to parse application privileges for role . missing required field plugin RoleDescriptor.java Failed to parse field ‘query’ for indices indices, plugin DLSRoleQueryValidator.java Failed to parse field ‘query’ from the role descriptor plugin DLSRoleQueryValidator.java Failed to parse query query, plugin SecurityQueryTemplateEvaluator.java not found plugin AsyncTaskIndexService.java Template must not be null template, plugin TemplateUtils.java Template must not be empty template, plugin TemplateUtils.java Invalid template template, plugin TemplateUtils.java Unable to parse composable template template, plugin IndexTemplateRegistry.java Unable to parse component template template, plugin IndexTemplateRegistry.java Could not find requested plugin QueryPage.java No known data frame analytics with id plugin ExceptionsHelper.java A data frame analytics with id already exists plugin ExceptionsHelper.java No known trained model with model_id plugin ExceptionsHelper.java Cannot as the configuration is temporarily pending migration plugin ExceptionsHelper.java Failed to parse modelSnapshot snapshot, plugin ModelSnapshot.java Unexpected token » + token + « plugin TransformCheckpoint.java Invalid group name plugin GroupConfig.java Invalid grouping type: plugin GroupConfig.java Policy must not be null plugin LifecyclePolicyUtils.java Policy must not be empty plugin LifecyclePolicyUtils.java Invalid policy plugin LifecyclePolicyUtils.java License info is missing for cluster » + clusterAlias.get() + « plugin, alias, cluster, license RemoteClusterLicenseChecker.java Failed to parse license — no content provided plugin, license License.java Failed to parse license — no content-type provided plugin, license License.java Failed to parse licenses expected an array of licenses plugin, license License.java Failed to parse licenses expected field plugin, license License.java Failed to parse licenses expected start object plugin, license License.java Invalid » + description + » date format plugin, license License.java Could not parse watch with id plugin WatcherIndexingListener.java Could not parse trigger for . expected trigger type string field; but found plugin TriggerService.java Could not parse trigger for . expected trigger an object as the trigger body; plugin TriggerService.java Could not parse trigger for . expected END_OBJECT token; but found plugin TriggerService.java Could not parse trigger for . unknown trigger type plugin TriggerService.java Could not parse trigger event for for watch . expected trigger type string plugin TriggerService.java Could not parse trigger event for for watch . expected trigger an object as plugin TriggerService.java Unknown trigger type plugin TriggerService.java Could not parse schedule. invalid year times plugin YearlySchedule.java Could not parse schedule. expected either an object or an array plugin YearlySchedule.java Could not parse schedule. invalid time value for field — plugin DailySchedule.java Could not parse schedule. invalid time value for field — plugin DailySchedule.java Could not parse schedule. unexpected field plugin DailySchedule.java Could not parse schedule. expected a schedule type field; but found instead plugin ScheduleRegistry.java Could not parse schedule. expected a schedule type field; but no fields were found plugin ScheduleRegistry.java Could not parse schedule for . unknown schedule type plugin ScheduleRegistry.java Could not parse cron schedule plugin CronSchedule.java Could not parse cron schedule. expected a string value in the cron plugin CronSchedule.java Could not parse cron schedule. no cron expression found in cron array plugin CronSchedule.java Could not parse cron schedule. expected either a cron string value or an array plugin CronSchedule.java Could not parse trigger event for for watch . failed to parse plugin ScheduleTriggerEvent.java Could not parse trigger event for for watch . unexpected token plugin ScheduleTriggerEvent.java Could not parse schedule. invalid month times plugin MonthlySchedule.java Could not parse schedule. invalid weekly times plugin WeeklySchedule.java Could not parse schedule. unexpected token plugin HourlySchedule.java Could not parse schedule. invalid value for plugin HourlySchedule.java Could not parse schedule. invalid value for . plugin HourlySchedule.java Could not parse schedule: plugin IntervalSchedule.java Could not parse schedule. expected either a numeric value plugin IntervalSchedule.java Could not parse schedule. could not parse as a duration plugin IntervalSchedule.java Unknown day of week number plugin DayOfWeek.java Unknown day of week plugin DayOfWeek.java Could not parse year times. expected an object; but found plugin YearTimes.java Invalid year month value for field. expected string/number value or an plugin YearTimes.java Invalid year day value for field. expected string/number value or an plugin YearTimes.java Invalid time value for field — plugin YearTimes.java Invalid year month value. expected a string or a number value; but found plugin YearTimes.java Could not parse time . time format must be in the form of hh:mm plugin DayTimes.java Could not parse time . time hour is not a number plugin DayTimes.java Could not parse time . time minute is not a number plugin DayTimes.java Could not parse time plugin DayTimes.java Could not parse time. expected string/number value or an object; but found plugin DayTimes.java Invalid time hour value. expected string/number value or an array of plugin DayTimes.java Invalid time minute value. expected string/number value or an array of plugin DayTimes.java Invalid time hour value (possible values may be between 0 and 23 incl.) plugin DayTimes.java Invalid time hour value plugin DayTimes.java Invalid hour value. expected string/number value; but found plugin DayTimes.java Invalid time minute value (possible values may be between 0 and 59 incl.) plugin DayTimes.java Invalid time minute value (possible values may be between 0 and 59 plugin DayTimes.java Invalid time minute value plugin DayTimes.java Invalid time minute value. expected string/number value; but found plugin DayTimes.java Could not parse week times. expected an object; but found plugin WeekTimes.java Invalid week day value for field. expected string/number value or an plugin WeekTimes.java Invalid weekly day value. expected a string or a number value; but found » + token + « plugin WeekTimes.java Could not parse month times. expected an object; but found plugin MonthTimes.java Invalid month day value for field. expected string/number value or an plugin MonthTimes.java Invalid month day value. string value cannot be plugin MonthTimes.java Invalid month day value. expected a string or a number value; but found plugin MonthTimes.java Unknown month number plugin Month.java Unknown month plugin Month.java Unable to parse plugin ManualTrigger.java Watch with id does not exist plugin TransportActivateWatchAction.java Watch is running currently; cannot ack until finished plugin TransportAckWatchAction.java Could not parse input for watch . expected an object representing the input; but plugin InputRegistry.java Could not parse input for watch . expected field indicating the input type; plugin InputRegistry.java Could not parse input for watch . unknown input type plugin InputRegistry.java Could not parse input for watch . expected an object representing input ; plugin InputRegistry.java Could not parse input for watch . expected field indicating the input type; but plugin InputRegistry.java Expected starting JSON object after in watch plugin ChainInput.java Expected closing JSON object after parsing input named in watch plugin ChainInput.java Could not parse input for watch . expected an object but found instead plugin SimpleInput.java Could not parse input for watch . failed to parse search, plugin SearchInput.java Could not parse input for watch . expected a string value in search, plugin SearchInput.java Could not parse input for watch . unexpected array field search, plugin SearchInput.java Could not parse input for watch . failed to parse . must be a search, plugin SearchInput.java Could not parse input for watch . unexpected token search, plugin SearchInput.java Could not parse input for watch . missing required field search, plugin SearchInput.java Could not parse input for watch . failed to parse http request plugin HttpInput.java Could not parse input for watch . expected a string value as plugin HttpInput.java Could not parse input for watch . unknown content type plugin HttpInput.java Could not parse input for watch . unexpected string field plugin HttpInput.java Could not parse input for watch . missing require field plugin HttpInput.java Could not parse input for watch . key extraction is not supported for content plugin HttpInput.java Could not parse response body it does not appear to be response, plugin ExecutableHttpInput.java Could not find default account » + defaultAccountName + « plugin NotificationService.java Could not parse pagerduty event response. unexpected field response, plugin SentEvent.java Could not parse pager duty event template. failed to parse field template, plugin IncidentEvent.java Could not parse pager duty event template. failed to parse field ; template, plugin IncidentEvent.java Could not parse pager duty event template. unexpected field template, plugin IncidentEvent.java Could not parse trigger incident event context. missing required field plugin IncidentEventContext.java Could not parse trigger incident event context. unexpected field for plugin IncidentEventContext.java Could not parse trigger incident event context. unknown context type plugin IncidentEventContext.java Invalid jira » + name + » account settings. unsecure scheme » + protocol + « settings, plugin JiraAccount.java Invalid jira » + account + » account settings. missing required » + setting + » setting settings, plugin JiraAccount.java Failed to parse jira project. expected an object; but found instead plugin JiraIssue.java Could not parse jira response. unexpected field response, plugin JiraIssue.java Could not parse slack message. failed to parse field plugin SlackMessage.java Could not parse slack message. failed to parse field. plugin SlackMessage.java Could not parse slack message. unknown field . plugin SlackMessage.java Could not parse dynamic attachments. expected a string value for field; plugin DynamicAttachments.java Could not parse dynamic attachments. failed to parse field plugin DynamicAttachments.java Could not parse dynamic attachments. unexpected field plugin DynamicAttachments.java Could not parse dynamic attachments. missing required field plugin DynamicAttachments.java Could not parse message attachment. failed to parse field plugin Attachment.java Could not parse message attachment field. unexpected field plugin Attachment.java Could not parse message attachment field. found field ; but no is plugin Attachment.java Could not parse message attachment field. failed to parse field plugin Field.java Could not parse message attachment field. expected a boolean value for plugin Field.java Could not parse message attachment field. missing required field plugin Field.java Could not parse email. empty field plugin Email.java Could not parse email. unexpected field . field plugin Email.java Could not parse email. unexpected field plugin Email.java Could not parse » + field + » object as address. unknown address plugin Email.java Could not parse » + field + » as address plugin Email.java Could not parse as address. address must either be a string (RFC822 encoded) or plugin Email.java Could not parse field » + field + » with value » + text + » as address plugin Email.java Could not parse » + field + » as address list. field must either be a string plugin Email.java Missing required email to field plugin Account.java Invalid email defaults in email account settings » + accountName + « settings, plugin Account.java Could not parse data attachment. expected either a boolean value or an object but plugin DataAttachment.java Could not parse data attachment. expected field but found instead plugin DataAttachment.java Could not parse data attachment. expected string value for field but plugin DataAttachment.java Could not parse data attachment. unexpected field plugin DataAttachment.java Could not parse email template. empty field template, plugin EmailTemplate.java Could not parse email template. unknown field . field template, plugin EmailTemplate.java Invalid email address plugin EmailTemplate.java Could not parse http request attachment request, plugin HttpEmailAttachementParser.java Cannot parse attachment of type plugin EmailAttachmentsParser.java Proxy port must be between 1 and 65534; but was plugin HttpProxy.java Proxy must contain ‘port’ and ‘host’ field plugin HttpProxy.java Could not parse http request template. invalid time value for field request, template, plugin HttpRequestTemplate.java Could not parse http request template. unexpected object field request, template, plugin HttpRequestTemplate.java Could not parse http request template. unexpected string field request, template, plugin HttpRequestTemplate.java Could not parse http request template. unexpected numeric field request, template, plugin HttpRequestTemplate.java Could not parse http request template. unexpected token for field request, template, plugin HttpRequestTemplate.java Could not parse http request template. missing required string field request, template, plugin HttpRequestTemplate.java Could not parse http request template. wrong port for request, template, plugin HttpRequestTemplate.java Could not parse http request template. could not parse value for field request, template, plugin HttpRequestTemplate.java Configured URL is empty; please configure a valid URL plugin HttpRequestTemplate.java URL does not contain a scheme plugin HttpRequestTemplate.java Unsupported field » + fieldName + « plugin BasicAuth.java Unsupported token » + token + « plugin BasicAuth.java Username is a required option plugin BasicAuth.java Could not parse http request. could not parse field request, plugin HttpRequest.java Could not parse http request. unexpected object field request, plugin HttpRequest.java Could not parse http request. unexpected string field request, plugin HttpRequest.java Could not parse http request. unexpected numeric field request, plugin HttpRequest.java Could not parse http request. unexpected token request, plugin HttpRequest.java Could not parse http request. missing required field request, plugin HttpRequest.java Could not parse http response. expected a field name but found instead response, plugin HttpResponse.java Could not parse http response. unknown numeric field response, plugin HttpResponse.java Could not parse http response. unknown string field response, plugin HttpResponse.java Could not parse http response. expected a header name but found response, plugin HttpResponse.java Could not parse http response. expected a header value for header response, plugin HttpResponse.java Could not parse http response. unexpected token response, plugin HttpResponse.java Could not parse http response. missing required numeric field holding the response, plugin HttpResponse.java Could not parse condition for watch . expected an empty object but found plugin NeverCondition.java Unable to parse condition for watch . expected an empty object but found plugin InternalAlwaysCondition.java Could not parse condition for watch . expected an object but found plugin CompareCondition.java Could not parse condition for watch . expected a field indicating the plugin CompareCondition.java Could not parse condition for watch . expected a field indicating the plugin CompareCondition.java Could not parse condition for watch . unknown comparison operator plugin CompareCondition.java Could not parse condition for watch . compared value for with plugin CompareCondition.java Could not parse condition for watch . expected end of path object; plugin CompareCondition.java Could not parse condition for watch . expected an object for field plugin CompareCondition.java Could not parse condition for watch . unknown comparison plugin ArrayCompareCondition.java Could not parse condition for watch . plugin ArrayCompareCondition.java Could not parse condition for watch . expected a plugin ArrayCompareCondition.java Could not parse condition for watch . expected an object plugin ArrayCompareCondition.java Could not parse condition for watch . expected a field indicating plugin ArrayCompareCondition.java Could not parse condition for watch . failed to parse script plugin ScriptCondition.java Could not read search request. expected string values in request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected array field request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unknown value request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected index option request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected object field request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected string field request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected boolean field request, search, plugin WatcherSearchTemplateRequest.java Could not read search request. unexpected token » + token + « request, search, plugin WatcherSearchTemplateRequest.java Watch does not exist plugin ExecutionService.java Could not parse action /. failed parsing http request template plugin WebhookAction.java Failed to parse action /. expected to be of type string; but plugin JiraAction.java Failed to parse action /. failed to parse field plugin JiraAction.java Failed to parse action /. unexpected token / plugin JiraAction.java Could not parse action /. failed to parse index name value for index, plugin IndexAction.java Could not parse action /. unexpected number field index, plugin IndexAction.java Could not parse action for watch . failed to parse . must be index, plugin IndexAction.java Could not parse action /. unexpected string field index, plugin IndexAction.java Could not parse action /. unexpected token index, plugin IndexAction.java Failed to parse action /. unexpected token plugin SlackAction.java Failed to parse action /. missing required field plugin SlackAction.java Failed to parse action /. unknown logging level plugin LoggingAction.java Failed to parse action /. unexpected string field plugin LoggingAction.java Could not parse action /. failed to parse data attachment field plugin EmailAction.java Could not parse action / plugin EmailAction.java Could not parse watch . null token plugin WatchParser.java Could not parse watch ; unexpected token plugin WatchParser.java Could not parse watch . failed to parse time value for field plugin WatchParser.java Could not parse watch . unexpected field plugin WatchParser.java Could not parse watch . missing required field plugin WatchParser.java Could not parse watch . watch status in invalid state. action plugin WatchParser.java Could not parse transform for watch . failed to parse script plugin ScriptTransform.java Could not parse transform for watch . failed to parse search, plugin SearchTransform.java Could not parse transform for watch . failed to parse . must be a search, plugin SearchTransform.java Could not parse transform for watch . unexpected field search, plugin SearchTransform.java Could not parse transform for watch . missing required field search, plugin SearchTransform.java Could not parse watch execution request. unexpected boolean field rest, request, plugin RestExecuteWatchAction.java Could not parse watch execution request rest, request, plugin RestExecuteWatchAction.java Could not parse watch execution request. unexpected object field rest, request, plugin RestExecuteWatchAction.java Could not parse watch execution request. unexpected token rest, request, plugin RestExecuteWatchAction.java Failed to associate a new translog plugin SearchableSnapshotIndexEventListener.java No searchable snapshots indices found indices, plugin AbstractTransportSearchableSnapshotsAction.java Failed sending request request, plugin SecurityServerTransportInterceptor.java Api keys are not enabled plugin ApiKeyService.java Security tokens are not enabled plugin TokenService.java Timed out waiting for plugin LdapRealm.java Invalid URI: plugin OpenIdConnectRealm.java The configuration setting plugin OpenIdConnectRealm.java Invalid value for plugin OpenIdConnectRealm.java Invalid URI: plugin OpenIdConnectRealm.java Invalid URL: plugin OpenIdConnectRealm.java Setting plugin OpenIdConnectRealm.java Body missing for graph request rest, request, plugin RestGraphAction.java Failed to parse search source. source must be an object; but found instead rest, source, search, plugin RestGraphAction.java Illegal object property in graph definition rest, plugin RestGraphAction.java Illegal property in graph definition rest, plugin RestGraphAction.java Illegal property in graph vertices definition rest, plugin RestGraphAction.java Unknown string property: » + fieldName + « rest, plugin RestGraphAction.java Unknown numeric property: » + fieldName + « rest, plugin RestGraphAction.java Missing field name in graph vertices definition rest, plugin RestGraphAction.java Unknown boolean property: » + fieldName + « rest, plugin RestGraphAction.java Unknown property: » + fieldName + « rest, plugin RestGraphAction.java Unknown object property: » + fieldName + « rest, plugin RestGraphAction.java Property value of field » + name + » can’t be null. plugin ConstantKeywordFieldMapper.java Property value of field plugin ConstantKeywordFieldMapper.java The number of dimensions for field plugin DenseVectorFieldMapper.java The dims property must be specified for field » + name + «. plugin DenseVectorFieldMapper.java Cannot retrieve data because index index, plugin ExtractedFieldsDetectorFactory.java Failed to parse data frame analytics configuration » + id + « plugin DataFrameAnalyticsConfigProvider.java Failed to serialise data frame analytics with id plugin DataFrameAnalyticsConfigProvider.java Could not start datafeed » + datafeedId +» as indices are being upgraded indices, plugin DatafeedNodeSelector.java Datafeed plugin DataExtractorFactory.java search failed due to SearchPhaseExecutionException. Will attempt again with new scroll scroll, search, plugin ScrollDataExtractor.java Failed to serialise datafeed config with id » + config.getId() + « plugin DatafeedConfigProvider.java Failed to parse datafeed config » + datafeedId + « plugin DatafeedConfigProvider.java Failed to serialise datafeed config with id » + updatedConfig.getId() + « plugin DatafeedConfigProvider.java No calendar with id » + calendarId + « plugin TransportDeleteCalendarAction.java No event with id » + eventId + « plugin TransportDeleteCalendarEventAction.java A filter with id filter, plugin TransportPutFilterAction.java Cannot open job plugin TransportOpenJobAction.java Could not open job because no ML nodes with sufficient capacity were found plugin TransportOpenJobAction.java Unknown error occurred while updating cluster state cluster, plugin TransportSetUpgradeModeAction.java Could not delete filter with ID delete, filter, plugin TransportDeleteFilterAction.java Cannot delete model as it is still referenced by ingest processors delete, plugin TransportDeleteTrainedModelAction.java Cannot start datafeed plugin TransportStartDatafeedAction.java Could not start datafeed; allocation explanation allocation, plugin TransportStartDatafeedAction.java Unable to find filter » + resourceId +» filter, plugin TransportGetFiltersAction.java Cannot start data frame analytics plugin TransportStartDataFrameAnalyticsAction.java Could not start data frame analytics task; allocation explanation allocation, plugin TransportStartDataFrameAnalyticsAction.java Aborting » + operation + » during plugin TimeoutChecker.java Failed to parse bucket plugin ExpiredResultsRemover.java Failed to parse record plugin BatchedRecordsIterator.java Failed to parse job document » + hit.getId() + « plugin, document SearchAfterJobsIterator.java Failed to parse category definition plugin JobResultsProvider.java Failed to parse records plugin JobResultsProvider.java Failed to parse influencer plugin JobResultsProvider.java Failed to parse modelPlot plugin JobResultsProvider.java Failed to parse categorizerStats plugin JobResultsProvider.java Failed to serialise job with id » + job.getId() + « plugin JobConfigProvider.java Failed to parse job configuration » + jobId + « plugin JobConfigProvider.java Failed to serialise job with id » + updatedJob.getId() + « plugin JobConfigProvider.java Failed to parser influencer parser, plugin BatchedInfluencersIterator.java Unable to submit operation plugin AutodetectWorkerExecutorService.java Max running job capacity » + localMaxAllowedRunningJobs + » reached plugin AutodetectProcessManager.java The input JSON data is malformed. plugin XContentRecordReader.java Unexpected empty inference response response, plugin InferenceProcessor.java Max number of inference processors reached; total inference processors . plugin InferenceProcessor.java Index index, plugin RollupResponseTranslator.java Index » + ((IndexNotFoundException) e).getIndex() + » was not found; index, plugin RollupResponseTranslator.java No indices (live or rollup) found during rollup search indices, search, plugin RollupResponseTranslator.java Task for Rollup Job » + request.getId() + » not found request, task, plugin TransportStartRollupAction.java The task with id » + request.getId() + » doesn’t exist request, task, plugin TransportDeleteRollupJobAction.java Cannot create job plugin TransportPutRollupJobAction.java Timed out after plugin TransportStopRollupAction.java Encountered unexpected error while waiting for plugin TransportStopRollupAction.java No index found to » + (request.freeze() ? «freeze» : «unfreeze index, plugin TransportFreezeIndexAction.java Policy already exists plugin EnrichStore.java Policy not found plugin EnrichStore.java The field » + name + » cannot have doc values = false plugin WildcardFieldMapper.java The field » + name + » cannot have indexOptions = index, plugin WildcardFieldMapper.java The field » + name + » cannot have store = true plugin WildcardFieldMapper.java The field » + name + » cannot have index = false index, plugin WildcardFieldMapper.java Error parsing wildcard regex pattern fragment » + fragment + « plugin WildcardFieldMapper.java Error parsing wildcard field fuzzy string » + searchTerm + « search, plugin WildcardFieldMapper.java Invalid query » given; expected but found parser, query, plugin AbstractBuilder.java Does not know how to handle parser, plugin AbstractBuilder.java Unsupported join key parser, join, plugin ExpressionBuilder.java Unknown arithmetic parser, plugin ExpressionBuilder.java Unknown operator parser, plugin ExpressionBuilder.java Inconsistent number of join keys specified; expected but found parser, join, plugin LogicalPlanBuilder.java Please specify sequence by before with not after parser, plugin LogicalPlanBuilder.java Sequence fork is unsupported parser, plugin LogicalPlanBuilder.java A positive maxspan value is required; found parser, plugin LogicalPlanBuilder.java No time unit specified; did you mean s as in s? parser, plugin LogicalPlanBuilder.java Decimal time interval not supported; please use an positive integer parser, plugin LogicalPlanBuilder.java Pipe is not supported yet parser, plugin LogicalPlanBuilder.java Pipe expects exactly one argument but found parser, plugin LogicalPlanBuilder.java Pipe expects a positive integer but found parser, plugin LogicalPlanBuilder.java EQL statement is too large; parser, plugin EqlParser.java Can’t round a geo_shape plugin, search, aggregations GeoShapeValuesSource.java Invalid value ; plugin CartesianPoint.java must be a number plugin CartesianPoint.java supports only POINT among WKT primitives; plugin CartesianPoint.java Field must be either or plugin CartesianPoint.java and must be valid float values plugin CartesianPoint.java field type does not accept > 2 dimensions plugin CartesianPoint.java Point expected plugin CartesianPoint.java Error parsing point plugin CartesianPoint.java Failed to add documents to export bulks plugin ExportBulk.java Failed to flush export bulks flush, plugin ExportBulk.java Missing exporter type for » + name + » exporter plugin Exporters.java Unknown exporter type » + type + » set for exporter » + name + « plugin Exporters.java Multiple » + type + » exporters are configured. there can plugin Exporters.java Export service is not started plugin Exporters.java Host list for » + hostsSetting.getKey() + » is empty hosts, plugin Exporter.java Failed to add documents to export bulk bulk, plugin LocalBulk.java Failed to add document plugin, document LocalBulk.java Failed to flush export bulk bulk, flush, plugin LocalBulk.java Bulk reports failures when exporting documents bulk, plugin LocalBulk.java Unable to send documents because none were loaded for export bulk bulk, plugin HttpExportBulk.java + key + is set but type is » + dependency + « plugin HttpExporter.java Host list for » + key + » is empty but type is » + type + « plugin HttpExporter.java + key + invalid host: » + host + « plugin HttpExporter.java + key + must use a consistent scheme: http or https plugin HttpExporter.java Username for » + key + » is set but type is » + type + « plugin HttpExporter.java + concreteSetting.getKey() + is malformed » + value + « plugin HttpExporter.java Header cannot be overwritten via » + fullSetting + « plugin HttpExporter.java Headers must have values; missing for setting » + fullSetting + « plugin HttpExporter.java + concreteSetting.getKey() + is malformed » + proxyBasePath + « plugin HttpExporter.java No body content for monitoring bulk request rest, request, plugin, bulk RestMonitoringBulkAction.java Autoscaling policy with name » + name + » does not exist plugin TransportDeleteAutoscalingPolicyAction.java Cannot parse entry in options plugin FullTextUtils.java Duplicate option detected in options plugin FullTextUtils.java Cannot parse boosting for plugin FullTextUtils.java Error building » + primaryName + «: plugin FunctionRegistry.java Source has » + response.getFailedShards() + » failed shards response, source, plugin DefaultCheckpointProvider.java Failed to create checkpoint plugin DefaultCheckpointProvider.java Failure during source checkpoint info retrieval source, plugin DefaultCheckpointProvider.java Failure during next checkpoint info retrieval plugin DefaultCheckpointProvider.java Failure during last checkpoint info retrieval plugin DefaultCheckpointProvider.java Failed to retrieve configuration plugin TransformCheckpointService.java Source indices have been deleted or closed. indices, source, plugin TransportPreviewTransformAction.java Failed to retrieve checkpointing info plugin TransportGetTransformStatsAction.java failed to create checkpoint. plugin TransformIndexer.java Failed to create checkpoint due to plugin TransformIndexer.java Unsupported aggregation type » + agg.getType() + « plugin Pivot.java Unexpected null response from test query response, query, plugin Pivot.java Failed to test query query, plugin Pivot.java Failed to parse search hit for ids search, plugin IndexBasedTransformConfigManager.java Failed to parse transform stats from search hit search, plugin IndexBasedTransformConfigManager.java Failed to create empty store repository, plugin CcrRepository.java Auto-follow pattern is missing plugin TransportGetAutoFollowPatternAction.java No shard follow tasks for follower indices indices, shard, plugin TransportFollowStatsAction.java A following engine does not accept operations without an assigned sequence number index, plugin FollowingEngine.java Snapshot lifecycle policy or policies not found snapshot, plugin TransportGetSnapshotLifecycleAction.java Snapshot lifecycle policy not found: snapshot, plugin TransportDeleteSnapshotLifecycleAction.java Lifecycle policy not found: plugin TransportDeleteLifecycleAction.java Field » + name() + » of type » + CONTENT_TYPE + « plugin HistogramFieldMapper.java + CONTENT_TYPE + field do not support searching; plugin HistogramFieldMapper.java Registry miss-match — expected StringStatsAggregatorSupplier; found plugin StringStatsAggregatorFactory.java Registry miss-match — expected BoxplotAggregatorSupplier; found plugin BoxplotAggregatorFactory.java Can’t round a histogram plugin, aggregations HistogramValuesSource.java Failed to parse wildcard service plugin WildcardServiceProviderResolver.java Invalid precision; plugin DateUtils.java Precision needs to be between 0-9; received plugin DateUtils.java IN query not supported yet parser, query, plugin ExpressionBuilder.java Unknown predicate parser, plugin ExpressionBuilder.java Pattern must not be null parser, plugin ExpressionBuilder.java A character not a string required for escaping; found parser, plugin ExpressionBuilder.java Char cannot be used for escaping parser, plugin ExpressionBuilder.java Does not recognize type parser, plugin ExpressionBuilder.java Unknown function parser, plugin ExpressionBuilder.java Don’t know how to parse parser, plugin ExpressionBuilder.java Fractional values are not supported for intervals parser, plugin ExpressionBuilder.java Invalid parameter data type parser, plugin ExpressionBuilder.java Unexpected actual parameter type for type parser, plugin ExpressionBuilder.java Cannot cast value of type to parameter type parser, plugin ExpressionBuilder.java Unexpected parameter parser, plugin ExpressionBuilder.java Invalid date received; parser, plugin ExpressionBuilder.java Invalid time received; parser, plugin ExpressionBuilder.java Invalid timestamp received; parser, plugin ExpressionBuilder.java Too «; errorPrefix; lowerCase.length() > 36 ? «long» : «short parser, plugin ExpressionBuilder.java Expected group separator at offset ; found parser, plugin ExpressionBuilder.java Expected hexadecimal at offset; found parser, plugin ExpressionBuilder.java Duplicate alias parser, alias, plugin LogicalPlanBuilder.java GROUP BY ALL is not supported parser, plugin LogicalPlanBuilder.java PIVOT currently supports only one aggregation; found parser, plugin LogicalPlanBuilder.java Queries with JOIN are not yet supported parser, plugin LogicalPlanBuilder.java Debug FORMAT should be specified at most once parser, plugin CommandBuilder.java Debug PLAN should be specified at most once parser, plugin CommandBuilder.java Explain TYPE should be specified at most once parser, plugin CommandBuilder.java Explain FORMAT should be specified at most once parser, plugin CommandBuilder.java Explain VERIFY should be specified at most once parser, plugin CommandBuilder.java SQL statement is too large; parser, plugin SqlParser.java NonReserved can only contain tokens. Found nested rule: parser, plugin SqlParser.java Not enough actual parameters parser, plugin SqlParser.java Cannot parse duration plugin Intervals.java Value cannot be used as it is too large to convert into s plugin Intervals.java Cannot determine datatype for plugin Intervals.java Cannot determine datatype for combination plugin Intervals.java : incorrect format; expecting plugin Intervals.java : expected (at ) but found plugin Intervals.java : unexpected trailing characters found plugin Intervals.java failed to load nori user dictionary plugins, plugin, analysis NoriTokenizerFactory.java failed to create blob container repositories, container, plugins HdfsBlobStore.java failed to load ICU rule files plugins, plugin, analysis IcuTokenizerFactory.java Failed to load settings plugins, settings ExampleCustomSettingsConfig.java Unable to configure Azure compute service plugins, azure, discovery-azure-classic AzureComputeServiceImpl.java failed to load kuromoji user dictionary plugins, plugin, analysis KuromojiTokenizerFactory.java failed to parse rules expression. object contains multiple fields rest-high-level, client, parser RoleMapperExpressionParser.java failed to parse rules expression. expected an object but found instead rest-high-level, client, parser RoleMapperExpressionParser.java failed to parse rules expression. object does not contain any fields rest-high-level, client, parser RoleMapperExpressionParser.java failed to parse rules expression. field requires an array rest-high-level, client, parser RoleMapperExpressionParser.java unknown key in the template rest-high-level, client, indices, template PutIndexTemplateRequest.java exception ElasticsearchException.java snapshot should be performed only on primary snapshot SnapshotShardsService.java cannot snapshot while relocating snapshot SnapshotShardsService.java shard didn’t fully recover yet shard SnapshotShardsService.java snapshot does not exist snapshot RestoreService.java cannot remove setting » + ignoredSetting + » on restore restore RestoreService.java cannot modify setting » + k + » on restore restore RestoreService.java cannot restore index » + index + » because it cannot be upgraded restore, index RestoreService.java index » + index + » wasn’t fully snapshotted — cannot restore restore, index RestoreService.java snapshot with the same name is already in-progress snapshot SnapshotsService.java must not contain whitespace SnapshotsService.java must not contain ‘;’ SnapshotsService.java must not start with ‘_’ SnapshotsService.java _all»; «Failed to update cluster state during repository operation cluster, repository SnapshotsService.java Could not find plugin class » + className + « plugins, plugin PluginsService.java thread CPU time is not supported on this JDK monitor, thread HotThreads.java thread allocated memory is not supported on this JDK monitor, memory, thread HotThreads.java thread wait/blocked time accounting is not supported on this JDK monitor, thread HotThreads.java cannot set current cluster state while waiting for a cluster state change cluster ClusterStateObserver.java already waiting for a cluster state change cluster ClusterStateObserver.java required alias » + alias + » does not exist cluster, metadata, alias AliasAction.java ; cluster, metadata MetadataIndexTemplateService.java failed to parse repository ; uuid not a string cluster, metadata, repository RepositoriesMetadata.java data_stream » + dataStreamName + » already exists cluster, metadata MetadataCreateDataStreamService.java Failed to verify index cluster, metadata, index MetadataIndexStateService.java an index or data stream exists with the same name as the alias cluster, metadata, index, alias AliasValidator.java Failed to create temporary index for parsing the alias cluster, metadata, index, alias MetadataIndexAliasesService.java unknown key for index template cluster, metadata, template, index IndexTemplateMetadata.java alias » + aliasName + » doesn’t exist cluster, metadata, alias Metadata.java no indices exist cluster, metadata, indices IndexNameExpressionResolver.java Already primary; can’t move to primary cluster, routing ShardRouting.java Not primary; can’t move to replica cluster, routing ShardRouting.java delayed reroute » + reason + » failed cluster, routing BatchedRerouteService.java delayed reroute » + reason + » could not be submitted cluster, routing BatchedRerouteService.java expected field name to be named commands; got instead cluster, allocation, routing AllocationCommands.java expected either field name commands; or start array; got instead cluster, allocation, routing AllocationCommands.java allocation command is malformed; got instead cluster, allocation, routing AllocationCommands.java publication » + currentPublication.get() + » already in progress cluster Coordinator.java publication cancelled before committing: cluster Publication.java faulty node cluster, node Publication.java failed to serialize cluster state for publishing to node cluster, node PublicationTransportHandler.java failed to serialize cluster state diff for publishing to node cluster, node PublicationTransportHandler.java failed to acquire connection cluster JoinHelper.java no longer the elected master cluster, master LeaderChecker.java disconnected cluster LeaderChecker.java Unable to investigate path » + path + « cluster ElasticsearchNodeCommand.java task cancelled before starting task TaskManager.java Interrupted waiting for completion of TaskManager.java parent task was cancelled task TaskManager.java task cancelled task CancellableTask.java Couldn’t convert task result to XContent for task TaskResultsService.java Expected a string but found instead TaskId.java missing or invalid written_by » + writtenBy + « index, blobstore BlobStoreIndexShardSnapshot.java » + NAME + » analyzer » + analyzer + » not found query, index MatchPhraseQueryBuilder.java failed to parse More Like This item. neither id nor doc is specified! query, index MoreLikeThisQueryBuilder.java failed to find geo field » + fieldName + « query, index GeoBoundingBoxQueryBuilder.java failed to parse query. query, index GeoBoundingBoxQueryBuilder.java failed to parse query. bounding box not provided query, index GeoBoundingBoxQueryBuilder.java » + queryName + » query malformed; no start_object after query name query, index AbstractQueryBuilder.java failed to find type for field » + fieldName + « query, index AbstractGeometryQueryBuilder.java failed to parse query type . unknown type. query, index MultiMatchQueryBuilder.java » + SimpleQueryStringBuilder.NAME + » analyzer » + analyzer + » not found query, index SimpleQueryStringBuilder.java » + SimpleQueryStringBuilder.NAME + » query text missing query, index SimpleQueryStringBuilder.java unknown serialized type » + ord + « query, index ZeroTermsQueryOption.java » + QueryStringQueryBuilder.NAME + » must be provided with a query query, index QueryStringQueryBuilder.java » + NAME + » unknown token » + token + « query, index TermsSetQueryBuilder.java » + ExistsQueryBuilder.NAME + » must be provided with a field query, index ExistsQueryBuilder.java must have query span query clause query, index FieldMaskingSpanQueryBuilder.java must have field set for it query, index FieldMaskingSpanQueryBuilder.java Unable to find a field mapper for field » + field + «. No ‘missing’ value defined. query, index FieldValueFactorFunctionBuilder.java » + NAME + » required field ‘field’ missing query, index FieldValueFactorFunctionBuilder.java parameter not supported! query, index DecayFunctionBuilder.java Object mapper » + mapper.fullPath() + » is defined more than once index MappingLookup.java Field » + mapper.name() + » is defined both as an object and a field index MappingLookup.java Field » + mapper.name() + » is defined more than once index MappingLookup.java Alias » + aliasMapper.name() + » is defined both as an object and an alias index, alias MappingLookup.java Alias » + aliasMapper.name() + » is defined both as an alias and a concrete field index, alias MappingLookup.java Field » + name + » attempted to shadow a time_series_dimension index MappingLookup.java Field » + name + » attempted to shadow a time_series_metric index MappingLookup.java Cannot use reserved field name » + mapper.name() + « index TextFieldMapper.java Error parsing null_value on field » + name() + «: index IpFieldMapper.java Error executing script on field » + name() + « index FieldMapper.java Unknown value » + o + » for field » + name + » — accepted values are index FieldMapper.java Unknown value » + v + » for field » + name + » — accepted values are index FieldMapper.java Cannot define script on field with index:false and doc_values:false index FieldMapper.java Cannot define multifields on a field with a script index FieldMapper.java Cannot define copy_to parameter on a field with a script index FieldMapper.java Unknown parameter boost on mapper » + name + « index FieldMapper.java Field » + n + » of type » + type + » can’t be used in multifields index FieldMapper.java error parsing field » + name() + «; expected an object but got index RangeFieldMapper.java failed to encode ranges index RangeFieldMapper.java Field » + name() + » of type » + typeName() + » does not support exists queries index DocCountFieldMapper.java Field » + name() + » of type » + typeName() + » is not searchable index DocCountFieldMapper.java Epoch » + formatter + » is not supported as dynamic date format index RootObjectMapper.java runtime must be a map type index RootObjectMapper.java Failed to get binary value index BinaryFieldMapper.java No type specified for runtime field » + fieldName + « index RuntimeField.java No handler for type » + type + » declared on runtime field » + fieldName + « index, handler RuntimeField.java failed to serialize source for type » + root.name() + « index, source Mapping.java position_increment_gap must be positive; got » + v + « index TextParams.java template » + name + » must have either mapping or runtime set template, index, mapping DynamicTemplate.java meta can’t have more than 5 entries; but got » + meta.size() + » on field » + name + « index TypeParsers.java failed to parse field » + fieldType().name() + » of type » + contentType() + « index AbstractGeometryFieldMapper.java field type does not accept > 3 dimensions index AbstractPointGeometryFieldMapper.java failed to find type parsed » + mappingType + » for » + fullName + « index, mapping DynamicFieldsBuilder.java Cannot » + verb + » to a field alias » + mapper.name() + «. index, alias DocumentParser.java failed to load analyzer for name index, analysis AnalysisRegistry.java unable to find a valid shard at » + indexPath + « shard, index TruncateTranslogAction.java unable to list commits at » + indexPath + « index TruncateTranslogAction.java shard must have a valid translog UUID but got: null shard, index TruncateTranslogAction.java failed to find existing translog files index TruncateTranslogAction.java shard must have a valid translog UUID shard, index TruncateTranslogAction.java translog looks like version 1 or later; but has corrupted header version, index TranslogHeader.java timed out waiting for relocation hand-off to complete shard, index, relocation IndexShard.java : shard is no longer relocating shard, index IndexShard.java io exception while building ‘store stats’ shard, index IndexShard.java failed to wrap searcher shard, index IndexShard.java Read not allowed on IndexShard shard, index IndexShard.java empty restore source shard, index, restore, source StoreRecovery.java restore failed shard, restore, index StoreRecovery.java index directory » + indexPath + «; must exist and be a directory shard, index RemoveCorruptedShardDataCommand.java Unable to find index in cluster state cluster, shard, index RemoveCorruptedShardDataCommand.java aborted by user shard, index RemoveCorruptedShardDataCommand.java translog directory » + translogPath + «; must exist and be a directory shard, index RemoveCorruptedShardDataCommand.java Index is unrecoverable shard, index RemoveCorruptedShardDataCommand.java ERROR: could not open directory «» + indexPath + «»; exiting shard, index RemoveCorruptedShardDataCommand.java No shard state meta data at shard, index RemoveCorruptedShardDataCommand.java No node meta data at shard, index, node RemoveCorruptedShardDataCommand.java Unable to resolve node path for shard, index, node RemoveCorruptedShardDataCommand.java Index is unrecoverable — there are missing segments shard, index RemoveCorruptedLuceneSegmentsAction.java failed to select best terms index TermVectorsService.java failed to execute term vector request request, index TermVectorsService.java Failed to get id » + id + « index ShardGetService.java Failed to get id » + id + » with includes/excludes set index ShardGetService.java failed to create an in-memory segment for get » + operation.id() + « index TranslogDirectoryReader.java failed to acquire reader index Engine.java failed to create engine index InternalEngine.java failed to open reader on writer index InternalEngine.java cannot migrate because that index does not exist index SystemIndexMigrator.java Unable to clean up path: » + path + «: NodeRepurposeCommand.java Unknown date time unit id » + id + « Rounding.java unknown rounding id » + id + « Rounding.java Failed to delete pid file delete PidFile.java cannot generate error message for deserialization Strings.java :» + e.getMessage() + « search, lucene Queries.java Missing value for field » + field + « search, lucene FieldValueFactorFunction.java function score query returned an invalid score: » + finalScore + » for doc: search, query, lucene FunctionScoreQuery.java failed to parse as a double MemorySizeValue.java failed to parse setting with value ByteSizeValue.java failed to parse as a «auto:int;int» Fuzziness.java unable to parse = as either percentage or bytes RelativeByteSizeValue.java operation was cancelled reason » + reason + « CancellableThreads.java task cancelled task CancellableSingleObjectCache.java Failed to generate » + map + « settings Settings.java unit not supported for date math JavaDateMathParser.java : NotSerializableExceptionWrapper.java failed to parse ; expected 2 or 3 coordinates » + «but found: GeoPoint.java error parsing geometry GeometryParser.java Field » + name + » found an unsupported shape Line GeoShapeUtils.java Field » + name + » found an unsupported shape LinearRing GeoShapeUtils.java failed to parse bounding box. field name expected but found GeoBoundingBox.java unsupported shape type GeoJson.java attempting to get number of dimensions on an empty coordinate node node GeoJson.java expected a single points but got a list GeoJson.java expected a list of points but got a point GeoJson.java not enough points to build a line GeoJson.java field must be either ; or GeoUtils.java token not allowed GeoUtils.java field missing GeoUtils.java Unable to find the latest snapshot for shard » + shardId + « repositories, shard, snapshot IndexSnapshotsService.java Attempting to remove non-existent snapshots from repository data repositories, repository RepositoryData.java repository type » + repositoryMetadata.type() + » does not exist repositories, metadata, repository RepositoriesService.java must not contain the following characters repositories RepositoriesService.java snapshot is in progress repositories, snapshot RepositoriesService.java snapshot deletion is in progress repositories, snapshot RepositoriesService.java repository clean up is in progress repositories, repository RepositoriesService.java snapshot restore is in progress repositories, snapshot, restore RepositoriesService.java Snapshot has no segments file repositories, snapshot, blobstore FileRestoreContext.java Failed to recover index repositories, index, blobstore FileRestoreContext.java cannot clone shard snapshot on a readonly repository snapshot, repositories, shard, blobstore, repository BlobStoreRepository.java failed to get snapshot info repositories, snapshot, blobstore BlobStoreRepository.java path » + basePath() + » is not accessible on master node repositories, blobstore, master, node BlobStoreRepository.java cannot delete test data at repositories, delete, blobstore BlobStoreRepository.java cannot snapshot shard on a readonly repository snapshot, repositories, shard, blobstore, repository BlobStoreRepository.java failed to list blobs repositories, blobstore BlobStoreRepository.java Failed to get store file metadata repositories, metadata, blobstore BlobStoreRepository.java Failed to write commit point repositories, blobstore BlobStoreRepository.java Store got closed concurrently repositories, blobstore BlobStoreRepository.java failed to restore snapshot » + snapshotId + « repositories, restore, snapshot, blobstore BlobStoreRepository.java Failed to verify repository repositories, repository, blobstore BlobStoreRepository.java slice can only be used with scroll or point-in-time requests search SearchService.java stored_fields cannot be disabled if _source is requested search SearchService.java stored_fields cannot be disabled when using the fields option search SearchService.java Failed to execute main query search, query QueryPhase.java Time exceeded search, query QueryPhase.java max_children is only supported on top level of nested sort search, sort FieldSortBuilder.java nested_path has been removed in favour of the nested parameter search, sort FieldSortBuilder.java nested_filter has been removed in favour of the nested parameter search, sort FieldSortBuilder.java does not support search, sort GeoDistanceSortBuilder.java cancelled search DfsPhase.java Exception during dfs phase search DfsPhase.java I/O exception during suggest phase search SuggestPhase.java suggesterphrase doesn’t support field » + currentFieldName + « search PhraseSuggestionBuilder.java the required field option » + FIELDNAME_FIELD.getPreferredName() + » is missing search PhraseSuggestionBuilder.java rewrite failed search SearchContext.java Rescore Phase Failed search RescorePhase.java Failed to build xcontent. search SearchAfterBuilder.java Error running fetch phase for doc » + docId + « search FetchPhase.java Error building fetch sub-phases search FetchPhase.java Error filtering source search, source FetchSourcePhase.java pre_tags are set but post_tags are not set search AbstractHighlighterBuilder.java unexpected token type » + token + « search HighlightField.java Unknown order direction » + dir + « search, aggregations InternalOrder.java Unexpected token » + token + » for order search, aggregations InternalOrder.java Must specify at least one field for order search, aggregations InternalOrder.java io error while building empty agg search, aggregations AdaptingAggregator.java Could not perform time series aggregation search, aggregations AggregationPhase.java no found for value search, aggregations Aggregator.java Error reading values search, aggregations DiversifiedMapSamplerAggregator.java IOException collecting best scoring results search, aggregations BestDocsDeferringCollector.java IO error creating collector search, aggregations BestDocsDeferringCollector.java Time series aggregations cannot be used inside global aggregation. search, aggregations GlobalAggregatorFactory.java Aggregation » + name() + » must have cardinality 1 but was » + cardinality + « search, aggregations GlobalAggregatorFactory.java Unknown parameter in Include/Exclude clause: search, aggregations IncludeExclude.java parameters required_size and shard_size must be >0 in terms aggregation. search, aggregations TermsAggregator.java parameter min_doc_count and shardMinDocCount must be >=0 in terms aggregation. search, aggregations TermsAggregator.java Unregistered Aggregation » + registryKey.getName() + « search, aggregations ValuesSourceRegistry.java Top hits aggregations cannot be used together with time series aggregations search, aggregations TopHitsAggregatorFactory.java Rescore TopHits Failed search, aggregations TopHitsAggregator.java Failed to fetch field caps for TimeSeriesMetricsService.java couldn’t lookup score AggregationScript.java Couldn’t look up score ScriptedMetricAggContexts.java Value must be of type Map: » + parameterName + « Script.java Unsupported field » + parameterName + « Script.java connection already closed TcpTransport.java failed to acquire close-read-lock TcpTransport.java Node not connected node ClusterConnectionManager.java Cannot parse the mapping for index indices, index, mapping SystemIndexManager.java temp index should not trigger shard creation shard, indices, index IndicesService.java temp index should not trigger store creation indices, index IndicesService.java failed to delete unused index after deleting its last shard (» + shardId + «) shard, delete, indices, index IndicesService.java Could not find hunspell dictionary %s indices, analysis HunspellService.java Missing affix file for hunspell dictionary %s indices, analysis HunspellService.java Too many affix files exist for hunspell dictionary %s indices, analysis HunspellService.java Failed to list store metadata for shard » + request.shardId + « shard, metadata, indices, request TransportNodesListShardStoreMetadata.java node doesn’t have meta data for index index, indices, node TransportNodesListShardStoreMetadata.java cluster service was closed while waiting for mapping updates cluster, indices, recovery, mapping PeerRecoveryTargetService.java timed out waiting for mapping updates » + «(timeout » + timeout + «) recovery, indices, mapping PeerRecoveryTargetService.java node is shutting down recovery, indices, node PeerRecoveryTargetService.java source has canceled the recovery recovery, indices, source PeerRecoveryTargetService.java failed to pause recovery recovery, indices RemoteRecoveryTargetHandler.java shard is closed and recovery was canceled reason » + reason + « shard, indices, recovery RecoverySourceHandler.java Recover snapshot files cancelled recovery, indices, snapshot RecoverySourceHandler.java failed to send/replay operations recovery, indices RecoverySourceHandler.java unknown cause rest RestController.java failed to parse request request, rest RestRequestFilter.java response channel » + channel.request().getHttpChannel() + » closed rest, response RestActionListener.java Timed out getting cluster state cluster, admin, rest RestClusterStateAction.java Timed out getting mappings admin, indices, rest RestGetMappingAction.java response channel » + request.getHttpChannel() + » closed request, rest, response RestSegmentsAction.java Couldn’t parse query query, rest RestCountAction.java Failed to bind to AbstractHttpServerTransport.java pipeline is missing IngestService.java failed to stop node node, bootstrap Bootstrap.java Can only use elasticsearch-plugins.yml config file with distribution type docker bootstrap Bootstrap.java failed to bind service node Node.java composable template » + template.indexPatterns() + » forbids index auto creation template AutoCreateIndex.java » + AUTO_CREATE_INDEX_SETTING.getKey() + » is false AutoCreateIndex.java » + AUTO_CREATE_INDEX_SETTING.getKey() + » (» + autoCreate + «) doesn’t match AutoCreateIndex.java expected START_OBJECT as the token but was IndicesOptions.java already parsed expand_wildcards IndicesOptions.java could not read indices options. unexpected object field » + currentFieldName + « indices IndicesOptions.java indices options xcontent did not contain indices IndicesOptions.java task doesn’t support this operation task TransportTasksAction.java task is missing task TransportTasksAction.java failed to load metadata cluster, metadata, admin TransportNodesSnapshotsStatus.java Desired nodes not found cluster, admin TransportGetDesiredNodesAction.java reroute after update settings failed cluster, admin, settings TransportClusterUpdateSettingsAction.java task isn’t running and hasn’t stored its results cluster, admin, node, task TransportGetTaskAction.java Stored task status for didn’t contain any source! cluster, admin, node, task TransportGetTaskAction.java task is not found cluster, admin, node, task TransportCancelTasksAction.java failed to detect hot threads cluster, admin, threads, node TransportNodesHotThreadsAction.java failed to analyze admin, indices TransportAnalyzeAction.java failed to analyze (charFiltering) admin, indices TransportAnalyzeAction.java failed to serialize XContent of field » + field + « admin, indices, mapping TransportGetFieldMappingsIndexAction.java Failed to query nodes » + nodeIds + « query, dangling, node, indices, delete, admin TransportDeleteDanglingIndexAction.java mix of settings map and top-level properties admin, indices, settings UpdateSettingsRequest.java unknown key for create index admin, indices, index CreateIndexRequest.java One of the shards is incompatible with the required minimum version search, shards, version CanMatchPreFilterSearchPhase.java Shard failures search, shard AbstractSearchAsyncAction.java «; «Shard failures search, shard AbstractSearchAsyncAction.java fetch»; «inner finish failed search SearchScrollAsyncAction.java Could not explain TransportExplainAction.java no parameter named and type ARRAY MultiTermVectorsRequest.java no parameter named and type OBJECT MultiTermVectorsRequest.java _mtermvectors: Parameter not supported MultiTermVectorsRequest.java error SimulateDocumentBaseResult.java index » + index + » has no active shard copy shard, index RequestDispatcher.java failed to load started shards shards TransportNodesListGatewayStartedShards.java the task with id doesn’t exist task, persistent PersistentTasksClusterService.java the task with id and allocation id doesn’t exist task, allocation, persistent PersistentTasksClusterService.java Partial response while loading watches plugin, response WatcherService.java unable to parse watch record plugin TriggeredWatch.java watch does not exist plugin ExecutionService.java could not parse http request. could not parse field request, plugin HttpRequest.java URL does not contain a scheme plugin HttpRequest.java Malformed URL plugin HttpRequest.java could not parse http response. expected a field name but found instead plugin, response HttpResponse.java could not parse trigger for . unknown trigger type plugin TriggerService.java could not parse schedule. invalid year times plugin YearlySchedule.java could not parse schedule. unexpected token plugin HourlySchedule.java could not parse schedule. unexpected field plugin HourlySchedule.java could not parse schedule. invalid month times plugin MonthlySchedule.java could not parse schedule. invalid weekly times plugin WeeklySchedule.java invalid time value for field — plugin YearTimes.java could not parse time . time hour is not a number plugin DayTimes.java could not parse time . time minute is not a number plugin DayTimes.java invalid month day value. string value cannot be plugin MonthTimes.java Watch with id does not exist plugin TransportAckWatchAction.java could not create an xcontent attachment » + name + « plugin Attachment.java could not parse email template. empty field plugin, template EmailTemplate.java could not parse email. empty field plugin Email.java Expected starting JSON object after in watch plugin ChainInput.java could not parse action / plugin EmailAction.java missing shard shard, plugin TransportRollupIndexerAction.java Unable to resize temp rollup index » + tmpIndexName + « plugin, index TransportRollupAction.java Unable to update settings of temp rollup index » + tmpIndexName + « plugin, settings, index TransportRollupAction.java Unable to index into temp rollup index » + tmpIndexName + « plugin, index TransportRollupAction.java failed to publish new cluster state with rollup metadata cluster, metadata, plugin TransportRollupAction.java Unable to rollup index » + originalIndex + « plugin, index TransportRollupAction.java Unable to delete temp rollup index » + tmpIndex + « delete, plugin, index TransportRollupAction.java Could not identify key in agg » + k + « plugin IndexerUtils.java Aggregation » + m.getName() + » is of non-supported type » + m.getType() + « plugin IndexerUtils.java There is no private key available for this credential plugin SamlIdentityProviderBuilder.java Cannot read certificate plugin SamlServiceProviderDocument.java Certificate () is not a X.509 certificate plugin SamlServiceProviderDocument.java Expected a single certificate; but found plugin SamlServiceProviderDocument.java Cannot parse certificate(s) plugin SamlServiceProviderDocument.java failed to set context classloader for SAML IdP plugin SamlInit.java SAML object is incorrect type. Expected but was plugin SamlFactory.java Failed to unmarshall SAML content plugin SamlFactory.java failed to marshall SAML object to DOM element plugin SamlFactory.java Could not load XSD schema file plugin SamlAuthnRequestValidator.java Invalid Authentication Request query string (zero parameters) request, query, plugin SamlAuthnRequestValidator.java SAML authentication request has no issuer request, plugin SamlAuthnRequestValidator.java Failed to parse SAML message plugin SamlAuthnRequestValidator.java SAML message cannot be Base64 decoded plugin SamlAuthnRequestValidator.java SAML message cannot be inflated plugin SamlAuthnRequestValidator.java Cannot reconstruct query for signature verification query, plugin SamlAuthnRequestValidator.java Request is missing secondary authentication request, plugin TransportSamlInitiateSingleSignOnAction.java node » + request.getNodeId() + » is not currently shutting down request, plugin, node TransportDeleteShutdownNodeAction.java no segments* file found in » + directory + «: files: plugin, lucene OldSegmentInfos.java Request to refresh anomaly detector memory requirements on non-master node node, plugin, refresh, request, memory MlMemoryTracker.java Request to put data frame analytics memory requirement on non-master node request, plugin, memory, node MlMemoryTracker.java Node ceased to be master during ML memory tracker refresh node, master, plugin, refresh, memory MlMemoryTracker.java Request to refresh anomaly detector memory requirement on non-master node node, plugin, refresh, request, memory MlMemoryTracker.java cannot retrieve data because index » + ((IndexNotFoundException) cause).getIndex() + » does not exist plugin, index ExtractedFieldsDetectorFactory.java No model could be found to perform inference plugin InferenceStep.java Failed to serialise data frame analytics with id » + config.getId() + « plugin DataFrameAnalyticsConfigProvider.java unknown property » + path + » for » + aggType + » aggregation » + aggName + « plugin MlAggsHelper.java Missing wild_card child even though maximum children reached plugin TreeNode.java allocation already exists plugin, allocation TrainedModelAllocationMetadata.java allocation for model with id already exist plugin, allocation TrainedModelAllocationClusterService.java allocation for model with id not found plugin, allocation TrainedModelAllocationClusterService.java allocation for model with id is not routed to node plugin, allocation, node TrainedModelAllocationClusterService.java Trained model is not deployed. plugin ModelLoadingService.java Text classification result has no data plugin TextClassificationProcessor.java Zero shot classification result has no data plugin ZeroShotClassificationProcessor.java tokenization is empty plugin FillMaskProcessor.java no valid tokenization to build result plugin NerProcessor.java stored vocabulary is missing required token plugin BertTokenizer.java stored vocabulary is missing required token(s) plugin BertTokenizer.java Trained model is not initialized plugin TrainedModelDeploymentTask.java process context missing plugin DeploymentManager.java timeout waiting for inference result plugin DeploymentManager.java Reset mode has been enabled plugin ResultsPersisterService.java search failed with status search, plugin ResultsPersisterService.java Tried to get job manager although Machine Learning is disabled plugin JobManagerHolder.java Unexpected death of autodetect: plugin JobModelSnapshotUpgrader.java Unexpected death of the result processor plugin JobModelSnapshotUpgrader.java close snapshot upgrade interrupted by kill request upgrade, request, plugin, snapshot JobModelSnapshotUpgrader.java Close job interrupted by kill request request, plugin AutodetectCommunicator.java An error occurred while searching forecasts to delete delete, plugin ExpiredForecastsRemover.java Failed to remove expired forecasts plugin ExpiredForecastsRemover.java Search for expired snapshots failed search, plugin ExpiredModelSnapshotsRemover.java Failed to remove expired results for job » + job.getId() + « plugin ExpiredResultsRemover.java Failed to remove expired annotations for job » + job.getId() + « plugin ExpiredAnnotationsRemover.java No calendar with id » + Strings.arrayToCommaDelimitedString(idTokens) + « plugin CalendarQueryBuilder.java Failed to analyze value » + fieldValue + » of field » + fieldName + « plugin CategorizationAnalyzer.java one or more data frame analytics are in failed state; use force stop instead plugin TransportStopDataFrameAnalyticsAction.java the task has been stopped while waiting to be started plugin, task TransportStartDataFrameAnalyticsAction.java Could not delete filter with ID » + filterId + » because it does not exist filter, plugin, delete TransportDeleteFilterAction.java Cannot delete data frame analytics while its status is delete, plugin TransportDeleteDataFrameAnalyticsAction.java model_alias could not be found plugin TransportDeleteTrainedModelAliasAction.java Cannot run forecast: internal error; please check the logs plugin TransportForecastJobAction.java Opening job timed out after plugin TransportOpenJobAction.java Unable to find filter » + resourceId + « filter, plugin TransportGetFiltersAction.java one or more jobs have state failed; use force close plugin TransportCloseJobAction.java unexpected failure gathering pipeline information plugin TransportGetTrainedModelsStatsAction.java cannot reset job while indices are being upgraded indices, plugin TransportResetJobAction.java A filter with id » + filter.getId() + » already exists filter, plugin TransportPutFilterAction.java Starting datafeed » + params.getDatafeedId() + » timed out after » + timeout + « plugin TransportStartDatafeedAction.java Failed to update datafeed plugin DatafeedConfigAutoUpdater.java some datafeeds failed being upgraded. plugin DatafeedConfigAutoUpdater.java Unrecognized enrich policy type plugin EnrichPolicyRunner.java Encountered bulk failures during reindex process reindex, plugin, bulk EnrichPolicyRunner.java Encountered search failures during reindex process reindex, search, plugin EnrichPolicyRunner.java policy does not exist plugin EnrichPolicyExecutor.java policy already exists plugin EnrichStore.java policy not found plugin EnrichStore.java Property value on field » + n + » must be a number or a string; but got » + o + « plugin ConstantKeywordFieldMapper.java error while executing search search, plugin AsyncSearchTask.java uuid » + repositoryUuid + «; original name » + originalName + « plugin, repository SearchableSnapshotDirectory.java setting must be non-negative cache, plugin FrozenCacheService.java setting must be multiple of cache, plugin FrozenCacheService.java setting must be greater than zero cache, plugin FrozenCacheService.java setting must be non-negative»; SHARED_CACHE_SETTINGS_PREFIX + «size cache, plugin FrozenCacheService.java system index cannot be mounted as searchable snapshots plugin, index TransportMountSearchableSnapshotAction.java index » + indexName + » not found in repository » + repoName + « plugin, repository, index TransportMountSearchableSnapshotAction.java snapshot » + snapName + » not found in repository » + repoName + « repository, snapshot, plugin TransportMountSearchableSnapshotAction.java waiting until metadata writes are unblocked metadata, plugin LocalExporter.java exporter is busy installing resources plugin LocalExporter.java Cannot refresh alerts from nodes other than currently elected master. refresh, plugin, master LocalExporter.java cannot manage cluster alerts because .watches index is not allocated cluster, plugin LocalExporter.java cannot manage cluster alerts because exporter is terminated cluster, plugin LocalExporter.java cannot manage cluster alerts because alerting is disabled cluster, plugin LocalExporter.java failed to set monitoring plugin LocalExporter.java » + key + » is set but type is » + dependency + « plugin HttpExporter.java » + key + » invalid host: » + host + « plugin HttpExporter.java » + key + » must use a consistent scheme: http or https plugin HttpExporter.java » + concreteSetting.getKey() + » is malformed » + value + « plugin HttpExporter.java » + concreteSetting.getKey() + » is malformed » + proxyBasePath + « plugin HttpExporter.java Failed to update monitoring migration settings plugin, settings TransportMonitoringMigrateAlertsAction.java multiple errors occurred during migration plugin TransportMonitoringMigrateAlertsAction.java Could not get shard stats for primary of index » + leaderIndex + » on leader cluster cluster, shard, plugin, repository, index CcrRepository.java cannot open ccr restore session if shard closed shard, repository, restore, plugin CcrRestoreSourceService.java auto-follow pattern is missing plugin TransportDeleteAutoFollowPatternAction.java query relation not supported for Field » + fieldName + «. query, plugin, index ShapeQueryPointProcessor.java Field » + fieldName + » does not support » + ShapeType.LINESTRING + » queries query, plugin, index ShapeQueryPointProcessor.java Field » + fieldName + » does not support » + ShapeType.LINEARRING + » queries query, plugin, index ShapeQueryPointProcessor.java Field » + fieldName + » does not support » + ShapeType.MULTILINESTRING + » queries query, plugin, index ShapeQueryPointProcessor.java Field » + fieldName + » does not support » + ShapeType.MULTIPOINT + » queries query, plugin, index ShapeQueryPointProcessor.java Field » + fieldName + » does not support » + ShapeType.POINT + » queries query, plugin, index ShapeQueryPointProcessor.java failed to encode shape plugin, index BinaryGeoShapeDocValuesField.java must be a number plugin CartesianPoint.java Failed to write ZIP file ‘» + file + «‘ plugin HttpCertificateCommand.java Failed to write certificate to ZIP file plugin HttpCertificateCommand.java Failed to write CA to ZIP file plugin HttpCertificateCommand.java Failed to write Kibana details ZIP file plugin HttpCertificateCommand.java Failed to read keystore plugin HttpCertificateCommand.java Failed to read certificates from plugin HttpCertificateCommand.java Failed to read private key from plugin HttpCertificateCommand.java Failed to create security index plugin, index SecurityIndexManager.java role retrieval had one or more failures plugin CompositeRolesStore.java Unexpected error while serializing event data plugin LoggingAuditTrail.java No api key ids provided for invalidation plugin ApiKeyService.java Error invalidating api key plugin ApiKeyService.java clearing the API key cache failed; please clear the caches manually cache, plugin ApiKeyService.java authentication token must present for realms authentication plugin RealmsAuthenticator.java create token»; new ElasticsearchException(«failed to create token document document, plugin TokenService.java supplied token is not valid plugin TokenService.java failed to invalidate token plugin TokenService.java Error invalidating » + srcPrefix + «: plugin TokenService.java invalid token document document, plugin TokenService.java Failed to compute secret key for active salt plugin TokenService.java token expired plugin TokenService.java invalid_grant plugin TokenService.java unable to perform requested action plugin TokenService.java failed to verify signed authentication information plugin AuthenticationService.java rest request attempted to inject a user request, plugin, rest AuthenticationService.java Cannot construct SAML redirect plugin SamlRedirect.java failed to start file watcher for role mapping file » + file.toAbsolutePath() + « plugin, mapping DnRoleMapper.java Setting » + settingKey + » expects a claim with String or a String Array value plugin ClaimParser.java Setting » + RealmSettings.getFullSettingKey(realmConfig; setting.getClaim()) + » is required plugin, settings ClaimParser.java no authentication available to generate API key plugin ApiKeyGenerator.java Failed to authenticate secondary user plugin SecondaryAuthenticator.java failed to start watching the user roles file » + file.toAbsolutePath() + « plugin FileUserRolesStore.java could not read users file » + path.toAbsolutePath() + « plugin FileUserRolesStore.java failed to start watching users file plugin FileUserPasswdStore.java timed out waiting for » + «execution of ldap runnable plugin LdapRealm.java Failed to consume the OpenID connect response. plugin, response OpenIdConnectAuthenticator.java Failed to parse or validate the ID Token plugin OpenIdConnectAuthenticator.java Failed to verify access token. ID Token doesn’t contain at_hash claim plugin OpenIdConnectAuthenticator.java Failed to verify access token. plugin OpenIdConnectAuthenticator.java Failed to validate the response; the response did not contain a state parameter plugin, response OpenIdConnectAuthenticator.java Invalid state parameter ; while was expected plugin OpenIdConnectAuthenticator.java Failed to get claims from the Userinfo Endpoint. plugin OpenIdConnectAuthenticator.java Failed to get claims from the Userinfo Endpoint. Request was cancelled plugin OpenIdConnectAuthenticator.java Failed to get user information from the UserInfo endpoint. plugin OpenIdConnectAuthenticator.java Userinfo Response did not contain a sub Claim plugin, response OpenIdConnectAuthenticator.java Failed to exchange code for Id Token using the Token Endpoint. plugin OpenIdConnectAuthenticator.java Failed to exchange code for Id Token plugin OpenIdConnectAuthenticator.java Token Response did not contain an ID Token or parsing of the JWT failed. plugin, response OpenIdConnectAuthenticator.java Failed to retrieve remote JWK set. plugin OpenIdConnectAuthenticator.java Failed to retrieve remote JWK set. Request was cancelled. plugin OpenIdConnectAuthenticator.java The configuration setting » + RealmSettings.getFullSettingKey(config; setting) + » is required plugin, settings OpenIdConnectRealm.java cannot load role for service account » + principal + » — no such service account plugin ServiceAccountService.java failed to start watching service_tokens file plugin FileServiceAccountTokenStore.java failed to generate key plugin SystemKeyTool.java unable to create ip filter for rule » + ruleType + » » + value + « filter, plugin SecurityIpFilterRule.java Failed to start watching the operator users file » + file.toAbsolutePath() + « plugin FileOperatorUsersStore.java Error parsing operator users file plugin FileOperatorUsersStore.java Operator privileges are required for plugin OperatorPrivileges.java there is no authenticated user plugin, rest RestGetUserPrivilegesAction.java Failed to authenticate api key grant plugin, rest RestGrantApiKeyAction.java error_description plugin, rest RestGetTokenAction.java the grant type is not supported plugin TransportGrantAction.java did not find an authenticated user plugin TransportAuthenticateAction.java Unable to enroll node plugin, node TransportNodeEnrollmentAction.java Failed to create token for the elastic/kibana service account plugin TransportKibanaEnrollmentAction.java OAuth2 token creation is not supported for service accounts plugin TransportCreateTokenAction.java Token Metadata did not contain a valid IdToken metadata, plugin TransportOpenIdConnectLogoutAction.java Authentication did not contain metadata metadata, plugin TransportOpenIdConnectLogoutAction.java No active authentication plugin TransportOpenIdConnectLogoutAction.java No active user plugin TransportOpenIdConnectLogoutAction.java Authentication has no authenticating realm plugin TransportOpenIdConnectLogoutAction.java Authenticating realm does not exist plugin TransportOpenIdConnectLogoutAction.java Authentication token does not have OpenID Connect metadata metadata, plugin TransportOpenIdConnectLogoutAction.java Cannot find OpenID Connect realm with issuer plugin TransportOpenIdConnectPrepareAuthenticationAction.java Found multiple OpenID Connect realm with issuer plugin TransportOpenIdConnectPrepareAuthenticationAction.java Cannot find OpenID Connect realm with name plugin TransportOpenIdConnectPrepareAuthenticationAction.java Primary shards were not active shards=; active= shards, plugin GetGlobalCheckpointsAction.java Can’t round an » + AggregateDoubleMetricFieldMapper.CONTENT_TYPE + « plugin, aggregations AggregateMetricsValuesSource.java Failure to generate KEK to wrap the DEK » + dekId + « repositories, plugin EncryptedRepository.java Unexpected fatal internal error repositories, plugin EncryptedRepository.java Unexpected exception retrieving DEK » + dekId + « repositories, plugin EncryptedRepository.java Wrapped DEK » + dekId + » is larger than expected repositories, plugin EncryptedRepository.java Failure to AES wrap the DEK » + dekId + « repositories, plugin EncryptedRepository.java Cannot descend into the DEK blob container repositories, container, plugin EncryptedRepository.java The encrypted blob » + blobName + » is too small » + bytesRead + « repositories, plugin EncryptedRepository.java Failure creating transform notification index plugin, index TransformAuditor.java Failed to delete internal indices delete, indices, plugin IndexBasedTransformConfigManager.java Cannot start task for transform ; because state was plugin, task TransformTask.java Attempted to do a search request for failed transform . search, request, plugin ClientTransformIndexer.java Attempted to do a bulk index request for failed transform . request, plugin, index, bulk ClientTransformIndexer.java Attempted to start a failed transform . plugin TransformIndexer.java Starting transform » + params.getId() + » timed out after » + timeout + « plugin TransportStartTransformAction.java n»; «Explanation so far:n»; «n plugin TextStructureFinderManager.java expected an object but found instead plugin WatchStatus.java Failed to build ToXContent client, plugin WatchSourceBuilder.java failed to read value plugin XContentSource.java type plugin WatchRecord.java setting » + WatcherField.ENCRYPTION_KEY_SETTING.getKey() + » must be set in keystore plugin CryptoService.java failed to start crypto service. could not load encryption key plugin CryptoService.java unable to decode encrypted data plugin CryptoService.java error encrypting data plugin CryptoService.java error creating cipher plugin CryptoService.java foreach object was an empty list; could not run any action plugin ActionWrapper.java specified foreach object was null: plugin ActionWrapper.java specified foreach object was not a an array/collection: plugin ActionWrapper.java Failed to parse the get result plugin AsyncTaskIndexService.java A data frame analytics with id already exists plugin ExceptionsHelper.java No known trained model with deployment with id plugin ExceptionsHelper.java must be a greater than or equal to 0 plugin GetTrainedModelsStatsAction.java there is no user available in the current context plugin SecurityContext.java The set of patterns is too complex to evaluate plugin StringMatcher.java failed to parse role . expected an object but found instead plugin RoleDescriptor.java Field is not supported in a has_privileges request request, plugin RoleDescriptor.java failed to parse indices privileges for role — indices, plugin RoleDescriptor.java Failed to load role query query, plugin DocumentSubsetReader.java unable to compute field permissions plugin FieldPermissionsCache.java no role descriptors found for API key plugin Subject.java Error using PBKDF2 for password hashing plugin Hasher.java Error using PBKDF2 implementation from the selected Security Provider plugin Hasher.java expected object but found instead plugin PutPrivilegesRequestBuilder.java failed to initialize the SSLContext plugin SSLService.java failed to load SSL configuration — plugin SSLService.java failed to obtain ssl service plugin SSLConfigurationReloader.java failed to initialize TrustManager for plugin RestrictedTrustConfig.java close index request failed to be acknowledged request, plugin, index CloseFollowerIndexStep.java settings update not acknowledged in step » + getKey().toString() + « plugin, settings UpdateRollupIndexPolicyStep.java unfollow request failed to be acknowledged request, plugin UnfollowFollowerIndexStep.java es.failed_to_remove_retention_leases plugin UnfollowFollowerIndexStep.java mount snapshot response failed to complete; got response plugin, snapshot, response MountSnapshotStep.java read only add block index request failed to be acknowledged request, plugin, index ReadOnlyStep.java open index request failed to be acknowledged request, plugin, index OpenIndexStep.java pause follow request failed to be acknowledged request, plugin PauseFollowerIndexStep.java Unknown license version found; please upgrade all nodes to the latest elasticsearch release license, upgrade, plugin, version License.java malformed signature for license » + builder.uid + « license, plugin License.java error parsing field » + name() + «; with unknown parameter » + fieldName + « plugin HistogramFieldMapper.java failed to parse field of type plugin HistogramFieldMapper.java voting-only node skipping publication to cluster, plugin, node VotingOnlyNodePlugin.java Invalid unicode character code; is a surrogate code plugin, parser AbstractBuilder.java Invalid unicode character code plugin, parser AbstractBuilder.java Use double quotes » to define string literals; not single quotes ‘ plugin, parser AbstractBuilder.java Process relationships are not supported plugin, parser EqlParser.java Unrecognized option ; expecting plugin, parser LogicalPlanBuilder.java A positive runs value is required; found plugin, parser LogicalPlanBuilder.java A query cannot be repeated more than 100 times; found query, plugin, parser LogicalPlanBuilder.java A sequence requires a minimum of 2 queries; found plugin, parser LogicalPlanBuilder.java Pipe is not supported plugin, parser LogicalPlanBuilder.java Pipe expects exactly one argument but found plugin, parser LogicalPlanBuilder.java Function does not support case-(in)sensitivity plugin EqlFunctionResolution.java failed to execute snapshot lifecycle retention plugin, snapshot TransportExecuteSnapshotRetentionAction.java failed to execute snapshot lifecycle policy » + policyId + « plugin, snapshot TransportExecuteSnapshotLifecycleAction.java failed to load cached steps for plugin PolicyStepsRegistry.java unable to close index lifecycle services plugin, index IndexLifecycle.java no ILM history template plugin, template ILMHistoryStore.java failed to parse phase definition for index » + index + « plugin, index TransportExplainLifecycleAction.java Cannot parse entry in options plugin FullTextUtils.java Duplicate option detected in options plugin FullTextUtils.java error building : plugin FunctionRegistry.java Missing required parameter dims for field » + name + « plugin DenseVectorFieldMapper.java index_options of type hnsw requires field m to be configured plugin DenseVectorFieldMapper.java index_options of type hnsw requires field ef_construction to be configured plugin DenseVectorFieldMapper.java index_options requires field type to be configured plugin DenseVectorFieldMapper.java Unknown vector index options type » + type + » for field » + fieldName + « plugin, index DenseVectorFieldMapper.java Unexpected actual parameter type for type plugin, parser ExpressionBuilder.java Value cannot be used as it is too large to convert into s plugin Intervals.java Cannot use on non-SQL function plugin SqlFunctionResolution.java does not support DISTINCT yet it was specified plugin SqlFunctionRegistry.java Failed to create index for percolator with nested document document, percolator, index PercolateQueryBuilder.java data streams » + Arrays.toString(request.getNames()) + » not found DeleteDataStreamTransportAction.java data stream » + request.getName() + » does not exist request PromoteDataStreamTransportAction.java » + NAME + » no join field has been configured query, join HasChildQueryBuilder.java » + NAME + » no parent join field » + parentJoinField + » configured query, join HasChildQueryBuilder.java has_parent query does not support » + currentFieldName + « query, join HasParentQueryBuilder.java » + NAME + » no join field found for index » + indexName + « query, join, index ParentIdQueryBuilder.java » + NAME + » no relation found for child » + type + « query, join ParentIdQueryBuilder.java unknown url protocol from URL » + urlToCheck + « repositories URLRepository.java cannot parse the specified url » + urlToCheck + « repositories URLRepository.java unsupported url protocol » + protocol + » from URL » + urlToCheck + « repositories URLRepository.java Failed to check if blob » + blobName + » exists repositories, repository-gcs GoogleCloudStorageBlobContainer.java GCS proxy host is unknown. repositories, repository-gcs GoogleCloudStorageClientSettings.java Error extracting body from response reindex, response RemoteScrollableHitSource.java unexpected error building entity reindex RemoteRequestBuilders.java failed to build scroll entity reindex, scroll RemoteRequestBuilders.java failed to build clear scroll entity reindex, scroll RemoteRequestBuilders.java Error trying to create multifield_stats results from stream input search, aggregations MatrixStatsResults.java Error trying to create a copy of RunningStats search, aggregations RunningStats.java Field parameter is not supported for field type LegacyGeoShapeFieldMapper.java Non-BKD field parameters are not supported for field type LegacyGeoShapeFieldMapper.java Expected geometry type but found GeoWKTParser.java expected: » + RPAREN + » but found: GeoWKTParser.java invalid number of points in LinearRing (found — must be >= 4) GeoWKTParser.java Exception parsing coordinates: » + «number of dimensions do not match GeoJsonParser.java field is supported for only GeoJsonParser.java Cannot set doc_values on field of type search_as_you_type index SearchAsYouTypeFieldMapper.java not found HttpClient.java error during downloading HttpClient.java chunk document with id » + id + » not found document DatabaseNodeService.java database file » + databaseFile + » doesn’t exist GeoIpProcessor.java

Источник

Время прочтения
13 мин

Просмотры 25K

Вступительное слово

В первой и второй частях данной серии статей была описана процедура установки и настройки кластера Elasticsearch, Kibana и Logstash, но не был освящен вопрос безопасности.

В этой статье я расскажу, как настроить шифрование трафика между узлами кластера Elasticsearch и его клиентам, шифрование трафика между Kibana и клиентами, покажу, как создавать роли и пользователей, а так же выдавать API ключи для доступа к кластеру Elasticsearch.

План действий

«Включаем» безопасность.
Настраиваем шифрование между узлами Elasticsearch.
Настраиваем аутентификацию.
Настраиваем шифрование клиентского трафика Elasticsearch.
Подключаем Kibana к Elasticsearch.
Настраиваем шифрование трафика между Kibana и клиентами.
Создаем пользователей и роли.
Настраиваем пользовательские сессии в Kibana.
Настраиваем Logstash.
Создаем API ключи.

«Включаем» безопасность

Чтобы использовать функции безопасности в Elasticsearch, их необходимо активировать. Для этого на каждом узле в файле конфигурации указывается следующая настройка:

xpack.security.enabled: true

Настраиваем шифрование между узлами Elasticsearch

Следующим шагом необходимо настроить шифрование трафика между узлами Elasticsearch. Для этого выполняем несколько шагов:

Создаем CA (Certificate Authority) для кластера Elasticsearch:

./bin/elasticsearch-certutil ca

Для установки из пакетов Deb и RPM исполняемые файлы Elasticsearch лежат в каталоге /usr/share/elasticsearch/bin/. Для установки из архива — в каталоге $ES_HOME/bin/.

В примерах все команды выполнены из каталога /usr/share/elasticsearch/.

Во время генерации корневого сертификата можно задать имя PKCS#12 файла, по умолчанию это elastic-stack-ca.p12 и пароль к нему.

Для получения сертификата и ключа в PEM формате укажите ключ --pem. На выходе будет ZIP архив с .crt и .key файлами.

С помощью ключа --out можно указать каталог для создаваемого файла.

Полученный корневой сертификат (для PEM формата еще и ключ) надо переместить на все узлы кластера для генерации сертификата узла.

Генерируем на каждом узле кластера сертификат и ключ:

./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 --ip 10.0.3.11 --dns es-node01

Ключ --ca указывает путь к корневому сертификату CA в формате PKCS#12. Если сертификат и ключ были получены в PEM формате, то необходимо использовать ключи --ca-cert и --ca-key соответственно.

Ключи --dns и --ip добавляют проверку по имени узла и IP адресу и являются опциональными. Если вы указываете их, то укажите эти параметры для каждого узла.

Ключ --pass позволяет установить passphrase для ключа.

Включаем TLS в файле конфигурации Elasticsearch:

xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: full
xpack.security.transport.ssl.keystore.path: es-node01-cert.p12
xpack.security.transport.ssl.truststore.path: elastic-stack-ca.p12

Где:

xpack.security.transport.ssl.enabled — включаем TLS/SSL

xpack.security.transport.ssl.verification_mode — режим проверки сертификатов. none — проверка не выполняется, certificate — выполняется проверка сертификата без проверки имени узла и IP адреса, full — проверка сертификата, а также имени узла и адреса указанных в сертификате.

xpack.security.transport.ssl.keystore.path — путь к файлу с сертификатом и ключем узла.

xpack.security.transport.ssl.truststore.path — путь к доверенному сертификату (CA).

Если сертификаты CA и/или узла в формате PEM, то необходимо изменить последние два параметра на следующие:

xpack.security.transport.ssl.key — путь к закрытому ключу узла

xpack.security.transport.ssl.certificate — путь к сертификату узла

xpack.security.transport.ssl.certificate_authorities — список путей к сертифкатам CA.

Cоздаем keystore и добавляем пароли от сертификатов(если они были заданы):

./bin/elasticsearch-keystore create -p

Ключ -p требуется для установки пароля keystone во время создания

Для PKCS#12 формата:

./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
./bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password

Для PEM сертификата:

./bin/elasticsearch-keystore add xpack.security.transport.ssl.securekeypassphrase

Чтобы запустить Elasticsearch с keystore, на который установлен пароль, необходимо передать этот пароль Elasticsearch. Это делается с помощью файла на который будет ссылаться переменная ES_KEYSTORE_PASSPHRASE_FILE. После запуска файл можно удалить, но при каждом последующим запуске файл необходимо создавать.

echo "password" > /etc/elasticsearch/ks_secret.tmp
chmod 600 /etc/elasticsearch/ks_secret.tmp
sudo systemctl set-environment ES_KEYSTORE_PASSPHRASE_FILE=/etc/elasticsearch/ks_secret.tmp

Перезапускаем Elasticsearch

В логах Elasticsearch должны появится записи о создании кластера:

[INFO ][o.e.c.s.ClusterApplierService] [es-node01] master node changed {previous [], current [{es-node02}{L1KdSSwCT9uBFhq0QlxpGw}{ujCcXRmOSn-EbqioSeDNXA}{10.0.3.12}{10.0.3.12:9300}...

Если обратиться к API, то будет ошибка «missing authentication credentials for REST request». С момента включения функций безопасности для обращения к кластер необходимо пройти аутентификацию.

Настраиваем аутентификацию

Elasticsearch имеет несколько встроенных пользователей:

Пользователь	Описание
elastic	Суперпользователь
kibana_system	Используется для коммуникации между Kibana и Elasticsearch
logstash_system	Пользователь, которого использует Logstash сервер, когда сохраняет информацию в Elasticsearch
beats_system	Пользователь, которого использует агент Beats, когда сохраняет информацию в Elasticsearch
apm_system	Пользователь, которого использует APM сервер, когда сохраняет информацию в Elasticsearch
remote_monitoring_user	Пользователь Metricbeat, который используется при сборе и хранении информации мониторинга в Elasticsearch

Прежде чем воспользоваться перечисленными пользователями, необходимо установить для них пароль. Для этого используется утилита elasticsearch-setup-passwords. В режиме interactive для каждого пользователя необходимо ввести пароли самостоятельно, в режиме auto Elasticsearch создаст пароли автоматически:

./bin/elasticsearch-setup-passwords auto

Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
The passwords will be randomly generated and printed to the console.
Please confirm that you would like to continue [y/N]y


Changed password for user apm_system
PASSWORD apm_system = NtvuRYhwbKpIEVUmHsZB

Changed password for user kibana_system
PASSWORD kibana_system = ycXvzXglaLnrFMdAFsvy

Changed password for user kibana
PASSWORD kibana = ycXvzXglaLnrFMdAFsvy

Changed password for user logstash_system
PASSWORD logstash_system = vU3CuRbjBpax1RrsCCLF

Changed password for user beats_system
PASSWORD beats_system = c9GQ85qhNL59H2AXUvcA

Changed password for user remote_monitoring_user
PASSWORD remote_monitoring_user = wB320seihljmGsjc29W5

Changed password for user elastic
PASSWORD elastic = iOrMTBbfHOAkm5CPeOj7

Второй раз elasticsearch-setup-passwords запустить не получится, так как bootstrap password изменился. Чтобы изменить пароль пользователям можно воспользоваться API.

Попробуем сделать API запрос к любому узлу Elasticsearch с использованием учетной записи elastic и пароля к от неё:

curl -u 'elastic' -X GET "http://10.0.3.1:9200/_cluster/health?pretty"
Enter host password for user 'elastic':
{
  "cluster_name" : "es_cluster",
  "status" : "green",
  "timed_out" : false,
  "number_of_nodes" : 4,
  "number_of_data_nodes" : 3,
  "active_primary_shards" : 9,
  "active_shards" : 18,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 0,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 100.0
}

Как видно из примера все работает, но мы обращались через http, значит трафик между клиентом и кластером Elasticsearch не шифрованный.

Настраиваем шифрование клиентского трафика Elasticsearch

Для шифрования клиентского трафика необходимо выпустить сертификат, который будет использоваться для шифрования трафика между узлом Elasticsearch и клиентом. При этом для Kibana будет сформирован отдельный сертификат, чтобы настроить соединение с Elasticsearch. Для этого делаем следующее:

Генерируем сертификат:

./bin/elasticsearch-certutil http

В процессе генерации необходимо определить:

1) Необходимо ли сгенерировать Certificate Signing Request (CSR). Потребуется, если сертификат будет выпускаться сторонним CA (Certificate Authority).

2) Использовать ли собственный CA (Certificate Authority). Если да, то указываем путь до ключа, которым будет подписаны будущие сертификаты.

3) Срок действия сертификата. По умолчанию 5 лет. Можно определить дни(D), месяцы (M), года (Y).

4) Как выпустить сертификат, на каждый узел или общий. Если все узлы имеют общий домен, то можно выпустить wildcard сертификат (например *.domain.local). Если общего домена нет и в будущем возможно добавление узлов, то необходимо генерировать на каждый узел, указав имя узла и его адрес. В будущем можно выпустить отдельный сертификат для нового узла.

На выходе получаем архив сертификатами, в моём случае со всеми сертификатам для каждого узла Elasticsearch, а так же сертификат для подключения Kibana к Elasticsearch:

.
├── elasticsearch
│   ├── es-nlb01
│   │   ├── README.txt
│   │   ├── http.p12
│   │   └── sample-elasticsearch.yml
│   ├── es-node01
│   │   ├── README.txt
│   │   ├── http.p12
│   │   └── sample-elasticsearch.yml
│   ├── es-node02
│   │   ├── README.txt
│   │   ├── http.p12
│   │   └── sample-elasticsearch.yml
│   └── es-node03
│       ├── README.txt
│       ├── http.p12
│       └── sample-elasticsearch.yml
└── kibana
    ├── README.txt
    ├── elasticsearch-ca.pem
    └── sample-kibana.yml

В архиве также лежит инструкция по дальнейшим действиям с сертификатом (README.txt) и пример конфигурационного файла (sample-…yml).

Сертификат elasticsearch-ca.pem из директории kibana потребуется в следующем шаге.

Размещаем сертификаты на узлах и добавляем необходимые настройки в файле конфигурации:
```
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: "http.p12"
```
Добавляем пароль от сгенерированного сертификата в keystore:

./bin/elasticsearch-keystore add xpack.security.http.ssl.keystore.secure_password

Проверяем, что все работает по https:

curl -u 'elastic' -k -X GET "https://10.0.3.1:9200/_cluster/health?pretty"
Enter host password for user 'elastic':
{
  "cluster_name" : "es_cluster",
  "status" : "green",
  "timed_out" : false,
  "number_of_nodes" : 4,
  "number_of_data_nodes" : 3,
  "active_primary_shards" : 9,
  "active_shards" : 18,
  "relocating_shards" : 0,
  "initializing_shards" : 0,
  "unassigned_shards" : 0,
  "delayed_unassigned_shards" : 0,
  "number_of_pending_tasks" : 0,
  "number_of_in_flight_fetch" : 0,
  "task_max_waiting_in_queue_millis" : 0,
  "active_shards_percent_as_number" : 100.0
}

Подключаем Kibana к Elasticsearch

Если сейчас обратиться к Kibana, то ответом будет «Kibana server is not ready yet«.

Это связанно с тем, что сейчас Kibana не может получить доступ к Elasticsearch по http, для этого необходим сертификат Kibana, который был получен в предыдущем шаге, а также требуется пройти аутентификацию. Чтобы настроить работу Kibana:

В конфигурационном файле Kibana указываем ключ к сертификату elasticsearch-ca.pem(из предыдущего шага) и меняем протокол http на https:

elasticsearch.hosts: ['https://10.0.3.1:9200']
elasticsearch.ssl.certificateAuthorities: [ "/etc/kibana/elasticsearch-ca.pem" ]

В примере выше я использую адрес Coordinating only узла для балансировки нагрузки между Kibana и Elasticsearch, который был настроен в предыдущей части.

Создаем keystore для хранения пользователя и пароля:

sudo ./bin/kibana-keystore create --allow-root

Команда выполняются из директории /usr/share/kibana

Так как keystore будет создан в каталоге /etc/kibana/ , и keystone требуется файл конфигурации /etc/kibana/kibana.yml, то пользователю, запускающему команду, необходим доступ к этому каталогу и файлу. Я использую sudo и ключ --allow-root. Ключ необходим, так как запускать из под пользователя root нельзя.

Kibana keystore не имеет пароля. Для ограничения доступа используем стандартные средства Linux.

Добавляем пользователя kibana_system(встроенный пользователь Elasticsearch) и пароль учетной записи в Kibana keystore:

sudo ./bin/kibana-keystore add elasticsearch.username --allow-root
sudo ./bin/kibana-keystore add elasticsearch.password --allow-root

Можно использовать так же пользователя kibana, однако, он в системе считается устаревшим (deprecated).

перезапускаем Kibana и проверяем открыв нужный адрес в браузере:

Kibana

Для входа используем учетную запись elastic.

Как можно заменить, трафик между браузером и Kibana не шифруется.

Настраиваем шифрование трафика между Kibana и клиентами

Данная процедура максимально похожа на ту, которую выполняли для получения сертификатов для узлов Elasticsearch.

Получаем сертификат при помощи elsticsearch-certutil :

./bin/elasticsearch-certutil cert  -ca /etc/elasticsearch/elastic-stack-ca.p12 -name kibana-certificate -dns kibana01,10.0.3.1,127.0.0.1,localhost -ip 10.0.3.1

При необходимости можем использовать CA (Certificate Authority). В процессе генерации сертификата указываем пароль от CA, если используется, имя будущего сертификата и пароль к нему.

Через -dns и -ip указываем DNS имена и адрес Kibana.

Указываем путь к сертификату в файле kibana.yml:

Так как я использовал ранее полученный CA, то указываю путь и к нему (server.ssl.truststore.path).

server.ssl.keystore.path: "/etc/kibana/kibana-certificate.p12"
server.ssl.truststore.path: "/etc/elasticsearch/elastic-stack-ca.p12"

Не забывайте о правах доступа, пользователь kibana должен иметь права на чтения.

Включаем использование TLS:

server.ssl.enabled: true

Добавляем пароли от сертификатов в keystore:

sudo ./bin/kibana-keystore add server.ssl.keystore.password --allow-root
sudo ./bin/kibana-keystore add server.ssl.truststore.password --allow-root

Перезагружаем Kibana и проверяем:

Доступ к Kibana по https

Теперь для подключения к Kibana используем https.

Создаем пользователей и роли

Ранее мы активировали встроенные учетные записи и сгенерировали для них пароли, но использовать пользователя elastic (superuser) не лучшая практика, поэтому рассмотрим, как создавать пользователей и роли к ним.

Для примера создадим администратора Kibana. Открываем Menu > Management > Stack Management, выбираем Users и нажимаем Create user. Заполняем все поля и жмем Create User.

Создание пользователя в Kibana

Или же можно воспользоваться API. Делать запросы к кластеру можно через консоль Dev Tools инструмента Kibana. Для этого перейдите Menu > Management > Dev Tools. В открывшейся консоли можно писать запросы к Elasticsearch.

POST /_security/user/kibana_admin
{
  "password" : "password",
  "roles" : [ "kibana_admin" ],
  "full_name" : "Kibana Administrator",
  "email" : "kibana.administrator@example.local"
}

Создание пользователя kibana_admin через API

После создания пользователя, можно его использовать.

Роль kibana_admin не может создавать пользователей и роли. Для создания пользователей и роли необходима привилегия кластера manage_security. С перечнем всех встроенных ролей можно ознакомится тут.

Далее создадим роль для работы с данными в ранее созданном индексом logstash-logs*. Открываем Menu > Management > Stack Management. Слева выбираем Roles и нажимаем Create role. Настраиваем привилегии, указав в качестве индекса logstash-logs*:

Index privileges

read

Read only права на индекс

Предоставляем пользователю доступ к Kibana, для этого ниже наживаем Add Kibana privilege и выбираем требуемые привилегии:

В поле Spaces указываю All spaces. Что такое Space (пространства) можно почитать на официальном сайте. В рамках данной серии статей Space будет описан в статье о Kibana dashboard.

Чтобы создать роль с привилегиями в Elasticsearch и Kibana через API, делаем запрос к Kibana:

curl -k -i -u 'elastic' -X PUT 'https://10.0.3.1:5601/api/security/role/logstash_reader' 
--header 'kbn-xsrf: true' 
--header 'Content-Type: application/json' 
--data-raw '{
  "elasticsearch": {
    "cluster" : [ ],
    "indices" : [
      {
        "names": [ "logstash-logs*" ],
        "privileges": ["read"]
      }
      ]
  },
  "kibana": [
    {
      "base": [],
      "feature": {
       "discover": [
          "all"
        ],
        "visualize": [
          "all"
        ],
        "dashboard": [
          "all"
        ],
        "dev_tools": [
          "read"
        ],
        "indexPatterns": [
          "read"
        ]
      },
      "spaces": [
        "*"
      ]
    }
  ]
}'

Создаем пользователя logstash_reader и связываем его с созданной ролью (это мы уже научились делать) и заходим данным пользователем в Kibana.

Главная страница Kibana для пользователя logstash_reader

Как видно, у данного пользователя не так много прав. Он может просматривать индексы logstash-logs*, строить графики, создавать панели и делать GET запросы к этому индексам через Dev Tools.

Настраиваем пользовательские сессии Kibana

Закрываем неактивные сессии:

xpack.security.session.idleTimeout: "30m"

Устанавливаем максимальную продолжительность одной сессии:

xpack.security.session.lifespan: "1d"

Настраиваем интервал принудительной очистки данных о неактивных или просроченных сессиях из сессионного индекса:

xpack.security.session.cleanupInterval: "8h"

Для всех параметров формат времени может быть следующим: ms | s | m | h | d | w | M | Y

Данные о сессии удаляются после того, как пользователь осуществляет закрытие сессии. Если не настроить закрытие неактивных сессий или не ограничить максимальную длительность сессии, то информация об этих сессиях будет накапливаться в сессионном индексе, и Kibana не сможет автоматически удалить данные.

Настраиваем Logstash

На данный момент Logstash не отправляет данные в кластер Elasticsearch, и чтобы это исправить, сделаем несколько настроек.

Создаем роль для подключения к кластеру:

В Kibana открываем Menu > Management > Stack Management. Слева выбираем Roles и нажимаем Create role. Указываем имя роли и настраиваем привелегии:

Cluster privileges	manage_index_templates	Все операции над шаблонами индексов
monitor	Read-only права на получение информации о кластере
Index privileges	create_index	Создание индексов
write	Индексирование, обновление и удаление индексов
manage	Мониторинг и управление индексом
manage_ilm	Управление жизненным циклом индексов (IML)

Создаем пользователя для подключения к кластер:

Открываем Menu > Management > Stack Management, выбираем Users и нажимаем Create user. Заполняем требуемые данные, указав в качестве роли созданную выше роль.

Создание пользователя logstash_user

Создаем Logstash keystore, и добавляем туда пользователя и пароль от него:

# Создаем keystore с паролем
set +o history
export LOGSTASH_KEYSTORE_PASS=mypassword
set -o history
sudo /usr/share/logstash/bin/logstash-keystore create --path.settings /etc/logstash/

# Добавляем данные
sudo /usr/share/logstash/bin/logstash-keystore add ES_USER --path.settings /etc/logstash/
sudo /usr/share/logstash/bin/logstash-keystore add ES_PWD --path.settings /etc/logstash/

Настраиваем аутентификацию в output плагине:

output {
  elasticsearch {
    ...
    user => "${ES_USER}"
    password => "${ES_PWD}"
  }
}

Настраиваем TLS в Logstash:

Для подключения по https к Elasticsearch необходимо настроить использование ssl и установить .pem сертификат, который был получен для Kibana.

output {
  elasticsearch {
    ...
    ssl => true
    cacert => '/etc/logstash/elasticsearch-ca.pem'
  }
}

Перезагружаем Logstash и проверяем новые записи в индексе

Проверку можно сделать в Kibana через Discovery, как делали в прошлой статье, или через API:

Dev Tools — Console в Kibana

Создание API ключей

Для работы с Elasticsearch можно не только использовать учетные записи пользователей, но и генерировать API ключ. Для этого необходимо сделать POST запрос:

POST /_security/api_key

В качестве параметров указывают:

name — имя ключа

role_descriptors — описание роли. Структура совпадает с запросом на создание роли.

expiration — Срок действия ключа. По умолчанию без срока действия.

Для примера заменим базовую аутентификацию в Logstash на API ключ.

Создаем API ключ в Kibana Dev Tool:

POST /_security/api_key
{
  "name": "host_logstash01", 
  "role_descriptors": {
    "logstash_api_writer": { 
      "cluster": ["manage_index_templates", "monitor"],
      "index": [
        {
          "names": ["logstash-logs*"],
          "privileges": ["create_index", "write", "manage", "manage_ilm"]
        }
      ]
    }
  },
  "expiration": "365d"
}

Получаем следующий результат:

{
  "id" : "979DkXcBv3stdorzoqsf",
  "name" : "host_logstash01",
  "expiration" : 1644585864715,
  "api_key" : "EmmnKb6NTES3nlRJenFKrQ"
}

Помещаем ключ в формате id:api_key в Keystore:

sudo /usr/share/logstash/bin/logstash-keystore add API_KEY --path.settings /etc/logstash/

Указываем API ключ в конфигурационном файле конвейера:

output {
  elasticsearch {
    hosts => ["https://10.0.3.11:9200","https://10.0.3.12:9200","https://10.0.3.13:9200"]
    index => "logstash-logs-%{+YYYY.MM}"
    ssl => true
    api_key => "${API_KEY}"
    cacert => '/etc/logstash/elasticsearch-ca.pem'
  }
}

Информацию по ключам можно получить в Kibana Menu > Management > API Keys или через API запрос:

GET /_security/api_key?name=host_logstash01

{
  "api_keys" : [
    {
      "id" : "9r8zkXcBv3stdorzZquD",
      "name" : "host_logstash01",
      "creation" : 1613048800876,
      "expiration" : 1613049520876,
      "invalidated" : false,
      "username" : "elastic",
      "realm" : "reserved"
    }
  ]
}

Заключение

В рамках данной статьи были рассмотрены основные функции безопасности стека Elastic, позволяющие обезопасить работу нашего кластера, научились создавать пользователей и пользовательские роли, производить настройку пользовательских сессий, настройку шифрования трафика между узлами кластера и между кластером и клиентами, работать с API ключами и keystore.

В следующей статье будет рассмотрена процедура создание кластера ELK с помощью Docker.

Полезные ссылки

Elasticsearch keystore
Kibana keystore
Logstash keystore
Elasticsearch built-in roles
Получение информации по API ключам
Kibana Spaces

Источник

Hi Yuvi,

Below are the details:

$ kubectl --namespace= logs
error: expected 'logs (POD | TYPE/NAME) [CONTAINER_NAME]'.
POD or TYPE/NAME is a required argument for the logs command
See 'kubectl logs -h' for help and examples.

$ kubectl logs --namespace='kube-system'
error: expected 'logs (POD | TYPE/NAME) [CONTAINER_NAME]'.
POD or TYPE/NAME is a required argument for the logs command
See 'kubectl logs -h' for help and examples.

$ kubectl logs --namespace="kube-system"
error: expected 'logs (POD | TYPE/NAME) [CONTAINER_NAME]'.
POD or TYPE/NAME is a required argument for the logs command
See 'kubectl logs -h' for help and examples.

$ kubectl logs --namespace=kube-system
error: expected 'logs (POD | TYPE/NAME) [CONTAINER_NAME]'.
POD or TYPE/NAME is a required argument for the logs command
See 'kubectl logs -h' for help and examples.

So i ran below command line:

$ kubectl get pods --all-namespaces

NAMESPACE     NAME                                                                     READY     STATUS    RESTARTS   AGE
kube-system   calico-etcd-nc6k5                                                        1/1       Running   0          12d
kube-system   calico-node-9s0f3                                                        2/2       Running   0          12d
kube-system   calico-node-hhv6w                                                        2/2       Running   1          12d
kube-system   calico-node-m5slg                                                        2/2       Running   1          12d
kube-system   calico-policy-controller-1727037546-nhr41                                1/1       Running   0          12d
kube-system   etcd-ip-192-168-11-169.ap-southeast-2.compute.internal                      1/1       Running   0          12d
kube-system   hub-deployment-606657460-1l4wf                                           1/1       Running   0          4d
kube-system   jupyter-admin                                                            1/1       Running   0          4d
kube-system   jupyter-user1                                                            1/1       Running   0          4d
kube-system   kube-apiserver-ip-192-168-11-169.ap-southeast-2.compute.internal            1/1       Running   0          12d
kube-system   kube-controller-manager-ip-192-168-11-169.ap-southeast-2.compute.internal   1/1       Running   0          12d
kube-system   kube-dns-2425271678-0xr64                                                3/3       Running   0          12d
kube-system   kube-proxy-1rshl                                                         1/1       Running   0          12d
kube-system   kube-proxy-3ksll                                                         1/1       Running   0          12d
kube-system   kube-proxy-d4bh4                                                         1/1       Running   0          12d
kube-system   kube-scheduler-ip-192-168-11-169.ap-southeast-2.compute.internal            1/1       Running   0          12d
kube-system   kubernetes-dashboard-3313488171-jjtjx                                    1/1       Running   0          12d
kube-system   proxy-deployment-1227971824-k8vbd                                        1/1       Running   0          4d
kube-system   tiller-deploy-1853538654-kc6wl                                           1/1       Running   0          12d

My config.yaml looks as below:

hub:
  output of first execution of 'openssl rand -hex 32'
  cookieSecret: "cookiescret hex number generated"

proxy:
  output of second execution of 'openssl rand -hex 32'
  secretToken: "secure token hex number generate"

singleuser:
  image:
    name: jupyter/all-spark-notebook
    tag: latest

auth:
  dummy:
    password: testpass123

Helm command i am using is as below:

helm install jupyterhub/jupyterhub 
    --version=v0.4 
    --name=class1 
    --namespace=kube-system 
    -f config.yaml

Do i need to change version to --version=0.5 to fix this issue ?

Cheers,
Ash

Источник

1.jdk version problem

Errors were reported as follows:

future versions of Elasticsearch will require Java 11; your Java version from [/usr/local/jdk9/jdk-9.0.4] does not meet this requirement
Java HotSpot(TM) 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.

Solution:

Because Elastic search relies on jdk, es and JDK have corresponding dependencies. It can be seen concretely that:
https://www.elastic.co/cn/support/matrix
https://www.elastic.co/guide/en/elasticsearch/reference/7.2/setup.html

This is to say that Elastic search has built-in JDK, which is currently recommended. Of course, if you configure JAVA_HOME locally, ES is the preferred JDK to start ES.
ES recommends using LTS version of JDK (recommended here, JDK8 is not supported), if you use some unsupported JDK version, ES will refuse to start.

Based on the startup information, we see that Elastic search 7.2 recommends JDK11.

jdk download link: https://www.oracle.com/technetwork/java/java-se-support-roadmap.html

Install OpenJDK11

[root@ELK1 tar.gz]# pwd
/usr/local/src/tar.gz<br><br>#download
[root@ELK1 tar.gz]# wget https://Download.java.net/java/GA/jdk11/13/GPL/openjdk-11.0.1_linux-x64_bin.tar.gz<br><br>#pressurize to the specified directory <br>[root@ELK1 tar.gz] tar-xzvf jdk-11.0.4_linux-x64_bin.gz/opt/

Modify configuration files

[root@localhost bin]# vim /home/elk/elasticsearch/-7.2.1/bin/elasticsearch
 
#Configure your own jdk11
export JAVA_HOME=/opt/jdk-11.0.1
export PATH=$JAVA_HOME/bin:$PATH
 
#Add jdk judgment
if [ -x "$JAVA_HOME/bin/java" ]; then
        JAVA="/opt/jdk-11.0.1/bin/java"
else
        JAVA=`which java`
fi

Start ES

[elasticsearch@ELK1 bin]$ ./elasticsearch
OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
[2019-08-02T15:33:27,994][INFO ][o.e.e.NodeEnvironment    ] [node-1] using [1] data paths, mounts [[/ (rootfs)]], net usable_space [32.6gb], net total_space [35.7gb], types [rootfs]
[2019-08-02T15:33:28,014][INFO ][o.e.e.NodeEnvironment    ] [node-1] heap size [1015.6mb], compressed ordinary object pointers [true]
[2019-08-02T15:33:28,017][INFO ][o.e.n.Node               ] [node-1] node name [node-1], node ID [8zGCWQhBS3OpVShqjSgU-w], cluster name [es-application]
[2019-08-02T15:33:28,017][INFO ][o.e.n.Node               ] [node-1] version[7.2.0], pid[1545], build[default/tar/508c38a/2019-06-20T15:54:18.811730Z], OS[Linux/3.10.0-862.el7.x86_64/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/11.0.1/11.0.1+13]
[2019-08-02T15:33:28,017][INFO ][o.e.n.Node               ] [node-1] JVM home [/opt/jdk-11.0.1]
[2019-08-02T15:33:28,018][INFO ][o.e.n.Node               ] [node-1] JVM arguments [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch-5247006010869253587, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Djava.locale.providers=COMPAT, -Dio.netty.allocator.type=unpooled, -XX:MaxDirectMemorySize=536870912, -Des.path.home=/usr/local/src/elasticsearch, -Des.path.conf=/usr/local/src/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=tar, -Des.bundled_jdk=true]

2. Start elastic search to report errors

Errors were reported as follows:

ERROR: [2] bootstrap checks failed
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
[2019-08-08T16:04:33,578][INFO ][o.e.n.Node               ] [ELK1] stopping ...
[2019-08-08T16:04:33,591][INFO ][o.e.n.Node               ] [ELK1] stopped
[2019-08-08T16:04:33,592][INFO ][o.e.n.Node               ] [ELK1] closing ...
[2019-08-08T16:04:33,618][INFO ][o.e.n.Node               ] [ELK1] closed
[2019-08-08T16:04:33,621][INFO ][o.e.x.m.p.NativeController] [ELK1] Native controller process has stopped - no new native processes can be started

Solution:

#1,max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

The maximum number of files opened at the same time per process is too small to view the current number through the following two commands
ulimit -Hn
ulimit -Sn
 
Modify the / etc/security/limits.conf file, add configuration, and log in again after user exits.
 
*               soft    nofile          65536
*               hard    nofile          65536

#2,max number of threads [3818] for user [es] is too low, increase to at least [4096]

#Ibid., the maximum number of threads is too low. Modify the configuration file/etc/security/limits.conf to add configuration
 
*               soft    nproc           4096
*               hard    nproc           4096
 
#Viewable by command
 
ulimit -Hu
ulimit -Su

3. npm install error reporting in the process of installing elastic search-head

Errors were reported as follows:

[root@ELK1 elasticsearch-head]# npm install
npm: relocation error: npm: symbol SSL_set_cert_cb, version libssl.so.10 not defined in file libssl.so.10 with link time reference

Solution:

Upgrade openssl and execute:
yum update openssl -y
 
# Pre-upgrade version information:
 
[root@ELK1 elasticsearch-head]# openssl version
OpenSSL 1.0.1i 6 Aug 2014
 
# After upgrading:
 
[root@ELK elasticsearch-head]# openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017
 
Execution again at this time, error elimination

4. Start logstash error reporting

Errors were reported as follows:

Thread.exclusive is deprecated, use Thread::Mutex
Sending Logstash logs to /data/logstash/logs which is now configured via log4j2.properties
[2019-08-08T17:23:59,508][WARN ][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2019-08-08T17:23:59,519][FATAL][logstash.runner          ] Logstash could not be started because there is already another instance using the configured data directory.  If you wish to run multiple instances, you must change the "path.data" setting.
[2019-08-08T17:23:59,527][ERROR][org.logstash.Logstash    ] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Cause: The instance that was run before has a buffer, saved in path.data with. lock file, delete it.

Solution:

Find the path to the Data path in the logstash.yml file (default is in the data directory of the installation directory)

# ------------ Data path ------------------
#
# Which directory should be used by logstash and its plugins
# for any persistent needs. Defaults to LOGSTASH_HOME/data
#
path.data:

Check to see if the. lock file exists and delete it if it exists

[root@ELK1 data]# ls -alh
//Total dosage 20K
drwxr-sr-x  4 tingshuo staff 4.0K 8 September 19-11:42 .
drwxr-sr-x 14 tingshuo staff 4.0K 8 September 19-11:42 ..
drwxr-sr-x  2 tingshuo staff 4.0K 8 September 19-11:42 dead_letter_queue
-rw-r--r--  1 tingshuo staff    0 8 September 19-11:42 .lock
drwxr-sr-x  2 tingshuo staff 4.0K 8 September 19-11:42 queue
-rw-r--r--  1 tingshuo staff   36 8 September 19-11:42 uuid

delete

[root@ELK1 data]# rm .lock

5.Logstash error reporting: A plugin had an unrecoverable error. Will restart this plugin

Solution:

Because the terminal is disconnected, the process still exists

[root@Elk1 ~]# ps aux | grep logstash
root     12180  1.6  4.5 6912300 744896 ?      Sl   Oct18  69:39 /usr/bin/java -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -Xmx1g -Xss2048k -Djffi.boot.library.path=/opt/logstash/vendor/jruby/lib/jni -XX:+UseParNewGC -XX:+UseConcMarkSweepGC -Djava.awt.headless=true -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+HeapDumpOnOutOfMemoryError -XX:HeapDumpPath=/opt/logstash/heapdump.hprof -Xbootclasspath/a:/opt/logstash/vendor/jruby/lib/jruby.jar -classpath : -Djruby.home=/opt/logstash/vendor/jruby -Djruby.lib=/opt/logstash/vendor/jruby/lib -Djruby.script=jruby -Djruby.shell=/bin/sh org.jruby.Main --1.9 /opt/logstash/lib/bootstrap/environment.rb logstash/runner.rb agent -f /etc/logstash/conf.d/filebeat.conf
root     16921  0.0  0.0 103244   864 pts/2    S+   15:28   0:00 grep 12180
[root@Elk1 ~]# kill 12180

Kill the logstash process, which is not normally closed, and restart logstash.

Источник

I use ELK stack to analyze my log file. I have tested last week and everything works well.

Today, I tested but I get this error when I typed «http://localhost:9200/iot_log/_count» (iot_log is my index pattern):

{«error»:{«root_cause»:[{«type»:»index_not_found_exception»,»reason»:»no
such
index»,»resource.type»:»index_or_alias»,»resource.id»:»iot_log»,»index_uuid»:»na«,»index»:»iot_log»}],»type»:»index_not_found_exception»,»reason»:»no such
index»,»resource.type»:»index_or_alias»,»resource.id»:»iot_log»,»index_uuid»:»na«,»index»:»iot_log»},»status»:404}

I really searched the forums but I have not found a solution, I want to know what is the cause of this problem please and how can I correct it?

Kulasangar

8,4854 gold badges49 silver badges80 bronze badges

asked Jan 23, 2017 at 11:04

Make sure index iot_log exist and create it if not:

curl -X PUT "localhost:9200/iot_log" -H 'Content-Type: application/json' -d'{ "settings" : { "index" : { } }}'

answered Jul 26, 2017 at 15:58

Yao LiYao Li

1,9131 gold badge23 silver badges24 bronze badges

You need to set your action.auto_create_index parameter in elasticsearch.yml file.

Example:

action.auto_create_index: -l*,+z*

With this kind of configuration, indexes starting with «z» will be created automatically while indexes starting with «l» will not.

answered Jun 15, 2017 at 7:17

The best way to resolve it by using setting as follow

Allow Auto Create YourIndexName and index10 and not allowing any index name matching index1* and any other index matching ind*. The patterns are matched in the order they are given.

curl -X PUT "localhost:9200/_cluster/settings?pretty" -H 'Content-Type: application/json' -d'{
    "persistent": {
        "action.auto_create_index": "YourIndexName,index10,-index1*,+ind*" 
    }
}'

Stop any Auto Indexing

curl -X PUT "localhost:9200/_cluster/settings?pretty" -H 'Content-Type: application/json' -d'{
    "persistent": {
        "action.auto_create_index": "false" 
    }
}'

Allow any Index create automatically

curl -X PUT "localhost:9200/_cluster/settings?pretty" -H 'Content-Type: application/json' -d'{
    "persistent": {
        "action.auto_create_index": "true" 
    }
}'
```

answered Dec 15, 2020 at 21:37

WarRiskWarRisk

342 silver badges5 bronze badges

In my case, My all data is DELETED in elastic search automatically, After importing data again in elastic search my application working good.

answered Aug 28, 2020 at 9:20

Dere SagarDere Sagar

1,5911 gold badge9 silver badges7 bronze badges

Источник

weyderfs: Posts: 8; Joined: 2018/02/07 22:08:07; Location: Brazil; Contact:

Logstash.service: Unit not found (ELK)

Hi everyone,
I’m having trouble starting Logstash in my Centos 7. I found several articles on Web, but not found a solution.

My configs:

Oracle Java 8

Code: Select all

$ echo $JAVA_HOME
$ /usr/bin/java

$java -version
java version "1.8.0_172"
Java(TM) SE Runtime Environment (build 1.8.0_172-b11)
Java HotSpot(TM) 64-Bit Server VM (build 25.172-b11, mixed mode)

I installed the Logstash by yum following this article: https://www.digitalocean.com/community/ … n-centos-7

But when run:

Code: Select all

$ systemctl start logstash
Failed to start logstash.service: Unit not found

I try start manually Logstash:

Code: Select all

$/usr/share/logstash/bin/logstash
WARNING: Could not find logstash.yml which is typically located in $LS_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults
Could not find log4j2 configuration at path /usr/share/logstash/config/log4j2.properties. Using default config which logs errors to the console
ERROR: Failed to read pipelines yaml file. Location: /usr/share/logstash/config/pipelines.yml
usage:
bin/logstash -f CONFIG_PATH [-t] [-r] [] [-w COUNT] [-l LOG]
bin/logstash --modules MODULE_NAME [-M "MODULE_NAME.var.PLUGIN_TYPE.PLUGIN_NAME.VARIABLE_NAME=VALUE"] [-t] [-w COUNT] [-l LOG]
bin/logstash -e CONFIG_STR [-t] [--log.level fatal|error|warn|info|debug|trace] [-w COUNT] [-l LOG]
bin/logstash -i SHELL [--log.level fatal|error|warn|info|debug|trace]
bin/logstash -V [--log.level fatal|error|warn|info|debug|trace]
bin/logstash --help
[ERROR] 2018-07-03 16:43:51.955 [LogStash::Runner] Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

Someone can help?

Last edited by weyderfs on 2018/07/04 16:47:35, edited 2 times in total.

LPIC-1 Linux Administrator — IT Enthusiast — DevOps

TrevorH: Site Admin; Posts: 32527; Joined: 2009/09/24 10:40:56; Location: Brighton, UK

Re: Logstash.service: Unit not found (ELK)

Post

by TrevorH » 2018/07/04 15:02:28

What is the output from rpm -ql logstash | grep systemd (change the package name if it’s not called logstash).

weyderfs: Posts: 8; Joined: 2018/02/07 22:08:07; Location: Brazil; Contact:

Re: Logstash.service: Unit not found (ELK)

Post

by weyderfs » 2018/07/04 16:44:41

Following output

Code: Select all

[root@scutum ~]# rpm -ql logstash | grep systemd
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/lib/pleaserun/platform/systemd-user.rb
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/lib/pleaserun/platform/systemd.rb
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/spec/pleaserun/platform/systemd_spec.rb
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/templates/systemd-user/default/prestart.sh
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/templates/systemd-user/default/program.service
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/templates/systemd/default/default
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/templates/systemd/default/prestart.sh
/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/pleaserun-0.0.30/templates/systemd/default/program.service

LPIC-1 Linux Administrator — IT Enthusiast — DevOps

TrevorH: Site Admin; Posts: 32527; Joined: 2009/09/24 10:40:56; Location: Brighton, UK

Re: Logstash.service: Unit not found (ELK)

Post

by TrevorH » 2018/07/04 18:46:37

So they are not shipping an file which installs under /usr/lib/systemd/system where package provided unit files should live. Nor are they providing any .service file under /etc/systemd/system either so that explains why it doesn’t work. It is possible that the files ending in .service that show up in your grep are designed to be copied manually into place but it seems like a silly way to do it to me.

It’s a packaging bug. They don’t provide the file so there isn’t one. You’ll either need to raise it with logstash or write one yourself.

weyderfs: Posts: 8; Joined: 2018/02/07 22:08:07; Location: Brazil; Contact:

Re: Logstash.service: Unit not found (ELK)

Post

by weyderfs » 2018/07/04 20:34:08

TrevorH wrote: ↑

2018/07/04 18:46:37

So they are not shipping an file which installs under /usr/lib/systemd/system where package provided unit files should live. Nor are they providing any .service file under /etc/systemd/system either so that explains why it doesn’t work. It is possible that the files ending in .service that show up in your grep are designed to be copied manually into place but it seems like a silly way to do it to me.

It’s a packaging bug. They don’t provide the file so there isn’t one. You’ll either need to raise it with logstash or write one yourself.

Thank you by awnser, I got around the problem following this steps:

Code: Select all

$ cd /usr/share/logstash/bin
$ ./system-install

This script «system-install» identifies what my service manager (init, SysV, Upstart, Systemd) and create the links with it. After run I could manager the service with systemctl.

Thanks by help.
Regards

LPIC-1 Linux Administrator — IT Enthusiast — DevOps

Источник

Вступление

Проблема: Kibana Нет шаблона индекса по умолчанию Предупреждение

Проблема: Kibana Невозможно подключиться к Elasticsearch

Проблема: Кибана недоступна

Причина: Nginx не работает

Причина: Nginx работает, но не может подключиться к Kibana

Причина: невозможно аутентифицировать пользователя

Logstash: как проверить, работает ли он

Убедитесь, что служба работает

Проблема: Logstash не работает

Причина. Конфигурация содержит синтаксическую ошибку.

Причина: файлы SSL не существуют

Проблема: Logstash работает, но не хранит журналы в Elasticsearch

Filebeat: как проверить, работает ли он

Убедитесь, что журналы успешно отправлены

Убедитесь, что служба работает

Проблема: Filebeat не работает

Причина. Конфигурация содержит синтаксическую ошибку.

Причина: SSL-сертификат отсутствует или недействителен

Проблема: Filebeat не может подключиться к Logstash

Elasticsearch: как проверить, работает ли он

Убедитесь, что служба работает

Убедитесь, что он отвечает на запросы HTTP

Проблема: Elasticsearch не работает

Причина: это никогда не было начато

Причина: служба Elasticsearch не была включена, и сервер перезагрузился

Причина: Elasticsearch неверно настроен

Заключение

Вступительное слово

План действий

«Включаем» безопасность

Настраиваем шифрование между узлами Elasticsearch

Настраиваем аутентификацию

Настраиваем шифрование клиентского трафика Elasticsearch

Подключаем Kibana к Elasticsearch

Настраиваем шифрование трафика между Kibana и клиентами

Создаем пользователей и роли

Настраиваем пользовательские сессии Kibana

Настраиваем Logstash

Создание API ключей

Заключение

Полезные ссылки

1.jdk version problem

Errors were reported as follows:

Solution:

2. Start elastic search to report errors

Errors were reported as follows:

#1,max file descriptors [4096] for elasticsearch process is too low, increase to at least [65536]

#2,max number of threads [3818] for user [es] is too low, increase to at least [4096]

3. npm install error reporting in the process of installing elastic search-head

Errors were reported as follows:

Solution:

4. Start logstash error reporting

Errors were reported as follows:

Solution:

5.Logstash error reporting: A plugin had an unrecoverable error. Will restart this plugin

Logstash.service: Unit not found (ELK)

Re: Logstash.service: Unit not found (ELK)

Re: Logstash.service: Unit not found (ELK)

Re: Logstash.service: Unit not found (ELK)

Re: Logstash.service: Unit not found (ELK)

Читайте также: