Skip to content

Instantly share code, notes, and snippets.

@ansalon282

ansalon282/gist:75c55cb63fd00950d51b6b780a24687c Secret

Created November 19, 2020 16:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ansalon282/75c55cb63fd00950d51b6b780a24687c to your computer and use it in GitHub Desktop.
Save ansalon282/75c55cb63fd00950d51b6b780a24687c to your computer and use it in GitHub Desktop.
Download ZIP
Kibana error logs
Raw
gistfile1.txt
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["info","plugins-service"],"pid":7,"message":"Plugin \"auditTrail\" is disabled."}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["info","plugins-service"],"pid":7,"message":"Plugin \"visTypeXy\" is disabled."}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["warning","config","deprecation"],"pid":7,"message":"Setting [elasticsearch.username] to \"elastic\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["warning","config","deprecation"],"pid":7,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["warning","config","deprecation"],"pid":7,"message":"Setting [monitoring.username] to \"elastic\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["info","plugins-system"],"pid":7,"message":"Setting up [96] plugins: [usageCollection,telemetryCollectionManager,telemetry,telemetryCollectionXpack,kibanaUsageCollection,xpackLegacy,securityOss,newsfeed,mapsLegacy,kibanaLegacy,taskManager,licensing,globalSearch,globalSearchProviders,code,share,legacyExport,embeddable,uiActionsEnhanced,expressions,data,home,console,consoleExtensions,apmOss,observability,cloud,management,indexPatternManagement,advancedSettings,searchprofiler,painlessLab,grokdebugger,savedObjects,dashboard,visualizations,visTypeVega,visTypeTimelion,timelion,features,upgradeAssistant,security,snapshotRestore,enterpriseSearch,encryptedSavedObjects,ingestManager,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboardMode,beatsManagement,transform,ingestPipelines,licenseManagement,graph,dataEnhanced,visTypeTable,visTypeMarkdown,tileMap,regionMap,inputControlVis,visualize,fileUpload,maps,esUiShared,charts,visTypeVislib,visTypeTimeseries,rollup,visTypeTagcloud,visTypeMetric,lens,discover,discoverEnhanced,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,case,alerts,stackAlerts,triggersActionsUi,ml,securitySolution,infra,monitoring,logstash,apm,uptime,watcher,bfetch,canvas,translations]"}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["warning","plugins","security","config"],"pid":7,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
{"type":"log","@timestamp":"2020-11-19T16:13:40Z","tags":["warning","plugins","encryptedSavedObjects","config"],"pid":7,"message":"Generating a random key for xpack.encryptedSavedObjects.encryptionKey. To be able to decrypt encrypted saved objects attributes after restart, please set xpack.encryptedSavedObjects.encryptionKey in kibana.yml"}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["warning","plugins","ingestManager"],"pid":7,"message":"Fleet APIs are disabled due to the Encrypted Saved Objects plugin using an ephemeral encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in kibana.yml."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["warning","plugins","reporting","config"],"pid":7,"message":"Found 'server.host: \"0\"' in Kibana configuration. This is incompatible with Reporting. To enable Reporting to work, 'xpack.reporting.kibanaServer.hostname: 0.0.0.0' is being automatically to the configuration. You can change the setting to 'server.host: 0.0.0.0' or add 'xpack.reporting.kibanaServer.hostname: 0.0.0.0' in kibana.yml to prevent this message."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["warning","plugins","reporting","config"],"pid":7,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux CentOS 8.2.2004 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["warning","plugins","actions","actions"],"pid":7,"message":"APIs are disabled due to the Encrypted Saved Objects plugin using an ephemeral encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in kibana.yml."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["warning","plugins","alerts","plugins","alerting"],"pid":7,"message":"APIs are disabled due to the Encrypted Saved Objects plugin using an ephemeral encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in kibana.yml."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["info","plugins","monitoring","monitoring"],"pid":7,"message":"config sourced from: production cluster"}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["info","savedobjects-service"],"pid":7,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["info","savedobjects-service"],"pid":7,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["info","plugins-system"],"pid":7,"message":"Starting [96] plugins: [usageCollection,telemetryCollectionManager,telemetry,telemetryCollectionXpack,kibanaUsageCollection,xpackLegacy,securityOss,newsfeed,mapsLegacy,kibanaLegacy,taskManager,licensing,globalSearch,globalSearchProviders,code,share,legacyExport,embeddable,uiActionsEnhanced,expressions,data,home,console,consoleExtensions,apmOss,observability,cloud,management,indexPatternManagement,advancedSettings,searchprofiler,painlessLab,grokdebugger,savedObjects,dashboard,visualizations,visTypeVega,visTypeTimelion,timelion,features,upgradeAssistant,security,snapshotRestore,enterpriseSearch,encryptedSavedObjects,ingestManager,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboardMode,beatsManagement,transform,ingestPipelines,licenseManagement,graph,dataEnhanced,visTypeTable,visTypeMarkdown,tileMap,regionMap,inputControlVis,visualize,fileUpload,maps,esUiShared,charts,visTypeVislib,visTypeTimeseries,rollup,visTypeTagcloud,visTypeMetric,lens,discover,discoverEnhanced,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,case,alerts,stackAlerts,triggersActionsUi,ml,securitySolution,infra,monitoring,logstash,apm,uptime,watcher,bfetch,canvas,translations]"}
{"type":"log","@timestamp":"2020-11-19T16:13:41Z","tags":["info","plugins","taskManager","taskManager"],"pid":7,"message":"TaskManager is identified by the Kibana UUID: 5e552b8f-c8d3-43ed-a914-645aaab25a07"}
{"type":"log","@timestamp":"2020-11-19T16:13:42Z","tags":["info","plugins","crossClusterReplication"],"pid":7,"message":"Your basic license does not support crossClusterReplication. Please upgrade your license."}
{"type":"log","@timestamp":"2020-11-19T16:13:42Z","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":7,"message":"Starting monitoring stats collection"}
{"type":"log","@timestamp":"2020-11-19T16:13:42Z","tags":["info","plugins","watcher"],"pid":7,"message":"Your basic license does not support watcher. Please upgrade your license."}
{"type":"log","@timestamp":"2020-11-19T16:13:42Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[version_conflict_engine_exception]: [task:Lens-lens_telemetry]: version conflict, document already exists (current version [4])"}
{"type":"log","@timestamp":"2020-11-19T16:13:42Z","tags":["listening","info"],"pid":7,"message":"Server running at http://0:5601"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["info","http","server","Kibana"],"pid":7,"message":"http server running at http://0:5601"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[version_conflict_engine_exception]: [task:Alerting-alerting_telemetry]: version conflict, document already exists (current version [58])"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[version_conflict_engine_exception]: [task:apm-telemetry-task]: version conflict, document already exists (current version [205])"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[version_conflict_engine_exception]: [task:endpoint:user-artifact-packager:1.0.0]: version conflict, document already exists (current version [53545])"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[version_conflict_engine_exception]: [task:Actions-actions_telemetry]: version conflict, document already exists (current version [58])"}
{"type":"log","@timestamp":"2020-11-19T16:13:43Z","tags":["warning","plugins","reporting"],"pid":7,"message":"Enabling the Chromium sandbox provides an additional layer of protection."}
{"type":"response","@timestamp":"2020-11-19T16:14:03Z","tags":[],"pid":7,"method":"get","statusCode":302,"req":{"url":"/","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","upgrade-insecure-requests":"1","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"},"res":{"statusCode":302,"responseTime":296,"contentLength":9},"message":"GET / 302 296ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:05Z","tags":[],"pid":7,"method":"get","statusCode":302,"req":{"url":"/","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","upgrade-insecure-requests":"1","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"},"res":{"statusCode":302,"responseTime":294,"contentLength":9},"message":"GET / 302 294ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:06Z","tags":[],"pid":7,"method":"get","statusCode":302,"req":{"url":"/spaces/enter","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","upgrade-insecure-requests":"1","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"},"res":{"statusCode":302,"responseTime":244,"contentLength":9},"message":"GET /spaces/enter 302 244ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:06Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/app/home","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","upgrade-insecure-requests":"1","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"},"res":{"statusCode":200,"responseTime":344,"contentLength":9},"message":"GET /app/home 200 344ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:06Z","tags":["api"],"pid":7,"method":"get","statusCode":200,"req":{"url":"/bootstrap.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","if-none-match":"\"58a68717775b8134da0869891e38f4c6848cc68f-gzip\"","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":386,"contentLength":9},"message":"GET /bootstrap.js 200 386ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:09Z","tags":[],"pid":7,"method":"get","statusCode":304,"req":{"url":"/translations/en.json","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\""},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":304,"responseTime":4,"contentLength":9},"message":"GET /translations/en.json 304 4ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:09Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/node_modules/@kbn/ui-framework/dist/kui_light.css","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/css,*/*;q=0.1","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":17,"contentLength":9},"message":"GET /node_modules/@kbn/ui-framework/dist/kui_light.css 200 17ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:09Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/legacy_light_theme.css","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/css,*/*;q=0.1","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":20,"contentLength":9},"message":"GET /ui/legacy_light_theme.css 200 20ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:11Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/spaces/_active_space","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":137,"contentLength":9},"message":"GET /internal/spaces/_active_space 200 137ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:11Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/fonts/inter_ui/Inter-UI-Regular.woff2","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"identity","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":6,"contentLength":9},"message":"GET /ui/fonts/inter_ui/Inter-UI-Regular.woff2 200 6ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:11Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","kbn-system-request":"true"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":149,"contentLength":9},"message":"GET /api/licensing/info 200 149ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:12Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/me","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","kbn-system-request":"true"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":146,"contentLength":9},"message":"GET /internal/security/me 200 146ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:11Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/core/capabilities","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"760","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":542,"contentLength":9},"message":"POST /api/core/capabilities 200 542ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:12Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/licensing/feature_usage/register","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"138","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":88,"contentLength":9},"message":"POST /internal/licensing/feature_usage/register 200 88ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:12Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security_oss/display_insecure_cluster_alert","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":106,"contentLength":9},"message":"GET /internal/security_oss/display_insecure_cluster_alert 200 106ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:12Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/me","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","kbn-system-request":"true"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":144,"contentLength":9},"message":"GET /internal/security/me 200 144ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:12Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/session","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","kbn-system-request":"true"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":192,"contentLength":9},"message":"GET /internal/security/session 200 192ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/fonts/inter_ui/Inter-UI-Light-BETA.woff2","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"identity","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":4,"contentLength":9},"message":"GET /ui/fonts/inter_ui/Inter-UI-Light-BETA.woff2 200 4ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/fonts/inter_ui/Inter-UI-Medium.woff2","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"identity","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":3,"contentLength":9},"message":"GET /ui/fonts/inter_ui/Inter-UI-Medium.woff2 200 3ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"39","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":162,"contentLength":9},"message":"POST /api/saved_objects/_bulk_get 200 162ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects/_find?fields=title&per_page=1&search=%2A&search_fields=title&type=index-pattern","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":207,"contentLength":9},"message":"GET /api/saved_objects/_find?fields=title&per_page=1&search=%2A&search_fields=title&type=index-pattern 200 207ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/global_search/find","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"75","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":153,"contentLength":9},"message":"POST /internal/global_search/find 200 153ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:13Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/fonts/inter_ui/Inter-UI-SemiBold.woff2","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"identity","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":3,"contentLength":9},"message":"GET /ui/fonts/inter_ui/Inter-UI-SemiBold.woff2 200 3ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:22Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/ui/fonts/inter_ui/Inter-UI-Bold.woff2","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8","accept-language":"en-US,en;q=0.5","accept-encoding":"identity","referer":"http://elastic-weblab.megafon.ru/app/home"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":5,"contentLength":9},"message":"GET /ui/fonts/inter_ui/Inter-UI-Bold.woff2 200 5ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:25Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/devTools/devTools.chunk.1.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":6,"contentLength":9},"message":"GET /35949/bundles/plugin/devTools/devTools.chunk.1.js 200 6ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:25Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/console/console.chunk.1.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":12,"contentLength":9},"message":"GET /35949/bundles/plugin/console/console.chunk.1.js 200 12ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:25Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/console/console.chunk.2.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":9,"contentLength":9},"message":"GET /35949/bundles/plugin/console/console.chunk.2.js 200 9ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:25Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"39","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":148,"contentLength":9},"message":"POST /api/saved_objects/_bulk_get 200 148ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:26Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/console/api_server","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"application/json, text/javascript, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","x-requested-with":"XMLHttpRequest","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":158,"contentLength":9},"message":"GET /api/console/api_server 200 158ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:26Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/console/es_config","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":92,"contentLength":9},"message":"GET /api/console/es_config 200 92ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:26Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_aliases&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":328,"contentLength":9},"message":"POST /api/console/proxy?path=_aliases&method=GET 200 328ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:26Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_template&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":419,"contentLength":9},"message":"POST /api/console/proxy?path=_template&method=GET 200 419ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:26Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_mapping&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":642,"contentLength":9},"message":"POST /api/console/proxy?path=_mapping&method=GET 200 642ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":470,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 470ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":540,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 540ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","kbn-version":"7.10.0","user-agent":"MLK test test 1","kbn-system-request":"true","content-type":"application/json","accept":"*/*","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":127,"contentLength":9},"message":"GET /api/licensing/info 200 127ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","kbn-version":"7.10.0","user-agent":"MLK test test 1","kbn-system-request":"true","content-type":"application/json","accept":"*/*","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":148,"contentLength":9},"message":"GET /api/licensing/info 200 148ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_license&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":184,"contentLength":9},"message":"POST /api/console/proxy?path=_license&method=GET 200 184ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_aliases&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":242,"contentLength":9},"message":"POST /api/console/proxy?path=_aliases&method=GET 200 242ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_template&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":527,"contentLength":9},"message":"POST /api/console/proxy?path=_template&method=GET 200 527ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:14:38Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_mapping&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":547,"contentLength":9},"message":"POST /api/console/proxy?path=_mapping&method=GET 200 547ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:13Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":477,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 477ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":535,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 535ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:39Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_aliases&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":223,"contentLength":9},"message":"POST /api/console/proxy?path=_aliases&method=GET 200 223ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:39Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_mapping&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":502,"contentLength":9},"message":"POST /api/console/proxy?path=_mapping&method=GET 200 502ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:39Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_template&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":518,"contentLength":9},"message":"POST /api/console/proxy?path=_template&method=GET 200 518ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:42Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/ui_metric/report","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"728","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/dev_tools","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":884,"contentLength":9},"message":"POST /api/ui_metric/report 200 884ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:53Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_license&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":331,"contentLength":9},"message":"POST /api/console/proxy?path=_license&method=GET 200 331ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:53Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_license&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":238,"contentLength":9},"message":"POST /api/console/proxy?path=_license&method=GET 200 238ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:54Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_aliases&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":339,"contentLength":9},"message":"POST /api/console/proxy?path=_aliases&method=GET 200 339ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:54Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_template&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":408,"contentLength":9},"message":"POST /api/console/proxy?path=_template&method=GET 200 408ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:15:54Z","tags":["access:console"],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/console/proxy?path=_mapping&method=GET","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"text/plain, */*; q=0.01","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","kbn-xsrf":"kibana","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/dev_tools"},"res":{"statusCode":200,"responseTime":605,"contentLength":9},"message":"POST /api/console/proxy?path=_mapping&method=GET 200 605ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:05Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"39","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":210,"contentLength":9},"message":"POST /api/saved_objects/_bulk_get 200 210ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:05Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects/_find?fields=title&per_page=1&search=%2A&search_fields=title&type=index-pattern","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/home","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/home"},"res":{"statusCode":200,"responseTime":230,"contentLength":9},"message":"GET /api/saved_objects/_find?fields=title&per_page=1&search=%2A&search_fields=title&type=index-pattern 200 230ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:09Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"39","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management"},"res":{"statusCode":200,"responseTime":181,"contentLength":9},"message":"POST /api/saved_objects/_bulk_get 200 181ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:12Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/license/permissions","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"0","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management","content-type":"application/json","contenttype":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management"},"res":{"statusCode":200,"responseTime":57,"contentLength":9},"message":"POST /api/license/permissions 200 57ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:12Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/license/start_trial","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management","content-type":"application/json","contenttype":"application/json","kbn-version":"7.10.0","cache-control":"max-age=0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management"},"res":{"statusCode":200,"responseTime":174,"contentLength":9},"message":"GET /api/license/start_trial 200 174ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:16:42Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/ui_metric/report","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"447","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management"},"res":{"statusCode":200,"responseTime":1097,"contentLength":9},"message":"POST /api/ui_metric/report 200 1097ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:17:14Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/stack/license_management"},"res":{"statusCode":200,"responseTime":433,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 433ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:17:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":515,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 515ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:17:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":679,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 679ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:18:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":431,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 431ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/index_management/indices","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":200,"responseTime":2040,"contentLength":9},"message":"GET /api/index_management/indices 200 2040ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:34Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/index_management/indices/reload","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"650","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices?includeHiddenIndices=true","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices?includeHiddenIndices=true"},"res":{"statusCode":200,"responseTime":609,"contentLength":9},"message":"POST /api/index_management/indices/reload 200 609ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*:*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":143,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/*:* 200 143ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/rollup/indices","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":252,"contentLength":9},"message":"GET /api/rollup/indices 200 252ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":176,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/* 200 176ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/search/ese","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":346,"contentLength":9},"message":"POST /internal/search/ese 200 346ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects/_find?fields=title&fields=type&per_page=10000&type=index-pattern","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":183,"contentLength":9},"message":"GET /api/saved_objects/_find?fields=title&fields=type&per_page=10000&type=index-pattern 200 183ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*:*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":127,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/*:* 200 127ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/rollup/indices","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":174,"contentLength":9},"message":"GET /api/rollup/indices 200 174ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":204,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/* 200 204ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:49Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects/_find?fields=title&fields=type&per_page=10000&type=index-pattern","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":191,"contentLength":9},"message":"GET /api/saved_objects/_find?fields=title&fields=type&per_page=10000&type=index-pattern 200 191ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:48Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/search/ese","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":454,"contentLength":9},"message":"POST /internal/search/ese 200 454ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:49Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*:*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":79,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/*:* 200 79ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:49Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/index-pattern-management/resolve_index/*","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":260,"contentLength":9},"message":"GET /internal/index-pattern-management/resolve_index/* 200 260ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:49Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/search/ese","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"154","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/kibana/indexPatterns"},"res":{"statusCode":200,"responseTime":394,"contentLength":9},"message":"POST /internal/search/ese 200 394ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:52Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/index_management/indices","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":200,"responseTime":1485,"contentLength":9},"message":"GET /api/index_management/indices 200 1485ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:54Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/index_lifecycle_management/policies?withIndices=true","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_lifecycle_management/policies","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_lifecycle_management/policies"},"res":{"statusCode":200,"responseTime":232,"contentLength":9},"message":"GET /api/index_lifecycle_management/policies?withIndices=true 200 232ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:55Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/snapshotRestore/snapshotRestore.chunk.1.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore"},"res":{"statusCode":200,"responseTime":3,"contentLength":9},"message":"GET /35949/bundles/plugin/snapshotRestore/snapshotRestore.chunk.1.js 200 3ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:19:55Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/snapshot_restore/privileges","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore"},"res":{"statusCode":200,"responseTime":313,"contentLength":9},"message":"GET /api/snapshot_restore/privileges 200 313ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:02Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.16.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys"},"res":{"statusCode":200,"responseTime":4,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.16.js 200 4ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:02Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.15.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys"},"res":{"statusCode":200,"responseTime":4,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.15.js 200 4ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:02Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/api_key/privileges","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/api_keys"},"res":{"statusCode":200,"responseTime":226,"contentLength":9},"message":"GET /internal/security/api_key/privileges 200 226ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:03Z","tags":["error","elasticsearch","data"],"pid":7,"message":"[ConnectionError]: connect ECONNREFUSED 10.54.62.230:9200"}
{"type":"log","@timestamp":"2020-11-19T16:20:03Z","tags":["error","plugins","securitySolution","endpoint:user-artifact-packager:1","0","0"],"pid":7,"message":"{ ConnectionError: connect ECONNREFUSED 10.54.62.230:9200\n at ClientRequest.request.on.err (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/Connection.js:132:18)\n at ClientRequest.emit (events.js:198:13)\n at Socket.socketErrorListener (_http_client.js:401:9)\n at Socket.emit (events.js:198:13)\n at emitErrorNT (internal/streams/destroy.js:91:8)\n at emitErrorAndCloseNT (internal/streams/destroy.js:59:3)\n at process._tickCallback (internal/process/next_tick.js:63:19)\n name: 'ConnectionError',\n meta:\n { body: null,\n statusCode: null,\n headers: null,\n meta:\n { context: null,\n request: [Object],\n name: 'elasticsearch-js',\n connection: [Object],\n attempts: 0,\n aborted: false } },\n isBoom: true,\n isServer: true,\n data: null,\n output:\n { statusCode: 503,\n payload:\n { statusCode: 503,\n error: 'Service Unavailable',\n message: 'connect ECONNREFUSED 10.54.62.230:9200' },\n headers: {} },\n reformat: [Function],\n [Symbol(SavedObjectsClientErrorCode)]: 'SavedObjectsClient/esUnavailable' }"}
{"type":"response","@timestamp":"2020-11-19T16:19:56Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/snapshot_restore/snapshots","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore/snapshots","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/snapshot_restore/snapshots"},"res":{"statusCode":200,"responseTime":7751,"contentLength":9},"message":"GET /api/snapshot_restore/snapshots 200 7751ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:04Z","tags":["error","elasticsearch","data"],"pid":7,"message":"Request error, retrying\nPOST http://10.54.62.230:9200/.reporting-*/_search => connect ECONNREFUSED 10.54.62.230:9200"}
{"type":"response","@timestamp":"2020-11-19T16:20:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.3.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.3.js 200 8ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.14.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":200,"responseTime":9,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.14.js 200 9ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.18.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.18.js 200 8ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.19.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":200,"responseTime":7,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.19.js 200 7ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:04Z","tags":["error","elasticsearch","security"],"pid":7,"message":"Request error, retrying\nGET http://10.54.62.230:9200/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D => connect ECONNREFUSED 10.54.62.230:9200"}
{"type":"log","@timestamp":"2020-11-19T16:20:04Z","tags":["error","elasticsearch","security"],"pid":7,"message":"Request error, retrying\nGET http://10.54.62.230:9200/_security/_authenticate => connect ECONNREFUSED 10.54.62.230:9200"}
{"type":"response","@timestamp":"2020-11-19T16:20:04Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/security/role","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":200,"responseTime":294,"contentLength":9},"message":"GET /api/security/role 200 294ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:05Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.8.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":200,"responseTime":4,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.8.js 200 4ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:05Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/35949/bundles/plugin/security/security.chunk.5.js","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":200,"responseTime":1,"contentLength":9},"message":"GET /35949/bundles/plugin/security/security.chunk.5.js 200 1ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:06Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/security/role","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":200,"responseTime":102,"contentLength":9},"message":"GET /api/security/role 200 102ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:06Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/users","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":200,"responseTime":151,"contentLength":9},"message":"GET /internal/security/users 200 151ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["error","plugins","reporting","esqueue","queue-worker","error"],"pid":7,"message":"khp1avxb0007e2e3a256jb9o - job querying failed: Error: [security_exception] missing authentication credentials for REST request [/.reporting-*/_search], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }\n at respond (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)\n at checkRespForFailure (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)\n at HttpConnector.<anonymous> (/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)\n at IncomingMessage.wrapper (/usr/share/kibana/node_modules/lodash/lodash.js:4949:19)\n at IncomingMessage.emit (events.js:203:15)\n at endReadableNT (_stream_readable.js:1145:12)\n at process._tickCallback (internal/process/next_tick.js:63:19)"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["error","plugins","security","session","index"],"pid":7,"message":"Failed to retrieve session value: [security_exception] missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["error","plugins","security","authentication"],"pid":7,"message":"{ Error: [security_exception] missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }\n at respond (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)\n at checkRespForFailure (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)\n at HttpConnector.<anonymous> (/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)\n at IncomingMessage.wrapper (/usr/share/kibana/node_modules/lodash/lodash.js:4949:19)\n at IncomingMessage.emit (events.js:203:15)\n at endReadableNT (_stream_readable.js:1145:12)\n at process._tickCallback (internal/process/next_tick.js:63:19)\n status: 401,\n displayName: 'AuthenticationException',\n message:\n '[security_exception] missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D], with { header={ WWW-Authenticate=\"Basic realm=\\\\\"security\\\\\" charset=\\\\\"UTF-8\\\\\"\" } }',\n path:\n '/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D',\n query: {},\n body:\n { error:\n { root_cause: [Array],\n type: 'security_exception',\n reason:\n 'missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D]',\n header: [Object] },\n status: 401 },\n statusCode: 401,\n response:\n '{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D]\",\"header\":{\"WWW-Authenticate\":\"Basic realm=\\\\\"security\\\\\" charset=\\\\\"UTF-8\\\\\"\"}}],\"type\":\"security_exception\",\"reason\":\"missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D]\",\"header\":{\"WWW-Authenticate\":\"Basic realm=\\\\\"security\\\\\" charset=\\\\\"UTF-8\\\\\"\"}},\"status\":401}',\n wwwAuthenticateDirective: 'Basic realm=\"security\" charset=\"UTF-8\"',\n toString: [Function],\n toJSON: [Function],\n isBoom: true,\n isServer: false,\n data: null,\n output:\n { statusCode: 401,\n payload:\n { statusCode: 401,\n error: 'Unauthorized',\n message:\n '[security_exception] missing authentication credentials for REST request [/.kibana_security_session_1/_doc/l8Uwl82wR%2FJAWo2OLXXLILj%2BfvaRfqd86f44wSXLnto%3D], with { header={ WWW-Authenticate=\"Basic realm=\\\\\"security\\\\\" charset=\\\\\"UTF-8\\\\\"\" } }' },\n headers:\n { 'WWW-Authenticate': 'Basic realm=\"security\" charset=\"UTF-8\"' } },\n reformat: [Function],\n [Symbol(ElasticsearchError)]: 'Elasticsearch/notAuthorized' }"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"error","@timestamp":"2020-11-19T16:20:07Z","tags":[],"pid":7,"level":"error","error":{"message":"Internal Server Error","name":"Error","stack":"Error: Internal Server Error\n at HapiResponseAdapter.toError (/usr/share/kibana/src/core/server/http/router/response_adapter.js:132:19)\n at HapiResponseAdapter.toHapiResponse (/usr/share/kibana/src/core/server/http/router/response_adapter.js:86:19)\n at HapiResponseAdapter.handle (/usr/share/kibana/src/core/server/http/router/response_adapter.js:81:17)\n at Object.interceptAuth [as authenticate] (/usr/share/kibana/src/core/server/http/lifecycle/auth.js:104:36)\n at process._tickCallback (internal/process/next_tick.js:68:7)"},"url":{"protocol":null,"slashes":null,"auth":null,"host":null,"port":null,"hostname":null,"hash":null,"search":null,"query":{},"pathname":"/api/security/role","path":"/api/security/role","href":"/api/security/role"},"message":"Internal Server Error"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","searchprofiler"],"pid":7,"message":"You cannot use searchprofiler because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","painlessLab"],"pid":7,"message":"You cannot use painlessLab because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","snapshotRestore"],"pid":7,"message":"You cannot use snapshot_restore because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","indexManagement"],"pid":7,"message":"You cannot use index_management because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","remoteClusters"],"pid":7,"message":"You cannot use Remote Clusters because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","crossClusterReplication"],"pid":7,"message":"You cannot use crossClusterReplication because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","indexLifecycleManagement"],"pid":7,"message":"You cannot use index_lifecycle_management because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","transform"],"pid":7,"message":"You cannot use transform because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","ingestPipelines"],"pid":7,"message":"You cannot use ingest_pipelines because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","rollup"],"pid":7,"message":"You cannot use rollup because license information is not available at this time."}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":7,"message":"Monitoring status upload endpoint is not enabled in Elasticsearch:Monitoring stats collection is stopped"}
{"type":"log","@timestamp":"2020-11-19T16:20:07Z","tags":["info","plugins","watcher"],"pid":7,"message":"You cannot use watcher because license information is not available at this time."}
{"type":"response","@timestamp":"2020-11-19T16:20:07Z","tags":[],"pid":7,"method":"get","statusCode":500,"req":{"url":"/api/security/role","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/roles"},"res":{"statusCode":500,"responseTime":240,"contentLength":9},"message":"GET /api/security/role 500 240ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:08Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"response","@timestamp":"2020-11-19T16:20:08Z","tags":[],"pid":7,"method":"get","statusCode":403,"req":{"url":"/internal/security/users","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":403,"responseTime":49,"contentLength":9},"message":"GET /internal/security/users 403 49ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:08Z","tags":[],"pid":7,"method":"get","statusCode":403,"req":{"url":"/api/security/role","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/security/users","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/security/users"},"res":{"statusCode":403,"responseTime":47,"contentLength":9},"message":"GET /api/security/role 403 47ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:10Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"response","@timestamp":"2020-11-19T16:20:10Z","tags":[],"pid":7,"method":"get","statusCode":403,"req":{"url":"/api/index_management/indices","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":403,"responseTime":5,"contentLength":9},"message":"GET /api/index_management/indices 403 5ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:11Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"log","@timestamp":"2020-11-19T16:20:12Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:20:41.996Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"response","@timestamp":"2020-11-19T16:20:14Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/ui_metric/report","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"676","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":200,"responseTime":557,"contentLength":9},"message":"POST /api/ui_metric/report 200 557ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:15Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0","kbn-system-request":"true"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":200,"responseTime":4,"contentLength":9},"message":"GET /api/licensing/info 200 4ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:17Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:20:47.996Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"log","@timestamp":"2020-11-19T16:20:21Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:20:50.997Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"log","@timestamp":"2020-11-19T16:20:24Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:20:53.998Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"log","@timestamp":"2020-11-19T16:20:30Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:20:59.998Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"log","@timestamp":"2020-11-19T16:20:33Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:21:02.999Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"log","@timestamp":"2020-11-19T16:20:36Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:21:05.999Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
{"type":"response","@timestamp":"2020-11-19T16:20:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":659,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 659ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:37Z","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/telemetry/v2/clusters/_stats","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"101","kbn-version":"7.10.0","user-agent":"MLK test test 1","content-type":"application/json","accept":"*/*","origin":"http://elastic-weblab.megafon.ru","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":771,"contentLength":9},"message":"POST /api/telemetry/v2/clusters/_stats 200 771ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:38Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","kbn-version":"7.10.0","user-agent":"MLK test test 1","kbn-system-request":"true","content-type":"application/json","accept":"*/*","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":7,"contentLength":9},"message":"GET /api/licensing/info 200 7ms - 9.0B"}
{"type":"response","@timestamp":"2020-11-19T16:20:39Z","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","kbn-version":"7.10.0","user-agent":"MLK test test 1","kbn-system-request":"true","content-type":"application/json","accept":"*/*","referer":"http://elastic-weblab.megafon.ru/app/discover","accept-encoding":"gzip, deflate","accept-language":"en-US,en;q=0.9,ru;q=0.8","x-cabinet-dev-token":"I'm a developer!"},"remoteAddress":"10.99.202.104","userAgent":"MLK test test 1","referer":"http://elastic-weblab.megafon.ru/app/discover"},"res":{"statusCode":200,"responseTime":3,"contentLength":9},"message":"GET /api/licensing/info 200 3ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:40Z","tags":["error","plugins","reporting","esqueue","queue-worker","error"],"pid":7,"message":"khp1avxb0007e2e3a256jb9o - job querying failed: Error: [security_exception] missing authentication credentials for REST request [/.reporting-*/_search], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }\n at respond (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)\n at checkRespForFailure (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)\n at HttpConnector.<anonymous> (/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)\n at IncomingMessage.wrapper (/usr/share/kibana/node_modules/lodash/lodash.js:4949:19)\n at IncomingMessage.emit (events.js:203:15)\n at endReadableNT (_stream_readable.js:1145:12)\n at process._tickCallback (internal/process/next_tick.js:63:19)"}
{"type":"log","@timestamp":"2020-11-19T16:20:40Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"response","@timestamp":"2020-11-19T16:20:40Z","tags":[],"pid":7,"method":"post","statusCode":403,"req":{"url":"/api/index_management/indices/reload","method":"post","headers":{"connection":"upgrade","host":"elastic-weblab.megafon.ru","content-length":"17","user-agent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","accept":"*/*","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices","content-type":"application/json","kbn-version":"7.10.0","origin":"http://elastic-weblab.megafon.ru"},"remoteAddress":"10.99.202.104","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0","referer":"http://elastic-weblab.megafon.ru/app/management/data/index_management/indices"},"res":{"statusCode":403,"responseTime":61,"contentLength":9},"message":"POST /api/index_management/indices/reload 403 61ms - 9.0B"}
{"type":"log","@timestamp":"2020-11-19T16:20:41Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"} error"}
{"type":"log","@timestamp":"2020-11-19T16:20:45Z","tags":["error","plugins","taskManager","taskManager"],"pid":7,"message":"Failed to poll for work: [security_exception] missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/.kibana_task_manager/_update_by_query\",\"query\":{\"ignore_unavailable\":true,\"refresh\":true,\"max_docs\":10,\"conflicts\":\"proceed\"},\"body\":\"{\\\"query\\\":{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"type\\\":\\\"task\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"idle\\\"}},{\\\"range\\\":{\\\"task.runAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}]}},{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"lte\\\":\\\"now\\\"}}}]}}]}},{\\\"bool\\\":{\\\"should\\\":[{\\\"exists\\\":{\\\"field\\\":\\\"task.schedule\\\"}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"session_cleanup\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"lens_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.email\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.index\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.pagerduty\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.server-log\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.slack\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.webhook\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.servicenow\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.jira\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions:.resilient\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":1}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"actions_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting_telemetry\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.index-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:.geo-threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.signals\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:siem.notifications\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"endpoint:user-artifact-packager\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:metrics.alert.inventory.threshold\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:logs.alert.document.count\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cluster_health\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_license_expiration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_cpu_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_missing_monitoring_data\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_disk_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_jvm_memory_usage\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_nodes_changed\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_logstash_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_kibana_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:monitoring_alert_elasticsearch_version_mismatch\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_duration_anomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:apm.transaction_error_rate\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"apm-telemetry-task\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.monitorStatus\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.tls\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}},{\\\"bool\\\":{\\\"must\\\":[{\\\"term\\\":{\\\"task.taskType\\\":\\\"alerting:xpack.uptime.alerts.durationAnomaly\\\"}},{\\\"range\\\":{\\\"task.attempts\\\":{\\\"lt\\\":3}}}]}}]}}]}}],\\\"filter\\\":[{\\\"bool\\\":{\\\"must_not\\\":[{\\\"bool\\\":{\\\"should\\\":[{\\\"term\\\":{\\\"task.status\\\":\\\"running\\\"}},{\\\"term\\\":{\\\"task.status\\\":\\\"claiming\\\"}}],\\\"must\\\":{\\\"range\\\":{\\\"task.retryAt\\\":{\\\"gt\\\":\\\"now\\\"}}}}}]}}]}}]}},\\\"sort\\\":[{\\\"_script\\\":{\\\"type\\\":\\\"number\\\",\\\"order\\\":\\\"asc\\\",\\\"script\\\":{\\\"lang\\\":\\\"painless\\\",\\\"source\\\":\\\"\\\\nif (doc['task.retryAt'].size()!=0) {\\\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\\\n}\\\\nif (doc['task.runAt'].size()!=0) {\\\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\\\n}\\\\n \\\"}}}],\\\"seq_no_primary_term\\\":true,\\\"script\\\":{\\\"source\\\":\\\"ctx._source.task.ownerId=params.ownerId; ctx._source.task.status=params.status; ctx._source.task.retryAt=params.retryAt;\\\",\\\"lang\\\":\\\"painless\\\",\\\"params\\\":{\\\"ownerId\\\":\\\"kibana:5e552b8f-c8d3-43ed-a914-645aaab25a07\\\",\\\"status\\\":\\\"claiming\\\",\\\"retryAt\\\":\\\"2020-11-19T16:21:15.000Z\\\"}}}\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&max_docs=10&conflicts=proceed]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment