Navigation Menu

Skip to content

Instantly share code, notes, and snippets.

@drnw
Created September 28, 2021 04:29
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save drnw/9f2aa8f124158fd3ad1b9464704aa236 to your computer and use it in GitHub Desktop.
Save drnw/9f2aa8f124158fd3ad1b9464704aa236 to your computer and use it in GitHub Desktop.
"Reporting features are not yet ready" in Kibana
This file has been truncated, but you can view the full file.
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: execution_context"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: path"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: csp"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: elasticsearch"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: externalUrl"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: logging"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: server"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: plugins"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: kibana"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: savedObjects"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: migrations"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: uiSettings"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: ops"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: status"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: pid"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: i18n"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","root"],"pid":45398,"message":"prebooting root"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","server"],"pid":45398,"message":"prebooting server"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","environment"],"pid":45398,"message":"Resuming persistent Kibana instance UUID: 0c8b1efe-3db9-41af-9aa0-c1efe35532d5"}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Discovering plugins..."}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Scanning \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins\" for plugin sub-directories..."}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Scanning \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins\" for plugin sub-directories..."}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Scanning \"/usr/local/Cellar/kibana-full/7.15.0/libexec/plugins\" for plugin sub-directories..."}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Scanning \"/usr/local/Cellar/kibana-full/7.15.0/kibana-extra\" for plugin sub-directories..."}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"advancedSettings\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/advanced_settings\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"apmOss\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/apm_oss\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"bfetch\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/bfetch\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"charts\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/charts\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"console\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/console\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"dashboard\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/dashboard\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"data\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/data\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"devTools\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/dev_tools\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"discover\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/discover\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"embeddable\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/embeddable\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"esUiShared\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/es_ui_shared\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionError\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_error\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionImage\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_image\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionMetric\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_metric\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionRepeatImage\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_repeat_image\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionRevealImage\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_reveal_image\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressionShape\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_shape\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"expressions\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expressions\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"fieldFormats\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/field_formats\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"home\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/home\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"indexPatternEditor\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/index_pattern_editor\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"indexPatternFieldEditor\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/index_pattern_field_editor\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"indexPatternManagement\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/index_pattern_management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"inputControlVis\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/input_control_vis\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"inspector\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/inspector\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"kibanaLegacy\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_legacy\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"kibanaOverview\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_overview\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"kibanaReact\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_react\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"kibanaUsageCollection\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_usage_collection\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"kibanaUtils\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_utils\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"legacyExport\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/legacy_export\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"management\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"mapsEms\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/maps_ems\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"mapsLegacy\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/maps_legacy\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"navigation\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/navigation\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"newsfeed\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/newsfeed\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"presentationUtil\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/presentation_util\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"regionMap\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/region_map\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"savedObjects\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/saved_objects\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"savedObjectsManagement\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/saved_objects_management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"savedObjectsTaggingOss\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/saved_objects_tagging_oss\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"screenshotMode\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/screenshot_mode\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"securityOss\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/security_oss\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"share\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/share\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"spacesOss\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/spaces_oss\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"telemetry\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/telemetry\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"telemetryCollectionManager\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/telemetry_collection_manager\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"telemetryManagementSection\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/telemetry_management_section\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"tileMap\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/tile_map\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"timelion\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/timelion\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"uiActions\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/ui_actions\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"urlForwarding\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/url_forwarding\""}
{"type":"log","@timestamp":"2021-09-27T18:49:54+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"usageCollection\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/usage_collection\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visDefaultEditor\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_default_editor\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeMarkdown\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_markdown\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeMetric\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_metric\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypePie\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_pie\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeTable\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_table\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeTagcloud\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_tagcloud\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeTimelion\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_timelion\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeTimeseries\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_timeseries\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeVega\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_vega\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeVislib\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_vislib\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visTypeXy\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_xy\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visualizations\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/visualizations\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"visualize\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/visualize\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"actions\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/actions\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"alerting\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/alerting\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"apm\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/apm\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"banners\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/banners\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"canvas\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/canvas\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"cases\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/cases\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"cloud\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/cloud\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"code\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/code\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"crossClusterReplication\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/cross_cluster_replication\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"dashboardEnhanced\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/dashboard_enhanced\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"dashboardMode\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/dashboard_mode\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"dataEnhanced\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/data_enhanced\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"dataVisualizer\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/data_visualizer\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"discoverEnhanced\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/discover_enhanced\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"urlDrilldown\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/drilldowns/url_drilldown\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"embeddableEnhanced\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/embeddable_enhanced\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"encryptedSavedObjects\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/encrypted_saved_objects\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"enterpriseSearch\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/enterprise_search\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"eventLog\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/event_log\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"features\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/features\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"fileUpload\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/file_upload\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"fleet\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/fleet\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"globalSearch\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/global_search\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"globalSearchBar\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/global_search_bar\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"globalSearchProviders\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/global_search_providers\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"graph\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/graph\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"grokdebugger\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/grokdebugger\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"indexLifecycleManagement\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/index_lifecycle_management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"indexManagement\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/index_management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"infra\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/infra\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"ingestPipelines\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ingest_pipelines\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"lens\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/lens\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"licenseApiGuard\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/license_api_guard\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"licenseManagement\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/license_management\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"licensing\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/licensing\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"lists\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/lists\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"logstash\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/logstash\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"maps\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/maps\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"metricsEntities\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/metrics_entities\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"ml\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ml\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"monitoring\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/monitoring\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"observability\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/observability\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"osquery\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/osquery\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"painlessLab\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/painless_lab\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"remoteClusters\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/remote_clusters\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"reporting\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/reporting\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"rollup\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/rollup\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"ruleRegistry\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/rule_registry\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"runtimeFields\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/runtime_fields\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"savedObjectsTagging\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/saved_objects_tagging\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"searchprofiler\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/searchprofiler\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"security\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/security\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"securitySolution\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/security_solution\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"snapshotRestore\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/snapshot_restore\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"spaces\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/spaces\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"stackAlerts\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/stack_alerts\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"taskManager\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/task_manager\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"telemetryCollectionXpack\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/telemetry_collection_xpack\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"timelines\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/timelines\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"transform\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/transform\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"translations\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/translations\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"triggersActionsUi\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/triggers_actions_ui\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"uiActionsEnhanced\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ui_actions_enhanced\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"upgradeAssistant\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/upgrade_assistant\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"uptime\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/uptime\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"watcher\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/watcher\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins-discovery"],"pid":45398,"message":"Successfully discovered plugin \"xpackLegacy\" at \"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/xpack_legacy\""}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins","advancedSettings"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/advanced_settings/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: home"}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: kibana_legacy"}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: apm_oss"}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: newsfeed"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: telemetry"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: usageCollection"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_markdown"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_metric"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_table"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_tagcloud"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_timelion"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_timeseries"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_vega"}
{"type":"log","@timestamp":"2021-09-27T18:50:04+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,actions"}
{"type":"log","@timestamp":"2021-09-27T18:50:04+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,alerting"}
{"type":"log","@timestamp":"2021-09-27T18:50:08+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,banners"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,cases"}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,eventLog"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,fleet"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,licensing"}
{"type":"log","@timestamp":"2021-09-27T18:50:16+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,maps"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: monitoring"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,reporting"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,security"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,securitySolution"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,spaces"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,stack_alerts"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,task_manager"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,trigger_actions_ui"}
{"type":"log","@timestamp":"2021-09-27T18:49:56+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: console"}
{"type":"log","@timestamp":"2021-09-27T18:49:58+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: data"}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","indexPatternFieldEditor"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/index_pattern_field_editor/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","indexPatternManagement"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/index_pattern_management/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: apm_oss,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins","bfetch"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/bfetch/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:55+02:00","tags":["debug","plugins","charts"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/charts/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_metric.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","visTypePie"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_pie/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_table.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_tagcloud.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_timelion.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_timeseries.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_vega.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_vislib"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_vislib.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","plugins","visTypeXy"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/vis_type_xy/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","plugins","visualizations"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/visualizations/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:02+02:00","tags":["debug","plugins","visualize"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/visualize/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:04+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,actions,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:08+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,apm"}
{"type":"log","@timestamp":"2021-09-27T18:50:08+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,apm,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:08+02:00","tags":["debug","plugins","canvas"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/canvas/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,cases,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,cloud"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,cloud,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,code"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ccr"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ccr,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","plugins","dashboardEnhanced"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/dashboard_enhanced/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,dashboard_mode"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,dashboard_mode,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,data_enhanced"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","plugins","dataVisualizer"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/data_visualizer/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,discoverEnhanced"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,encryptedSavedObjects"}
{"type":"log","@timestamp":"2021-09-27T18:50:09+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,encryptedSavedObjects,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: enterpriseSearch"}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: enterpriseSearch,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,eventLog,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","plugins","features"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/features/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:10+02:00","tags":["debug","plugins","fileUpload"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/file_upload/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,fleet,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,global_search"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","plugins","globalSearchProviders"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/global_search_providers/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,graph"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,graph,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","plugins","grokdebugger"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/grokdebugger/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ilm"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ilm,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,index_management"}
{"type":"log","@timestamp":"2021-09-27T18:50:11+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,index_management,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:13+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,infra"}
{"type":"log","@timestamp":"2021-09-27T18:50:13+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,infra,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:13+02:00","tags":["debug","plugins","ingestPipelines"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ingest_pipelines/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,lens"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,lens,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","plugins","licenseApiGuard"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/license_api_guard/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,license_management"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,license_management,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,lists"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,lists,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,logstash"}
{"type":"log","@timestamp":"2021-09-27T18:50:15+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,logstash,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:16+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,maps,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:16+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,metricsEntities"}
{"type":"log","@timestamp":"2021-09-27T18:50:16+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,metricsEntities"}
{"type":"log","@timestamp":"2021-09-27T18:50:16+02:00","tags":["debug","plugins","ml"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ml/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: monitoring,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,observability"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,observability,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,osquery"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,osquery,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:17+02:00","tags":["debug","plugins","painlessLab"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/painless_lab/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:18+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,remote_clusters"}
{"type":"log","@timestamp":"2021-09-27T18:50:18+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,remote_clusters,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,reporting,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,rollup"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,rollup,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ruleRegistry"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,ruleRegistry,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,saved_object_tagging"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,saved_object_tagging,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","plugins","searchprofiler"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/searchprofiler/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:29+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,security,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,securitySolution,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,snapshot_restore"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,snapshot_restore,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:33+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,spaces,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,stack_alerts,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,task_manager,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","telemetryCollectionXpack"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/telemetry_collection_xpack/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,timelines"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,timelines,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","transform"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/transform/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","translations"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/translations/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","uiActionsEnhanced"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/ui_actions_enhanced/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,upgrade_assistant"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: xpack,upgrade_assistant,enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","uptime"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/uptime/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","watcher"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/watcher/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins","xpackLegacy"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/x-pack/plugins/xpack_legacy/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["info","plugins-service"],"pid":45398,"message":"Plugin \"metricsEntities\" is disabled."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","plugins-service"],"pid":45398,"message":"Discovered 133 plugins."}
{"type":"log","@timestamp":"2021-09-27T18:50:34+02:00","tags":["debug","http"],"pid":45398,"message":"setting up preboot server"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http"],"pid":45398,"message":"starting preboot server"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"starting http server"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["info","http","server","Preboot"],"pid":45398,"message":"http server running at http://localhost:5601"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","i18n"],"pid":45398,"message":"Using locale: en"}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","kibanaUsageCollection"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/kibana_usage_collection/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","legacyExport"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/legacy_export/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","management"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/management/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: map"}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: maps_legacy"}
{"type":"log","@timestamp":"2021-09-27T18:49:56+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: console.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:49:58+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: dashboard"}
{"type":"log","@timestamp":"2021-09-27T18:49:58+02:00","tags":["debug","plugins","discover"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/discover/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:58+02:00","tags":["debug","plugins","embeddable"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/embeddable/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:58+02:00","tags":["debug","plugins","esUiShared"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/es_ui_shared/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressionImage"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_image/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressionMetric"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_metric/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressionRepeatImage"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_repeat_image/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressionRevealImage"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_reveal_image/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressionShape"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expression_shape/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","expressions"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/expressions/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:49:59+02:00","tags":["debug","plugins","fieldFormats"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/field_formats/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: vis_type_markdown.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: newsfeed.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","presentationUtil"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/presentation_util/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","regionMap"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/region_map/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:00+02:00","tags":["debug","plugins","savedObjects"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/saved_objects/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","savedObjectsManagement"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/saved_objects_management/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","screenshotMode"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/screenshot_mode/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: security"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","share"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/share/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: telemetry.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","telemetryCollectionManager"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/telemetry_collection_manager/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","plugins","tileMap"],"pid":45398,"message":"\"/usr/local/Cellar/kibana-full/7.15.0/libexec/src/plugins/tile_map/server\" does not export \"config\"."}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: timelion"}
{"type":"log","@timestamp":"2021-09-27T18:50:01+02:00","tags":["debug","config"],"pid":45398,"message":"Marking config path as handled: timelion.enabled"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","i18n"],"pid":45398,"message":"Using translation files: []"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"registering route handler for [/translations/{locale}.json]"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","capabilities-service"],"pid":45398,"message":"Prebooting capabilities service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"registering route handler for [/api/core/capabilities]"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","elasticsearch-service"],"pid":45398,"message":"Prebooting elasticsearch service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","ui-settings-service"],"pid":45398,"message":"Prebooting ui settings service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"registering route handler for [/bootstrap.js]"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http-resources"],"pid":45398,"message":"prebooting HttpResourcesService"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-service"],"pid":45398,"message":"Prebooting plugins service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","core-app"],"pid":45398,"message":"Prebooting core app."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","root"],"pid":45398,"message":"setting up root"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","server"],"pid":45398,"message":"setting up server"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"Environment variable \"DATA_PATH\" will be removed. It has been replaced with kibana.yml setting \"path.data\""}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one. For more details, see https://github.com/elastic/kibana/blob/master/src/core/server/logging/README.mdx"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"\"logging.verbose\" has been deprecated and will be removed in 8.0. Moving forward, you can use \"logging.root.level:all\" in your logging configuration. "}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"Session idle timeout (\"xpack.security.session.idleTimeout\") will be set to 1 hour by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["warning","config","deprecation"],"pid":45398,"message":"Session lifespan (\"xpack.security.session.lifespan\") will be set to 30 days by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","i18n"],"pid":45398,"message":"Using locale: en"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","i18n"],"pid":45398,"message":"Using translation files: []"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","capabilities-service"],"pid":45398,"message":"Setting up capabilities service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","elasticsearch-service"],"pid":45398,"message":"Setting up elasticsearch service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","elasticsearch-service"],"pid":45398,"message":"Checking Elasticsearch version"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":46,"memory":{"heap":{"usedInBytes":187342816}},"eventLoopDelay":4.6489910036325455},"host":{"os":{"load":{"1m":10.8486328125,"5m":8.208984375,"15m":7.90625}}},"message":"memory: 178.7MB uptime: 0:00:46 load: [10.85,8.21,7.91] delay: 4.649"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"Setting up SavedObjects service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","ui-settings-service"],"pid":45398,"message":"Setting up ui settings service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","http-resources"],"pid":45398,"message":"setting up HttpResourcesService"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","deprecations-service"],"pid":45398,"message":"Setting up Deprecations service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-service"],"pid":45398,"message":"Setting up plugins service"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["info","plugins-system","standard"],"pid":45398,"message":"Setting up [113] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,telemetry,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,graph,visTypeVega,management,watcher,licenseManagement,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,dashboardEnhanced,visualize,visTypeTimeseries,savedObjectsManagement,spaces,security,transform,savedObjectsTagging,lens,reporting,canvas,lists,ingestPipelines,fileUpload,maps,dataVisualizer,encryptedSavedObjects,dataEnhanced,dashboardMode,cloud,snapshotRestore,fleet,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,osquery,ml,cases,timelines,securitySolution,observability,uptime,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"translations\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","translations"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"licensing\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Setting up Licensing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Polling Elasticsearch License API with frequency 30000ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"globalSearch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","globalSearch"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"globalSearchProviders\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","globalSearchProviders"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"banners\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","banners"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"licenseApiGuard\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","licenseApiGuard"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"code\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","code"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"usageCollection\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","usageCollection"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"xpackLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","xpackLegacy"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"taskManager\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["info","plugins","taskManager"],"pid":45398,"message":"TaskManager is identified by the Kibana UUID: 0c8b1efe-3db9-41af-9aa0-c1efe35532d5"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"telemetryCollectionManager\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","telemetryCollectionManager"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"telemetryCollectionXpack\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","telemetryCollectionXpack"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","telemetryCollectionManager"],"pid":45398,"message":"Setting local_xpack as the telemetry collection strategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"kibanaUsageCollection\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","kibanaUsageCollection"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"securityOss\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","securityOss"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"share\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","share"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"screenshotMode\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","screenshotMode"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"telemetry\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","telemetry"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"newsfeed\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","newsfeed"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"mapsEms\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","mapsEms"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"mapsLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","mapsLegacy"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"legacyExport\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","legacyExport"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"kibanaLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","kibanaLegacy"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"embeddable\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","embeddable"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"uiActionsEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","uiActionsEnhanced"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"fieldFormats\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","fieldFormats"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressions\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressions"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"charts\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","charts"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"esUiShared\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","esUiShared"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"bfetch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","bfetch"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"data\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","data"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy es"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy ese"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy eql"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"savedObjects\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","savedObjects"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visualizations\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visualizations"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visualizations"],"pid":45398,"message":"visualizations: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeXy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeXy"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeVislib\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeVislib"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeTimelion\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeTimelion"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"features\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","features"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeTagcloud\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeTagcloud"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeTable\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeTable"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypePie\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypePie"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeMetric\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeMetric"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeMarkdown\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeMarkdown"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"tileMap\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","tileMap"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"regionMap\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","regionMap"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"presentationUtil\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","presentationUtil"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressionShape\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressionShape"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressionRevealImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressionRevealImage"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressionRepeatImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressionRepeatImage"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressionMetric\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressionMetric"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"expressionImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","expressionImage"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"timelion\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","timelion"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"indexPatternFieldEditor\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","indexPatternFieldEditor"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","indexPatternFieldEditor"],"pid":45398,"message":"index_pattern_field_editor: setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"home\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","home"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"searchprofiler\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","searchprofiler"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"painlessLab\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","painlessLab"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"grokdebugger\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","grokdebugger"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"graph\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","graph"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeVega\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeVega"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"management\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","management"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","management"],"pid":45398,"message":"management: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"watcher\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","watcher"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"licenseManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","licenseManagement"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"indexPatternManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","indexPatternManagement"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"advancedSettings\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","advancedSettings"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","advancedSettings"],"pid":45398,"message":"advancedSettings: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"discover\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","discover"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"discoverEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","discoverEnhanced"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"dashboard\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","dashboard"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","dashboard"],"pid":45398,"message":"dashboard: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"dashboardEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","dashboardEnhanced"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visualize\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visualize"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visualize"],"pid":45398,"message":"visualize: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"visTypeTimeseries\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","visTypeTimeseries"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"savedObjectsManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","savedObjectsManagement"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","savedObjectsManagement"],"pid":45398,"message":"Setting up SavedObjectsManagement plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"spaces\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:35+02:00","tags":["debug","plugins","spaces"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"security\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","security"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["warning","plugins","security","config"],"pid":45398,"message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["warning","plugins","security","config"],"pid":45398,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","logging"],"pid":45398,"message":"Setting custom config for context [plugins.security]"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"transform\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","transform"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"savedObjectsTagging\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","savedObjectsTagging"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"lens\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","lens"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"reporting\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"canvas\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","canvas"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"lists\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","lists"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Reporting roles configuration is disabled. Please assign access to Reporting use Kibana feature controls for applications."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","features"],"pid":45398,"message":"Feature controls for Reporting plugin are enabled. Please assign access to Reporting use Kibana feature controls for applications."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Setup complete"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"ingestPipelines\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","ingestPipelines"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"fileUpload\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","fileUpload"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"maps\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","maps"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"dataVisualizer\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","dataVisualizer"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"encryptedSavedObjects\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","encryptedSavedObjects"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":45398,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"dataEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","dataEnhanced"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"dashboardMode\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","dashboardMode"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","dashboardMode"],"pid":45398,"message":"registered DashboardModeRequestInterceptor"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"cloud\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","cloud"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","cloud"],"pid":45398,"message":"Setting up Cloud plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"snapshotRestore\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","snapshotRestore"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"fleet\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","fleet"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"indexManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","indexManagement"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"rollup\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","rollup"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"remoteClusters\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","remoteClusters"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"crossClusterReplication\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","crossClusterReplication"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"indexLifecycleManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","indexLifecycleManagement"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"eventLog\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"setting up plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"actions\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","actions"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["warning","plugins","actions"],"pid":45398,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"alerting\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","alerting"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["warning","plugins","alerting"],"pid":45398,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"triggersActionsUi\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","triggersActionsUi"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","triggersActionsUi"],"pid":45398,"message":"registering indexThreshold route POST /api/triggers_actions_ui/data/_time_series_query"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","triggersActionsUi"],"pid":45398,"message":"registering indexThreshold route POST /api/triggers_actions_ui/data/_fields"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","triggersActionsUi"],"pid":45398,"message":"registering indexThreshold route POST /api/triggers_actions_ui/data/_indices"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","triggersActionsUi"],"pid":45398,"message":"registering triggers_actions_ui health route GET /api/triggers_actions_ui/_health"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"stackAlerts\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","stackAlerts"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"ruleRegistry\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","ruleRegistry"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","plugins","ruleRegistry"],"pid":45398,"message":"Write is disabled; not installing common resources shared between all indices"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"osquery\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","osquery"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","osquery"],"pid":45398,"message":"osquery: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"ml\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","ml"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"cases\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","cases"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","cases"],"pid":45398,"message":"Setting up Case Workflow with core contract [capabilities,context,elasticsearch,executionContext,http,i18n,logging,metrics,savedObjects,status,uiSettings,getStartServices,deprecations] and plugins [actions,esUiShared,lens,features,triggersActionsUi,security,spaces]"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"timelines\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","timelines"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","timelines"],"pid":45398,"message":"timelines: Setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"securitySolution\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","securitySolution"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","securitySolution"],"pid":45398,"message":"plugin initialized"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","securitySolution"],"pid":45398,"message":"plugin setup"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"observability\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","observability"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"uptime\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","uptime"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"infra\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","infra"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"upgradeAssistant\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","upgradeAssistant"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"monitoring\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","monitoring"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"logstash\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","logstash"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","logstash"],"pid":45398,"message":"Setting up Logstash plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"enterpriseSearch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","enterpriseSearch"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"console\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","console"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"apmOss\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","apmOss"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Setting up plugin \"apm\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","plugins","apm"],"pid":45398,"message":"Initializing plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","legacy-service"],"pid":45398,"message":"setting up legacy service"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","plugins","ruleRegistry"],"pid":45398,"message":"Write is disabled; not installing resources for index .alerts-observability.uptime.alerts"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","plugins","ruleRegistry"],"pid":45398,"message":"Write is disabled; not installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","plugins","ruleRegistry"],"pid":45398,"message":"Write is disabled; not installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","plugins","ruleRegistry"],"pid":45398,"message":"Write is disabled; not installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","core-app"],"pid":45398,"message":"Setting up core app."}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","root"],"pid":45398,"message":"starting root"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","server"],"pid":45398,"message":"starting server"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"Starting SavedObjects service"}
{"type":"log","@timestamp":"2021-09-27T18:50:36+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"Applying registered migrations for the following saved object types:"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 6.6.0 saved object type: space"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.0.0 saved object type: canvas-workpad"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.6.0 saved object type: task"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.9.3 saved object type: search"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.10.0 saved object type: fleet-agent-actions"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.10.0 saved object type: fleet-enrollment-api-keys"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.10.0 saved object type: ml-job"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.10.0 saved object type: ml-module"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.11.0 saved object type: index-pattern"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.11.0 saved object type: graph-workspace"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.11.2 saved object type: siem-detection-engine-rule-actions"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: search-telemetry"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: exception-list-agnostic"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: exception-list"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: fleet-agents"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: ingest-agent-policies"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.12.0 saved object type: endpoint:user-artifact-manifest"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.13.0 saved object type: config"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.13.0 saved object type: ingest_manager_settings"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.13.0 saved object type: ingest-outputs"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.13.0 saved object type: infrastructure-ui-source"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: visualization"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: map"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: search-session"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: action"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: cases-connector-mappings"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.0 saved object type: cases-user-actions"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.1 saved object type: core-usage-stats"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.1 saved object type: spaces-usage-stats"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.14.1 saved object type: epm-packages"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: dashboard"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: lens"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: ingest-package-policies"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: alert"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: cases-comments"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: cases-configure"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"message":"migrationVersion: 7.15.0 saved object type: cases"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana%2C.kibana_7.15.0?ignore_unavailable=true"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{".kibana_7.15.0_001":{"aliases":{".kibana":{},".kibana_7.15.0":{}},"mappings":{"dynamic":"strict","_meta":{"migrationMappingPropertyHashes":{"visualization":"f819cf6636b75c9e76ba733a0c6ef355","endpoint:user-artifact":"4a11183eee21e6fbad864f7a30b39ad0","references":"7997cf5a56cc02bdc9c93361bde732b0","graph-workspace":"27a94b2edcb0610c6aea54a7c56d7752","file-upload-usage-collection-telemetry":"a34fbb8e3263d105044869264860c697","ml-job":"3bb64c31915acf93fc724af137a0891b","epm-packages":"0cbbb16506734d341a96aaed65ec6413","cases-connector-mappings":"17d2e9e0e170a21a471285a5d845353c","type":"2f4316de49999235636386fe51dc06c1","ui-counter":"0d409297dc5ebe1e3a1da691c6ee32e3","osquery-manager-usage-metric":"4dc4f647d27247c002f56f22742175fe","space":"c5ca8acafa0beaa4d08d014a97b6bc6b","infrastructure-ui-source":"3d1b76c39bfb2cc8296b024d73854724","api_key_pending_invalidation":"16f515278a295f6245149ad7c5ddedb7","ingest_manager_settings":"f159646d76ab261bfbf8ef504d9631e4","event_loop_delays_daily":"5df7e292ddd5028e07c1482e130e6654","application_usage_totals":"3d1b76c39bfb2cc8296b024d73854724","spaces-usage-stats":"3d1b76c39bfb2cc8296b024d73854724","action":"38c91d092e0790ecd9ebe58e82145280","tag":"83d55da58f6530f7055415717ec06474","dashboard":"40554caf09725935e2c02e02563a2d07","metrics-explorer-view":"3d1b76c39bfb2cc8296b024d73854724","siem-detection-engine-rule-actions":"6569b288c169539db10cb262bf79de18","security-solution-signals-migration":"72761fd374ca11122ac8025a92b84fca","apm-server-schema":"b1d71908f324c17bf744ac72af5038fb","query":"11aaeb7f5f7fa5bb43f25e18ce26e7d9","application_usage_transactional":"3d1b76c39bfb2cc8296b024d73854724","action_task_params":"0b7bac797714726291526b250c582806","security-rule":"8ae39a88fc70af3375b7050e8d8d5cc7","apm-indices":"9bb9b2bf1fa636ed8619cbab5ce6a1dd","inventory-view":"3d1b76c39bfb2cc8296b024d73854724","canvas-workpad-template":"ae2673f678281e2c055d764b153e9715","cases-comments":"fce468d3d08e577b67af2e958e1f9e97","upgrade-assistant-reindex-operation":"215107c281839ea9b3ad5f6419819763","fleet-enrollment-api-keys":"a69ef7ae661dab31561d6c6f052ef2a7","canvas-element":"7390014e1091044523666d97247392fc","core-usage-stats":"3d1b76c39bfb2cc8296b024d73854724","ingest-outputs":"1acb789ca37cbee70259ca79e124d9ad","fleet-preconfiguration-deletion-record":"4c36f199189a367e43541f236141204c","telemetry":"36a616f7026dfa617d6655df850fe16d","osquery-saved-query":"6bb1cf319f0fd2984010592ca1ee588e","ml-module":"46ef4f0d6682636f0fff9799d6a2d7ac","lens-ui-telemetry":"509bfa5978586998e05f9e303c07a327","upgrade-assistant-telemetry":"8169c8bdd753da18d887e038aeb5cbc4","namespaces":"2f4316de49999235636386fe51dc06c1","usage-counters":"8cc260bdceffec4ffc3ad165c97dc1b4","application_usage_daily":"43b8830d5d0df85a6823d290885fc9fd","siem-ui-timeline-note":"8874706eedc49059d4cf0f5094559084","lens":"52346cfec69ff7b47d5f0c12361a2797","exception-list-agnostic":"baf108c9934dda844921f692a513adae","sample-data-telemetry":"7d3cfeb915303c9641c59681967ffeb4","upgrade-assistant-ml-upgrade-operation":"ece1011519ca8fd057364605744d75ac","exception-list":"baf108c9934dda844921f692a513adae","fleet-agent-actions":"9511b565b1cc6441a42033db3d5de8e9","monitoring-telemetry":"2669d5ec15e82391cf58df4294ee9c68","search":"db2c00e39b36f40930a3b9fc71c823e1","app_search_telemetry":"3d1b76c39bfb2cc8296b024d73854724","originId":"2f4316de49999235636386fe51dc06c1","updated_at":"00da57df13e94e9d98437d13ace4bfe0","cases-configure":"623baf529acc106213ba8f730d41ec7f","search-telemetry":"3d1b76c39bfb2cc8296b024d73854724","canvas-workpad":"b0a1706d356228dbdcb4a17e6b9eb231","alert":"d75d3b0e95fe394753d73d8f7952cd7d","siem-detection-engine-rule-status":"ae783f41c6937db6b7a2ef5c93a9e9b0","map":"9134b47593116d7953f6adba096fc463","ingest-package-policies":"2bdb4dbeca0d8e7b9cf620548137c695","legacy-url-alias":"e8dd3b6056ad7e1de32523f457310ecb","uptime-dynamic-settings":"3d1b76c39bfb2cc8296b024d73854724","search-session":"c768de003a1212f3d9e51176d118f255","epm-packages-assets":"44621b2f6052ef966da47b7c3a00f33b","cases":"6b9a08cbd2a81020ac2fc27c4e210b24","apm-telemetry":"3d1b76c39bfb2cc8296b024d73854724","siem-ui-timeline":"3e97beae13cdfc6d62bc1846119f7276","kql-telemetry":"d12a98a6f19a2d273696597547e064ee","ui-metric":"0d409297dc5ebe1e3a1da691c6ee32e3","url":"c7f66a0df8b1b52f17c28c4adb111105","enterprise_search_telemetry":"3d1b76c39bfb2cc8296b024d73854724","endpoint:user-artifact-manifest":"a0d7b04ad405eed54d76e279c3727862","migrationVersion":"4a1746014a75ade3a714e1db5763276f","index-pattern":"45915a1ad866812242df474eb0479052","fleet-agents":"59fd74f819f028f8555776db198d2562","maps-telemetry":"5ef305b18111b77789afefbd36b66171","namespace":"2f4316de49999235636386fe51dc06c1","cases-user-actions":"25035423b7ceb4d4f1124c441d3f6529","coreMigrationVersion":"2f4316de49999235636386fe51dc06c1","timelion-sheet":"9a2a2748877c7a7b582fef201ab1d4cf","siem-ui-timeline-pinned-event":"20638091112f0e14f0e443d512301c29","config":"c63748b75f39d0c54de12d12c1ccbc20","ingest-agent-policies":"5e91121a6b10c13d8b5339c2ff721e9b","workplace_search_telemetry":"3d1b76c39bfb2cc8296b024d73854724"}},"properties":{"action":{"properties":{"actionTypeId":{"type":"keyword"},"config":{"type":"object","enabled":false},"isMissingSecrets":{"type":"boolean"},"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"secrets":{"type":"binary"}}},"action_task_params":{"properties":{"actionId":{"type":"keyword"},"apiKey":{"type":"binary"},"params":{"type":"object","enabled":false},"relatedSavedObjects":{"type":"object","enabled":false}}},"alert":{"properties":{"actions":{"type":"nested","properties":{"actionRef":{"type":"keyword"},"actionTypeId":{"type":"keyword"},"group":{"type":"keyword"},"params":{"type":"object","enabled":false}}},"alertTypeId":{"type":"keyword"},"apiKey":{"type":"binary"},"apiKeyOwner":{"type":"keyword"},"consumer":{"type":"keyword"},"createdAt":{"type":"date"},"createdBy":{"type":"keyword"},"enabled":{"type":"boolean"},"executionStatus":{"properties":{"error":{"properties":{"message":{"type":"keyword"},"reason":{"type":"keyword"}}},"lastExecutionDate":{"type":"date"},"status":{"type":"keyword"}}},"meta":{"properties":{"versionApiKeyLastmodified":{"type":"keyword"}}},"muteAll":{"type":"boolean"},"mutedInstanceIds":{"type":"keyword"},"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"notifyWhen":{"type":"keyword"},"params":{"type":"flattened","ignore_above":4096},"schedule":{"properties":{"interval":{"type":"keyword"}}},"scheduledTaskId":{"type":"keyword"},"tags":{"type":"keyword"},"throttle":{"type":"keyword"},"updatedAt":{"type":"date"},"updatedBy":{"type":"keyword"}}},"api_key_pending_invalidation":{"properties":{"apiKeyId":{"type":"keyword"},"createdAt":{"type":"date"}}},"apm-indices":{"properties":{"apm_oss":{"properties":{"errorIndices":{"type":"keyword"},"metricsIndices":{"type":"keyword"},"onboardingIndices":{"type":"keyword"},"sourcemapIndices":{"type":"keyword"},"spanIndices":{"type":"keyword"},"transactionIndices":{"type":"keyword"}}}}},"apm-server-schema":{"properties":{"schemaJson":{"type":"text","index":false}}},"apm-telemetry":{"type":"object","dynamic":"false"},"app_search_telemetry":{"type":"object","dynamic":"false"},"application_usage_daily":{"dynamic":"false","properties":{"timestamp":{"type":"date"}}},"application_usage_totals":{"type":"object","dynamic":"false"},"application_usage_transactional":{"type":"object","dynamic":"false"},"canvas-element":{"dynamic":"false","properties":{"@created":{"type":"date"},"@timestamp":{"type":"date"},"content":{"type":"text"},"help":{"type":"text"},"image":{"type":"text"},"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}}}},"canvas-workpad":{"dynamic":"false","properties":{"@created":{"type":"date"},"@timestamp":{"type":"date"},"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}}}},"canvas-workpad-template":{"dynamic":"false","properties":{"help":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"name":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"tags":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"template_key":{"type":"keyword"}}},"cases":{"properties":{"closed_at":{"type":"date"},"closed_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"connector":{"properties":{"fields":{"properties":{"key":{"type":"text"},"value":{"type":"text"}}},"name":{"type":"text"},"type":{"type":"keyword"}}},"created_at":{"type":"date"},"created_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"description":{"type":"text"},"external_service":{"properties":{"connector_name":{"type":"keyword"},"external_id":{"type":"keyword"},"external_title":{"type":"text"},"external_url":{"type":"text"},"pushed_at":{"type":"date"},"pushed_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}}}},"owner":{"type":"keyword"},"settings":{"properties":{"syncAlerts":{"type":"boolean"}}},"status":{"type":"keyword"},"tags":{"type":"keyword"},"title":{"type":"keyword"},"type":{"type":"keyword"},"updated_at":{"type":"date"},"updated_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}}}},"cases-comments":{"properties":{"actions":{"properties":{"targets":{"type":"nested","properties":{"endpointId":{"type":"keyword"},"hostname":{"type":"keyword"}}},"type":{"type":"keyword"}}},"alertId":{"type":"keyword"},"associationType":{"type":"keyword"},"comment":{"type":"text"},"created_at":{"type":"date"},"created_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"index":{"type":"keyword"},"owner":{"type":"keyword"},"pushed_at":{"type":"date"},"pushed_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"rule":{"properties":{"id":{"type":"keyword"},"name":{"type":"keyword"}}},"type":{"type":"keyword"},"updated_at":{"type":"date"},"updated_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}}}},"cases-configure":{"properties":{"closure_type":{"type":"keyword"},"connector":{"properties":{"fields":{"properties":{"key":{"type":"text"},"value":{"type":"text"}}},"name":{"type":"text"},"type":{"type":"keyword"}}},"created_at":{"type":"date"},"created_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"owner":{"type":"keyword"},"updated_at":{"type":"date"},"updated_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}}}},"cases-connector-mappings":{"properties":{"mappings":{"properties":{"action_type":{"type":"keyword"},"source":{"type":"keyword"},"target":{"type":"keyword"}}},"owner":{"type":"keyword"}}},"cases-user-actions":{"properties":{"action":{"type":"keyword"},"action_at":{"type":"date"},"action_by":{"properties":{"email":{"type":"keyword"},"full_name":{"type":"keyword"},"username":{"type":"keyword"}}},"action_field":{"type":"keyword"},"new_value":{"type":"text"},"old_value":{"type":"text"},"owner":{"type":"keyword"}}},"config":{"dynamic":"false","properties":{"buildNum":{"type":"keyword"}}},"core-usage-stats":{"type":"object","dynamic":"false"},"coreMigrationVersion":{"type":"keyword"},"dashboard":{"properties":{"description":{"type":"text"},"hits":{"type":"integer","index":false,"doc_values":false},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text","index":false}}},"optionsJSON":{"type":"text","index":false},"panelsJSON":{"type":"text","index":false},"refreshInterval":{"properties":{"display":{"type":"keyword","index":false,"doc_values":false},"pause":{"type":"boolean","doc_values":false,"index":false},"section":{"type":"integer","index":false,"doc_values":false},"value":{"type":"integer","index":false,"doc_values":false}}},"timeFrom":{"type":"keyword","index":false,"doc_values":false},"timeRestore":{"type":"boolean","doc_values":false,"index":false},"timeTo":{"type":"keyword","index":false,"doc_values":false},"title":{"type":"text"},"version":{"type":"integer"}}},"endpoint:user-artifact":{"properties":{"body":{"type":"binary"},"compressionAlgorithm":{"type":"keyword","index":false},"created":{"type":"date","index":false},"decodedSha256":{"type":"keyword","index":false},"decodedSize":{"type":"long","index":false},"encodedSha256":{"type":"keyword"},"encodedSize":{"type":"long","index":false},"encryptionAlgorithm":{"type":"keyword","index":false},"identifier":{"type":"keyword"}}},"endpoint:user-artifact-manifest":{"properties":{"artifacts":{"type":"nested","properties":{"artifactId":{"type":"keyword","index":false},"policyId":{"type":"keyword","index":false}}},"created":{"type":"date","index":false},"schemaVersion":{"type":"keyword"},"semanticVersion":{"type":"keyword","index":false}}},"enterprise_search_telemetry":{"type":"object","dynamic":"false"},"epm-packages":{"properties":{"es_index_patterns":{"type":"object","enabled":false},"install_source":{"type":"keyword"},"install_started_at":{"type":"date"},"install_status":{"type":"keyword"},"install_version":{"type":"keyword"},"installed_es":{"type":"nested","properties":{"id":{"type":"keyword"},"type":{"type":"keyword"}}},"installed_kibana":{"type":"nested","properties":{"id":{"type":"keyword"},"type":{"type":"keyword"}}},"internal":{"type":"boolean"},"name":{"type":"keyword"},"package_assets":{"type":"nested","properties":{"id":{"type":"keyword"},"type":{"type":"keyword"}}},"removable":{"type":"boolean"},"version":{"type":"keyword"}}},"epm-packages-assets":{"properties":{"asset_path":{"type":"keyword"},"data_base64":{"type":"binary"},"data_utf8":{"type":"text","index":false},"install_source":{"type":"keyword"},"media_type":{"type":"keyword"},"package_name":{"type":"keyword"},"package_version":{"type":"keyword"}}},"event_loop_delays_daily":{"dynamic":"false","properties":{"lastUpdatedAt":{"type":"date"}}},"exception-list":{"properties":{"_tags":{"type":"keyword"},"comments":{"properties":{"comment":{"type":"keyword"},"created_at":{"type":"keyword"},"created_by":{"type":"keyword"},"id":{"type":"keyword"},"updated_at":{"type":"keyword"},"updated_by":{"type":"keyword"}}},"created_at":{"type":"keyword"},"created_by":{"type":"keyword"},"description":{"type":"keyword"},"entries":{"properties":{"entries":{"properties":{"field":{"type":"keyword"},"operator":{"type":"keyword"},"type":{"type":"keyword"},"value":{"type":"keyword","fields":{"text":{"type":"text"}}}}},"field":{"type":"keyword"},"list":{"properties":{"id":{"type":"keyword"},"type":{"type":"keyword"}}},"operator":{"type":"keyword"},"type":{"type":"keyword"},"value":{"type":"keyword","fields":{"text":{"type":"text"}}}}},"immutable":{"type":"boolean"},"item_id":{"type":"keyword"},"list_id":{"type":"keyword"},"list_type":{"type":"keyword"},"meta":{"type":"keyword"},"name":{"type":"keyword","fields":{"text":{"type":"text"}}},"os_types":{"type":"keyword"},"tags":{"type":"keyword","fields":{"text":{"type":"text"}}},"tie_breaker_id":{"type":"keyword"},"type":{"type":"keyword"},"updated_by":{"type":"keyword"},"version":{"type":"keyword"}}},"exception-list-agnostic":{"properties":{"_tags":{"type":"keyword"},"comments":{"properties":{"comment":{"type":"keyword"},"created_at":{"type":"keyword"},"created_by":{"type":"keyword"},"id":{"type":"keyword"},"updated_at":{"type":"keyword"},"updated_by":{"type":"keyword"}}},"created_at":{"type":"keyword"},"created_by":{"type":"keyword"},"description":{"type":"keyword"},"entries":{"properties":{"entries":{"properties":{"field":{"type":"keyword"},"operator":{"type":"keyword"},"type":{"type":"keyword"},"value":{"type":"keyword","fields":{"text":{"type":"text"}}}}},"field":{"type":"keyword"},"list":{"properties":{"id":{"type":"keyword"},"type":{"type":"keyword"}}},"operator":{"type":"keyword"},"type":{"type":"keyword"},"value":{"type":"keyword","fields":{"text":{"type":"text"}}}}},"immutable":{"type":"boolean"},"item_id":{"type":"keyword"},"list_id":{"type":"keyword"},"list_type":{"type":"keyword"},"meta":{"type":"keyword"},"name":{"type":"keyword","fields":{"text":{"type":"text"}}},"os_types":{"type":"keyword"},"tags":{"type":"keyword","fields":{"text":{"type":"text"}}},"tie_breaker_id":{"type":"keyword"},"type":{"type":"keyword"},"updated_by":{"type":"keyword"},"version":{"type":"keyword"}}},"file-upload-telemetry":{"type":"object","dynamic":"false"},"file-upload-usage-collection-telemetry":{"properties":{"file_upload":{"properties":{"index_creation_count":{"type":"long"}}}}},"fleet-agent-actions":{"properties":{"ack_data":{"type":"text"},"agent_id":{"type":"keyword"},"created_at":{"type":"date"},"data":{"type":"binary"},"policy_id":{"type":"keyword"},"policy_revision":{"type":"integer"},"sent_at":{"type":"date"},"type":{"type":"keyword"}}},"fleet-agent-events":{"type":"object","dynamic":"false"},"fleet-agents":{"properties":{"access_api_key_id":{"type":"keyword"},"active":{"type":"boolean"},"current_error_events":{"type":"text","index":false},"default_api_key":{"type":"binary"},"default_api_key_id":{"type":"keyword"},"enrolled_at":{"type":"date"},"last_checkin":{"type":"date"},"last_checkin_status":{"type":"keyword"},"last_updated":{"type":"date"},"local_metadata":{"type":"flattened"},"packages":{"type":"keyword"},"policy_id":{"type":"keyword"},"policy_revision":{"type":"integer"},"type":{"type":"keyword"},"unenrolled_at":{"type":"date"},"unenrollment_started_at":{"type":"date"},"updated_at":{"type":"date"},"upgrade_started_at":{"type":"date"},"upgraded_at":{"type":"date"},"user_provided_metadata":{"type":"flattened"},"version":{"type":"keyword"}}},"fleet-enrollment-api-keys":{"properties":{"active":{"type":"boolean"},"api_key":{"type":"binary"},"api_key_id":{"type":"keyword"},"created_at":{"type":"date"},"expire_at":{"type":"date"},"name":{"type":"keyword"},"policy_id":{"type":"keyword"},"type":{"type":"keyword"},"updated_at":{"type":"date"}}},"fleet-preconfiguration-deletion-record":{"properties":{"id":{"type":"keyword"}}},"graph-workspace":{"properties":{"description":{"type":"text"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"legacyIndexPatternRef":{"type":"text","index":false},"numLinks":{"type":"integer"},"numVertices":{"type":"integer"},"title":{"type":"text"},"version":{"type":"integer"},"wsState":{"type":"text"}}},"index-pattern":{"dynamic":"false","properties":{"title":{"type":"text"},"type":{"type":"keyword"}}},"infrastructure-ui-source":{"type":"object","dynamic":"false"},"ingest-agent-policies":{"properties":{"description":{"type":"text"},"is_default":{"type":"boolean"},"is_default_fleet_server":{"type":"boolean"},"is_managed":{"type":"boolean"},"is_preconfigured":{"type":"keyword"},"monitoring_enabled":{"type":"keyword","index":false},"name":{"type":"keyword"},"namespace":{"type":"keyword"},"package_policies":{"type":"keyword"},"revision":{"type":"integer"},"status":{"type":"keyword"},"unenroll_timeout":{"type":"integer"},"updated_at":{"type":"date"},"updated_by":{"type":"keyword"}}},"ingest-outputs":{"properties":{"ca_sha256":{"type":"keyword","index":false},"config":{"type":"flattened"},"config_yaml":{"type":"text"},"hosts":{"type":"keyword"},"is_default":{"type":"boolean"},"name":{"type":"keyword"},"type":{"type":"keyword"}}},"ingest-package-policies":{"properties":{"created_at":{"type":"date"},"created_by":{"type":"keyword"},"description":{"type":"text"},"enabled":{"type":"boolean"},"inputs":{"type":"nested","enabled":false,"properties":{"compiled_input":{"type":"flattened"},"config":{"type":"flattened"},"enabled":{"type":"boolean"},"policy_template":{"type":"keyword"},"streams":{"type":"nested","properties":{"compiled_stream":{"type":"flattened"},"config":{"type":"flattened"},"data_stream":{"properties":{"dataset":{"type":"keyword"},"type":{"type":"keyword"}}},"enabled":{"type":"boolean"},"id":{"type":"keyword"},"vars":{"type":"flattened"}}},"type":{"type":"keyword"},"vars":{"type":"flattened"}}},"name":{"type":"keyword"},"namespace":{"type":"keyword"},"output_id":{"type":"keyword"},"package":{"properties":{"name":{"type":"keyword"},"title":{"type":"keyword"},"version":{"type":"keyword"}}},"policy_id":{"type":"keyword"},"revision":{"type":"integer"},"updated_at":{"type":"date"},"updated_by":{"type":"keyword"},"vars":{"type":"flattened"}}},"ingest_manager_settings":{"properties":{"fleet_server_hosts":{"type":"keyword"},"has_seen_add_data_notice":{"type":"boolean","index":false},"has_seen_fleet_migration_notice":{"type":"boolean","index":false}}},"inventory-view":{"type":"object","dynamic":"false"},"kql-telemetry":{"properties":{"optInCount":{"type":"long"},"optOutCount":{"type":"long"}}},"legacy-url-alias":{"dynamic":"false","properties":{"disabled":{"type":"boolean"},"resolveCounter":{"type":"long"},"sourceId":{"type":"keyword"},"targetType":{"type":"keyword"}}},"lens":{"properties":{"description":{"type":"text"},"expression":{"type":"keyword","index":false,"doc_values":false},"state":{"type":"flattened"},"title":{"type":"text"},"visualizationType":{"type":"keyword"}}},"lens-ui-telemetry":{"properties":{"count":{"type":"integer"},"date":{"type":"date"},"name":{"type":"keyword"},"type":{"type":"keyword"}}},"map":{"properties":{"bounds":{"type":"object","dynamic":"false"},"description":{"type":"text"},"layerListJSON":{"type":"text"},"mapStateJSON":{"type":"text"},"title":{"type":"text"},"uiStateJSON":{"type":"text"},"version":{"type":"integer"}}},"maps-telemetry":{"type":"object","enabled":false},"metrics-explorer-view":{"type":"object","dynamic":"false"},"migrationVersion":{"dynamic":"true","properties":{"canvas-workpad":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"config":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"core-usage-stats":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"dashboard":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"exception-list-agnostic":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"graph-workspace":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"index-pattern":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"ingest_manager_settings":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"map":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"search":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"search-session":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"search-telemetry":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"space":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"spaces-usage-stats":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"visualization":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}}}},"ml-job":{"properties":{"datafeed_id":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"job_id":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"type":{"type":"keyword"}}},"ml-module":{"dynamic":"false","properties":{"datafeeds":{"type":"object"},"defaultIndexPattern":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"description":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"id":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"jobs":{"type":"object"},"logo":{"type":"object"},"query":{"type":"object"},"title":{"type":"text","fields":{"keyword":{"type":"keyword"}}},"type":{"type":"text","fields":{"keyword":{"type":"keyword"}}}}},"ml-telemetry":{"type":"object","dynamic":"false"},"monitoring-telemetry":{"properties":{"reportedClusterUuids":{"type":"keyword"}}},"namespace":{"type":"keyword"},"namespaces":{"type":"keyword"},"originId":{"type":"keyword"},"osquery-manager-usage-metric":{"properties":{"count":{"type":"long"},"errors":{"type":"long"}}},"osquery-saved-query":{"properties":{"created_at":{"type":"date"},"created_by":{"type":"text"},"description":{"type":"text"},"id":{"type":"keyword"},"interval":{"type":"keyword"},"platform":{"type":"keyword"},"query":{"type":"text"},"updated_at":{"type":"date"},"updated_by":{"type":"text"},"version":{"type":"keyword"}}},"query":{"properties":{"description":{"type":"text"},"filters":{"type":"object","enabled":false},"query":{"properties":{"language":{"type":"keyword"},"query":{"type":"keyword","index":false}}},"timefilter":{"type":"object","enabled":false},"title":{"type":"text"}}},"references":{"type":"nested","properties":{"id":{"type":"keyword"},"name":{"type":"keyword"},"type":{"type":"keyword"}}},"sample-data-telemetry":{"properties":{"installCount":{"type":"long"},"unInstallCount":{"type":"long"}}},"search":{"properties":{"columns":{"type":"keyword","index":false,"doc_values":false},"description":{"type":"text"},"grid":{"type":"object","enabled":false},"hideChart":{"type":"boolean","doc_values":false,"index":false},"hits":{"type":"integer","index":false,"doc_values":false},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text","index":false}}},"sort":{"type":"keyword","index":false,"doc_values":false},"title":{"type":"text"},"version":{"type":"integer"}}},"search-session":{"properties":{"appId":{"type":"keyword"},"completed":{"type":"date"},"created":{"type":"date"},"expires":{"type":"date"},"idMapping":{"type":"object","enabled":false},"initialState":{"type":"object","enabled":false},"name":{"type":"keyword"},"persisted":{"type":"boolean"},"realmName":{"type":"keyword"},"realmType":{"type":"keyword"},"restoreState":{"type":"object","enabled":false},"sessionId":{"type":"keyword"},"status":{"type":"keyword"},"touched":{"type":"date"},"urlGeneratorId":{"type":"keyword"},"username":{"type":"keyword"},"version":{"type":"keyword"}}},"search-telemetry":{"type":"object","dynamic":"false"},"security-rule":{"dynamic":"false","properties":{"name":{"type":"keyword"},"rule_id":{"type":"keyword"},"version":{"type":"long"}}},"security-solution-signals-migration":{"properties":{"created":{"type":"date","index":false},"createdBy":{"type":"text","index":false},"destinationIndex":{"type":"keyword","index":false},"error":{"type":"text","index":false},"sourceIndex":{"type":"keyword"},"status":{"type":"keyword","index":false},"taskId":{"type":"keyword","index":false},"updated":{"type":"date","index":false},"updatedBy":{"type":"text","index":false},"version":{"type":"long"}}},"server":{"type":"object","dynamic":"false"},"siem-detection-engine-rule-actions":{"properties":{"actions":{"properties":{"action_type_id":{"type":"keyword"},"group":{"type":"keyword"},"id":{"type":"keyword"},"params":{"type":"object","enabled":false}}},"alertThrottle":{"type":"keyword"},"ruleAlertId":{"type":"keyword"},"ruleThrottle":{"type":"keyword"}}},"siem-detection-engine-rule-status":{"properties":{"alertId":{"type":"keyword"},"bulkCreateTimeDurations":{"type":"float"},"gap":{"type":"text"},"lastFailureAt":{"type":"date"},"lastFailureMessage":{"type":"text"},"lastLookBackDate":{"type":"date"},"lastSuccessAt":{"type":"date"},"lastSuccessMessage":{"type":"text"},"searchAfterTimeDurations":{"type":"float"},"status":{"type":"keyword"},"statusDate":{"type":"date"}}},"siem-ui-timeline":{"properties":{"columns":{"properties":{"aggregatable":{"type":"boolean"},"category":{"type":"keyword"},"columnHeaderType":{"type":"keyword"},"description":{"type":"text"},"example":{"type":"text"},"id":{"type":"keyword"},"indexes":{"type":"keyword"},"name":{"type":"text"},"placeholder":{"type":"text"},"searchable":{"type":"boolean"},"type":{"type":"keyword"}}},"created":{"type":"date"},"createdBy":{"type":"text"},"dataProviders":{"properties":{"and":{"properties":{"enabled":{"type":"boolean"},"excluded":{"type":"boolean"},"id":{"type":"keyword"},"kqlQuery":{"type":"text"},"name":{"type":"text"},"queryMatch":{"properties":{"displayField":{"type":"text"},"displayValue":{"type":"text"},"field":{"type":"text"},"operator":{"type":"text"},"value":{"type":"text"}}},"type":{"type":"text"}}},"enabled":{"type":"boolean"},"excluded":{"type":"boolean"},"id":{"type":"keyword"},"kqlQuery":{"type":"text"},"name":{"type":"text"},"queryMatch":{"properties":{"displayField":{"type":"text"},"displayValue":{"type":"text"},"field":{"type":"text"},"operator":{"type":"text"},"value":{"type":"text"}}},"type":{"type":"text"}}},"dateRange":{"properties":{"end":{"type":"date"},"start":{"type":"date"}}},"description":{"type":"text"},"eqlOptions":{"properties":{"eventCategoryField":{"type":"text"},"query":{"type":"text"},"size":{"type":"text"},"tiebreakerField":{"type":"text"},"timestampField":{"type":"text"}}},"eventType":{"type":"keyword"},"excludedRowRendererIds":{"type":"text"},"favorite":{"properties":{"favoriteDate":{"type":"date"},"fullName":{"type":"text"},"keySearch":{"type":"text"},"userName":{"type":"text"}}},"filters":{"properties":{"exists":{"type":"text"},"match_all":{"type":"text"},"meta":{"properties":{"alias":{"type":"text"},"controlledBy":{"type":"text"},"disabled":{"type":"boolean"},"field":{"type":"text"},"formattedValue":{"type":"text"},"index":{"type":"keyword"},"key":{"type":"keyword"},"negate":{"type":"boolean"},"params":{"type":"text"},"type":{"type":"keyword"},"value":{"type":"text"}}},"missing":{"type":"text"},"query":{"type":"text"},"range":{"type":"text"},"script":{"type":"text"}}},"indexNames":{"type":"text"},"kqlMode":{"type":"keyword"},"kqlQuery":{"properties":{"filterQuery":{"properties":{"kuery":{"properties":{"expression":{"type":"text"},"kind":{"type":"keyword"}}},"serializedQuery":{"type":"text"}}}}},"savedQueryId":{"type":"keyword"},"sort":{"dynamic":"false","properties":{"columnId":{"type":"keyword"},"columnType":{"type":"keyword"},"sortDirection":{"type":"keyword"}}},"status":{"type":"keyword"},"templateTimelineId":{"type":"text"},"templateTimelineVersion":{"type":"integer"},"timelineType":{"type":"keyword"},"title":{"type":"text"},"updated":{"type":"date"},"updatedBy":{"type":"text"}}},"siem-ui-timeline-note":{"properties":{"created":{"type":"date"},"createdBy":{"type":"text"},"eventId":{"type":"keyword"},"note":{"type":"text"},"timelineId":{"type":"keyword"},"updated":{"type":"date"},"updatedBy":{"type":"text"}}},"siem-ui-timeline-pinned-event":{"properties":{"created":{"type":"date"},"createdBy":{"type":"text"},"eventId":{"type":"keyword"},"timelineId":{"type":"keyword"},"updated":{"type":"date"},"updatedBy":{"type":"text"}}},"space":{"properties":{"_reserved":{"type":"boolean"},"color":{"type":"keyword"},"description":{"type":"text"},"disabledFeatures":{"type":"keyword"},"imageUrl":{"type":"text","index":false},"initials":{"type":"keyword"},"name":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":2048}}}}},"spaces-usage-stats":{"type":"object","dynamic":"false"},"tag":{"properties":{"color":{"type":"text"},"description":{"type":"text"},"name":{"type":"text"}}},"telemetry":{"properties":{"allowChangingOptInStatus":{"type":"boolean"},"enabled":{"type":"boolean"},"lastReported":{"type":"date"},"lastVersionChecked":{"type":"keyword"},"reportFailureCount":{"type":"integer"},"reportFailureVersion":{"type":"keyword"},"sendUsageFrom":{"type":"keyword"},"userHasSeenNotice":{"type":"boolean"}}},"timelion-sheet":{"properties":{"description":{"type":"text"},"hits":{"type":"integer"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text"}}},"timelion_chart_height":{"type":"integer"},"timelion_columns":{"type":"integer"},"timelion_interval":{"type":"keyword"},"timelion_other_interval":{"type":"keyword"},"timelion_rows":{"type":"integer"},"timelion_sheet":{"type":"text"},"title":{"type":"text"},"version":{"type":"integer"}}},"tsvb-validation-telemetry":{"type":"object","dynamic":"false"},"type":{"type":"keyword"},"ui-counter":{"properties":{"count":{"type":"integer"}}},"ui-metric":{"properties":{"count":{"type":"integer"}}},"updated_at":{"type":"date"},"upgrade-assistant-ml-upgrade-operation":{"properties":{"jobId":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"nodeId":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"snapshotId":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"status":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}}}},"upgrade-assistant-reindex-operation":{"properties":{"errorMessage":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"indexName":{"type":"keyword"},"lastCompletedStep":{"type":"long"},"locked":{"type":"date"},"newIndexName":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"reindexOptions":{"properties":{"openAndClose":{"type":"boolean"},"queueSettings":{"properties":{"queuedAt":{"type":"long"},"startedAt":{"type":"long"}}}}},"reindexTaskId":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"reindexTaskPercComplete":{"type":"float"},"runningReindexCount":{"type":"integer"},"status":{"type":"integer"}}},"upgrade-assistant-telemetry":{"properties":{"features":{"properties":{"deprecation_logging":{"properties":{"enabled":{"type":"boolean","null_value":true}}}}},"ui_open":{"properties":{"cluster":{"type":"long","null_value":0},"indices":{"type":"long","null_value":0},"kibana":{"type":"long","null_value":0},"overview":{"type":"long","null_value":0}}},"ui_reindex":{"properties":{"close":{"type":"long","null_value":0},"open":{"type":"long","null_value":0},"start":{"type":"long","null_value":0},"stop":{"type":"long","null_value":0}}}}},"uptime-dynamic-settings":{"type":"object","dynamic":"false"},"url":{"properties":{"accessCount":{"type":"long"},"accessDate":{"type":"date"},"createDate":{"type":"date"},"url":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":2048}}}}},"usage-counters":{"dynamic":"false","properties":{"domainId":{"type":"keyword"}}},"visualization":{"properties":{"description":{"type":"text"},"kibanaSavedObjectMeta":{"properties":{"searchSourceJSON":{"type":"text","index":false}}},"savedSearchRefName":{"type":"keyword","index":false,"doc_values":false},"title":{"type":"text"},"uiStateJSON":{"type":"text","index":false},"version":{"type":"integer"},"visState":{"type":"text","index":false}}},"workplace_search_telemetry":{"type":"object","dynamic":"false"}}},"settings":{"index":{"refresh_interval":"1s","auto_expand_replicas":"0-1","blocks":{"write":"false"},"provided_name":".kibana_7.15.0_001","creation_date":"1632639305138","priority":"10","number_of_replicas":"0","uuid":"lauU8cKQSQKVb183lhYgRA","version":{"created":"7150099"},"routing":{"allocation":{"include":{"_tier_preference":"data_content"},"initial_recovery":{"_id":null}}},"number_of_shards":"1","routing_partition_size":"1","resize":{"source":{"name":".kibana_7.15.0_reindex_temp","uuid":"WWPQ_bYhTN6PjLTsJFzp6g"}}}}}},"message":"[.kibana] INIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 266ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status core.status.derivedStatus now set to unavailable"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0_001/_pit?keep_alive=10m"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"pitId":"k7S0AwESLmtpYmFuYV83LjE1LjBfMDAxFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAFlQyTVp6QXZWUWM2MldDelh5cUZSOVEAAAAAAAAAAvAWS2o3cEtKSFdUTkNvaXBQZW1HX2F3UQABFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAAA=="},"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:37+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 299ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_search\n{\"sort\":{\"_shard_doc\":{\"order\":\"asc\"}},\"pit\":{\"id\":\"k7S0AwESLmtpYmFuYV83LjE1LjBfMDAxFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAFlQyTVp6QXZWUWM2MldDelh5cUZSOVEAAAAAAAAAAvAWS2o3cEtKSFdUTkNvaXBQZW1HX2F3UQABFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAAA==\",\"keep_alive\":\"10m\"},\"size\":1000,\"track_total_hits\":true,\"query\":{\"bool\":{\"should\":[{\"bool\":{\"must\":{\"term\":{\"type\":\"core-usage-stats\"}},\"must_not\":{\"term\":{\"migrationVersion.core-usage-stats\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"config\"}},\"must_not\":{\"term\":{\"migrationVersion.config\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"task\"}},\"must_not\":{\"term\":{\"migrationVersion.task\":\"7.6.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"index-pattern\"}},\"must_not\":{\"term\":{\"migrationVersion.index-pattern\":\"7.11.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search-telemetry\"}},\"must_not\":{\"term\":{\"migrationVersion.search-telemetry\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"visualization\"}},\"must_not\":{\"term\":{\"migrationVersion.visualization\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"graph-workspace\"}},\"must_not\":{\"term\":{\"migrationVersion.graph-workspace\":\"7.11.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search\"}},\"must_not\":{\"term\":{\"migrationVersion.search\":\"7.9.3\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"dashboard\"}},\"must_not\":{\"term\":{\"migrationVersion.dashboard\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"space\"}},\"must_not\":{\"term\":{\"migrationVersion.space\":\"6.6.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"spaces-usage-stats\"}},\"must_not\":{\"term\":{\"migrationVersion.spaces-usage-stats\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"lens\"}},\"must_not\":{\"term\":{\"migrationVersion.lens\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"canvas-workpad\"}},\"must_not\":{\"term\":{\"migrationVersion.canvas-workpad\":\"7.0.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"exception-list-agnostic\"}},\"must_not\":{\"term\":{\"migrationVersion.exception-list-agnostic\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"exception-list\"}},\"must_not\":{\"term\":{\"migrationVersion.exception-list\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"map\"}},\"must_not\":{\"term\":{\"migrationVersion.map\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search-session\"}},\"must_not\":{\"term\":{\"migrationVersion.search-session\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest_manager_settings\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest_manager_settings\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-agents\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-agents\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-agent-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-agent-actions\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-agent-policies\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-agent-policies\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-enrollment-api-keys\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-enrollment-api-keys\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-outputs\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-outputs\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-package-policies\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-package-policies\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"epm-packages\"}},\"must_not\":{\"term\":{\"migrationVersion.epm-packages\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"action\"}},\"must_not\":{\"term\":{\"migrationVersion.action\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"alert\"}},\"must_not\":{\"term\":{\"migrationVersion.alert\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ml-job\"}},\"must_not\":{\"term\":{\"migrationVersion.ml-job\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ml-module\"}},\"must_not\":{\"term\":{\"migrationVersion.ml-module\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-comments\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-comments\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-configure\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-configure\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-connector-mappings\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-connector-mappings\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases\"}},\"must_not\":{\"term\":{\"migrationVersion.cases\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-user-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-user-actions\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"siem-detection-engine-rule-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.siem-detection-engine-rule-actions\":\"7.11.2\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"endpoint:user-artifact-manifest\"}},\"must_not\":{\"term\":{\"migrationVersion.endpoint:user-artifact-manifest\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"infrastructure-ui-source\"}},\"must_not\":{\"term\":{\"migrationVersion.infrastructure-ui-source\":\"7.13.0\"}}}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"outdatedDocuments":[],"totalHits":0},"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_READ RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 416ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_task_manager%2C.kibana_task_manager_7.15.0?ignore_unavailable=true"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{".kibana_task_manager_7.15.0_001":{"aliases":{".kibana_task_manager":{},".kibana_task_manager_7.15.0":{}},"mappings":{"dynamic":"strict","_meta":{"migrationMappingPropertyHashes":{"migrationVersion":"4a1746014a75ade3a714e1db5763276f","originId":"2f4316de49999235636386fe51dc06c1","task":"c716c8022373e7b7fea04dc9a9ff5c70","updated_at":"00da57df13e94e9d98437d13ace4bfe0","references":"7997cf5a56cc02bdc9c93361bde732b0","namespace":"2f4316de49999235636386fe51dc06c1","coreMigrationVersion":"2f4316de49999235636386fe51dc06c1","type":"2f4316de49999235636386fe51dc06c1","namespaces":"2f4316de49999235636386fe51dc06c1"}},"properties":{"coreMigrationVersion":{"type":"keyword"},"migrationVersion":{"dynamic":"true","properties":{"task":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}}}},"namespace":{"type":"keyword"},"namespaces":{"type":"keyword"},"originId":{"type":"keyword"},"references":{"type":"nested","properties":{"id":{"type":"keyword"},"name":{"type":"keyword"},"type":{"type":"keyword"}}},"task":{"properties":{"attempts":{"type":"integer"},"ownerId":{"type":"keyword"},"params":{"type":"text"},"retryAt":{"type":"date"},"runAt":{"type":"date"},"schedule":{"properties":{"interval":{"type":"keyword"}}},"scheduledAt":{"type":"date"},"scope":{"type":"keyword"},"startedAt":{"type":"date"},"state":{"type":"text"},"status":{"type":"keyword"},"taskType":{"type":"keyword"},"traceparent":{"type":"text"},"user":{"type":"keyword"}}},"type":{"type":"keyword"},"updated_at":{"type":"date"}}},"settings":{"index":{"refresh_interval":"1s","auto_expand_replicas":"0-1","blocks":{"write":"false"},"provided_name":".kibana_task_manager_7.15.0_001","creation_date":"1632639302587","priority":"10","number_of_replicas":"0","uuid":"vYWEFoL9TxWx4Lsr5PmnjA","version":{"created":"7150099"},"routing":{"allocation":{"include":{"_tier_preference":"data_content"},"initial_recovery":{"_id":null}}},"number_of_shards":"1","routing_partition_size":"1","resize":{"source":{"name":".kibana_task_manager_7.15.0_reindex_temp","uuid":"Sm-vWOaBQTyF_BYSWBcRRg"}}}}}},"message":"[.kibana_task_manager] INIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 987ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nDELETE /_pit\n{\"id\":\"k7S0AwESLmtpYmFuYV83LjE1LjBfMDAxFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAFlQyTVp6QXZWUWM2MldDelh5cUZSOVEAAAAAAAAAAvAWS2o3cEtKSFdUTkNvaXBQZW1HX2F3UQABFmxhdVU4Y0tRU1FLVmIxODNsaFlnUkEAAA==\"}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{},"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 231ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_task_manager_7.15.0_001/_pit?keep_alive=10m"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"pitId":"k7S0AwEfLmtpYmFuYV90YXNrX21hbmFnZXJfNy4xNS4wXzAwMRZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBABZUMk1aekF2VlFjNjJXQ3pYeXFGUjlRAAAAAAAAAALxFktqN3BLSkhXVE5Db2lwUGVtR19hd1EAARZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBAAA="},"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 227ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_search\n{\"sort\":{\"_shard_doc\":{\"order\":\"asc\"}},\"pit\":{\"id\":\"k7S0AwEfLmtpYmFuYV90YXNrX21hbmFnZXJfNy4xNS4wXzAwMRZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBABZUMk1aekF2VlFjNjJXQ3pYeXFGUjlRAAAAAAAAAALxFktqN3BLSkhXVE5Db2lwUGVtR19hd1EAARZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBAAA=\",\"keep_alive\":\"10m\"},\"size\":1000,\"track_total_hits\":true,\"query\":{\"bool\":{\"should\":[{\"bool\":{\"must\":{\"term\":{\"type\":\"core-usage-stats\"}},\"must_not\":{\"term\":{\"migrationVersion.core-usage-stats\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"config\"}},\"must_not\":{\"term\":{\"migrationVersion.config\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"task\"}},\"must_not\":{\"term\":{\"migrationVersion.task\":\"7.6.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"index-pattern\"}},\"must_not\":{\"term\":{\"migrationVersion.index-pattern\":\"7.11.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search-telemetry\"}},\"must_not\":{\"term\":{\"migrationVersion.search-telemetry\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"visualization\"}},\"must_not\":{\"term\":{\"migrationVersion.visualization\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"graph-workspace\"}},\"must_not\":{\"term\":{\"migrationVersion.graph-workspace\":\"7.11.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search\"}},\"must_not\":{\"term\":{\"migrationVersion.search\":\"7.9.3\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"dashboard\"}},\"must_not\":{\"term\":{\"migrationVersion.dashboard\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"space\"}},\"must_not\":{\"term\":{\"migrationVersion.space\":\"6.6.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"spaces-usage-stats\"}},\"must_not\":{\"term\":{\"migrationVersion.spaces-usage-stats\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"lens\"}},\"must_not\":{\"term\":{\"migrationVersion.lens\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"canvas-workpad\"}},\"must_not\":{\"term\":{\"migrationVersion.canvas-workpad\":\"7.0.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"exception-list-agnostic\"}},\"must_not\":{\"term\":{\"migrationVersion.exception-list-agnostic\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"exception-list\"}},\"must_not\":{\"term\":{\"migrationVersion.exception-list\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"map\"}},\"must_not\":{\"term\":{\"migrationVersion.map\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"search-session\"}},\"must_not\":{\"term\":{\"migrationVersion.search-session\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest_manager_settings\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest_manager_settings\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-agents\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-agents\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-agent-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-agent-actions\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-agent-policies\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-agent-policies\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"fleet-enrollment-api-keys\"}},\"must_not\":{\"term\":{\"migrationVersion.fleet-enrollment-api-keys\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-outputs\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-outputs\":\"7.13.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ingest-package-policies\"}},\"must_not\":{\"term\":{\"migrationVersion.ingest-package-policies\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"epm-packages\"}},\"must_not\":{\"term\":{\"migrationVersion.epm-packages\":\"7.14.1\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"action\"}},\"must_not\":{\"term\":{\"migrationVersion.action\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"alert\"}},\"must_not\":{\"term\":{\"migrationVersion.alert\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ml-job\"}},\"must_not\":{\"term\":{\"migrationVersion.ml-job\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"ml-module\"}},\"must_not\":{\"term\":{\"migrationVersion.ml-module\":\"7.10.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-comments\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-comments\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-configure\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-configure\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-connector-mappings\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-connector-mappings\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases\"}},\"must_not\":{\"term\":{\"migrationVersion.cases\":\"7.15.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"cases-user-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.cases-user-actions\":\"7.14.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"siem-detection-engine-rule-actions\"}},\"must_not\":{\"term\":{\"migrationVersion.siem-detection-engine-rule-actions\":\"7.11.2\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"endpoint:user-artifact-manifest\"}},\"must_not\":{\"term\":{\"migrationVersion.endpoint:user-artifact-manifest\":\"7.12.0\"}}}},{\"bool\":{\"must\":{\"term\":{\"type\":\"infrastructure-ui-source\"}},\"must_not\":{\"term\":{\"migrationVersion.infrastructure-ui-source\":\"7.13.0\"}}}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"outdatedDocuments":[],"totalHits":0},"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_READ RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 165ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nDELETE /_pit\n{\"id\":\"k7S0AwEfLmtpYmFuYV90YXNrX21hbmFnZXJfNy4xNS4wXzAwMRZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBABZUMk1aekF2VlFjNjJXQ3pYeXFGUjlRAAAAAAAAAALxFktqN3BLSkhXVE5Db2lwUGVtR19hd1EAARZ2WVdFRm9MOVR4V3g0THNyNVBtbmpBAAA=\"}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{},"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 87ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPUT /.kibana_7.15.0_001/_mapping?timeout=60s\n{\"dynamic\":\"strict\",\"properties\":{\"migrationVersion\":{\"dynamic\":\"true\",\"type\":\"object\"},\"type\":{\"type\":\"keyword\"},\"namespace\":{\"type\":\"keyword\"},\"namespaces\":{\"type\":\"keyword\"},\"originId\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"date\"},\"references\":{\"type\":\"nested\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"}}},\"coreMigrationVersion\":{\"type\":\"keyword\"},\"core-usage-stats\":{\"dynamic\":false,\"properties\":{}},\"legacy-url-alias\":{\"dynamic\":false,\"properties\":{\"sourceId\":{\"type\":\"keyword\"},\"targetType\":{\"type\":\"keyword\"},\"resolveCounter\":{\"type\":\"long\"},\"disabled\":{\"type\":\"boolean\"}}},\"config\":{\"dynamic\":false,\"properties\":{\"buildNum\":{\"type\":\"keyword\"}}},\"usage-counters\":{\"dynamic\":false,\"properties\":{\"domainId\":{\"type\":\"keyword\"}}},\"ui-counter\":{\"properties\":{\"count\":{\"type\":\"integer\"}}},\"ui-metric\":{\"properties\":{\"count\":{\"type\":\"integer\"}}},\"application_usage_totals\":{\"dynamic\":false,\"properties\":{}},\"application_usage_daily\":{\"dynamic\":false,\"properties\":{\"timestamp\":{\"type\":\"date\"}}},\"application_usage_transactional\":{\"dynamic\":false,\"properties\":{}},\"event_loop_delays_daily\":{\"dynamic\":false,\"properties\":{\"lastUpdatedAt\":{\"type\":\"date\"}}},\"url\":{\"properties\":{\"accessCount\":{\"type\":\"long\"},\"accessDate\":{\"type\":\"date\"},\"createDate\":{\"type\":\"date\"},\"url\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":2048}}}}},\"telemetry\":{\"properties\":{\"enabled\":{\"type\":\"boolean\"},\"sendUsageFrom\":{\"type\":\"keyword\"},\"lastReported\":{\"type\":\"date\"},\"lastVersionChecked\":{\"type\":\"keyword\"},\"userHasSeenNotice\":{\"type\":\"boolean\"},\"reportFailureCount\":{\"type\":\"integer\"},\"reportFailureVersion\":{\"type\":\"keyword\"},\"allowChangingOptInStatus\":{\"type\":\"boolean\"}}},\"query\":{\"properties\":{\"title\":{\"type\":\"text\"},\"description\":{\"type\":\"text\"},\"query\":{\"properties\":{\"language\":{\"type\":\"keyword\"},\"query\":{\"type\":\"keyword\",\"index\":false}}},\"filters\":{\"type\":\"object\",\"enabled\":false},\"timefilter\":{\"type\":\"object\",\"enabled\":false}}},\"kql-telemetry\":{\"properties\":{\"optInCount\":{\"type\":\"long\"},\"optOutCount\":{\"type\":\"long\"}}},\"index-pattern\":{\"dynamic\":false,\"properties\":{\"title\":{\"type\":\"text\"},\"type\":{\"type\":\"keyword\"}}},\"search-telemetry\":{\"dynamic\":false,\"properties\":{}},\"visualization\":{\"properties\":{\"description\":{\"type\":\"text\"},\"kibanaSavedObjectMeta\":{\"properties\":{\"searchSourceJSON\":{\"type\":\"text\",\"index\":false}}},\"savedSearchRefName\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"title\":{\"type\":\"text\"},\"uiStateJSON\":{\"type\":\"text\",\"index\":false},\"version\":{\"type\":\"integer\"},\"visState\":{\"type\":\"text\",\"index\":false}}},\"timelion-sheet\":{\"properties\":{\"description\":{\"type\":\"text\"},\"hits\":{\"type\":\"integer\"},\"kibanaSavedObjectMeta\":{\"properties\":{\"searchSourceJSON\":{\"type\":\"text\"}}},\"timelion_chart_height\":{\"type\":\"integer\"},\"timelion_columns\":{\"type\":\"integer\"},\"timelion_interval\":{\"type\":\"keyword\"},\"timelion_other_interval\":{\"type\":\"keyword\"},\"timelion_rows\":{\"type\":\"integer\"},\"timelion_sheet\":{\"type\":\"text\"},\"title\":{\"type\":\"text\"},\"version\":{\"type\":\"integer\"}}},\"sample-data-telemetry\":{\"properties\":{\"installCount\":{\"type\":\"long\"},\"unInstallCount\":{\"type\":\"long\"}}},\"graph-workspace\":{\"properties\":{\"description\":{\"type\":\"text\"},\"kibanaSavedObjectMeta\":{\"properties\":{\"searchSourceJSON\":{\"type\":\"text\"}}},\"numLinks\":{\"type\":\"integer\"},\"numVertices\":{\"type\":\"integer\"},\"title\":{\"type\":\"text\"},\"version\":{\"type\":\"integer\"},\"wsState\":{\"type\":\"text\"},\"legacyIndexPatternRef\":{\"type\":\"text\",\"index\":false}}},\"search\":{\"properties\":{\"columns\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"description\":{\"type\":\"text\"},\"hideChart\":{\"type\":\"boolean\",\"index\":false,\"doc_values\":false},\"hits\":{\"type\":\"integer\",\"index\":false,\"doc_values\":false},\"kibanaSavedObjectMeta\":{\"properties\":{\"searchSourceJSON\":{\"type\":\"text\",\"index\":false}}},\"sort\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"title\":{\"type\":\"text\"},\"grid\":{\"type\":\"object\",\"enabled\":false},\"version\":{\"type\":\"integer\"}}},\"dashboard\":{\"properties\":{\"description\":{\"type\":\"text\"},\"hits\":{\"type\":\"integer\",\"index\":false,\"doc_values\":false},\"kibanaSavedObjectMeta\":{\"properties\":{\"searchSourceJSON\":{\"type\":\"text\",\"index\":false}}},\"optionsJSON\":{\"type\":\"text\",\"index\":false},\"panelsJSON\":{\"type\":\"text\",\"index\":false},\"refreshInterval\":{\"properties\":{\"display\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"pause\":{\"type\":\"boolean\",\"index\":false,\"doc_values\":false},\"section\":{\"type\":\"integer\",\"index\":false,\"doc_values\":false},\"value\":{\"type\":\"integer\",\"index\":false,\"doc_values\":false}}},\"timeFrom\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"timeRestore\":{\"type\":\"boolean\",\"index\":false,\"doc_values\":false},\"timeTo\":{\"type\":\"keyword\",\"index\":false,\"doc_values\":false},\"title\":{\"type\":\"text\"},\"version\":{\"type\":\"integer\"}}},\"space\":{\"properties\":{\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":2048}}},\"description\":{\"type\":\"text\"},\"initials\":{\"type\":\"keyword\"},\"color\":{\"type\":\"keyword\"},\"disabledFeatures\":{\"type\":\"keyword\"},\"imageUrl\":{\"type\":\"text\",\"index\":false},\"_reserved\":{\"type\":\"boolean\"}}},\"spaces-usage-stats\":{\"dynamic\":false,\"properties\":{}},\"tag\":{\"properties\":{\"name\":{\"type\":\"text\"},\"description\":{\"type\":\"text\"},\"color\":{\"type\":\"text\"}}},\"lens\":{\"properties\":{\"title\":{\"type\":\"text\"},\"description\":{\"type\":\"text\"},\"visualizationType\":{\"type\":\"keyword\"},\"state\":{\"type\":\"flattened\"},\"expression\":{\"index\":false,\"doc_values\":false,\"type\":\"keyword\"}}},\"lens-ui-telemetry\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"date\":{\"type\":\"date\"},\"count\":{\"type\":\"integer\"}}},\"canvas-element\":{\"dynamic\":false,\"properties\":{\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"help\":{\"type\":\"text\"},\"content\":{\"type\":\"text\"},\"image\":{\"type\":\"text\"},\"@timestamp\":{\"type\":\"date\"},\"@created\":{\"type\":\"date\"}}},\"canvas-workpad\":{\"dynamic\":false,\"properties\":{\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"@timestamp\":{\"type\":\"date\"},\"@created\":{\"type\":\"date\"}}},\"canvas-workpad-template\":{\"dynamic\":false,\"properties\":{\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"help\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"tags\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"template_key\":{\"type\":\"keyword\"}}},\"exception-list-agnostic\":{\"properties\":{\"_tags\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"keyword\"},\"created_by\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"},\"list_id\":{\"type\":\"keyword\"},\"list_type\":{\"type\":\"keyword\"},\"meta\":{\"type\":\"keyword\"},\"name\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"},\"tags\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"comments\":{\"properties\":{\"comment\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"keyword\"},\"created_by\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"}}},\"entries\":{\"properties\":{\"entries\":{\"properties\":{\"field\":{\"type\":\"keyword\"},\"operator\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"value\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"}}},\"field\":{\"type\":\"keyword\"},\"list\":{\"properties\":{\"id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"operator\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"value\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"}}},\"item_id\":{\"type\":\"keyword\"},\"os_types\":{\"type\":\"keyword\"}}},\"exception-list\":{\"properties\":{\"_tags\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"keyword\"},\"created_by\":{\"type\":\"keyword\"},\"description\":{\"type\":\"keyword\"},\"immutable\":{\"type\":\"boolean\"},\"list_id\":{\"type\":\"keyword\"},\"list_type\":{\"type\":\"keyword\"},\"meta\":{\"type\":\"keyword\"},\"name\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"},\"tags\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"},\"tie_breaker_id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"comments\":{\"properties\":{\"comment\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"keyword\"},\"created_by\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"keyword\"},\"updated_by\":{\"type\":\"keyword\"}}},\"entries\":{\"properties\":{\"entries\":{\"properties\":{\"field\":{\"type\":\"keyword\"},\"operator\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"value\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"}}},\"field\":{\"type\":\"keyword\"},\"list\":{\"properties\":{\"id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"operator\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"value\":{\"fields\":{\"text\":{\"type\":\"text\"}},\"type\":\"keyword\"}}},\"item_id\":{\"type\":\"keyword\"},\"os_types\":{\"type\":\"keyword\"}}},\"file-upload-usage-collection-telemetry\":{\"properties\":{\"file_upload\":{\"properties\":{\"index_creation_count\":{\"type\":\"long\"}}}}},\"maps-telemetry\":{\"type\":\"object\",\"enabled\":false},\"map\":{\"properties\":{\"description\":{\"type\":\"text\"},\"title\":{\"type\":\"text\"},\"version\":{\"type\":\"integer\"},\"mapStateJSON\":{\"type\":\"text\"},\"layerListJSON\":{\"type\":\"text\"},\"uiStateJSON\":{\"type\":\"text\"},\"bounds\":{\"dynamic\":false,\"properties\":{}}}},\"search-session\":{\"properties\":{\"persisted\":{\"type\":\"boolean\"},\"sessionId\":{\"type\":\"keyword\"},\"name\":{\"type\":\"keyword\"},\"created\":{\"type\":\"date\"},\"expires\":{\"type\":\"date\"},\"touched\":{\"type\":\"date\"},\"completed\":{\"type\":\"date\"},\"status\":{\"type\":\"keyword\"},\"appId\":{\"type\":\"keyword\"},\"urlGeneratorId\":{\"type\":\"keyword\"},\"initialState\":{\"type\":\"object\",\"enabled\":false},\"restoreState\":{\"type\":\"object\",\"enabled\":false},\"idMapping\":{\"type\":\"object\",\"enabled\":false},\"realmType\":{\"type\":\"keyword\"},\"realmName\":{\"type\":\"keyword\"},\"username\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"}}},\"ingest_manager_settings\":{\"properties\":{\"fleet_server_hosts\":{\"type\":\"keyword\"},\"has_seen_add_data_notice\":{\"type\":\"boolean\",\"index\":false},\"has_seen_fleet_migration_notice\":{\"type\":\"boolean\",\"index\":false}}},\"fleet-agents\":{\"properties\":{\"type\":{\"type\":\"keyword\"},\"active\":{\"type\":\"boolean\"},\"enrolled_at\":{\"type\":\"date\"},\"unenrolled_at\":{\"type\":\"date\"},\"unenrollment_started_at\":{\"type\":\"date\"},\"upgraded_at\":{\"type\":\"date\"},\"upgrade_started_at\":{\"type\":\"date\"},\"access_api_key_id\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"user_provided_metadata\":{\"type\":\"flattened\"},\"local_metadata\":{\"type\":\"flattened\"},\"policy_id\":{\"type\":\"keyword\"},\"policy_revision\":{\"type\":\"integer\"},\"last_updated\":{\"type\":\"date\"},\"last_checkin\":{\"type\":\"date\"},\"last_checkin_status\":{\"type\":\"keyword\"},\"default_api_key_id\":{\"type\":\"keyword\"},\"default_api_key\":{\"type\":\"binary\"},\"updated_at\":{\"type\":\"date\"},\"current_error_events\":{\"type\":\"text\",\"index\":false},\"packages\":{\"type\":\"keyword\"}}},\"fleet-agent-actions\":{\"properties\":{\"agent_id\":{\"type\":\"keyword\"},\"policy_id\":{\"type\":\"keyword\"},\"policy_revision\":{\"type\":\"integer\"},\"type\":{\"type\":\"keyword\"},\"data\":{\"type\":\"binary\"},\"ack_data\":{\"type\":\"text\"},\"sent_at\":{\"type\":\"date\"},\"created_at\":{\"type\":\"date\"}}},\"ingest-agent-policies\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"description\":{\"type\":\"text\"},\"namespace\":{\"type\":\"keyword\"},\"is_default\":{\"type\":\"boolean\"},\"is_default_fleet_server\":{\"type\":\"boolean\"},\"is_managed\":{\"type\":\"boolean\"},\"status\":{\"type\":\"keyword\"},\"package_policies\":{\"type\":\"keyword\"},\"unenroll_timeout\":{\"type\":\"integer\"},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"type\":\"keyword\"},\"revision\":{\"type\":\"integer\"},\"monitoring_enabled\":{\"type\":\"keyword\",\"index\":false},\"is_preconfigured\":{\"type\":\"keyword\"}}},\"fleet-enrollment-api-keys\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"api_key\":{\"type\":\"binary\"},\"api_key_id\":{\"type\":\"keyword\"},\"policy_id\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"date\"},\"updated_at\":{\"type\":\"date\"},\"expire_at\":{\"type\":\"date\"},\"active\":{\"type\":\"boolean\"}}},\"ingest-outputs\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"is_default\":{\"type\":\"boolean\"},\"hosts\":{\"type\":\"keyword\"},\"ca_sha256\":{\"type\":\"keyword\",\"index\":false},\"config\":{\"type\":\"flattened\"},\"config_yaml\":{\"type\":\"text\"}}},\"ingest-package-policies\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"description\":{\"type\":\"text\"},\"namespace\":{\"type\":\"keyword\"},\"enabled\":{\"type\":\"boolean\"},\"policy_id\":{\"type\":\"keyword\"},\"output_id\":{\"type\":\"keyword\"},\"package\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"title\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"}}},\"vars\":{\"type\":\"flattened\"},\"inputs\":{\"type\":\"nested\",\"enabled\":false,\"properties\":{\"type\":{\"type\":\"keyword\"},\"policy_template\":{\"type\":\"keyword\"},\"enabled\":{\"type\":\"boolean\"},\"vars\":{\"type\":\"flattened\"},\"config\":{\"type\":\"flattened\"},\"compiled_input\":{\"type\":\"flattened\"},\"streams\":{\"type\":\"nested\",\"properties\":{\"id\":{\"type\":\"keyword\"},\"enabled\":{\"type\":\"boolean\"},\"data_stream\":{\"properties\":{\"dataset\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"vars\":{\"type\":\"flattened\"},\"config\":{\"type\":\"flattened\"},\"compiled_stream\":{\"type\":\"flattened\"}}}}},\"revision\":{\"type\":\"integer\"},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"keyword\"}}},\"epm-packages\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"internal\":{\"type\":\"boolean\"},\"removable\":{\"type\":\"boolean\"},\"es_index_patterns\":{\"enabled\":false,\"type\":\"object\"},\"installed_es\":{\"type\":\"nested\",\"properties\":{\"id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"installed_kibana\":{\"type\":\"nested\",\"properties\":{\"id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"package_assets\":{\"type\":\"nested\",\"properties\":{\"id\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}},\"install_started_at\":{\"type\":\"date\"},\"install_version\":{\"type\":\"keyword\"},\"install_status\":{\"type\":\"keyword\"},\"install_source\":{\"type\":\"keyword\"}}},\"epm-packages-assets\":{\"properties\":{\"package_name\":{\"type\":\"keyword\"},\"package_version\":{\"type\":\"keyword\"},\"install_source\":{\"type\":\"keyword\"},\"asset_path\":{\"type\":\"keyword\"},\"media_type\":{\"type\":\"keyword\"},\"data_utf8\":{\"type\":\"text\",\"index\":false},\"data_base64\":{\"type\":\"binary\"}}},\"fleet-preconfiguration-deletion-record\":{\"properties\":{\"id\":{\"type\":\"keyword\"}}},\"action\":{\"properties\":{\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"actionTypeId\":{\"type\":\"keyword\"},\"isMissingSecrets\":{\"type\":\"boolean\"},\"config\":{\"enabled\":false,\"type\":\"object\"},\"secrets\":{\"type\":\"binary\"}}},\"action_task_params\":{\"properties\":{\"actionId\":{\"type\":\"keyword\"},\"params\":{\"enabled\":false,\"type\":\"object\"},\"apiKey\":{\"type\":\"binary\"},\"relatedSavedObjects\":{\"enabled\":false,\"type\":\"object\"}}},\"alert\":{\"properties\":{\"enabled\":{\"type\":\"boolean\"},\"name\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"tags\":{\"type\":\"keyword\"},\"alertTypeId\":{\"type\":\"keyword\"},\"schedule\":{\"properties\":{\"interval\":{\"type\":\"keyword\"}}},\"consumer\":{\"type\":\"keyword\"},\"actions\":{\"type\":\"nested\",\"properties\":{\"group\":{\"type\":\"keyword\"},\"actionRef\":{\"type\":\"keyword\"},\"actionTypeId\":{\"type\":\"keyword\"},\"params\":{\"enabled\":false,\"type\":\"object\"}}},\"params\":{\"type\":\"flattened\",\"ignore_above\":4096},\"scheduledTaskId\":{\"type\":\"keyword\"},\"createdBy\":{\"type\":\"keyword\"},\"updatedBy\":{\"type\":\"keyword\"},\"createdAt\":{\"type\":\"date\"},\"updatedAt\":{\"type\":\"date\"},\"apiKey\":{\"type\":\"binary\"},\"apiKeyOwner\":{\"type\":\"keyword\"},\"throttle\":{\"type\":\"keyword\"},\"notifyWhen\":{\"type\":\"keyword\"},\"muteAll\":{\"type\":\"boolean\"},\"mutedInstanceIds\":{\"type\":\"keyword\"},\"meta\":{\"properties\":{\"versionApiKeyLastmodified\":{\"type\":\"keyword\"}}},\"executionStatus\":{\"properties\":{\"status\":{\"type\":\"keyword\"},\"lastExecutionDate\":{\"type\":\"date\"},\"error\":{\"properties\":{\"reason\":{\"type\":\"keyword\"},\"message\":{\"type\":\"keyword\"}}}}}}},\"api_key_pending_invalidation\":{\"properties\":{\"apiKeyId\":{\"type\":\"keyword\"},\"createdAt\":{\"type\":\"date\"}}},\"osquery-manager-usage-metric\":{\"properties\":{\"count\":{\"type\":\"long\"},\"errors\":{\"type\":\"long\"}}},\"osquery-saved-query\":{\"properties\":{\"description\":{\"type\":\"text\"},\"id\":{\"type\":\"keyword\"},\"query\":{\"type\":\"text\"},\"created_at\":{\"type\":\"date\"},\"created_by\":{\"type\":\"text\"},\"platform\":{\"type\":\"keyword\"},\"version\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"type\":\"text\"},\"interval\":{\"type\":\"keyword\"}}},\"ml-job\":{\"properties\":{\"job_id\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"datafeed_id\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"type\":{\"type\":\"keyword\"}}},\"ml-module\":{\"dynamic\":false,\"properties\":{\"id\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"title\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"description\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"type\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"logo\":{\"type\":\"object\"},\"defaultIndexPattern\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"query\":{\"type\":\"object\"},\"jobs\":{\"type\":\"object\"},\"datafeeds\":{\"type\":\"object\"}}},\"cases-comments\":{\"properties\":{\"associationType\":{\"type\":\"keyword\"},\"comment\":{\"type\":\"text\"},\"owner\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"actions\":{\"properties\":{\"targets\":{\"type\":\"nested\",\"properties\":{\"hostname\":{\"type\":\"keyword\"},\"endpointId\":{\"type\":\"keyword\"}}},\"type\":{\"type\":\"keyword\"}}},\"alertId\":{\"type\":\"keyword\"},\"index\":{\"type\":\"keyword\"},\"created_at\":{\"type\":\"date\"},\"created_by\":{\"properties\":{\"full_name\":{\"type\":\"keyword\"},\"username\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"pushed_at\":{\"type\":\"date\"},\"pushed_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"rule\":{\"properties\":{\"id\":{\"type\":\"keyword\"},\"name\":{\"type\":\"keyword\"}}},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}}}},\"cases-configure\":{\"properties\":{\"created_at\":{\"type\":\"date\"},\"created_by\":{\"properties\":{\"email\":{\"type\":\"keyword\"},\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"}}},\"connector\":{\"properties\":{\"name\":{\"type\":\"text\"},\"type\":{\"type\":\"keyword\"},\"fields\":{\"properties\":{\"key\":{\"type\":\"text\"},\"value\":{\"type\":\"text\"}}}}},\"closure_type\":{\"type\":\"keyword\"},\"owner\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"properties\":{\"email\":{\"type\":\"keyword\"},\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"}}}}},\"cases-connector-mappings\":{\"properties\":{\"mappings\":{\"properties\":{\"source\":{\"type\":\"keyword\"},\"target\":{\"type\":\"keyword\"},\"action_type\":{\"type\":\"keyword\"}}},\"owner\":{\"type\":\"keyword\"}}},\"cases\":{\"properties\":{\"closed_at\":{\"type\":\"date\"},\"closed_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"created_at\":{\"type\":\"date\"},\"created_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"description\":{\"type\":\"text\"},\"connector\":{\"properties\":{\"name\":{\"type\":\"text\"},\"type\":{\"type\":\"keyword\"},\"fields\":{\"properties\":{\"key\":{\"type\":\"text\"},\"value\":{\"type\":\"text\"}}}}},\"external_service\":{\"properties\":{\"pushed_at\":{\"type\":\"date\"},\"pushed_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"connector_name\":{\"type\":\"keyword\"},\"external_id\":{\"type\":\"keyword\"},\"external_title\":{\"type\":\"text\"},\"external_url\":{\"type\":\"text\"}}},\"owner\":{\"type\":\"keyword\"},\"title\":{\"type\":\"keyword\"},\"status\":{\"type\":\"keyword\"},\"tags\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"date\"},\"updated_by\":{\"properties\":{\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"},\"email\":{\"type\":\"keyword\"}}},\"settings\":{\"properties\":{\"syncAlerts\":{\"type\":\"boolean\"}}}}},\"cases-user-actions\":{\"properties\":{\"action_field\":{\"type\":\"keyword\"},\"action\":{\"type\":\"keyword\"},\"action_at\":{\"type\":\"date\"},\"action_by\":{\"properties\":{\"email\":{\"type\":\"keyword\"},\"username\":{\"type\":\"keyword\"},\"full_name\":{\"type\":\"keyword\"}}},\"new_value\":{\"type\":\"text\"},\"old_value\":{\"type\":\"text\"},\"owner\":{\"type\":\"keyword\"}}},\"siem-ui-timeline-note\":{\"properties\":{\"timelineId\":{\"type\":\"keyword\"},\"eventId\":{\"type\":\"keyword\"},\"note\":{\"type\":\"text\"},\"created\":{\"type\":\"date\"},\"createdBy\":{\"type\":\"text\"},\"updated\":{\"type\":\"date\"},\"updatedBy\":{\"type\":\"text\"}}},\"siem-ui-timeline-pinned-event\":{\"properties\":{\"timelineId\":{\"type\":\"keyword\"},\"eventId\":{\"type\":\"keyword\"},\"created\":{\"type\":\"date\"},\"createdBy\":{\"type\":\"text\"},\"updated\":{\"type\":\"date\"},\"updatedBy\":{\"type\":\"text\"}}},\"siem-detection-engine-rule-actions\":{\"properties\":{\"alertThrottle\":{\"type\":\"keyword\"},\"ruleAlertId\":{\"type\":\"keyword\"},\"ruleThrottle\":{\"type\":\"keyword\"},\"actions\":{\"properties\":{\"group\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"},\"action_type_id\":{\"type\":\"keyword\"},\"params\":{\"type\":\"object\",\"enabled\":false}}}}},\"siem-detection-engine-rule-status\":{\"properties\":{\"alertId\":{\"type\":\"keyword\"},\"status\":{\"type\":\"keyword\"},\"statusDate\":{\"type\":\"date\"},\"lastFailureAt\":{\"type\":\"date\"},\"lastSuccessAt\":{\"type\":\"date\"},\"lastFailureMessage\":{\"type\":\"text\"},\"lastSuccessMessage\":{\"type\":\"text\"},\"lastLookBackDate\":{\"type\":\"date\"},\"gap\":{\"type\":\"text\"},\"bulkCreateTimeDurations\":{\"type\":\"float\"},\"searchAfterTimeDurations\":{\"type\":\"float\"}}},\"security-rule\":{\"dynamic\":false,\"properties\":{\"name\":{\"type\":\"keyword\"},\"rule_id\":{\"type\":\"keyword\"},\"version\":{\"type\":\"long\"}}},\"siem-ui-timeline\":{\"properties\":{\"columns\":{\"properties\":{\"aggregatable\":{\"type\":\"boolean\"},\"category\":{\"type\":\"keyword\"},\"columnHeaderType\":{\"type\":\"keyword\"},\"description\":{\"type\":\"text\"},\"example\":{\"type\":\"text\"},\"indexes\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"},\"name\":{\"type\":\"text\"},\"placeholder\":{\"type\":\"text\"},\"searchable\":{\"type\":\"boolean\"},\"type\":{\"type\":\"keyword\"}}},\"dataProviders\":{\"properties\":{\"id\":{\"type\":\"keyword\"},\"name\":{\"type\":\"text\"},\"enabled\":{\"type\":\"boolean\"},\"excluded\":{\"type\":\"boolean\"},\"kqlQuery\":{\"type\":\"text\"},\"type\":{\"type\":\"text\"},\"queryMatch\":{\"properties\":{\"field\":{\"type\":\"text\"},\"displayField\":{\"type\":\"text\"},\"value\":{\"type\":\"text\"},\"displayValue\":{\"type\":\"text\"},\"operator\":{\"type\":\"text\"}}},\"and\":{\"properties\":{\"id\":{\"type\":\"keyword\"},\"name\":{\"type\":\"text\"},\"enabled\":{\"type\":\"boolean\"},\"excluded\":{\"type\":\"boolean\"},\"kqlQuery\":{\"type\":\"text\"},\"type\":{\"type\":\"text\"},\"queryMatch\":{\"properties\":{\"field\":{\"type\":\"text\"},\"displayField\":{\"type\":\"text\"},\"value\":{\"type\":\"text\"},\"displayValue\":{\"type\":\"text\"},\"operator\":{\"type\":\"text\"}}}}}}},\"description\":{\"type\":\"text\"},\"eqlOptions\":{\"properties\":{\"eventCategoryField\":{\"type\":\"text\"},\"tiebreakerField\":{\"type\":\"text\"},\"timestampField\":{\"type\":\"text\"},\"query\":{\"type\":\"text\"},\"size\":{\"type\":\"text\"}}},\"eventType\":{\"type\":\"keyword\"},\"excludedRowRendererIds\":{\"type\":\"text\"},\"favorite\":{\"properties\":{\"keySearch\":{\"type\":\"text\"},\"fullName\":{\"type\":\"text\"},\"userName\":{\"type\":\"text\"},\"favoriteDate\":{\"type\":\"date\"}}},\"filters\":{\"properties\":{\"meta\":{\"properties\":{\"alias\":{\"type\":\"text\"},\"controlledBy\":{\"type\":\"text\"},\"disabled\":{\"type\":\"boolean\"},\"field\":{\"type\":\"text\"},\"formattedValue\":{\"type\":\"text\"},\"index\":{\"type\":\"keyword\"},\"key\":{\"type\":\"keyword\"},\"negate\":{\"type\":\"boolean\"},\"params\":{\"type\":\"text\"},\"type\":{\"type\":\"keyword\"},\"value\":{\"type\":\"text\"}}},\"exists\":{\"type\":\"text\"},\"match_all\":{\"type\":\"text\"},\"missing\":{\"type\":\"text\"},\"query\":{\"type\":\"text\"},\"range\":{\"type\":\"text\"},\"script\":{\"type\":\"text\"}}},\"indexNames\":{\"type\":\"text\"},\"kqlMode\":{\"type\":\"keyword\"},\"kqlQuery\":{\"properties\":{\"filterQuery\":{\"properties\":{\"kuery\":{\"properties\":{\"kind\":{\"type\":\"keyword\"},\"expression\":{\"type\":\"text\"}}},\"serializedQuery\":{\"type\":\"text\"}}}}},\"title\":{\"type\":\"text\"},\"templateTimelineId\":{\"type\":\"text\"},\"templateTimelineVersion\":{\"type\":\"integer\"},\"timelineType\":{\"type\":\"keyword\"},\"dateRange\":{\"properties\":{\"start\":{\"type\":\"date\"},\"end\":{\"type\":\"date\"}}},\"savedQueryId\":{\"type\":\"keyword\"},\"sort\":{\"dynamic\":false,\"properties\":{\"columnId\":{\"type\":\"keyword\"},\"columnType\":{\"type\":\"keyword\"},\"sortDirection\":{\"type\":\"keyword\"}}},\"status\":{\"type\":\"keyword\"},\"created\":{\"type\":\"date\"},\"createdBy\":{\"type\":\"text\"},\"updated\":{\"type\":\"date\"},\"updatedBy\":{\"type\":\"text\"}}},\"endpoint:user-artifact\":{\"properties\":{\"identifier\":{\"type\":\"keyword\"},\"compressionAlgorithm\":{\"type\":\"keyword\",\"index\":false},\"encryptionAlgorithm\":{\"type\":\"keyword\",\"index\":false},\"encodedSha256\":{\"type\":\"keyword\"},\"encodedSize\":{\"type\":\"long\",\"index\":false},\"decodedSha256\":{\"type\":\"keyword\",\"index\":false},\"decodedSize\":{\"type\":\"long\",\"index\":false},\"created\":{\"type\":\"date\",\"index\":false},\"body\":{\"type\":\"binary\"}}},\"endpoint:user-artifact-manifest\":{\"properties\":{\"created\":{\"type\":\"date\",\"index\":false},\"schemaVersion\":{\"type\":\"keyword\"},\"semanticVersion\":{\"type\":\"keyword\",\"index\":false},\"artifacts\":{\"type\":\"nested\",\"properties\":{\"policyId\":{\"type\":\"keyword\",\"index\":false},\"artifactId\":{\"type\":\"keyword\",\"index\":false}}}}},\"security-solution-signals-migration\":{\"properties\":{\"sourceIndex\":{\"type\":\"keyword\"},\"destinationIndex\":{\"type\":\"keyword\",\"index\":false},\"version\":{\"type\":\"long\"},\"error\":{\"type\":\"text\",\"index\":false},\"taskId\":{\"type\":\"keyword\",\"index\":false},\"status\":{\"type\":\"keyword\",\"index\":false},\"created\":{\"type\":\"date\",\"index\":false},\"createdBy\":{\"type\":\"text\",\"index\":false},\"updated\":{\"type\":\"date\",\"index\":false},\"updatedBy\":{\"type\":\"text\",\"index\":false}}},\"uptime-dynamic-settings\":{\"dynamic\":false,\"properties\":{}},\"infrastructure-ui-source\":{\"dynamic\":false,\"properties\":{}},\"metrics-explorer-view\":{\"dynamic\":false,\"properties\":{}},\"inventory-view\":{\"dynamic\":false,\"properties\":{}},\"upgrade-assistant-reindex-operation\":{\"properties\":{\"reindexTaskId\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"indexName\":{\"type\":\"keyword\"},\"newIndexName\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"status\":{\"type\":\"integer\"},\"locked\":{\"type\":\"date\"},\"lastCompletedStep\":{\"type\":\"long\"},\"errorMessage\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"reindexTaskPercComplete\":{\"type\":\"float\"},\"runningReindexCount\":{\"type\":\"integer\"},\"reindexOptions\":{\"properties\":{\"openAndClose\":{\"type\":\"boolean\"},\"queueSettings\":{\"properties\":{\"queuedAt\":{\"type\":\"long\"},\"startedAt\":{\"type\":\"long\"}}}}}}},\"upgrade-assistant-telemetry\":{\"properties\":{\"ui_open\":{\"properties\":{\"overview\":{\"type\":\"long\",\"null_value\":0},\"cluster\":{\"type\":\"long\",\"null_value\":0},\"indices\":{\"type\":\"long\",\"null_value\":0},\"kibana\":{\"type\":\"long\",\"null_value\":0}}},\"ui_reindex\":{\"properties\":{\"close\":{\"type\":\"long\",\"null_value\":0},\"open\":{\"type\":\"long\",\"null_value\":0},\"start\":{\"type\":\"long\",\"null_value\":0},\"stop\":{\"type\":\"long\",\"null_value\":0}}},\"features\":{\"properties\":{\"deprecation_logging\":{\"properties\":{\"enabled\":{\"type\":\"boolean\",\"null_value\":true}}}}}}},\"upgrade-assistant-ml-upgrade-operation\":{\"properties\":{\"nodeId\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"snapshotId\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"jobId\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}},\"status\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\",\"ignore_above\":256}}}}},\"monitoring-telemetry\":{\"properties\":{\"reportedClusterUuids\":{\"type\":\"keyword\"}}},\"enterprise_search_telemetry\":{\"dynamic\":false,\"properties\":{}},\"app_search_telemetry\":{\"dynamic\":false,\"properties\":{}},\"workplace_search_telemetry\":{\"dynamic\":false,\"properties\":{}},\"apm-indices\":{\"properties\":{\"apm_oss.sourcemapIndices\":{\"type\":\"keyword\"},\"apm_oss.errorIndices\":{\"type\":\"keyword\"},\"apm_oss.onboardingIndices\":{\"type\":\"keyword\"},\"apm_oss.spanIndices\":{\"type\":\"keyword\"},\"apm_oss.transactionIndices\":{\"type\":\"keyword\"},\"apm_oss.metricsIndices\":{\"type\":\"keyword\"}}},\"apm-telemetry\":{\"dynamic\":false,\"properties\":{}},\"apm-server-schema\":{\"properties\":{\"schemaJson\":{\"type\":\"text\",\"index\":false}}}},\"_meta\":{\"migrationMappingPropertyHashes\":{\"visualization\":\"f819cf6636b75c9e76ba733a0c6ef355\",\"endpoint:user-artifact\":\"4a11183eee21e6fbad864f7a30b39ad0\",\"references\":\"7997cf5a56cc02bdc9c93361bde732b0\",\"graph-workspace\":\"27a94b2edcb0610c6aea54a7c56d7752\",\"file-upload-usage-collection-telemetry\":\"a34fbb8e3263d105044869264860c697\",\"ml-job\":\"3bb64c31915acf93fc724af137a0891b\",\"epm-packages\":\"0cbbb16506734d341a96aaed65ec6413\",\"cases-connector-mappings\":\"17d2e9e0e170a21a471285a5d845353c\",\"type\":\"2f4316de49999235636386fe51dc06c1\",\"ui-counter\":\"0d409297dc5ebe1e3a1da691c6ee32e3\",\"osquery-manager-usage-metric\":\"4dc4f647d27247c002f56f22742175fe\",\"space\":\"c5ca8acafa0beaa4d08d014a97b6bc6b\",\"infrastructure-ui-source\":\"3d1b76c39bfb2cc8296b024d73854724\",\"api_key_pending_invalidation\":\"16f515278a295f6245149ad7c5ddedb7\",\"ingest_manager_settings\":\"f159646d76ab261bfbf8ef504d9631e4\",\"event_loop_delays_daily\":\"5df7e292ddd5028e07c1482e130e6654\",\"application_usage_totals\":\"3d1b76c39bfb2cc8296b024d73854724\",\"spaces-usage-stats\":\"3d1b76c39bfb2cc8296b024d73854724\",\"action\":\"38c91d092e0790ecd9ebe58e82145280\",\"tag\":\"83d55da58f6530f7055415717ec06474\",\"dashboard\":\"40554caf09725935e2c02e02563a2d07\",\"metrics-explorer-view\":\"3d1b76c39bfb2cc8296b024d73854724\",\"siem-detection-engine-rule-actions\":\"6569b288c169539db10cb262bf79de18\",\"security-solution-signals-migration\":\"72761fd374ca11122ac8025a92b84fca\",\"apm-server-schema\":\"b1d71908f324c17bf744ac72af5038fb\",\"query\":\"11aaeb7f5f7fa5bb43f25e18ce26e7d9\",\"application_usage_transactional\":\"3d1b76c39bfb2cc8296b024d73854724\",\"action_task_params\":\"0b7bac797714726291526b250c582806\",\"security-rule\":\"8ae39a88fc70af3375b7050e8d8d5cc7\",\"apm-indices\":\"9bb9b2bf1fa636ed8619cbab5ce6a1dd\",\"inventory-view\":\"3d1b76c39bfb2cc8296b024d73854724\",\"canvas-workpad-template\":\"ae2673f678281e2c055d764b153e9715\",\"cases-comments\":\"fce468d3d08e577b67af2e958e1f9e97\",\"upgrade-assistant-reindex-operation\":\"215107c281839ea9b3ad5f6419819763\",\"fleet-enrollment-api-keys\":\"a69ef7ae661dab31561d6c6f052ef2a7\",\"canvas-element\":\"7390014e1091044523666d97247392fc\",\"core-usage-stats\":\"3d1b76c39bfb2cc8296b024d73854724\",\"ingest-outputs\":\"1acb789ca37cbee70259ca79e124d9ad\",\"fleet-preconfiguration-deletion-record\":\"4c36f199189a367e43541f236141204c\",\"telemetry\":\"36a616f7026dfa617d6655df850fe16d\",\"osquery-saved-query\":\"6bb1cf319f0fd2984010592ca1ee588e\",\"ml-module\":\"46ef4f0d6682636f0fff9799d6a2d7ac\",\"lens-ui-telemetry\":\"509bfa5978586998e05f9e303c07a327\",\"upgrade-assistant-telemetry\":\"8169c8bdd753da18d887e038aeb5cbc4\",\"namespaces\":\"2f4316de49999235636386fe51dc06c1\",\"usage-counters\":\"8cc260bdceffec4ffc3ad165c97dc1b4\",\"application_usage_daily\":\"43b8830d5d0df85a6823d290885fc9fd\",\"siem-ui-timeline-note\":\"8874706eedc49059d4cf0f5094559084\",\"lens\":\"52346cfec69ff7b47d5f0c12361a2797\",\"exception-list-agnostic\":\"baf108c9934dda844921f692a513adae\",\"sample-data-telemetry\":\"7d3cfeb915303c9641c59681967ffeb4\",\"upgrade-assistant-ml-upgrade-operation\":\"ece1011519ca8fd057364605744d75ac\",\"exception-list\":\"baf108c9934dda844921f692a513adae\",\"fleet-agent-actions\":\"9511b565b1cc6441a42033db3d5de8e9\",\"monitoring-telemetry\":\"2669d5ec15e82391cf58df4294ee9c68\",\"search\":\"db2c00e39b36f40930a3b9fc71c823e1\",\"app_search_telemetry\":\"3d1b76c39bfb2cc8296b024d73854724\",\"originId\":\"2f4316de49999235636386fe51dc06c1\",\"updated_at\":\"00da57df13e94e9d98437d13ace4bfe0\",\"cases-configure\":\"623baf529acc106213ba8f730d41ec7f\",\"search-telemetry\":\"3d1b76c39bfb2cc8296b024d73854724\",\"canvas-workpad\":\"b0a1706d356228dbdcb4a17e6b9eb231\",\"alert\":\"d75d3b0e95fe394753d73d8f7952cd7d\",\"siem-detection-engine-rule-status\":\"ae783f41c6937db6b7a2ef5c93a9e9b0\",\"map\":\"9134b47593116d7953f6adba096fc463\",\"ingest-package-policies\":\"2bdb4dbeca0d8e7b9cf620548137c695\",\"legacy-url-alias\":\"e8dd3b6056ad7e1de32523f457310ecb\",\"uptime-dynamic-settings\":\"3d1b76c39bfb2cc8296b024d73854724\",\"search-session\":\"c768de003a1212f3d9e51176d118f255\",\"epm-packages-assets\":\"44621b2f6052ef966da47b7c3a00f33b\",\"cases\":\"6b9a08cbd2a81020ac2fc27c4e210b24\",\"apm-telemetry\":\"3d1b76c39bfb2cc8296b024d73854724\",\"siem-ui-timeline\":\"3e97beae13cdfc6d62bc1846119f7276\",\"kql-telemetry\":\"d12a98a6f19a2d273696597547e064ee\",\"ui-metric\":\"0d409297dc5ebe1e3a1da691c6ee32e3\",\"url\":\"c7f66a0df8b1b52f17c28c4adb111105\",\"enterprise_search_telemetry\":\"3d1b76c39bfb2cc8296b024d73854724\",\"endpoint:user-artifact-manifest\":\"a0d7b04ad405eed54d76e279c3727862\",\"migrationVersion\":\"4a1746014a75ade3a714e1db5763276f\",\"index-pattern\":\"45915a1ad866812242df474eb0479052\",\"fleet-agents\":\"59fd74f819f028f8555776db198d2562\",\"maps-telemetry\":\"5ef305b18111b77789afefbd36b66171\",\"namespace\":\"2f4316de49999235636386fe51dc06c1\",\"cases-user-actions\":\"25035423b7ceb4d4f1124c441d3f6529\",\"coreMigrationVersion\":\"2f4316de49999235636386fe51dc06c1\",\"timelion-sheet\":\"9a2a2748877c7a7b582fef201ab1d4cf\",\"siem-ui-timeline-pinned-event\":\"20638091112f0e14f0e443d512301c29\",\"config\":\"c63748b75f39d0c54de12d12c1ccbc20\",\"ingest-agent-policies\":\"5e91121a6b10c13d8b5339c2ff721e9b\",\"workplace_search_telemetry\":\"3d1b76c39bfb2cc8296b024d73854724\"}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0_001/_update_by_query?conflicts=proceed&allow_no_indices=false&scroll_size=1000&refresh=true&wait_for_completion=false"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"taskId":"T2MZzAvVQc62WCzXyqFR9Q:9691"},"message":"[.kibana] UPDATE_TARGET_MAPPINGS RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 345ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPUT /.kibana_task_manager_7.15.0_001/_mapping?timeout=60s\n{\"dynamic\":\"strict\",\"properties\":{\"migrationVersion\":{\"dynamic\":\"true\",\"type\":\"object\"},\"type\":{\"type\":\"keyword\"},\"namespace\":{\"type\":\"keyword\"},\"namespaces\":{\"type\":\"keyword\"},\"originId\":{\"type\":\"keyword\"},\"updated_at\":{\"type\":\"date\"},\"references\":{\"type\":\"nested\",\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"},\"id\":{\"type\":\"keyword\"}}},\"coreMigrationVersion\":{\"type\":\"keyword\"},\"task\":{\"properties\":{\"taskType\":{\"type\":\"keyword\"},\"scheduledAt\":{\"type\":\"date\"},\"runAt\":{\"type\":\"date\"},\"startedAt\":{\"type\":\"date\"},\"retryAt\":{\"type\":\"date\"},\"schedule\":{\"properties\":{\"interval\":{\"type\":\"keyword\"}}},\"attempts\":{\"type\":\"integer\"},\"status\":{\"type\":\"keyword\"},\"traceparent\":{\"type\":\"text\"},\"params\":{\"type\":\"text\"},\"state\":{\"type\":\"text\"},\"user\":{\"type\":\"keyword\"},\"scope\":{\"type\":\"keyword\"},\"ownerId\":{\"type\":\"keyword\"}}}},\"_meta\":{\"migrationMappingPropertyHashes\":{\"migrationVersion\":\"4a1746014a75ade3a714e1db5763276f\",\"originId\":\"2f4316de49999235636386fe51dc06c1\",\"task\":\"c716c8022373e7b7fea04dc9a9ff5c70\",\"updated_at\":\"00da57df13e94e9d98437d13ace4bfe0\",\"references\":\"7997cf5a56cc02bdc9c93361bde732b0\",\"namespace\":\"2f4316de49999235636386fe51dc06c1\",\"coreMigrationVersion\":\"2f4316de49999235636386fe51dc06c1\",\"type\":\"2f4316de49999235636386fe51dc06c1\",\"namespaces\":\"2f4316de49999235636386fe51dc06c1\"}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_task_manager_7.15.0_001/_update_by_query?conflicts=proceed&allow_no_indices=false&scroll_size=1000&refresh=true&wait_for_completion=false"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":{"taskId":"T2MZzAvVQc62WCzXyqFR9Q:9694"},"message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:38+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 134ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_tasks/T2MZzAvVQc62WCzXyqFR9Q%3A9694?wait_for_completion=true&timeout=60s"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":"pickup_updated_mappings_succeeded","message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 355ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana_task_manager] Migration completed after 1959ms"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_tasks/T2MZzAvVQc62WCzXyqFR9Q%3A9691?wait_for_completion=true&timeout=60s"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","savedobjects-service"],"pid":45398,"_tag":"Right","right":"pickup_updated_mappings_succeeded","message":"[.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK RESPONSE"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 710ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","savedobjects-service"],"pid":45398,"message":"[.kibana] Migration completed after 2267ms"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status core.status.derivedStatus now set to unavailable"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-service"],"pid":45398,"message":"Plugins service starts plugins"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","plugins-system","standard"],"pid":45398,"message":"Starting [113] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,telemetry,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,graph,visTypeVega,management,watcher,licenseManagement,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,dashboardEnhanced,visualize,visTypeTimeseries,savedObjectsManagement,spaces,security,transform,savedObjectsTagging,lens,reporting,canvas,lists,ingestPipelines,fileUpload,maps,dataVisualizer,encryptedSavedObjects,dataEnhanced,dashboardMode,cloud,snapshotRestore,fleet,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,osquery,ml,cases,timelines,securitySolution,observability,uptime,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"translations\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"licensing\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"globalSearch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"globalSearchProviders\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"banners\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"licenseApiGuard\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"code\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"usageCollection\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","usageCollection"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"xpackLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"taskManager\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Task pool now using 10 as the max worker value"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"setting HealthStatus.Error because of expired cold timestamps"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to degraded"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"setting HealthStatus.Error because of expired cold timestamps"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:50:39.831Z\",\"status\":\"error\",\"last_update\":\"2021-09-27T16:50:39.829Z\",\"stats\":{}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"telemetryCollectionManager\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"telemetryCollectionXpack\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"kibanaUsageCollection\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"securityOss\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"share\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","share"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"screenshotMode\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"telemetry\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"newsfeed\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"mapsEms\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"mapsLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"legacyExport\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"kibanaLegacy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"embeddable\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"uiActionsEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"fieldFormats\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressions\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"charts\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"esUiShared\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"bfetch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"data\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"savedObjects\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visualizations\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","visualizations"],"pid":45398,"message":"visualizations: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeXy\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeVislib\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeTimelion\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","visTypeTimelion"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"features\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","features"],"pid":45398,"message":"Registering OSS features with SO types: legacy-url-alias, config, usage-counters, ui-counter, ui-metric, application_usage_totals, application_usage_daily, application_usage_transactional, url, telemetry, query, kql-telemetry, index-pattern, search-telemetry, visualization, timelion-sheet, sample-data-telemetry, graph-workspace, search, dashboard, tag, lens, lens-ui-telemetry, canvas-element, canvas-workpad, canvas-workpad-template, exception-list-agnostic, exception-list, file-upload-usage-collection-telemetry, maps-telemetry, map, ingest_manager_settings, fleet-agents, fleet-agent-actions, ingest-agent-policies, fleet-enrollment-api-keys, ingest-outputs, ingest-package-policies, epm-packages, epm-packages-assets, fleet-preconfiguration-deletion-record, osquery-manager-usage-metric, osquery-saved-query, ml-job, ml-module, cases-comments, siem-ui-timeline-note, siem-ui-timeline-pinned-event, siem-detection-engine-rule-actions, siem-detection-engine-rule-status, security-rule, siem-ui-timeline, endpoint:user-artifact, endpoint:user-artifact-manifest, security-solution-signals-migration, uptime-dynamic-settings, infrastructure-ui-source, metrics-explorer-view, inventory-view, upgrade-assistant-reindex-operation, upgrade-assistant-telemetry, upgrade-assistant-ml-upgrade-operation, enterprise_search_telemetry, app_search_telemetry, workplace_search_telemetry, apm-indices, apm-telemetry, apm-server-schema, action, alert. \"includeTimelion\": false."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeTagcloud\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeTable\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypePie\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeMetric\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeMarkdown\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"tileMap\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"regionMap\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"presentationUtil\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressionShape\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressionRevealImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressionRepeatImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressionMetric\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"expressionImage\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"timelion\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"indexPatternFieldEditor\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"home\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"searchprofiler\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"painlessLab\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"grokdebugger\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"graph\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeVega\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"management\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","management"],"pid":45398,"message":"management: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"watcher\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"licenseManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"indexPatternManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"advancedSettings\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","advancedSettings"],"pid":45398,"message":"advancedSettings: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"discover\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"discoverEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"dashboard\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","dashboard"],"pid":45398,"message":"dashboard: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"dashboardEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visualize\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","visualize"],"pid":45398,"message":"visualize: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"visTypeTimeseries\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"savedObjectsManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","savedObjectsManagement"],"pid":45398,"message":"Starting up SavedObjectsManagement plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"spaces\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"security\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","security"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","security","authenticator"],"pid":45398,"message":"Enabling \"basic\" (basic) authentication provider."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"transform\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"savedObjectsTagging\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"lens\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"reporting\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"canvas\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"lists\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","lists"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"ingestPipelines\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"fileUpload\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"maps\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"dataVisualizer\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"encryptedSavedObjects\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","encryptedSavedObjects"],"pid":45398,"message":"Starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"dataEnhanced\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"dashboardMode\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"cloud\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"snapshotRestore\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"fleet\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"indexManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"rollup\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"remoteClusters\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"crossClusterReplication\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"indexLifecycleManagement\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"eventLog\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"starting plugin"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"initializing EsContext"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"actions\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"alerting\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"triggersActionsUi\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"stackAlerts\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"ruleRegistry\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"osquery\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","osquery"],"pid":45398,"message":"osquery: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"ml\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"cases\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","cases"],"pid":45398,"message":"Starting Case Workflow"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"timelines\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","timelines"],"pid":45398,"message":"timelines: Started"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"securitySolution\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","securitySolution","telemetry_events"],"pid":45398,"message":"Starting diagnostic and endpoint telemetry tasks"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","securitySolution","telemetry_events"],"pid":45398,"message":"Starting local task"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"observability\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"uptime\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"infra\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"upgradeAssistant\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","upgradeAssistant","reindex_worker"],"pid":45398,"message":"Starting worker..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","upgradeAssistant","reindex_worker"],"pid":45398,"message":"Polling for reindex operations"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"monitoring\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["info","plugins","monitoring","monitoring"],"pid":45398,"message":"config sourced from: production cluster"}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Polling Elasticsearch License API with frequency 30000ms."}
{"type":"log","@timestamp":"2021-09-27T18:50:39+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy essql"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy osquerySearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Get strategy ese"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Get strategy eql"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy indexFields"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy timelineSearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy timelineEqlSearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Get strategy ese"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy securitySolutionSearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Get strategy ese"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy infra-log-entries"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Get strategy ese"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy infra-log-entry"}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"logstash\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"enterpriseSearch\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:40+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"console\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"apmOss\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","plugins-system","standard"],"pid":45398,"message":"Starting plugin \"apm\"..."}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http"],"pid":45398,"message":"stopping preboot server"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"stopping http server"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Preboot"],"pid":45398,"message":"http server stopped"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"starting http server"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/translations/{locale}.json]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/core/capabilities]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/{type}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/resolve/{type}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/{type}/{id?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/{type}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/{type}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_bulk_get]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_bulk_create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_bulk_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_log_legacy_import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects/_resolve_import_errors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/saved_objects/_migrate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/settings/{key}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/settings/{key}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","security","authorization"],"pid":45398,"message":"Registering Kibana Privileges with Elasticsearch for kibana-.kibana"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/bootstrap.js]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/deprecations/]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/licensing/info]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/licensing/feature_usage]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/licensing/feature_usage/register]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/licensing/feature_usage/notify]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/global_search/find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/global_search/searchable_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/banners/info]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ui_counters/_report]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/task_manager/_health]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security_oss/app_state]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security_oss/anonymous_access/capabilities]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/goto/{urlId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/short_url/{urlId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/shorten_url]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/telemetry/v2/optIn]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/telemetry/v2/clusters/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/telemetry/v2/clusters/_opt_in_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/telemetry/v2/userHasSeenNotice]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/dashboards/export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/dashboards/import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/bsearch]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/fns]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/scripts/languages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/suggestions/values/{index}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/kql_opt_in_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/default]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/default]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/has_user_index_pattern]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/fields]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/scripted_field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/scripted_field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/scripted_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/scripted_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/scripted_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/runtime_field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/runtime_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/runtime_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/runtime_field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/index_pattern/{id}/runtime_field/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/_fields_for_wildcard]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_patterns/_fields_for_time_pattern]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/search/{strategy}/{id?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/search/{strategy}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/_msearch]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timelion/functions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timelion/run]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timelion/validate/es]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/features]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_pattern_field_editor/field_preview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/home/hits_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/home/new_instance_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/home/tutorials]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/sample_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/sample_data/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/sample_data/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/searchprofiler/profile]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/painless_lab/execute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/grokdebugger/simulate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/graph/searchProxy]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/graph/graphExplore]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/fields]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/history/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/license/refresh]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watches]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watches/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{watchId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/execute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{watchId}/history]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{watchId}/activate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{watchId}/deactivate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/{watchId}/action/{actionId}/acknowledge]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/watcher/watch/visualize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/license]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/license/start_trial]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Starting monitoring stats collection"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","spaces"],"pid":45398,"message":"Checking for existing default space"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3AAlerting-alerting_health_check?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"alerting_health_check\",\"state\":\"{}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"60m\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.121Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.121Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.122Z\"} [version_conflict_engine_exception]: [task:Alerting-alerting_health_check]: version conflict, document already exists (current version [22])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3AAlerts-alerts_invalidate_api_keys?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"alerts_invalidate_api_keys\",\"state\":\"{}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"5m\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.123Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.123Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.123Z\"} [version_conflict_engine_exception]: [task:Alerts-alerts_invalidate_api_keys]: version conflict, document already exists (current version [151])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /.apm-agent-configuration"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /.apm-custom-link"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy apmCorrelationsSearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","data","data"],"pid":45398,"message":"Register strategy apmFailedTransactionsCorrelationsSearchStrategy"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/apm-telemetry%3Aapm-telemetry"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3Aapm-telemetry-task?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"apm-telemetry-task\",\"scope\":[\"apm\"],\"params\":\"{}\",\"state\":\"{}\",\"schedule\":{\"interval\":\"720m\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:43.427Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:43.427Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:43.427Z\"} [version_conflict_engine_exception]: [task:apm-telemetry-task]: version conflict, document already exists (current version [14])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_ilm/policy/kibana-event-log-policy"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true&track_total_hits=true\n{\"query\":{\"bool\":{\"filter\":[{\"term\":{\"type\":\"task\"}}]}},\"aggs\":{\"taskType\":{\"terms\":{\"size\":100,\"field\":\"task.taskType\"},\"aggs\":{\"status\":{\"terms\":{\"field\":\"task.status\"}}}},\"schedule\":{\"terms\":{\"field\":\"task.schedule.interval\"}},\"nonRecurringTasks\":{\"missing\":{\"field\":\"task.schedule\"}},\"ownerIds\":{\"cardinality\":{\"field\":\"task.ownerId\"}},\"idleTasks\":{\"filter\":{\"term\":{\"task.status\":\"idle\"}},\"aggs\":{\"scheduleDensity\":{\"range\":{\"field\":\"task.runAt\",\"ranges\":[{\"from\":\"now\",\"to\":\"now+2m\"}]},\"aggs\":{\"histogram\":{\"date_histogram\":{\"field\":\"task.runAt\",\"fixed_interval\":\"3s\"},\"aggs\":{\"interval\":{\"terms\":{\"field\":\"task.schedule.interval\"}}}}}},\"overdue\":{\"filter\":{\"range\":{\"task.runAt\":{\"lt\":\"now\"}}},\"aggs\":{\"nonRecurring\":{\"missing\":{\"field\":\"task.schedule\"}}}}}}},\"size\":0}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"setting HealthStatus.Warning because assumedAverageRecurringRequiredThroughputPerMinutePerKibana (8.469444444444445) < capacityPerMinutePerKibana (200)"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to degraded"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:50:45.364Z\",\"status\":\"warn\",\"last_update\":\"2021-09-27T16:50:45.362Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"polling\":{\"claim_duration\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"duration\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"claim_conflicts\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"claim_mismatches\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":0,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":0,\"non_recurring\":0}},\"drift\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"drift_by_type\":{},\"load\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"execution\":{\"duration\":{},\"duration_by_persistence\":{\"recurring\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"non_recurring\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null},\"ephemeral\":{\"p50\":null,\"p90\":null,\"p95\":null,\"p99\":null}},\"persistence\":{\"recurring\":0,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"warn\",\"timestamp\":\"2021-09-27T16:50:45.363Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":null,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":null,\"avg_required_throughput_per_minute_per_kibana\":null},\"proposed\":{\"provisioned_kibana\":null,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":null,\"avg_required_throughput_per_minute_per_kibana\":null}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","monitoring"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Imported license information from Elasticsearch:type: basic | status: active | expiry date: Invalid date"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_ml/anomaly_detectors"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"[null] default admin email setting found, sending [kibana_settings] monitoring document."}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/space%3Adefault"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","spaces"],"pid":45398,"message":"Default space already exists"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","spaces","status"],"pid":45398,"message":"available: ready"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=20\n{\"size\":20,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"ingest_manager_settings\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"ingest-package-policies.package.name\":\"endpoint\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"ingest-package-policies\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"ingest-package-policies.updated_at\":{\"order\":\"desc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/privilege/kibana-.kibana"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","security","authorization"],"pid":45398,"message":"Kibana Privileges already registered with Elasticsearch for kibana-.kibana"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_task_manager_7.15.0/_doc/task%3Asession_cleanup"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","security","session"],"pid":45398,"message":"Session index cleanup task is already scheduled."}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /_template/.kibana_security_session_index_template_1"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","security","session","index"],"pid":45398,"message":"Session index template already exists."}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPUT /.apm-agent-configuration/_mapping\n{\"dynamic\":\"strict\",\"dynamic_templates\":[{\"strings\":{\"match_mapping_type\":\"string\",\"mapping\":{\"type\":\"keyword\",\"ignore_above\":1024}}}],\"properties\":{\"@timestamp\":{\"type\":\"date\"},\"service\":{\"properties\":{\"name\":{\"type\":\"keyword\",\"ignore_above\":1024},\"environment\":{\"type\":\"keyword\",\"ignore_above\":1024}}},\"settings\":{\"dynamic\":true,\"properties\":{}},\"applied_by_agent\":{\"type\":\"boolean\"},\"agent_name\":{\"type\":\"keyword\",\"ignore_above\":1024},\"etag\":{\"type\":\"keyword\",\"ignore_above\":1024}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPUT /.apm-custom-link/_mapping\n{\"dynamic\":\"strict\",\"properties\":{\"@timestamp\":{\"type\":\"date\"},\"label\":{\"type\":\"text\",\"fields\":{\"keyword\":{\"type\":\"keyword\"}}},\"url\":{\"type\":\"keyword\"},\"service\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"environment\":{\"type\":\"keyword\"}}},\"transaction\":{\"properties\":{\"name\":{\"type\":\"keyword\"},\"type\":{\"type\":\"keyword\"}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /_template/.kibana-event-log-7.15.0-template"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/license/start_trial]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_ml/data_frame/analytics"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"unknown\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":11.0185546875,\"5m\":8.3330078125,\"15m\":7.95361328125},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":411729920,\"used_in_bytes\":8178204672},\"uptime_in_millis\":124404000},\"response_times\":{\"average\":0,\"max\":0},\"concurrent_connections\":0,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":661295104,\"used_in_bytes\":635633360,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":708620288},\"event_loop_delay\":16.772710993885994,\"uptime_in_millis\":56318.802846},\"requests\":{\"disconnects\":0,\"total\":0},\"timestamp\":\"2021-09-27T16:50:44.718Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"unknown\"},\"xpack\":{\"default_admin_email\":null}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/license/start_basic]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/license/permissions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/index-pattern-management/preview_scripted_field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/index-pattern-management/resolve_index/{query}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/vis/data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/fields]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/_bulk_get]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/scroll/counts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/scroll/export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/relationships/{type}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/kibana/management/saved_objects/_allowed_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/spaces/space_selector]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/spaces/enter]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/space/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/space/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/space]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/space]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/space/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/_copy_saved_objects]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/_resolve_copy_saved_objects_errors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/_update_objects_spaces]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/_get_shareable_references]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/spaces/_disable_legacy_url_aliases]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/spaces/_active_space]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/logout]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/v1/logout]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/me]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/v1/me]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/login]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/access_agreement/acknowledge]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/role/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/role]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/role/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/role/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/esPrivileges/builtin]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/reset_session_page.js]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/_share_saved_object_permissions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/session]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/session]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/security/session/_invalidate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/api_key/_enabled]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/api_key]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/api_key]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/api_key/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/api_key/invalidate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/fields/{query}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}/_disable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}/_enable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/users/{username}/password]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/_check_role_mapping_features]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/role_mapping/{name?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/role_mapping/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/role_mapping/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/login]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/login_state]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/security/access_agreement]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/access_agreement/state]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/security/account]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/security/logged_out]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/logout]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/security/overwritten_session]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/security/capture-url]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/field_histograms/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/{transformId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/{transformId}/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/{transformId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/{transformId}/_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/delete_transforms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/_preview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/start_transforms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/stop_transforms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/es_search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/{transformId}/messages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/transform/transforms/_nodes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/tags/create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/tags/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/tags/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/tags]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/tags/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=10000\n{\"size\":10000,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"ingest-agent-policies\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"ingest-agent-policies.updated_at\":{\"order\":\"desc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"fleet-enrollment-api-keys\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"fleet-enrollment-api-keys.created_at\":{\"order\":\"desc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /.kibana_security_session_1"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","security","session","index"],"pid":45398,"message":"Session index already exists."}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nHEAD /_alias/.kibana-event-log-7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"initializing elasticsearch resources complete"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"readySignal.signal(true)"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"Indexing 1 documents"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"fleet-agents\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk\n{\"create\":{\"_index\":\".kibana-event-log-7.15.0\"}}\n{\"@timestamp\":\"2021-09-27T16:50:39.922Z\",\"event\":{\"provider\":\"eventLog\",\"action\":\"starting\"},\"message\":\"eventLog starting\",\"ecs\":{\"version\":\"1.8.0\"},\"kibana\":{\"server_uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"version\":\"7.15.0\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=10\n{\"size\":10,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"endpoint:user-artifact\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["info","plugins","securitySolution"],"pid":45398,"message":"Dependent plugin setup complete - Starting ManifestTask"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nDELETE /.kibana_task_manager_7.15.0/_doc/task%3Adata_enhanced_search_sessions_monitor?refresh=wait_for"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nDELETE /.kibana_task_manager_7.15.0/_doc/task%3Adata_enhanced_search_sessions_cleanup?refresh=wait_for"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nDELETE /.kibana_task_manager_7.15.0/_doc/task%3Adata_enhanced_search_sessions_expire?refresh=wait_for"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3Aendpoint%3Auser-artifact-packager%3A1.0.0?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"endpoint:user-artifact-packager\",\"scope\":[\"securitySolution\"],\"state\":\"{}\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"schedule\":{\"interval\":\"60s\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:45.690Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:45.690Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:45.690Z\"} [version_conflict_engine_exception]: [task:endpoint:user-artifact-packager:1.0.0]: version conflict, document already exists (current version [692])"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/saved_objects_tagging/assignments/_find_assignable_objects]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/saved_objects_tagging/assignments/update_by_tags]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/saved_objects_tagging/assignments/_assignable_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/saved_objects_tagging/tags/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/saved_objects_tagging/tags/_bulk_delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lens/existing_fields/{indexPatternId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lens/index_stats/{indexPatternId}/field]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lens/stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/ilm_policy_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/deprecations/migrate_ilm_policy]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/diagnose/browser]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/diagnose/screenshot]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/generate/{exportType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/generate/{p*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/v1/generate/immediate/csv_searchsource]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/generate/visualization/{savedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/generate/search/{savedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/generate/dashboard/{savedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/jobs/list]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/jobs/count]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/jobs/info/{docId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/jobs/download/{docId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/reporting/jobs/delete/{docId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/custom-element/find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/custom-element/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/custom-element]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/custom-element/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/custom-element/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/es_fields]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/public/canvas/kbn_canvas.js]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/public/canvas/zip]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad/find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad-structures/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad-assets/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/workpad/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/canvas/fns]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items/_export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items/_import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/items/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/lists/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/_export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/items/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list/items]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint_list/items/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/exception_lists/summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/{names}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/simulate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ingest_pipelines/documents/{index}/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/file_upload/has_import_permission]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/file_data_visualizer/analyze_file]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/file_upload/import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/file_upload/index_exists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/file_upload/time_field_range]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"201\nPUT /.kibana_task_manager_7.15.0/_create/task%3Adata_enhanced_search_sessions_monitor?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"search_sessions_monitor\",\"state\":\"{}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:45.692Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:45.692Z\"}"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/files/file]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"data_enhanced_search_sessions_monitor scheduled to run"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/raster/tile]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/catalogue]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/files/{emsVersion}/manifest]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/{emsVersion}/manifest]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/raster/style]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/vector/style]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/vector/source]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/vector/tile]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/fonts/{fontstack}/{range}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/ems/tiles/sprites/{id}/sprite{scaling?}.{extension}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/fonts/{fontstack}/{range}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/indexSettings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/mvt/getTile/{z}/{x}/{y}.pbf]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/mvt/getGridTile/{z}/{x}/{y}.pbf]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/docSource]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/feature]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/feature/{featureId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/getMatchingIndexes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/maps/checkIsDrawingIndex]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/data_visualizer/get_field_histograms/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/data_visualizer/get_field_stats/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/data_visualizer/get_overall_stats/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/encrypted_saved_objects/_rotate_key]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/{id}/cancel]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/session/{id}/_extend]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repository_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories/{name}/verify]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories/{name}/cleanup]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/repositories/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/snapshots]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/snapshots/{repository}/{snapshot}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/snapshots/bulk_delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/restores]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/restore/{repository}/{snapshot}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policy/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policy/{name}/run]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/retention_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/retention_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/snapshot_restore/policies/retention]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/check-permissions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/service-tokens]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/setup]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/setup]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/setup]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/{agentPolicyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/{agentPolicyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/{agentPolicyId}/copy]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/{agentPolicyId}/full]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent_policies/{agentPolicyId}/download]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies/{packagePolicyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies/{packagePolicyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/package_policies/upgrade]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/outputs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/outputs/{outputId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/outputs/{outputId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/data_streams]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/categories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/limited]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/{pkgName}/stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/{pkgName}/{pkgVersion}/{filePath*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/{pkgkey}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/{pkgkey}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"201\nPUT /.kibana_task_manager_7.15.0/_create/task%3Adata_enhanced_search_sessions_cleanup?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"search_sessions_cleanup\",\"state\":\"{}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"60s\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:45.697Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:45.697Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:45.697Z\"}"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/_bulk]"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"data_enhanced_search_sessions_cleanup scheduled to run"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"201\nPUT /.kibana_task_manager_7.15.0/_create/task%3Adata_enhanced_search_sessions_expire?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"search_sessions_expire\",\"state\":\"{}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"3600s\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:45.698Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:45.698Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:45.698Z\"}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"data_enhanced_search_sessions_expire scheduled to run"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/epm/packages/{pkgkey}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/setup/preconfiguration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}/actions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}/unenroll]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}/reassign]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agent-status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/{agentId}/upgrade]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/bulk_upgrade]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/bulk_reassign]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/agents/bulk_unenroll]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/enrollment-api-keys/{keyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/enrollment-api-keys/{keyId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/enrollment-api-keys]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/fleet/enrollment-api-keys]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/data_streams/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/data_streams]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/delete_data_streams]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/clear_cache]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/close]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/flush]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/forcemerge]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/open]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/refresh]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/reload]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/freeze]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/indices/unfreeze]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/index_templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/index_templates/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/delete_index_templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/index_templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/index_templates/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/index_templates/simulate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/settings/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/settings/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/stats/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/mapping/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates/{names}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_management/component_templates/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/index_pattern_validity/{indexPattern}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/start]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/stop]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/rollup/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/remote_clusters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/remote_clusters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/remote_clusters/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/remote_clusters/{nameOrNames}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns/{id}/pause]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns/{id}/resume]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/auto_follow_patterns/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices/{id}/pause]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices/{id}/resume]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices/{id}/unfollow]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/follower_indices/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/permissions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cross_cluster_replication/stats/auto_follow]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/index/retry]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/index/remove]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/index/add]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/nodes/list]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/nodes/{nodeAttrs}/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/policies/{policyNames}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/templates]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/template]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/snapshot_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/index_lifecycle_management/snapshot_repositories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/event_log/{type}/{id}/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/event_log/{type}/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/action]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/action/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/action/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/action/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/list_action_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/action/{id}/_execute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connectors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/actions/connector/{id}/_execute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/_aggregate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/state]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_instance_summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/list_alert_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_enable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_disable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_update_api_key]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_mute_all]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{id}/_unmute_all]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{alert_id}/alert_instance/{alert_instance_id}/_mute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/alert/{alertId}/alert_instance/{alertInstanceId}/_unmute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerts/_health]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/alerting/rules/_aggregate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}/_disable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}/_enable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rules/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/alerting/rule/{id}/_alert_summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/alerting/rule/{id}/state]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/_health]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}/_mute_all]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{rule_id}/alert/{alert_id}/_mute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{id}/_unmute_all]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/alerting/rule/{rule_id}/alert/{alert_id}/_unmute]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/alerting/rule/{id}/_update_api_key]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/triggers_actions_ui/data/_time_series_query]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/triggers_actions_ui/data/_fields]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/triggers_actions_ui/data/_indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/triggers_actions_ui/_health]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/rac/alerts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/rac/alerts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/rac/alerts/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/rac/alerts/bulk_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/rac/alerts/find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/action]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/scheduled_query_group]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/scheduled_query_group/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/agents/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/agent_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/agent_policies/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/agent-status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/package_policies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/fleet_wrapper/agents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/privileges_check]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/saved_query]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/saved_query]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/saved_query]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/saved_query/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/internal/osquery/saved_query/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/annotations]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/annotations/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/annotations/delete/{annotationId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/calendars]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/calendars/{calendarIds}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/calendars]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/calendars/{calendarId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/calendars/{calendarId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}/_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}/_start]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}/_stop]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/datafeeds/{datafeedId}/_preview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/_evaluate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/_explain]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}/_start]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}/_stop]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}/_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/{analyticsId}/messages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/jobs_exist]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/map/{analyticsId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/new_job_caps/{indexPattern}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_frame/analytics/validate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/modules/recognize/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/modules/get_module/{moduleId?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/modules/setup/{moduleId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/modules/jobs_exist/{moduleId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/data_visualizer/get_field_histograms/{indexPatternTitle}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/fields_service/field_cardinality]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/fields_service/time_field_range]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters/{filterId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters/{filterId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters/{filterId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/filters/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:43+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/indices/field_caps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/job_audit_messages/messages/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/job_audit_messages/messages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/job_audit_messages/clear_messages]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_open]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_close]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_reset]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/_validate/detector]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/_forecast]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/results/records]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/results/buckets/{timestamp?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/results/overall_buckets]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/results/categories/{categoryId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/model_snapshots]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/model_snapshots/{snapshotId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/model_snapshots/{snapshotId}/_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/anomaly_detectors/{jobId}/model_snapshots/{snapshotId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/force_start_datafeeds]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/stop_datafeeds]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/delete_jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/close_jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/reset_jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/force_stop_and_close_job]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/jobs_summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/jobs_with_time_range]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/job_for_cloning]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/groups]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/update_groups]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/blocking_jobs_tasks]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/jobs_exist]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/new_job_caps/{indexPattern}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/new_job_line_chart]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/new_job_population_chart]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/all_jobs_and_group_ids]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/look_back_progress]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/categorization_field_examples]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/top_categories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/datafeed_preview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/revert_model_snapshot]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/jobs/bulk_create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/anomalies_table_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/category_definition]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/max_anomaly_score]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/category_examples]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/partition_fields_values]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/anomaly_search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/{jobId}/categorizer_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/category_stopped_partitions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/results/datafeed_results_chart]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/validate/estimate_bucket_span]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/validate/calculate_model_memory_limit]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/validate/cardinality]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/validate/job]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/sync]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/initialize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/update_jobs_spaces]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/remove_job_from_current_space]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/jobs_spaces]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/saved_objects/can_delete_job/{jobType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/_has_privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/ml_capabilities]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/ml_node_count]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/info]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/es_search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/index_exists]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/trained_models/{modelId?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/trained_models/{modelId}/_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/trained_models/{modelId}/pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/trained_models/{modelId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/ml/alerting/preview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/connector/{connector_id}/_push]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/user_actions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments/{comment_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments/{comment_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/comments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/configure/connectors/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/configure]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/configure/{configuration_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/configure]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/reporters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/tags]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/alerts/{alert_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/cases/{case_id}/alerts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/example]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_find]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/prepackaged]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/prepackaged/_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_update]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_bulk_action]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_import]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_export]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_draft]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_draft]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_favorite]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/timeline/_prepackaged]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/note]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/pinned_event]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/rules/_find_statuses]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/migration_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/migration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/finalize_migration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/signals/migration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/index]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/tags]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/detection_engine/privileges]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/metadata]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/metadata/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/resolver/tree]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/resolver/events]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/resolver/entity]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/policy_response]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/policy/summaries]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/trusted_apps/summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/isolate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/unisolate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/action_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/endpoint/action_log/{agent_id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/observability/annotation]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/observability/annotation/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/observability/annotation/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/observability/rules/alerts/dynamic_index_pattern]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/certs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/filters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/pings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/index_pattern]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/index_status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/dynamic_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/dynamic_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/monitor/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/monitor/locations]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/monitor/list]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/monitor/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/snapshot/count]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/log_page_view]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/ping/histogram]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/monitor/duration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/journey/{checkGroup}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/journey/screenshot/{checkGroup}/{stepIndex}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/network_events]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/journeys/failed_steps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/synthetics/step/success/]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/uptime/journey/screenshot/block]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/ip_to_host]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_categories]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_category_datasets]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/latest_log_entry_category_datasets_stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_category_examples]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_anomalies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_anomalies_datasets]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/infra_ml/results/metrics_k8s_anomalies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/infra_ml/results/metrics_hosts_anomalies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/snapshot]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/node_details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/source/{sourceId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/source/{sourceId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/source/{sourceId}/hasData]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/validation/log_entry_datasets]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/validation/log_entry_rate_indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_analysis/results/log_entry_examples]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/log_entries/highlights]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/log_entries/summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/log_entries/summary_highlights]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/metrics_explorer]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/metrics_api]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/metadata]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/inventory/meta]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_source_configurations/{sourceId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_source_configurations/{sourceId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_source_configurations/{sourceId}/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/infra/log_alerts/chart_preview_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/process_list]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/process_list/chart]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/metrics/overview/top]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/es_deprecations]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/deprecation_logging]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/deprecation_logging]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/reindex/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/reindex/batch/queue]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/reindex/batch]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/reindex/{indexName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/reindex/{indexName}/cancel]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/stats/ui_open]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/stats/ui_reindex]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/{indexName}/index_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/ml_snapshots]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/ml_snapshots/{jobId}/{snapshotId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/ml_snapshots/{jobId}/{snapshotId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/upgrade_assistant/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/check_access]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/beats/beat/{beatUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/beats/beats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/beats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/indices/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/nodes/{nodeUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/nodes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/ml_jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/ccr]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/elasticsearch/ccr/{index}/shard/{shardId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/elasticsearch_settings/check/internal_monitoring]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/elasticsearch_settings/check/cluster]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/elasticsearch_settings/check/nodes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/elasticsearch_settings/set/collection_enabled]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/elasticsearch_settings/set/collection_interval]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/kibana/{kibanaUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/kibana/instances]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/kibana]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/apm/{apmUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/apm/instances]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/apm]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/node/{logstashUuid}/pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/node/{logstashUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/nodes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/pipeline/{pipelineId}/{pipelineHash?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/clusters/{clusterUuid}/logstash/pipeline_ids]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/alerts/enable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/alert/{clusterUuid}/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/setup/collection/cluster/{clusterUuid?}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/setup/collection/node/{nodeUuid}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/monitoring/v1/setup/collection/{clusterUuid}/disable_internal_collection]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/cluster]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/pipeline/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/pipeline/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/pipeline/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/pipelines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/logstash/pipelines/delete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/enterprise_search/config_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/overview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/credentials]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/credentials]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/credentials/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/credentials/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/credentials/{name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/log_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/log_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/analytics/queries]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/analytics/queries/{query}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/documents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/documents/{documentId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/documents/{documentId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/schema]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/schema]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/reindex_job/{reindexJobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/search-ui/api/as/v1/engines/{engineName}/search.json]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/source_engines]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/source_engines/bulk_create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/source_engines/{source_engine_name}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations/{curationId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations/{curationId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations/{curationId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/curations/find_or_create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/synonyms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/synonyms]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/synonyms/{synonymId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/synonyms/{synonymId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/search_settings/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/search_settings/reset]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/search_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/role_mappings/enable_role_based_access]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/role_mappings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/role_mappings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/role_mappings/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/role_mappings/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/single_user_role_mapping]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/search_ui/field_config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/result_settings/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/result_settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/api_logs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/onboarding_complete]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_requests]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_requests]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_requests/cancel]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/domains]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/domains/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/domains/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/domains/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/crawler/validate_url]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/process_crawls]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_schedule]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_schedule]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{name}/crawler/crawl_schedule]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/entry_points]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/entry_points/{entryPointId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/entry_points/{entryPointId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/crawl_rules]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/crawl_rules/{crawlRuleId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/crawl_rules/{crawlRuleId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/sitemaps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/sitemaps/{sitemapId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/app_search/engines/{engineName}/crawler/domains/{domainId}/sitemaps/{sitemapId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/overview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/oauth/authorize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/oauth/authorize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/oauth/authorize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}/group_users]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}/share]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/groups/{id}/boosts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/role_mappings/enable_role_based_access]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/role_mappings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/role_mappings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/role_mappings/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/role_mappings/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/single_user_role_mapping]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/create_source]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/documents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/federated_summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/reauth_prepare]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/pre_sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{serviceType}/prepare]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/searchable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/display_settings/config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/display_settings/config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/schemas]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{id}/schemas]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{sourceId}/reindex_job/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/account/sources/{sourceId}/download_diagnostics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/create_source]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/documents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/federated_summary]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/reauth_prepare]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/pre_sources/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{serviceType}/prepare]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/searchable]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/display_settings/config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/display_settings/config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/schemas]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{id}/schemas]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{sourceId}/reindex_job/{jobId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/sources/{sourceId}/download_diagnostics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors/{serviceType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors/{serviceType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors/{serviceType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/connectors/{serviceType}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/sources/create]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/customize]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/upload_images]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/settings/oauth_application]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/security]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/security/source_restrictions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/workplace_search/org/security/source_restrictions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/enterprise_search/stats]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/console/es_config]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/console/proxy]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/console/api_server]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/console/api_server]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/index_pattern/static]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/index_pattern/dynamic]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/index_pattern/title]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/environments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/errors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/errors/{groupId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/errors/distribution]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/metrics/charts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/observability_overview]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/observability_overview/has_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum/client-metrics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/page-load-distribution]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/page-load-distribution/breakdown]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/page-view-trends]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/services]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/visitor-breakdown]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/web-core-vitals]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/long-task-metrics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/url-search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/rum-client/js-errors]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/observability_overview/has_rum_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/service-map]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/service-map/service/{serviceName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/service-map/backend/{backendName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/serviceNodes]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/detailed_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/metadata/details]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/metadata/icons]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/agent]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transaction_types]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/node/{serviceNodeName}/metadata]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/annotation/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/annotation]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/error_groups/main_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/error_groups/detailed_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/service_overview_instances/details/{serviceNodeName}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/throughput]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/service_overview_instances/main_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/service_overview_instances/detailed_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/dependencies]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/dependencies/breakdown]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/profiling/timeline]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/profiling/statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/alerts]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/infrastructure]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/traces/{traceId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/traces]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/traces/{traceId}/root_transaction]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/transactions/{transactionId}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transactions/groups/main_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transactions/groups/detailed_statistics]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transactions/charts/latency]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transactions/traces/samples]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transaction/charts/breakdown]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/services/{serviceName}/transactions/charts/error_rate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/alerts/chart_preview/transaction_error_rate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/alerts/chart_preview/transaction_duration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/alerts/chart_preview/transaction_error_count]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/correlations/latency/overall_distribution]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/correlations/latency/slow_transactions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/correlations/errors/overall_timeseries]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/correlations/errors/failed_transactions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration/view]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration/search]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration/services]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration/environments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/agent-configuration/agent_name]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/anomaly-detection/jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/anomaly-detection/jobs]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/anomaly-detection/environments]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/apm-index-settings]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/apm-indices]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/apm-indices/save]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/custom_links/transaction]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/custom_links]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/custom_links]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/custom_links/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/settings/custom_links/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/sourcemaps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/sourcemaps]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/sourcemaps/{id}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/has_data]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/agents]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/apm_server_schema]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/apm_server_schema/unsupported]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/migration_check]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fleet/cloud_apm_package_policy]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/top_backends]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/{backendName}/upstream_services]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/{backendName}/metadata]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/{backendName}/charts/latency]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/{backendName}/charts/throughput]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/backends/{backendName}/charts/error_rate]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/api/apm/fallback_to_transactions]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/core]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/kbn-ui-shared-deps/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/core/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/advancedSettings/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/apmOss/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/bfetch/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/charts/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/console/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/dashboard/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/data/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/devTools/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/discover/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/embeddable/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/esUiShared/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionError/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionImage/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionMetric/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionRepeatImage/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionRevealImage/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressionShape/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/expressions/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/fieldFormats/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/home/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/indexPatternEditor/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/indexPatternFieldEditor/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/indexPatternManagement/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/inputControlVis/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/inspector/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/kibanaLegacy/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/kibanaOverview/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/kibanaReact/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/kibanaUtils/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/management/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/mapsEms/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/mapsLegacy/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/navigation/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/newsfeed/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/presentationUtil/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/regionMap/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/savedObjects/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/savedObjectsManagement/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/savedObjectsTaggingOss/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/screenshotMode/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/securityOss/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/share/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/spacesOss/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/telemetry/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/telemetryManagementSection/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/tileMap/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/timelion/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/uiActions/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/urlForwarding/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/usageCollection/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visDefaultEditor/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeMarkdown/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeMetric/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypePie/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeTable/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeTagcloud/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeTimelion/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeTimeseries/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeVega/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeVislib/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visTypeXy/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visualizations/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/visualize/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/alerting/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/apm/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/banners/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/canvas/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/cases/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/cloud/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/crossClusterReplication/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/dashboardEnhanced/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/dashboardMode/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/dataEnhanced/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/dataVisualizer/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/discoverEnhanced/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/urlDrilldown/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/embeddableEnhanced/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/enterpriseSearch/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/features/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/fileUpload/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/fleet/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/globalSearch/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/globalSearchBar/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/globalSearchProviders/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/graph/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/grokdebugger/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/indexLifecycleManagement/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/indexManagement/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/infra/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/ingestPipelines/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/lens/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/licenseManagement/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/licensing/0.0.1/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/lists/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/logstash/0.0.1/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/maps/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/ml/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/monitoring/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/observability/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/osquery/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/painlessLab/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/remoteClusters/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/reporting/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/rollup/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/runtimeFields/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/savedObjectsTagging/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/searchprofiler/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/security/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/securitySolution/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/snapshotRestore/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/spaces/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/stackAlerts/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/timelines/1.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/transform/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/triggersActionsUi/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/uiActionsEnhanced/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/upgradeAssistant/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/uptime/8.0.0/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/44040/bundles/plugin/watcher/kibana/{path*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/app/{id}/{any*}]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","http","server","Kibana"],"pid":45398,"message":"registering route handler for [/status]"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","plugins","eventLog"],"pid":45398,"message":"initializing elasticsearch resources starting"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status core.status.derivedStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Task poller now using interval of 3000ms"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Task poller now delaying emission by 0ms"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["info","http","server","Kibana"],"pid":45398,"message":"http server running at http://localhost:5601"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=1\n{\"size\":1,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"timelion-sheet\"}}],\"should\":[{\"bool\":{\"must_not\":[{\"exists\":{\"field\":\"namespace\"}}]}}],\"minimum_should_match\":1,\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:44+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":56,"memory":{"heap":{"usedInBytes":635633360}},"eventLoopDelay":16.772710993885994},"host":{"os":{"load":{"1m":11.0185546875,"5m":8.3330078125,"15m":7.95361328125}}},"message":"memory: 606.2MB uptime: 0:00:56 load: [11.02,8.33,7.95] delay: 16.773"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=1\n{\"size\":1,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"canvas-workpad-template\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=0\n{\"size\":0,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"ml-job\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=20\n{\"size\":20,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"upgrade-assistant-reindex-operation\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}],\"must\":[{\"simple_query_string\":{\"query\":\"0\",\"fields\":[\"upgrade-assistant-reindex-operation.status\"],\"default_operator\":\"OR\"}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3ALens-lens_telemetry?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"lens_telemetry\",\"state\":\"{\\\"byDate\\\":{},\\\"suggestionsByDate\\\":{},\\\"saved\\\":{},\\\"runs\\\":0}\",\"params\":\"{}\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:39.988Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:39.988Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:39.988Z\"} [version_conflict_engine_exception]: [task:Lens-lens_telemetry]: version conflict, document already exists (current version [11])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3AActions-actions_telemetry?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"actions_telemetry\",\"state\":\"{}\",\"params\":\"{}\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:39.998Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:39.998Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:39.998Z\"} [version_conflict_engine_exception]: [task:Actions-actions_telemetry]: version conflict, document already exists (current version [11])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3AActions-cleanup_failed_action_executions?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"cleanup_failed_action_executions\",\"state\":\"{\\\"runs\\\":0,\\\"total_cleaned_up\\\":0}\",\"params\":\"{}\",\"schedule\":{\"interval\":\"5m\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:39.999Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:39.999Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:39.999Z\"} [version_conflict_engine_exception]: [task:Actions-cleanup_failed_action_executions]: version conflict, document already exists (current version [22])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3AAlerting-alerting_telemetry?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"alerting_telemetry\",\"state\":\"{}\",\"params\":\"{}\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.001Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.001Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.001Z\"} [version_conflict_engine_exception]: [task:Alerting-alerting_telemetry]: version conflict, document already exists (current version [11])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_task_manager_7.15.0/_doc/task%3AAlerting-alerting_health_check"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3Asecurity%3Aendpoint-diagnostics%3A1.0.0?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"security:endpoint-diagnostics\",\"scope\":[\"securitySolution\"],\"state\":\"{\\\"runs\\\":0}\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"schedule\":{\"interval\":\"5m\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.113Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.113Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.113Z\"} [version_conflict_engine_exception]: [task:security:endpoint-diagnostics:1.0.0]: version conflict, document already exists (current version [151])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3Asecurity%3Aendpoint-meta-telemetry%3A1.0.0?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"security:endpoint-meta-telemetry\",\"scope\":[\"securitySolution\"],\"state\":\"{\\\"runs\\\":0}\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"schedule\":{\"interval\":\"24h\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.114Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.114Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.114Z\"} [version_conflict_engine_exception]: [task:security:endpoint-meta-telemetry:1.0.0]: version conflict, document already exists (current version [13])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"409\nPUT /.kibana_task_manager_7.15.0/_create/task%3Asecurity%3Atelemetry-lists%3A1.0.0?refresh=false&require_alias=true\n{\"task\":{\"taskType\":\"security:telemetry-lists\",\"scope\":[\"securitySolution\"],\"state\":\"{\\\"runs\\\":0}\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"schedule\":{\"interval\":\"24h\"},\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"attempts\":0,\"scheduledAt\":\"2021-09-27T16:50:40.116Z\",\"startedAt\":null,\"retryAt\":null,\"runAt\":\"2021-09-27T16:50:40.116Z\",\"status\":\"idle\"},\"type\":\"task\",\"references\":[],\"migrationVersion\":{\"task\":\"7.6.0\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:50:40.116Z\"} [version_conflict_engine_exception]: [task:security:telemetry-lists:1.0.0]: version conflict, document already exists (current version [13])"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Imported license information from Elasticsearch:type: basic | status: active | expiry date: Invalid date"}
{"type":"log","@timestamp":"2021-09-27T18:50:45+02:00","tags":["debug","logging"],"pid":45398,"message":"Updating logging config for context [plugins.security]"}
{"type":"log","@timestamp":"2021-09-27T18:50:46+02:00","tags":["debug","status"],"pid":45398,"kibana":{"status":{"level":"degraded","summary":"[42] services are degraded","detail":"See the status page for more information","meta":{"affectedServices":["actions","alerting","apm","canvas","cases","cloud","crossClusterReplication","dashboardMode","dataEnhanced","dataVisualizer","encryptedSavedObjects","enterpriseSearch","fileUpload","fleet","globalSearchBar","indexLifecycleManagement","indexManagement","infra","ingestPipelines","lens","lists","logstash","maps","ml","monitoring","observability","osquery","remoteClusters","reporting","rollup","ruleRegistry","savedObjectsTagging","security","securitySolution","snapshotRestore","stackAlerts","taskManager","timelines","transform","triggersActionsUi","upgradeAssistant","uptime"]}}},"message":"Recalculated overall status"}
{"type":"log","@timestamp":"2021-09-27T18:50:46+02:00","tags":["info","status"],"pid":45398,"message":"Kibana is now degraded"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Browser archive exists in /usr/local/Cellar/kibana-full/7.15.0/libexec/.chromium/chromium-d163fd7-darwin_x64.zip"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Browser archive exists in /usr/local/Cellar/kibana-full/7.15.0/libexec/.chromium/chromium-d163fd7-linux_x64.zip"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Browser archive exists in /usr/local/Cellar/kibana-full/7.15.0/libexec/.chromium/chromium-d163fd7-linux_arm64.zip"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","reporting"],"pid":45398,"message":"Browser archive exists in /usr/local/Cellar/kibana-full/7.15.0/libexec/.chromium/chrome-win.zip"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["warning","environment"],"pid":45398,"message":"Detected an unhandled Promise rejection.\nError: Cannot delete files/directories outside the current working directory. Can be overridden with the `force` option."}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:17.700Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"term\":{\"task.ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\"}},{\"term\":{\"task.status\":\"claiming\"}},{\"bool\":{\"should\":[{\"term\":{\"task.taskType\":\"session_cleanup\"}},{\"term\":{\"task.taskType\":\"lens_telemetry\"}},{\"term\":{\"task.taskType\":\"reports:monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_cleanup\"}},{\"term\":{\"task.taskType\":\"search_sessions_expire\"}},{\"term\":{\"task.taskType\":\"actions:.email\"}},{\"term\":{\"task.taskType\":\"actions:.index\"}},{\"term\":{\"task.taskType\":\"actions:.pagerduty\"}},{\"term\":{\"task.taskType\":\"actions:.swimlane\"}},{\"term\":{\"task.taskType\":\"actions:.server-log\"}},{\"term\":{\"task.taskType\":\"actions:.slack\"}},{\"term\":{\"task.taskType\":\"actions:.webhook\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow-sir\"}},{\"term\":{\"task.taskType\":\"actions:.jira\"}},{\"term\":{\"task.taskType\":\"actions:.resilient\"}},{\"term\":{\"task.taskType\":\"actions:.teams\"}},{\"term\":{\"task.taskType\":\"actions_telemetry\"}},{\"term\":{\"task.taskType\":\"cleanup_failed_action_executions\"}},{\"term\":{\"task.taskType\":\"alerting_telemetry\"}},{\"term\":{\"task.taskType\":\"alerts_invalidate_api_keys\"}},{\"term\":{\"task.taskType\":\"alerting_health_check\"}},{\"term\":{\"task.taskType\":\"alerting:.index-threshold\"}},{\"term\":{\"task.taskType\":\"alerting:.geo-containment\"}},{\"term\":{\"task.taskType\":\"alerting:.es-query\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_alert\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_jobs_health\"}},{\"term\":{\"task.taskType\":\"alerting:siem.signals\"}},{\"term\":{\"task.taskType\":\"alerting:siem.notifications\"}},{\"term\":{\"task.taskType\":\"endpoint:user-artifact-packager\"}},{\"term\":{\"task.taskType\":\"security:endpoint-diagnostics\"}},{\"term\":{\"task.taskType\":\"security:endpoint-meta-telemetry\"}},{\"term\":{\"task.taskType\":\"security:telemetry-lists\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.monitorStatus\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tlsCertificate\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.durationAnomaly\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tls\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:logs.alert.document.count\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.inventory.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cluster_health\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_license_expiration\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cpu_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_missing_monitoring_data\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_disk_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_search_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_write_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_jvm_memory_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_nodes_changed\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_logstash_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_kibana_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_elasticsearch_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_ccr_read_exceptions\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_shard_size\"}},{\"term\":{\"task.taskType\":\"apm-telemetry-task\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration_anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:apm.error_rate\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_error_rate\"}}]}}]}}]}},\"size\":10,\"seq_no_primary_term\":true,\"sort\":{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:17.700Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:endpoint:user-artifact-packager:1.0.0\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"60s\"},\"taskType\":\"endpoint:user-artifact-packager\",\"retryAt\":\"2021-09-27T16:51:47.829Z\",\"runAt\":\"2021-09-27T16:48:40.249Z\",\"scope\":[\"securitySolution\"],\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"state\":\"{}\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-02-15T20:25:54.997Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n{\"update\":{\"_id\":\"task:Alerts-alerts_invalidate_api_keys\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"5m\"},\"taskType\":\"alerts_invalidate_api_keys\",\"retryAt\":\"2021-09-27T16:55:47.829Z\",\"runAt\":\"2021-09-27T16:50:27.300Z\",\"traceparent\":\"00-caacb908c14cdcc2b717923cb399f5cb-c927846659446801-01\",\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"state\":\"{\\\"runs\\\":48,\\\"total_invalidated\\\":0}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-26T06:55:07.105Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n{\"update\":{\"_id\":\"task:security:endpoint-diagnostics:1.0.0\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"retryAt\":\"2021-09-27T16:55:47.829Z\",\"runAt\":\"2021-09-27T16:50:27.300Z\",\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"schedule\":{\"interval\":\"5m\"},\"taskType\":\"security:endpoint-diagnostics\",\"scope\":[\"securitySolution\"],\"traceparent\":\"00-caacb908c14cdcc2b717923cb399f5cb-c927846659446801-01\",\"state\":\"{\\\"lastExecutionTimestamp\\\":\\\"2021-09-27T16:45:27.428Z\\\",\\\"lastDiagAlertCount\\\":0,\\\"runs\\\":48}\",\"scheduledAt\":\"2021-09-26T06:55:07.101Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"10s\"},\"taskType\":\"search_sessions_monitor\",\"retryAt\":\"2021-09-27T16:55:47.829Z\",\"runAt\":\"2021-09-27T16:50:45.692Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_cleanup\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"60s\"},\"taskType\":\"search_sessions_cleanup\",\"retryAt\":\"2021-09-27T16:55:47.829Z\",\"runAt\":\"2021-09-27T16:50:45.697Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.697Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_expire\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"3600s\"},\"taskType\":\"search_sessions_expire\",\"retryAt\":\"2021-09-27T17:50:47.829Z\",\"runAt\":\"2021-09-27T16:50:45.698Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:50:47.829Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.698Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:50:47.911Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task endpoint:user-artifact-packager \"endpoint:user-artifact-packager:1.0.0\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task alerts_invalidate_api_keys \"Alerts-alerts_invalidate_api_keys\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task security:endpoint-diagnostics \"security:endpoint-diagnostics:1.0.0\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_monitor \"data_enhanced_search_sessions_monitor\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_cleanup \"data_enhanced_search_sessions_cleanup\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_expire \"data_enhanced_search_sessions_expire\""}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","securitySolution","telemetry_events"],"pid":45398,"message":"Running task security:endpoint-diagnostics:1.0.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_monitor Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_cleanup Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:50:47+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_expire Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"404\nGET /.kibana_7.15.0/_doc/endpoint%3Auser-artifact-manifest%3Aendpoint-manifest-v1"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","plugins","securitySolution","endpoint:user-artifact-packager:1","0","0"],"pid":45398,"message":"Last computed manifest not available yet"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/telemetry%3Atelemetry"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"in_progress\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"false\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"range\":{\"api_key_pending_invalidation.createdAt\":{\"lte\":\"2021-09-27T15:50:47.988Z\"}}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"api_key_pending_invalidation\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"api_key_pending_invalidation.createdAt\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","plugins","alerting"],"pid":45398,"message":"Total invalidated API keys \"0\""}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"complete\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.logs-endpoint.diagnostic.collection-*/_search?expand_wildcards=open%2Chidden&ignore_unavailable=true&size=100\n{\"query\":{\"range\":{\"event.ingested\":{\"gte\":\"2021-09-27T16:45:27.428Z\",\"lt\":\"2021-09-27T16:50:47.968Z\"}}},\"sort\":[{\"event.ingested\":{\"order\":\"desc\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","plugins","securitySolution","telemetry_events"],"pid":45398,"message":"no diagnostic alerts retrieved"}
{"type":"log","@timestamp":"2021-09-27T18:50:48+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:endpoint:user-artifact-packager:1.0.0\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:48.001Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"60s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"endpoint:user-artifact-packager\",\"scope\":[\"securitySolution\"],\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"scheduledAt\":\"2021-02-15T20:25:54.997Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:50:57.829Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_monitor\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_cleanup\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:47.829Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"60s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_cleanup\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.697Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n{\"update\":{\"_id\":\"task:Alerts-alerts_invalidate_api_keys\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:55:47.829Z\",\"state\":\"{\\\"runs\\\":49,\\\"total_invalidated\\\":0}\",\"schedule\":{\"interval\":\"5m\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"alerts_invalidate_api_keys\",\"traceparent\":\"00-caacb908c14cdcc2b717923cb399f5cb-c927846659446801-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-26T06:55:07.105Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_expire\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T17:50:47.829Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"3600s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_expire\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.698Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n{\"update\":{\"_id\":\"task:security:endpoint-diagnostics:1.0.0\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:55:47.829Z\",\"state\":\"{\\\"lastExecutionTimestamp\\\":\\\"2021-09-27T16:50:47.968Z\\\",\\\"lastDiagAlertCount\\\":0,\\\"runs\\\":49}\",\"schedule\":{\"interval\":\"5m\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"params\":\"{\\\"version\\\":\\\"1.0.0\\\"}\",\"taskType\":\"security:endpoint-diagnostics\",\"scope\":[\"securitySolution\"],\"traceparent\":\"00-caacb908c14cdcc2b717923cb399f5cb-c927846659446801-01\",\"scheduledAt\":\"2021-09-26T06:55:07.101Z\"},\"updated_at\":\"2021-09-27T16:50:48.061Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:50:49+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":61,"memory":{"heap":{"usedInBytes":317644064}},"eventLoopDelay":1.170072004199028},"host":{"os":{"load":{"1m":10.4560546875,"5m":8.2607421875,"15m":7.93017578125}}},"message":"memory: 302.9MB uptime: 0:01:01 load: [10.46,8.26,7.93] delay: 1.170"}
{"type":"log","@timestamp":"2021-09-27T18:50:49+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:50+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:20.716Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:50:50+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:50:50+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:50:50.729Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:50:50.727Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:50:50.727Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:50:47.993Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":11,\"p90\":124,\"p95\":124,\"p99\":124},\"duration\":{\"p50\":292,\"p90\":292,\"p95\":292,\"p99\":292},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":11471,\"p90\":117012.00000000004,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2275,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":60,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":41,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":42.5,\"p90\":45.900000000000006,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:50:50.729Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:50+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:20.716Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:50:51+02:00","tags":["debug","status"],"pid":45398,"kibana":{"status":{"level":"available","summary":"All services are available"}},"message":"Recalculated overall status"}
{"type":"log","@timestamp":"2021-09-27T18:50:51+02:00","tags":["info","status"],"pid":45398,"message":"Kibana is now available (was degraded)"}
{"type":"log","@timestamp":"2021-09-27T18:50:52+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:53+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:23.749Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:50:53+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:23.749Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:50:54+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":66,"memory":{"heap":{"usedInBytes":324797216}},"eventLoopDelay":0.4170059859752655},"host":{"os":{"load":{"1m":9.85888671875,"5m":8.17333984375,"15m":7.90087890625}}},"message":"memory: 309.8MB uptime: 0:01:06 load: [9.86,8.17,7.90] delay: 0.417"}
{"type":"log","@timestamp":"2021-09-27T18:50:54+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:55+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:50:55+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
{"type":"log","@timestamp":"2021-09-27T18:50:55+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:50:55+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":9.85888671875,\"5m\":8.17333984375,\"15m\":7.90087890625},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":41222144,\"used_in_bytes\":8548712448},\"uptime_in_millis\":124414000},\"response_times\":{\"average\":0,\"max\":0},\"concurrent_connections\":0,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":629157888,\"used_in_bytes\":324797216,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":680136704},\"event_loop_delay\":0.4170059859752655,\"uptime_in_millis\":66329.807787},\"requests\":{\"disconnects\":0,\"total\":0},\"timestamp\":\"2021-09-27T16:50:54.729Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:50:55+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:50:56+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:26.768Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:50:56+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:50:56+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:50:56.775Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:50:56.775Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:50:56.775Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:50:53.827Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":7,\"p90\":113.39999999999999,\"p95\":124,\"p99\":124},\"duration\":{\"p50\":79,\"p90\":292,\"p95\":292,\"p99\":292},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":11471,\"p90\":117012.00000000004,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2275,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":60,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":41,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":42.5,\"p90\":45.900000000000006,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:50:56.775Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:56+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:26.768Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:50:57+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:59+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":71,"memory":{"heap":{"usedInBytes":328655960}},"eventLoopDelay":0.3739199936389923},"host":{"os":{"load":{"1m":9.7099609375,"5m":8.17041015625,"15m":7.9013671875}}},"message":"memory: 313.4MB uptime: 0:01:11 load: [9.71,8.17,7.90] delay: 0.374"}
{"type":"log","@timestamp":"2021-09-27T18:50:59+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:50:59+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:29.782Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:50:59+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"term\":{\"task.ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\"}},{\"term\":{\"task.status\":\"claiming\"}},{\"bool\":{\"should\":[{\"term\":{\"task.taskType\":\"session_cleanup\"}},{\"term\":{\"task.taskType\":\"lens_telemetry\"}},{\"term\":{\"task.taskType\":\"reports:monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_cleanup\"}},{\"term\":{\"task.taskType\":\"search_sessions_expire\"}},{\"term\":{\"task.taskType\":\"actions:.email\"}},{\"term\":{\"task.taskType\":\"actions:.index\"}},{\"term\":{\"task.taskType\":\"actions:.pagerduty\"}},{\"term\":{\"task.taskType\":\"actions:.swimlane\"}},{\"term\":{\"task.taskType\":\"actions:.server-log\"}},{\"term\":{\"task.taskType\":\"actions:.slack\"}},{\"term\":{\"task.taskType\":\"actions:.webhook\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow-sir\"}},{\"term\":{\"task.taskType\":\"actions:.jira\"}},{\"term\":{\"task.taskType\":\"actions:.resilient\"}},{\"term\":{\"task.taskType\":\"actions:.teams\"}},{\"term\":{\"task.taskType\":\"actions_telemetry\"}},{\"term\":{\"task.taskType\":\"cleanup_failed_action_executions\"}},{\"term\":{\"task.taskType\":\"alerting_telemetry\"}},{\"term\":{\"task.taskType\":\"alerts_invalidate_api_keys\"}},{\"term\":{\"task.taskType\":\"alerting_health_check\"}},{\"term\":{\"task.taskType\":\"alerting:.index-threshold\"}},{\"term\":{\"task.taskType\":\"alerting:.geo-containment\"}},{\"term\":{\"task.taskType\":\"alerting:.es-query\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_alert\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_jobs_health\"}},{\"term\":{\"task.taskType\":\"alerting:siem.signals\"}},{\"term\":{\"task.taskType\":\"alerting:siem.notifications\"}},{\"term\":{\"task.taskType\":\"endpoint:user-artifact-packager\"}},{\"term\":{\"task.taskType\":\"security:endpoint-diagnostics\"}},{\"term\":{\"task.taskType\":\"security:endpoint-meta-telemetry\"}},{\"term\":{\"task.taskType\":\"security:telemetry-lists\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.monitorStatus\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tlsCertificate\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.durationAnomaly\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tls\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:logs.alert.document.count\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.inventory.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cluster_health\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_license_expiration\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cpu_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_missing_monitoring_data\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_disk_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_search_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_write_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_jvm_memory_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_nodes_changed\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_logstash_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_kibana_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_elasticsearch_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_ccr_read_exceptions\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_shard_size\"}},{\"term\":{\"task.taskType\":\"apm-telemetry-task\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration_anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:apm.error_rate\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_error_rate\"}}]}}]}}]}},\"size\":10,\"seq_no_primary_term\":true,\"sort\":{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:50:59+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:29.782Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:00+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"10s\"},\"taskType\":\"search_sessions_monitor\",\"retryAt\":\"2021-09-27T16:55:59.960Z\",\"runAt\":\"2021-09-27T16:50:57.829Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:50:59.960Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:51:00.012Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:00+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_monitor \"data_enhanced_search_sessions_monitor\""}
{"type":"log","@timestamp":"2021-09-27T18:51:00+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_monitor Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:51:00+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"in_progress\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:00+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:09.960Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_monitor\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\"},\"updated_at\":\"2021-09-27T16:51:00.127Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:02+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:02+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:32.809Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:02+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:02+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:02.818Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:02.818Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:02.818Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:00.052Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":7,\"p90\":145.60000000000002,\"p95\":175.29999999999995,\"p99\":178},\"duration\":{\"p50\":79,\"p90\":292,\"p95\":292,\"p99\":292},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2275,\"p90\":106306.99999999999,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2248.5,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":35,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":23,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":42,\"p90\":45.8,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:02.818Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:02+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:32.809Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:04+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":76,"memory":{"heap":{"usedInBytes":317949424}},"eventLoopDelay":0.6397449970245361},"host":{"os":{"load":{"1m":9.17236328125,"5m":8.08447265625,"15m":7.87255859375}}},"message":"memory: 303.2MB uptime: 0:01:16 load: [9.17,8.08,7.87] delay: 0.640"}
{"type":"log","@timestamp":"2021-09-27T18:51:04+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":9.17236328125,\"5m\":8.08447265625,\"15m\":7.87255859375},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":81408000,\"used_in_bytes\":8508526592},\"uptime_in_millis\":124424000},\"response_times\":{\"average\":0,\"max\":0},\"concurrent_connections\":0,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":629157888,\"used_in_bytes\":317949424,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":680136704},\"event_loop_delay\":0.6397449970245361,\"uptime_in_millis\":76363.22572},\"requests\":{\"disconnects\":0,\"total\":0},\"timestamp\":\"2021-09-27T16:51:04.763Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:35.809Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:05+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:35.809Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:06+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:51:07+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:08+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:38.827Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:08+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:08+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:08.838Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:08.837Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:08.837Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:05.839Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":9,\"p90\":124,\"p95\":164.5,\"p99\":178},\"duration\":{\"p50\":38,\"p90\":287.59999999999997,\"p95\":292,\"p99\":292},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2275,\"p90\":106306.99999999999,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2248.5,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":35,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":23,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":42,\"p90\":45.8,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:08.838Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:08+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:38.827Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:09+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":81,"memory":{"heap":{"usedInBytes":323291496}},"eventLoopDelay":0.9144459962844849},"host":{"os":{"load":{"1m":8.517578125,"5m":7.966796875,"15m":7.83203125}}},"message":"memory: 308.3MB uptime: 0:01:21 load: [8.52,7.97,7.83] delay: 0.914"}
{"type":"log","@timestamp":"2021-09-27T18:51:09+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:41.849Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"term\":{\"task.ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\"}},{\"term\":{\"task.status\":\"claiming\"}},{\"bool\":{\"should\":[{\"term\":{\"task.taskType\":\"session_cleanup\"}},{\"term\":{\"task.taskType\":\"lens_telemetry\"}},{\"term\":{\"task.taskType\":\"reports:monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_cleanup\"}},{\"term\":{\"task.taskType\":\"search_sessions_expire\"}},{\"term\":{\"task.taskType\":\"actions:.email\"}},{\"term\":{\"task.taskType\":\"actions:.index\"}},{\"term\":{\"task.taskType\":\"actions:.pagerduty\"}},{\"term\":{\"task.taskType\":\"actions:.swimlane\"}},{\"term\":{\"task.taskType\":\"actions:.server-log\"}},{\"term\":{\"task.taskType\":\"actions:.slack\"}},{\"term\":{\"task.taskType\":\"actions:.webhook\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow-sir\"}},{\"term\":{\"task.taskType\":\"actions:.jira\"}},{\"term\":{\"task.taskType\":\"actions:.resilient\"}},{\"term\":{\"task.taskType\":\"actions:.teams\"}},{\"term\":{\"task.taskType\":\"actions_telemetry\"}},{\"term\":{\"task.taskType\":\"cleanup_failed_action_executions\"}},{\"term\":{\"task.taskType\":\"alerting_telemetry\"}},{\"term\":{\"task.taskType\":\"alerts_invalidate_api_keys\"}},{\"term\":{\"task.taskType\":\"alerting_health_check\"}},{\"term\":{\"task.taskType\":\"alerting:.index-threshold\"}},{\"term\":{\"task.taskType\":\"alerting:.geo-containment\"}},{\"term\":{\"task.taskType\":\"alerting:.es-query\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_alert\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_jobs_health\"}},{\"term\":{\"task.taskType\":\"alerting:siem.signals\"}},{\"term\":{\"task.taskType\":\"alerting:siem.notifications\"}},{\"term\":{\"task.taskType\":\"endpoint:user-artifact-packager\"}},{\"term\":{\"task.taskType\":\"security:endpoint-diagnostics\"}},{\"term\":{\"task.taskType\":\"security:endpoint-meta-telemetry\"}},{\"term\":{\"task.taskType\":\"security:telemetry-lists\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.monitorStatus\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tlsCertificate\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.durationAnomaly\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tls\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:logs.alert.document.count\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.inventory.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cluster_health\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_license_expiration\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cpu_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_missing_monitoring_data\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_disk_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_search_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_write_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_jvm_memory_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_nodes_changed\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_logstash_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_kibana_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_elasticsearch_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_ccr_read_exceptions\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_shard_size\"}},{\"term\":{\"task.taskType\":\"apm-telemetry-task\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration_anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:apm.error_rate\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_error_rate\"}}]}}]}}]}},\"size\":10,\"seq_no_primary_term\":true,\"sort\":{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:41.849Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"10s\"},\"taskType\":\"search_sessions_monitor\",\"retryAt\":\"2021-09-27T16:56:12.042Z\",\"runAt\":\"2021-09-27T16:51:09.960Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:51:12.042Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:51:12.102Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_monitor \"data_enhanced_search_sessions_monitor\""}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_monitor Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"in_progress\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:22.042Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_monitor\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\"},\"updated_at\":\"2021-09-27T16:51:12.227Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:12+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","elasticsearch","query","monitoring"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":86,"memory":{"heap":{"usedInBytes":324366488}},"eventLoopDelay":0.2578350007534027},"host":{"os":{"load":{"1m":7.91552734375,"5m":7.85107421875,"15m":7.7919921875}}},"message":"memory: 309.3MB uptime: 0:01:26 load: [7.92,7.85,7.79] delay: 0.258"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:44.873Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:14.939Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:14.938Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:14.938Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:12.153Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":10,\"p90\":156.4000000000001,\"p95\":186.25,\"p99\":193},\"duration\":{\"p50\":38,\"p90\":299.79999999999995,\"p95\":305,\"p99\":305},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2272.5,\"p90\":95602.00000000001,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2222,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":10,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":7,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":41.5,\"p90\":45.7,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:14.939Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:14+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:44.873Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","plugins","upgradeAssistant","reindex_worker"],"pid":45398,"message":"Polling for reindex operations"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=20\n{\"size\":20,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"upgrade-assistant-reindex-operation\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespace\"}},{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}],\"must\":[{\"simple_query_string\":{\"query\":\"0\",\"fields\":[\"upgrade-assistant-reindex-operation.status\"],\"default_operator\":\"OR\"}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","status"],"pid":45398,"kibana":{"status":{"level":"available","summary":"All services are available"}},"message":"Recalculated overall status"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":7.91552734375,\"5m\":7.85107421875,\"15m\":7.7919921875},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":29839360,\"used_in_bytes\":8560095232},\"uptime_in_millis\":124434000},\"response_times\":{\"average\":0,\"max\":0},\"concurrent_connections\":0,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":629157888,\"used_in_bytes\":324366488,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":680136704},\"event_loop_delay\":0.2578350007534027,\"uptime_in_millis\":86387.102365},\"requests\":{\"disconnects\":0,\"total\":0},\"timestamp\":\"2021-09-27T16:51:14.787Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:15+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:17+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:17+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:47.905Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:17+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:47.905Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:19+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":91,"memory":{"heap":{"usedInBytes":287830416}},"eventLoopDelay":0.28541599214076996},"host":{"os":{"load":{"1m":7.44140625,"5m":7.75390625,"15m":7.7578125}}},"message":"memory: 274.5MB uptime: 0:01:31 load: [7.44,7.75,7.76] delay: 0.285"}
{"type":"log","@timestamp":"2021-09-27T18:51:19+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:20+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:50.940Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:20+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:20+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:20.977Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:20.977Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:20.977Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:17.925Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":10,\"p90\":134.79999999999995,\"p95\":183.24999999999997,\"p99\":193},\"duration\":{\"p50\":38,\"p90\":297.20000000000005,\"p95\":304.34999999999997,\"p99\":305},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2272.5,\"p90\":95602.00000000001,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2222,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":10,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":7,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":41.5,\"p90\":45.7,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:20.977Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:20+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:50.940Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:22+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:53.967Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"term\":{\"task.ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\"}},{\"term\":{\"task.status\":\"claiming\"}},{\"bool\":{\"should\":[{\"term\":{\"task.taskType\":\"session_cleanup\"}},{\"term\":{\"task.taskType\":\"lens_telemetry\"}},{\"term\":{\"task.taskType\":\"reports:monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_cleanup\"}},{\"term\":{\"task.taskType\":\"search_sessions_expire\"}},{\"term\":{\"task.taskType\":\"actions:.email\"}},{\"term\":{\"task.taskType\":\"actions:.index\"}},{\"term\":{\"task.taskType\":\"actions:.pagerduty\"}},{\"term\":{\"task.taskType\":\"actions:.swimlane\"}},{\"term\":{\"task.taskType\":\"actions:.server-log\"}},{\"term\":{\"task.taskType\":\"actions:.slack\"}},{\"term\":{\"task.taskType\":\"actions:.webhook\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow-sir\"}},{\"term\":{\"task.taskType\":\"actions:.jira\"}},{\"term\":{\"task.taskType\":\"actions:.resilient\"}},{\"term\":{\"task.taskType\":\"actions:.teams\"}},{\"term\":{\"task.taskType\":\"actions_telemetry\"}},{\"term\":{\"task.taskType\":\"cleanup_failed_action_executions\"}},{\"term\":{\"task.taskType\":\"alerting_telemetry\"}},{\"term\":{\"task.taskType\":\"alerts_invalidate_api_keys\"}},{\"term\":{\"task.taskType\":\"alerting_health_check\"}},{\"term\":{\"task.taskType\":\"alerting:.index-threshold\"}},{\"term\":{\"task.taskType\":\"alerting:.geo-containment\"}},{\"term\":{\"task.taskType\":\"alerting:.es-query\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_alert\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_jobs_health\"}},{\"term\":{\"task.taskType\":\"alerting:siem.signals\"}},{\"term\":{\"task.taskType\":\"alerting:siem.notifications\"}},{\"term\":{\"task.taskType\":\"endpoint:user-artifact-packager\"}},{\"term\":{\"task.taskType\":\"security:endpoint-diagnostics\"}},{\"term\":{\"task.taskType\":\"security:endpoint-meta-telemetry\"}},{\"term\":{\"task.taskType\":\"security:telemetry-lists\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.monitorStatus\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tlsCertificate\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.durationAnomaly\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tls\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:logs.alert.document.count\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.inventory.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cluster_health\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_license_expiration\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cpu_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_missing_monitoring_data\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_disk_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_search_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_write_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_jvm_memory_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_nodes_changed\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_logstash_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_kibana_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_elasticsearch_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_ccr_read_exceptions\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_shard_size\"}},{\"term\":{\"task.taskType\":\"apm-telemetry-task\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration_anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:apm.error_rate\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_error_rate\"}}]}}]}}]}},\"size\":10,\"seq_no_primary_term\":true,\"sort\":{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:53.967Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"10s\"},\"taskType\":\"search_sessions_monitor\",\"retryAt\":\"2021-09-27T16:56:24.100Z\",\"runAt\":\"2021-09-27T16:51:22.042Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:51:24.100Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:51:24.165Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_monitor \"data_enhanced_search_sessions_monitor\""}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_monitor Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"in_progress\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:34.100Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_monitor\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\"},\"updated_at\":\"2021-09-27T16:51:24.277Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":96,"memory":{"heap":{"usedInBytes":288727672}},"eventLoopDelay":0.21587499976158142},"host":{"os":{"load":{"1m":7.40576171875,"5m":7.7412109375,"15m":7.7529296875}}},"message":"memory: 275.4MB uptime: 0:01:36 load: [7.41,7.74,7.75] delay: 0.216"}
{"type":"log","@timestamp":"2021-09-27T18:51:24+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:25+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:25+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
{"type":"log","@timestamp":"2021-09-27T18:51:25+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:25+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":7.40576171875,\"5m\":7.7412109375,\"15m\":7.7529296875},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":241451008,\"used_in_bytes\":8348483584},\"uptime_in_millis\":124444000},\"response_times\":{\"average\":0,\"max\":0},\"concurrent_connections\":0,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":319627264,\"used_in_bytes\":288727672,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":369741824},\"event_loop_delay\":0.21587499976158142,\"uptime_in_millis\":96403.496629},\"requests\":{\"disconnects\":0,\"total\":0},\"timestamp\":\"2021-09-27T16:51:24.804Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:25+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/ui_counters/_report."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/ui_counters/_report."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Requesting Elasticsearch licensing API"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-language":"en-gb","accept-encoding":"gzip, deflate","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","content-length":"500","connection":"keep-alive","kbn-system-request":"true"}},"response":{"body":{"bytes":66},"status_code":401,"headers":{"X-Content-Type-Options":"nosniff","Referrer-Policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":66},"responseTime":59}},"url":{"path":"/api/ui_counters/_report","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /api/ui_counters/_report 401 59ms - 66.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","connection":"keep-alive","upgrade-insecure-requests":"1","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":144302},"status_code":200,"headers":{"content-security-policy":"script-src 'unsafe-eval' 'self'; worker-src blob: 'self'; style-src 'unsafe-inline' 'self'","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"text/html; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":81}},"url":{"path":"/logout","query":"msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F"},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F 200 81ms - 140.9KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /bootstrap.js."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /bootstrap.js."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:26+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":18451},"status_code":304,"headers":{"etag":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","content-type":"application/javascript; charset=utf-8","cache-control":"must-revalidate","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":9}},"url":{"path":"/bootstrap.js","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /bootstrap.js 304 9ms - 18.0KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:56.987Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:27.004Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:27.004Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:27.004Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:24.217Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":10,\"p90\":131.2,\"p95\":180.24999999999997,\"p99\":193},\"duration\":{\"p50\":60,\"p90\":294.6,\"p95\":303.05,\"p99\":305},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2270,\"p90\":84896.99999999996,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2206.5,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":10,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":9,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":41,\"p90\":45.599999999999994,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:27.004Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:51:56.987Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:27+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":29},"status_code":304,"headers":{"content-type":"application/json; charset=utf-8","cache-control":"must-revalidate","etag":"\"37992637719f97813c3068cfbf877b2d3bb43b97-gzip\"","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":14}},"url":{"path":"/translations/en.json","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /translations/en.json 304 14ms - 29.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/core/capabilities?useDefaultCapabilities=true."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/core/capabilities?useDefaultCapabilities=true."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","content-length":"600"}},"response":{"body":{"bytes":4991},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":48}},"url":{"path":"/api/core/capabilities","query":"useDefaultCapabilities=true"},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /api/core/capabilities?useDefaultCapabilities=true 200 48ms - 4.9KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/banners/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/banners/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":146},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":146,"accept-ranges":"bytes"},"responseTime":11}},"url":{"path":"/api/banners/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/banners/info 200 11ms - 146.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/licensing/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/licensing/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Requesting Elasticsearch licensing API"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{"bytes":66},"status_code":401,"headers":{"X-Content-Type-Options":"nosniff","Referrer-Policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":66},"responseTime":66}},"url":{"path":"/api/licensing/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/licensing/info 401 66ms - 66.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to log user out via /api/security/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Logout is not supported."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","connection":"keep-alive","upgrade-insecure-requests":"1","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{},"status_code":302,"headers":{"location":"/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","cache-control":"private, no-cache, no-store, must-revalidate","content-length":0},"responseTime":12}},"url":{"path":"/api/security/logout","query":"msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F"},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/security/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F 302 12ms"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","headers":{"host":"localhost:5601","connection":"keep-alive","upgrade-insecure-requests":"1","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/logout?msg=SESSION_EXPIRED&next=%2Fapp%2Fhome%23%2F","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":144302},"status_code":200,"headers":{"content-security-policy":"script-src 'unsafe-eval' 'self'; worker-src blob: 'self'; style-src 'unsafe-inline' 'self'","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"text/html; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":38}},"url":{"path":"/login","query":"next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED"},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED 200 38ms - 140.9KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /bootstrap.js."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /bootstrap.js."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:28+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":18451},"status_code":304,"headers":{"etag":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","content-type":"application/javascript; charset=utf-8","cache-control":"must-revalidate","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":10}},"url":{"path":"/bootstrap.js","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /bootstrap.js 304 10ms - 18.0KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:29+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":29},"status_code":304,"headers":{"content-type":"application/json; charset=utf-8","cache-control":"must-revalidate","etag":"\"37992637719f97813c3068cfbf877b2d3bb43b97-gzip\"","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":4}},"url":{"path":"/translations/en.json","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /translations/en.json 304 4ms - 29.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:29+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":101,"memory":{"heap":{"usedInBytes":295012720}},"eventLoopDelay":0.3166849911212921},"host":{"os":{"load":{"1m":9.0546875,"5m":8.0771484375,"15m":7.87109375}}},"message":"memory: 281.3MB uptime: 0:01:41 load: [9.05,8.08,7.87] delay: 0.317"}
{"type":"log","@timestamp":"2021-09-27T18:51:29+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/core/capabilities?useDefaultCapabilities=true."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/core/capabilities?useDefaultCapabilities=true."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","content-length":"600"}},"response":{"body":{"bytes":4991},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":41}},"url":{"path":"/api/core/capabilities","query":"useDefaultCapabilities=true"},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /api/core/capabilities?useDefaultCapabilities=true 200 41ms - 4.9KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:00.003Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:00.003Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/banners/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/banners/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":146},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":146,"accept-ranges":"bytes"},"responseTime":7}},"url":{"path":"/api/banners/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/banners/info 200 7ms - 146.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/licensing/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Trying to authenticate user request to /api/licensing/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","http"],"pid":45398,"message":"Authorization header is not presented."}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","security","authentication"],"pid":45398,"message":"Could not handle authentication attempt"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","plugins","licensing"],"pid":45398,"message":"Requesting Elasticsearch licensing API"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":186},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":186,"accept-ranges":"bytes"},"responseTime":10}},"url":{"path":"/internal/security/login_state","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /internal/security/login_state 200 10ms - 186.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_xpack?accept_enterprise=true"}
{"type":"log","@timestamp":"2021-09-27T18:51:30+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{"bytes":66},"status_code":401,"headers":{"X-Content-Type-Options":"nosniff","Referrer-Policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":66},"responseTime":46}},"url":{"path":"/api/licensing/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/licensing/info 401 46ms - 66.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:32+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:03.028Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"status serviceStatus now set to available"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Latest Monitored Stats: {\"id\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"timestamp\":\"2021-09-27T16:51:33.039Z\",\"status\":\"OK\",\"last_update\":\"2021-09-27T16:51:33.039Z\",\"stats\":{\"configuration\":{\"timestamp\":\"2021-09-27T16:50:39.849Z\",\"value\":{\"request_capacity\":1000,\"max_poll_inactivity_cycles\":10,\"monitored_aggregated_stats_refresh_rate\":60000,\"monitored_stats_running_average_window\":50,\"monitored_task_execution_thresholds\":{\"default\":{\"error_threshold\":90,\"warn_threshold\":80},\"custom\":{}},\"poll_interval\":3000,\"max_workers\":10},\"status\":\"OK\"},\"runtime\":{\"timestamp\":\"2021-09-27T16:51:33.039Z\",\"value\":{\"polling\":{\"last_successful_poll\":\"2021-09-27T16:51:30.073Z\",\"last_polling_delay\":\"2021-09-27T16:50:44.697Z\",\"claim_duration\":{\"p50\":10,\"p90\":127.60000000000002,\"p95\":175.74999999999997,\"p99\":193},\"duration\":{\"p50\":68,\"p90\":292,\"p95\":301.75,\"p99\":305},\"claim_conflicts\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"claim_mismatches\":{\"p50\":0,\"p90\":0,\"p95\":0,\"p99\":0},\"result_frequency_percent_as_number\":{\"Failed\":0,\"NoAvailableWorkers\":0,\"NoTasksClaimed\":100,\"RanOutOfCapacity\":0,\"RunningAtCapacity\":0,\"PoolFilled\":0},\"persistence\":{\"recurring\":100,\"non_recurring\":0}},\"drift\":{\"p50\":2270,\"p90\":84896.99999999996,\"p95\":127717,\"p99\":127717},\"drift_by_type\":{\"endpoint:user-artifact-packager\":{\"p50\":127717,\"p90\":127717,\"p95\":127717,\"p99\":127717},\"search_sessions_monitor\":{\"p50\":2206.5,\"p90\":2275,\"p95\":2275,\"p99\":2275},\"search_sessions_cleanup\":{\"p50\":2270,\"p90\":2270,\"p95\":2270,\"p99\":2270},\"alerts_invalidate_api_keys\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667},\"search_sessions_expire\":{\"p50\":2269,\"p90\":2269,\"p95\":2269,\"p99\":2269},\"security:endpoint-diagnostics\":{\"p50\":20667,\"p90\":20667,\"p95\":20667,\"p99\":20667}},\"load\":{\"p50\":10,\"p90\":60,\"p95\":60,\"p99\":60},\"execution\":{\"duration\":{\"endpoint:user-artifact-packager\":{\"p50\":35,\"p90\":35,\"p95\":35,\"p99\":35},\"search_sessions_monitor\":{\"p50\":9,\"p90\":41,\"p95\":41,\"p99\":41},\"search_sessions_cleanup\":{\"p50\":42,\"p90\":42,\"p95\":42,\"p99\":42},\"alerts_invalidate_api_keys\":{\"p50\":43,\"p90\":43,\"p95\":43,\"p99\":43},\"search_sessions_expire\":{\"p50\":45,\"p90\":45,\"p95\":45,\"p99\":45},\"security:endpoint-diagnostics\":{\"p50\":46,\"p90\":46,\"p95\":46,\"p99\":46}},\"duration_by_persistence\":{\"recurring\":{\"p50\":41,\"p90\":45.599999999999994,\"p95\":46,\"p99\":46}},\"persistence\":{\"recurring\":100,\"non_recurring\":0,\"ephemeral\":0},\"result_frequency_percent_as_number\":{\"endpoint:user-artifact-packager\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_monitor\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_cleanup\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"alerts_invalidate_api_keys\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"search_sessions_expire\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"},\"security:endpoint-diagnostics\":{\"Success\":100,\"RetryScheduled\":0,\"Failed\":0,\"status\":\"OK\"}}}},\"status\":\"OK\"},\"workload\":{\"timestamp\":\"2021-09-27T16:50:45.362Z\",\"value\":{\"count\":15,\"task_types\":{\"actions_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_health_check\":{\"count\":1,\"status\":{\"idle\":1}},\"alerting_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"alerts_invalidate_api_keys\":{\"count\":1,\"status\":{\"idle\":1}},\"apm-telemetry-task\":{\"count\":1,\"status\":{\"idle\":1}},\"cleanup_failed_action_executions\":{\"count\":1,\"status\":{\"idle\":1}},\"endpoint:user-artifact-packager\":{\"count\":1,\"status\":{\"idle\":1}},\"lens_telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_cleanup\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_expire\":{\"count\":1,\"status\":{\"idle\":1}},\"search_sessions_monitor\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-diagnostics\":{\"count\":1,\"status\":{\"idle\":1}},\"security:endpoint-meta-telemetry\":{\"count\":1,\"status\":{\"idle\":1}},\"security:telemetry-lists\":{\"count\":1,\"status\":{\"idle\":1}},\"session_cleanup\":{\"count\":1,\"status\":{\"idle\":1}}},\"non_recurring\":15,\"owner_ids\":0,\"schedule\":[[\"10s\",1],[\"60s\",2],[\"5m\",2],[\"3600s\",2],[\"60m\",2],[\"720m\",1],[\"24h\",2]],\"overdue\":5,\"overdue_non_recurring\":5,\"estimated_schedule_density\":[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0],\"capacity_requirements\":{\"per_minute\":8,\"per_hour\":28,\"per_day\":4}},\"status\":\"OK\"},\"capacity_estimation\":{\"status\":\"OK\",\"timestamp\":\"2021-09-27T16:51:33.039Z\",\"value\":{\"observed\":{\"observed_kibana_instances\":1,\"max_throughput_per_minute_per_kibana\":200,\"max_throughput_per_minute\":200,\"minutes_to_drain_overdue\":1,\"avg_recurring_required_throughput_per_minute\":9,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute\":9,\"avg_required_throughput_per_minute_per_kibana\":9},\"proposed\":{\"provisioned_kibana\":1,\"min_required_kibana\":1,\"avg_recurring_required_throughput_per_minute_per_kibana\":9,\"avg_required_throughput_per_minute_per_kibana\":9}}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:03.028Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["info","plugins","security","routes"],"pid":45398,"message":"Logging in with provider \"basic\" (basic)"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to perform a login."}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Login has been successfully performed."}
{"type":"log","@timestamp":"2021-09-27T18:51:33+02:00","tags":["debug","plugins","security","session","NpC4mXuqo="],"pid":45398,"message":"Creating a new session."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"201\nPUT /.kibana_security_session_1/_create/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D?refresh=wait_for\n{\"provider\":{\"type\":\"basic\",\"name\":\"basic\"},\"idleTimeoutExpiration\":null,\"lifespanExpiration\":null,\"usernameHash\":\"eb28536c8ead72bf81a0a9226e38fc9bad81f5e07c2081bb801b2a5c8842924e\",\"content\":\"Gr8YeqcocudkRTjt1pd2B7w8BVEuDCqBTfahCHozBFSWR7i4Mu+Xscgg3a30SfZ2TH8NlDOntu9dGjaWckYJH/+h69/hs2TN+vBokPaLflA2BUwtLtROlZgk/F/U/i4ebTCs/srF05deCWyUAdOmQNGfJkiknrgqF2051LHySuI6tfLX1oDJxh+nY8c8r4dzA5ssFf15pPk4yZ+XOF4cBP4Nd/0rP+cCXTEiOMY/ZuX5qUa5efKm0z12gIJB\"}"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","session","NpC4mXuqo="],"pid":45398,"message":"Successfully created a new session."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":45398,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","content-length":"192"}},"response":{"body":{"bytes":26},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","set-cookie":"[REDACTED]","content-length":26},"responseTime":631}},"url":{"path":"/internal/security/login","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /internal/security/login 200 631ms - 26.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /app/home."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","spaces"],"pid":45398,"message":"Verifying access to space \"default\""}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/space%3Adefault"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","app-authorization"],"pid":45398,"message":"not authorizing - \"home\" isn't a protected application"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","headers":{"host":"localhost:5601","connection":"keep-alive","upgrade-insecure-requests":"1","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/login?next=%2Fapp%2Fhome%23%2F&msg=SESSION_EXPIRED","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":144450},"status_code":200,"headers":{"content-security-policy":"script-src 'unsafe-eval' 'self'; worker-src blob: 'self'; style-src 'unsafe-inline' 'self'","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"text/html; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":77}},"url":{"path":"/app/home","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /app/home 200 77ms - 141.1KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /bootstrap.js."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/app/home","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":18451},"status_code":304,"headers":{"etag":"\"c680dc6a6f3302019961f6318a1ee5b62b10d73c-gzip\"","content-type":"application/javascript; charset=utf-8","cache-control":"must-revalidate","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":26}},"url":{"path":"/bootstrap.js","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /bootstrap.js 304 26ms - 18.0KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:34+02:00","tags":["debug","metrics","ops"],"pid":45398,"event":{"kind":"metric","category":["process","host"],"type":["info"]},"process":{"uptime":106,"memory":{"heap":{"usedInBytes":299695816}},"eventLoopDelay":0.4066160023212433},"host":{"os":{"load":{"1m":8.48974609375,"5m":7.97607421875,"15m":7.83642578125}}},"message":"memory: 285.8MB uptime: 0:01:46 load: [8.49,7.98,7.84] delay: 0.407"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","connection":"keep-alive","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","accept-language":"en-gb","referer":"http://localhost:5601/app/home","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":29},"status_code":304,"headers":{"content-type":"application/json; charset=utf-8","cache-control":"must-revalidate","etag":"\"37992637719f97813c3068cfbf877b2d3bb43b97-gzip\"","x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","vary":"accept-encoding"},"responseTime":8}},"url":{"path":"/translations/en.json","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /translations/en.json 304 8ms - 29.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploading bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms\n{\"index\":{\"_type\":\"kibana_stats\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"},\"os\":{\"platform\":\"darwin\",\"platformRelease\":\"darwin-19.6.0\",\"load\":{\"1m\":8.48974609375,\"5m\":7.97607421875,\"15m\":7.83642578125},\"memory\":{\"total_in_bytes\":8589934592,\"free_in_bytes\":57802752,\"used_in_bytes\":8532131840},\"uptime_in_millis\":124454000},\"response_times\":{\"average\":121.28571428571429,\"max\":634},\"concurrent_connections\":2,\"process\":{\"memory\":{\"heap\":{\"total_in_bytes\":339992576,\"used_in_bytes\":299695816,\"size_limit\":2197815296},\"resident_set_size_in_bytes\":388653056},\"event_loop_delay\":0.4066160023212433,\"uptime_in_millis\":106423.687837},\"requests\":{\"disconnects\":0,\"total\":7},\"timestamp\":\"2021-09-27T16:51:34.824Z\"}\n{\"index\":{\"_type\":\"kibana_settings\"}}\n{\"kibana\":{\"uuid\":\"0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"name\":\"macbook.lan\",\"index\":\".kibana\",\"host\":\"localhost\",\"locale\":\"en\",\"port\":\"5601\",\"transport_address\":\"localhost:5601\",\"version\":\"7.15.0\",\"snapshot\":false,\"status\":\"green\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:35+02:00","tags":["debug","plugins","monitoring","monitoring","kibana-monitoring"],"pid":45398,"message":"Uploaded bulk stats payload to the local cluster"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/core/capabilities."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/space%3Adefault"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:06.037Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"skippedTaskTypes\":[\"report:execute\"],\"taskMaxAttempts\":{\"session_cleanup\":3,\"lens_telemetry\":3,\"reports:monitor\":1,\"search_sessions_monitor\":3,\"search_sessions_cleanup\":3,\"search_sessions_expire\":3,\"actions:.email\":1,\"actions:.index\":1,\"actions:.pagerduty\":1,\"actions:.swimlane\":1,\"actions:.server-log\":1,\"actions:.slack\":1,\"actions:.webhook\":1,\"actions:.servicenow\":1,\"actions:.servicenow-sir\":1,\"actions:.jira\":1,\"actions:.resilient\":1,\"actions:.teams\":1,\"actions_telemetry\":3,\"cleanup_failed_action_executions\":3,\"alerting_telemetry\":3,\"alerts_invalidate_api_keys\":3,\"alerting_health_check\":3,\"alerting:.index-threshold\":3,\"alerting:.geo-containment\":3,\"alerting:.es-query\":3,\"alerting:xpack.ml.anomaly_detection_alert\":3,\"alerting:xpack.ml.anomaly_detection_jobs_health\":3,\"alerting:siem.signals\":3,\"alerting:siem.notifications\":3,\"endpoint:user-artifact-packager\":3,\"security:endpoint-diagnostics\":3,\"security:endpoint-meta-telemetry\":3,\"security:telemetry-lists\":3,\"alerting:xpack.uptime.alerts.monitorStatus\":3,\"alerting:xpack.uptime.alerts.tlsCertificate\":3,\"alerting:xpack.uptime.alerts.durationAnomaly\":3,\"alerting:xpack.uptime.alerts.tls\":3,\"alerting:metrics.alert.anomaly\":3,\"alerting:logs.alert.document.count\":3,\"alerting:metrics.alert.inventory.threshold\":3,\"alerting:metrics.alert.threshold\":3,\"alerting:monitoring_alert_cluster_health\":3,\"alerting:monitoring_alert_license_expiration\":3,\"alerting:monitoring_alert_cpu_usage\":3,\"alerting:monitoring_alert_missing_monitoring_data\":3,\"alerting:monitoring_alert_disk_usage\":3,\"alerting:monitoring_alert_thread_pool_search_rejections\":3,\"alerting:monitoring_alert_thread_pool_write_rejections\":3,\"alerting:monitoring_alert_jvm_memory_usage\":3,\"alerting:monitoring_alert_nodes_changed\":3,\"alerting:monitoring_alert_logstash_version_mismatch\":3,\"alerting:monitoring_alert_kibana_version_mismatch\":3,\"alerting:monitoring_alert_elasticsearch_version_mismatch\":3,\"alerting:monitoring_ccr_read_exceptions\":3,\"alerting:monitoring_shard_size\":3,\"apm-telemetry-task\":3,\"alerting:apm.transaction_duration\":3,\"alerting:apm.transaction_duration_anomaly\":3,\"alerting:apm.error_rate\":3,\"alerting:apm.transaction_error_rate\":3}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":10}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_search?ignore_unavailable=true\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"term\":{\"task.ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\"}},{\"term\":{\"task.status\":\"claiming\"}},{\"bool\":{\"should\":[{\"term\":{\"task.taskType\":\"session_cleanup\"}},{\"term\":{\"task.taskType\":\"lens_telemetry\"}},{\"term\":{\"task.taskType\":\"reports:monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_monitor\"}},{\"term\":{\"task.taskType\":\"search_sessions_cleanup\"}},{\"term\":{\"task.taskType\":\"search_sessions_expire\"}},{\"term\":{\"task.taskType\":\"actions:.email\"}},{\"term\":{\"task.taskType\":\"actions:.index\"}},{\"term\":{\"task.taskType\":\"actions:.pagerduty\"}},{\"term\":{\"task.taskType\":\"actions:.swimlane\"}},{\"term\":{\"task.taskType\":\"actions:.server-log\"}},{\"term\":{\"task.taskType\":\"actions:.slack\"}},{\"term\":{\"task.taskType\":\"actions:.webhook\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow\"}},{\"term\":{\"task.taskType\":\"actions:.servicenow-sir\"}},{\"term\":{\"task.taskType\":\"actions:.jira\"}},{\"term\":{\"task.taskType\":\"actions:.resilient\"}},{\"term\":{\"task.taskType\":\"actions:.teams\"}},{\"term\":{\"task.taskType\":\"actions_telemetry\"}},{\"term\":{\"task.taskType\":\"cleanup_failed_action_executions\"}},{\"term\":{\"task.taskType\":\"alerting_telemetry\"}},{\"term\":{\"task.taskType\":\"alerts_invalidate_api_keys\"}},{\"term\":{\"task.taskType\":\"alerting_health_check\"}},{\"term\":{\"task.taskType\":\"alerting:.index-threshold\"}},{\"term\":{\"task.taskType\":\"alerting:.geo-containment\"}},{\"term\":{\"task.taskType\":\"alerting:.es-query\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_alert\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.ml.anomaly_detection_jobs_health\"}},{\"term\":{\"task.taskType\":\"alerting:siem.signals\"}},{\"term\":{\"task.taskType\":\"alerting:siem.notifications\"}},{\"term\":{\"task.taskType\":\"endpoint:user-artifact-packager\"}},{\"term\":{\"task.taskType\":\"security:endpoint-diagnostics\"}},{\"term\":{\"task.taskType\":\"security:endpoint-meta-telemetry\"}},{\"term\":{\"task.taskType\":\"security:telemetry-lists\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.monitorStatus\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tlsCertificate\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.durationAnomaly\"}},{\"term\":{\"task.taskType\":\"alerting:xpack.uptime.alerts.tls\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:logs.alert.document.count\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.inventory.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:metrics.alert.threshold\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cluster_health\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_license_expiration\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_cpu_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_missing_monitoring_data\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_disk_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_search_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_thread_pool_write_rejections\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_jvm_memory_usage\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_nodes_changed\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_logstash_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_kibana_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_alert_elasticsearch_version_mismatch\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_ccr_read_exceptions\"}},{\"term\":{\"task.taskType\":\"alerting:monitoring_shard_size\"}},{\"term\":{\"task.taskType\":\"apm-telemetry-task\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_duration_anomaly\"}},{\"term\":{\"task.taskType\":\"alerting:apm.error_rate\"}},{\"term\":{\"task.taskType\":\"alerting:apm.transaction_error_rate\"}}]}}]}}]}},\"size\":10,\"seq_no_primary_term\":true,\"sort\":{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"cluster\":[\"manage_watcher\",\"monitor_watcher\",\"manage\",\"manage_security\",\"manage_api_key\",\"manage_own_api_key\",\"monitor_transform\",\"manage_pipeline\",\"cluster:monitor/nodes/info\",\"cluster:admin/snapshot\",\"cluster:admin/repository\",\"monitor\",\"manage_rollup\",\"manage_ccr\",\"manage_ilm\",\"manage_logstash_pipelines\"],\"index\":[{\"names\":[\".watches\"],\"privileges\":[\"read\",\"read\"]},{\"names\":[\".watcher-history-*\"],\"privileges\":[\"read\",\"read\"]}],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"ui:7.15.0:navLinks/error\",\"ui:7.15.0:navLinks/status\",\"ui:7.15.0:navLinks/short_url_redirect\",\"ui:7.15.0:navLinks/r\",\"ui:7.15.0:navLinks/kibana\",\"ui:7.15.0:navLinks/dev_tools\",\"ui:7.15.0:navLinks/timelion\",\"ui:7.15.0:navLinks/home\",\"ui:7.15.0:navLinks/graph\",\"ui:7.15.0:navLinks/management\",\"ui:7.15.0:navLinks/kibanaOverview\",\"ui:7.15.0:navLinks/discover\",\"ui:7.15.0:navLinks/dashboards\",\"ui:7.15.0:navLinks/visualize\",\"ui:7.15.0:navLinks/space_selector\",\"ui:7.15.0:navLinks/security_access_agreement\",\"ui:7.15.0:navLinks/security_capture_url\",\"ui:7.15.0:navLinks/security_login\",\"ui:7.15.0:navLinks/security_logout\",\"ui:7.15.0:navLinks/security_logged_out\",\"ui:7.15.0:navLinks/security_overwritten_session\",\"ui:7.15.0:navLinks/security_account\",\"ui:7.15.0:navLinks/lens\",\"ui:7.15.0:navLinks/canvas\",\"ui:7.15.0:navLinks/maps\",\"ui:7.15.0:navLinks/dashboard_mode\",\"ui:7.15.0:navLinks/integrations\",\"ui:7.15.0:navLinks/fleet\",\"ui:7.15.0:navLinks/ingestManager\",\"ui:7.15.0:navLinks/osquery\",\"ui:7.15.0:navLinks/ml\",\"ui:7.15.0:navLinks/securitySolution\",\"ui:7.15.0:navLinks/siem\",\"ui:7.15.0:navLinks/observability-overview\",\"ui:7.15.0:navLinks/uptime\",\"ui:7.15.0:navLinks/logs\",\"ui:7.15.0:navLinks/metrics\",\"ui:7.15.0:navLinks/infra\",\"ui:7.15.0:navLinks/monitoring\",\"ui:7.15.0:navLinks/enterpriseSearch\",\"ui:7.15.0:navLinks/appSearch\",\"ui:7.15.0:navLinks/workplaceSearch\",\"ui:7.15.0:navLinks/apm\",\"ui:7.15.0:navLinks/ux\",\"ui:7.15.0:management/kibana/tags\",\"ui:7.15.0:management/kibana/search_sessions\",\"ui:7.15.0:management/kibana/settings\",\"ui:7.15.0:management/kibana/indexPatterns\",\"ui:7.15.0:management/kibana/objects\",\"ui:7.15.0:management/kibana/spaces\",\"ui:7.15.0:management/insightsAndAlerting/reporting\",\"ui:7.15.0:management/insightsAndAlerting/triggersActions\",\"ui:7.15.0:management/insightsAndAlerting/jobsListLink\",\"ui:7.15.0:management/insightsAndAlerting/watcher\",\"ui:7.15.0:management/stack/license_management\",\"ui:7.15.0:management/stack/upgrade_assistant\",\"ui:7.15.0:management/security/users\",\"ui:7.15.0:management/security/roles\",\"ui:7.15.0:management/security/api_keys\",\"ui:7.15.0:management/security/role_mappings\",\"ui:7.15.0:management/data/transform\",\"ui:7.15.0:management/data/snapshot_restore\",\"ui:7.15.0:management/data/index_management\",\"ui:7.15.0:management/data/rollup_jobs\",\"ui:7.15.0:management/data/remote_clusters\",\"ui:7.15.0:management/data/cross_cluster_replication\",\"ui:7.15.0:management/data/index_lifecycle_management\",\"ui:7.15.0:management/ingest/ingest_pipelines\",\"ui:7.15.0:management/ingest/pipelines\",\"ui:7.15.0:catalogue/graph\",\"ui:7.15.0:catalogue/canvas\",\"ui:7.15.0:catalogue/maps\",\"ui:7.15.0:catalogue/fleet\",\"ui:7.15.0:catalogue/osquery\",\"ui:7.15.0:catalogue/ml\",\"ui:7.15.0:catalogue/ml_file_data_visualizer\",\"ui:7.15.0:catalogue/securitySolution\",\"ui:7.15.0:catalogue/uptime\",\"ui:7.15.0:catalogue/infraops\",\"ui:7.15.0:catalogue/metrics\",\"ui:7.15.0:catalogue/infralogging\",\"ui:7.15.0:catalogue/logs\",\"ui:7.15.0:catalogue/monitoring\",\"ui:7.15.0:catalogue/enterpriseSearch\",\"ui:7.15.0:catalogue/appSearch\",\"ui:7.15.0:catalogue/workplaceSearch\",\"ui:7.15.0:catalogue/apm\",\"ui:7.15.0:catalogue/discover\",\"ui:7.15.0:catalogue/visualize\",\"ui:7.15.0:catalogue/dashboard\",\"ui:7.15.0:catalogue/console\",\"ui:7.15.0:catalogue/searchprofiler\",\"ui:7.15.0:catalogue/grokdebugger\",\"ui:7.15.0:catalogue/advanced_settings\",\"ui:7.15.0:catalogue/indexPatterns\",\"ui:7.15.0:catalogue/saved_objects\",\"ui:7.15.0:catalogue/watcher\",\"ui:7.15.0:catalogue/security\",\"ui:7.15.0:catalogue/transform\",\"ui:7.15.0:catalogue/snapshot_restore\",\"ui:7.15.0:catalogue/rollup_jobs\",\"ui:7.15.0:catalogue/index_lifecycle_management\",\"ui:7.15.0:catalogue/spaces\",\"ui:7.15.0:indexPatterns/save\",\"ui:7.15.0:savedObjectsManagement/read\",\"ui:7.15.0:savedObjectsManagement/edit\",\"ui:7.15.0:savedObjectsManagement/delete\",\"ui:7.15.0:savedObjectsManagement/copyIntoSpace\",\"ui:7.15.0:savedObjectsManagement/shareIntoSpace\",\"ui:7.15.0:advancedSettings/save\",\"ui:7.15.0:advancedSettings/show\",\"ui:7.15.0:dev_tools/show\",\"ui:7.15.0:dev_tools/save\",\"ui:7.15.0:dashboard/createNew\",\"ui:7.15.0:dashboard/show\",\"ui:7.15.0:dashboard/showWriteControls\",\"ui:7.15.0:dashboard/saveQuery\",\"ui:7.15.0:dashboard/createShortUrl\",\"ui:7.15.0:dashboard/storeSearchSession\",\"ui:7.15.0:dashboard/generateScreenshot\",\"ui:7.15.0:dashboard/downloadCsv\",\"ui:7.15.0:visualize/show\",\"ui:7.15.0:visualize/delete\",\"ui:7.15.0:visualize/save\",\"ui:7.15.0:visualize/saveQuery\",\"ui:7.15.0:visualize/createShortUrl\",\"ui:7.15.0:visualize/generateScreenshot\",\"ui:7.15.0:discover/show\",\"ui:7.15.0:discover/save\",\"ui:7.15.0:discover/saveQuery\",\"ui:7.15.0:discover/createShortUrl\",\"ui:7.15.0:discover/storeSearchSession\",\"ui:7.15.0:discover/generateCsv\",\"ui:7.15.0:apm/show\",\"ui:7.15.0:apm/save\",\"ui:7.15.0:apm/alerting:show\",\"ui:7.15.0:apm/alerting:save\",\"ui:7.15.0:logs/show\",\"ui:7.15.0:logs/configureSource\",\"ui:7.15.0:logs/save\",\"ui:7.15.0:infrastructure/show\",\"ui:7.15.0:infrastructure/configureSource\",\"ui:7.15.0:infrastructure/save\",\"ui:7.15.0:uptime/save\",\"ui:7.15.0:uptime/configureSettings\",\"ui:7.15.0:uptime/show\",\"ui:7.15.0:uptime/alerting:save\",\"ui:7.15.0:siem/show\",\"ui:7.15.0:siem/crud\",\"ui:7.15.0:siem/crud_cases\",\"ui:7.15.0:siem/read_cases\",\"ui:7.15.0:ml/canCreateJob\",\"ui:7.15.0:ml/canDeleteJob\",\"ui:7.15.0:ml/canOpenJob\",\"ui:7.15.0:ml/canCloseJob\",\"ui:7.15.0:ml/canResetJob\",\"ui:7.15.0:ml/canUpdateJob\",\"ui:7.15.0:ml/canForecastJob\",\"ui:7.15.0:ml/canCreateDatafeed\",\"ui:7.15.0:ml/canDeleteDatafeed\",\"ui:7.15.0:ml/canStartStopDatafeed\",\"ui:7.15.0:ml/canUpdateDatafeed\",\"ui:7.15.0:ml/canPreviewDatafeed\",\"ui:7.15.0:ml/canGetFilters\",\"ui:7.15.0:ml/canCreateCalendar\",\"ui:7.15.0:ml/canDeleteCalendar\",\"ui:7.15.0:ml/canCreateFilter\",\"ui:7.15.0:ml/canDeleteFilter\",\"ui:7.15.0:ml/canCreateDataFrameAnalytics\",\"ui:7.15.0:ml/canDeleteDataFrameAnalytics\",\"ui:7.15.0:ml/canStartStopDataFrameAnalytics\",\"ui:7.15.0:ml/canCreateMlAlerts\",\"ui:7.15.0:ml/canUseMlAlerts\",\"ui:7.15.0:ml/canAccessML\",\"ui:7.15.0:ml/canGetJobs\",\"ui:7.15.0:ml/canGetDatafeeds\",\"ui:7.15.0:ml/canGetCalendars\",\"ui:7.15.0:ml/canFindFileStructure\",\"ui:7.15.0:ml/canGetDataFrameAnalytics\",\"ui:7.15.0:ml/canGetAnnotations\",\"ui:7.15.0:ml/canCreateAnnotation\",\"ui:7.15.0:ml/canDeleteAnnotation\",\"ui:7.15.0:osquery/write\",\"ui:7.15.0:osquery/read\",\"ui:7.15.0:osquery/writeLiveQueries\",\"ui:7.15.0:osquery/readLiveQueries\",\"ui:7.15.0:osquery/runSavedQueries\",\"ui:7.15.0:osquery/writeSavedQueries\",\"ui:7.15.0:osquery/readSavedQueries\",\"ui:7.15.0:osquery/writePacks\",\"ui:7.15.0:osquery/readPacks\",\"ui:7.15.0:actions/show\",\"ui:7.15.0:actions/execute\",\"ui:7.15.0:actions/save\",\"ui:7.15.0:actions/delete\",\"ui:7.15.0:fleet/show\",\"ui:7.15.0:fleet/read\",\"ui:7.15.0:fleet/write\",\"ui:7.15.0:maps/save\",\"ui:7.15.0:maps/show\",\"ui:7.15.0:maps/saveQuery\",\"ui:7.15.0:canvas/save\",\"ui:7.15.0:canvas/show\",\"ui:7.15.0:canvas/generatePdf\",\"ui:7.15.0:savedObjectsTagging/view\",\"ui:7.15.0:savedObjectsTagging/create\",\"ui:7.15.0:savedObjectsTagging/edit\",\"ui:7.15.0:savedObjectsTagging/delete\",\"ui:7.15.0:savedObjectsTagging/assign\",\"ui:7.15.0:graph/save\",\"ui:7.15.0:graph/delete\",\"ui:7.15.0:graph/show\",\"ui:7.15.0:timelion/save\",\"ui:7.15.0:timelion/show\",\"ui:7.15.0:spaces/manage\",\"ui:7.15.0:fileUpload/show\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","taskManager"],"pid":45398,"message":"200\nPOST /.kibana_task_manager/_update_by_query?ignore_unavailable=true&refresh=true&conflicts=proceed\n{\"query\":{\"bool\":{\"must\":[{\"term\":{\"type\":\"task\"}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"task.status\":\"idle\"}},{\"range\":{\"task.runAt\":{\"lte\":\"now\"}}}]}},{\"bool\":{\"must\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}]}},{\"range\":{\"task.retryAt\":{\"lte\":\"now\"}}}]}}]}}],\"filter\":[{\"bool\":{\"must_not\":[{\"bool\":{\"should\":[{\"term\":{\"task.status\":\"running\"}},{\"term\":{\"task.status\":\"claiming\"}}],\"must\":{\"range\":{\"task.retryAt\":{\"gt\":\"now\"}}}}}]}}]}}]}},\"script\":{\"source\":\"\\n if (params.claimableTaskTypes.contains(ctx._source.task.taskType)) {\\n if (ctx._source.task.schedule != null || ctx._source.task.attempts < params.taskMaxAttempts[ctx._source.task.taskType] || params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else {\\n ctx._source.task.status = \\\"failed\\\";\\n }\\n } else if (params.skippedTaskTypes.contains(ctx._source.task.taskType) && params.claimTasksById.contains(ctx._id)) {\\n ctx._source.task.status = \\\"claiming\\\"; ctx._source.task.ownerId=params.fieldUpdates.ownerId; ctx._source.task.retryAt=params.fieldUpdates.retryAt;\\n } else if (!params.skippedTaskTypes.contains(ctx._source.task.taskType)) {\\n ctx._source.task.status = \\\"unrecognized\\\";\\n } else {\\n ctx.op = \\\"noop\\\";\\n }\",\"lang\":\"painless\",\"params\":{\"fieldUpdates\":{\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"retryAt\":\"2021-09-27T16:52:06.037Z\"},\"claimTasksById\":[],\"claimableTaskTypes\":[\"report:execute\"],\"skippedTaskTypes\":[\"session_cleanup\",\"lens_telemetry\",\"reports:monitor\",\"search_sessions_monitor\",\"search_sessions_cleanup\",\"search_sessions_expire\",\"actions:.email\",\"actions:.index\",\"actions:.pagerduty\",\"actions:.swimlane\",\"actions:.server-log\",\"actions:.slack\",\"actions:.webhook\",\"actions:.servicenow\",\"actions:.servicenow-sir\",\"actions:.jira\",\"actions:.resilient\",\"actions:.teams\",\"actions_telemetry\",\"cleanup_failed_action_executions\",\"alerting_telemetry\",\"alerts_invalidate_api_keys\",\"alerting_health_check\",\"alerting:.index-threshold\",\"alerting:.geo-containment\",\"alerting:.es-query\",\"alerting:xpack.ml.anomaly_detection_alert\",\"alerting:xpack.ml.anomaly_detection_jobs_health\",\"alerting:siem.signals\",\"alerting:siem.notifications\",\"endpoint:user-artifact-packager\",\"security:endpoint-diagnostics\",\"security:endpoint-meta-telemetry\",\"security:telemetry-lists\",\"alerting:xpack.uptime.alerts.monitorStatus\",\"alerting:xpack.uptime.alerts.tlsCertificate\",\"alerting:xpack.uptime.alerts.durationAnomaly\",\"alerting:xpack.uptime.alerts.tls\",\"alerting:metrics.alert.anomaly\",\"alerting:logs.alert.document.count\",\"alerting:metrics.alert.inventory.threshold\",\"alerting:metrics.alert.threshold\",\"alerting:monitoring_alert_cluster_health\",\"alerting:monitoring_alert_license_expiration\",\"alerting:monitoring_alert_cpu_usage\",\"alerting:monitoring_alert_missing_monitoring_data\",\"alerting:monitoring_alert_disk_usage\",\"alerting:monitoring_alert_thread_pool_search_rejections\",\"alerting:monitoring_alert_thread_pool_write_rejections\",\"alerting:monitoring_alert_jvm_memory_usage\",\"alerting:monitoring_alert_nodes_changed\",\"alerting:monitoring_alert_logstash_version_mismatch\",\"alerting:monitoring_alert_kibana_version_mismatch\",\"alerting:monitoring_alert_elasticsearch_version_mismatch\",\"alerting:monitoring_ccr_read_exceptions\",\"alerting:monitoring_shard_size\",\"apm-telemetry-task\",\"alerting:apm.transaction_duration\",\"alerting:apm.transaction_duration_anomaly\",\"alerting:apm.error_rate\",\"alerting:apm.transaction_error_rate\"],\"taskMaxAttempts\":{\"report:execute\":1}}},\"sort\":[{\"_script\":{\"type\":\"number\",\"order\":\"asc\",\"script\":{\"lang\":\"painless\",\"source\":\"\\nif (doc['task.retryAt'].size()!=0) {\\n return doc['task.retryAt'].value.toInstant().toEpochMilli();\\n}\\nif (doc['task.runAt'].size()!=0) {\\n return doc['task.runAt'].value.toInstant().toEpochMilli();\\n}\\n \"}}}],\"max_docs\":1}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"cluster\":[],\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:index-pattern/create\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/space%3Adefault"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"*\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"ui:7.15.0:enterpriseSearch/all\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/app/home","content-length":"600"}},"response":{"body":{"bytes":4824},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":169}},"url":{"path":"/api/core/capabilities","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /api/core/capabilities 200 169ms - 4.7KB"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/licensing/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","vary":"accept-encoding","content-encoding":"gzip"},"responseTime":37}},"url":{"path":"/api/licensing/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/licensing/info 200 37ms"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"schedule\":{\"interval\":\"10s\"},\"taskType\":\"search_sessions_monitor\",\"retryAt\":\"2021-09-27T16:56:36.152Z\",\"runAt\":\"2021-09-27T16:51:34.100Z\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"startedAt\":\"2021-09-27T16:51:36.152Z\",\"state\":\"{}\",\"params\":\"{}\",\"ownerId\":\"kibana:0c8b1efe-3db9-41af-9aa0-c1efe35532d5\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\",\"attempts\":1,\"status\":\"running\"},\"updated_at\":\"2021-09-27T16:51:36.205Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","taskManager"],"pid":45398,"message":"Running task search_sessions_monitor \"data_enhanced_search_sessions_monitor\""}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","dataEnhanced","data_enhanced"],"pid":45398,"message":"search_sessions_monitor Fetching sessions from page 1"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=100\n{\"size\":100,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"match\":{\"search-session.persisted\":\"true\"}}],\"minimum_should_match\":1}},{\"bool\":{\"should\":[{\"match\":{\"search-session.status\":\"in_progress\"}}],\"minimum_should_match\":1}}]}},{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"search-session\"}}],\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}},\"sort\":[{\"search-session.touched\":{\"order\":\"asc\",\"unmapped_type\":\"date\"}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/security_oss/app_state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/licensing/feature_usage/register."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/banners/info."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/saved_objects_tagging/tags."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":112},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":112,"accept-ranges":"bytes"},"responseTime":74}},"url":{"path":"/internal/security_oss/app_state","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /internal/security_oss/app_state 200 74ms - 112.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_bulk?refresh=false&_source_includes=originId&require_alias=true\n{\"update\":{\"_id\":\"task:data_enhanced_search_sessions_monitor\",\"_index\":\".kibana_task_manager_7.15.0\"}}\n{\"doc\":{\"task\":{\"runAt\":\"2021-09-27T16:51:46.152Z\",\"state\":\"{}\",\"schedule\":{\"interval\":\"10s\"},\"attempts\":0,\"status\":\"idle\",\"startedAt\":null,\"retryAt\":null,\"ownerId\":null,\"taskType\":\"search_sessions_monitor\",\"traceparent\":\"00-b1bcc17e09723dc422c464d9c57feac7-9b770845b7203e9c-01\",\"params\":\"{}\",\"scheduledAt\":\"2021-09-27T16:50:45.692Z\"},\"updated_at\":\"2021-09-27T16:51:36.342Z\"}}\n"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/security/me."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /api/saved_objects/_bulk_get."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{"bytes":333},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":333,"accept-ranges":"bytes"},"responseTime":104}},"url":{"path":"/internal/security/me","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /internal/security/me 200 104ms - 333.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/app/home","content-length":"280"}},"response":{"body":{"bytes":16},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":16},"responseTime":128}},"url":{"path":"/internal/licensing/feature_usage/register","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /internal/licensing/feature_usage/register 200 128ms - 16.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:tag/find\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_search?from=0&rest_total_hits_as_int=true&size=10000\n{\"size\":10000,\"seq_no_primary_term\":true,\"from\":0,\"query\":{\"bool\":{\"filter\":[{\"bool\":{\"should\":[{\"bool\":{\"must\":[{\"term\":{\"type\":\"tag\"}}],\"should\":[{\"bool\":{\"must_not\":[{\"exists\":{\"field\":\"namespace\"}}]}}],\"minimum_should_match\":1,\"must_not\":[{\"exists\":{\"field\":\"namespaces\"}}]}}],\"minimum_should_match\":1}}]}}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{"bytes":11},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":11,"accept-ranges":"bytes"},"responseTime":186}},"url":{"path":"/api/saved_objects_tagging/tags","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/saved_objects_tagging/tags 200 186ms - 11.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/global_search/searchable_types."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:config/get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":143},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":143,"accept-ranges":"bytes"},"responseTime":207}},"url":{"path":"/internal/global_search/searchable_types","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /internal/global_search/searchable_types 200 207ms - 143.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"index\":[],\"application\":[{\"application\":\"kibana-.kibana\",\"resources\":[\"space:default\"],\"privileges\":[\"version:7.15.0\",\"login:\",\"saved_object:7.15.0:telemetry/bulk_get\"]}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/config%3A7.15.0"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","accept-language":"en-gb","accept-encoding":"gzip, deflate"}},"response":{"body":{"bytes":118},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":118,"accept-ranges":"bytes"},"responseTime":338}},"url":{"path":"/api/banners/info","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /api/banners/info 200 338ms - 118.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /.kibana_7.15.0/_update/core-usage-stats%3Acore-usage-stats?refresh=false&require_alias=true&_source=true\n{\"script\":{\"source\":\"\\n for (int i = 0; i < params.counterFieldNames.length; i++) {\\n def counterFieldName = params.counterFieldNames[i];\\n def count = params.counts[i];\\n\\n if (ctx._source[params.type][counterFieldName] == null) {\\n ctx._source[params.type][counterFieldName] = count;\\n }\\n else {\\n ctx._source[params.type][counterFieldName] += count;\\n }\\n }\\n ctx._source.updated_at = params.time;\\n \",\"lang\":\"painless\",\"params\":{\"counts\":[1,1,1],\"counterFieldNames\":[\"apiCalls.savedObjectsBulkGet.total\",\"apiCalls.savedObjectsBulkGet.namespace.default.total\",\"apiCalls.savedObjectsBulkGet.namespace.default.kibanaRequest.yes\"],\"time\":\"2021-09-27T16:51:36.573Z\",\"type\":\"core-usage-stats\"}},\"upsert\":{\"core-usage-stats\":{\"apiCalls.savedObjectsBulkGet.total\":1,\"apiCalls.savedObjectsBulkGet.namespace.default.total\":1,\"apiCalls.savedObjectsBulkGet.namespace.default.kibanaRequest.yes\":1},\"type\":\"core-usage-stats\",\"migrationVersion\":{\"core-usage-stats\":\"7.14.1\"},\"coreMigrationVersion\":\"7.15.0\",\"updated_at\":\"2021-09-27T16:51:36.573Z\"}}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/security/me."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/security/session."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_mget\n{\"docs\":[{\"_id\":\"telemetry:telemetry\",\"_index\":\".kibana_7.15.0\",\"_source\":{}}]}"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"POST","mime_type":"application/json","referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","accept":"*/*","kbn-version":"7.15.0","accept-encoding":"gzip, deflate","accept-language":"en-gb","content-type":"application/json","origin":"http://localhost:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","connection":"keep-alive","referer":"http://localhost:5601/app/home","content-length":"39"}},"response":{"body":{"bytes":226},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":226},"responseTime":337}},"url":{"path":"/api/saved_objects/_bulk_get","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"POST /api/saved_objects/_bulk_get 200 337ms - 226.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_7.15.0/_doc/space%3Adefault"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","http","server","response"],"pid":45398,"client":{"ip":"127.0.0.1"},"http":{"request":{"method":"GET","mime_type":null,"referrer":"http://localhost:5601/app/home","headers":{"host":"localhost:5601","content-type":"application/json","accept-encoding":"gzip, deflate","connection":"keep-alive","kbn-version":"7.15.0","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15","referer":"http://localhost:5601/app/home","kbn-system-request":"true","accept-language":"en-gb"}},"response":{"body":{"bytes":333},"status_code":200,"headers":{"x-content-type-options":"nosniff","referrer-policy":"no-referrer-when-downgrade","kbn-name":"macbook.lan","kbn-license-sig":"bfa73c5cbced4ec483909840f2225acbf87ab2a0fb38dad5d61dd7d11ad8fe9f","content-type":"application/json; charset=utf-8","cache-control":"private, no-cache, no-store, must-revalidate","content-length":333,"accept-ranges":"bytes"},"responseTime":216}},"url":{"path":"/internal/security/me","query":""},"user_agent":{"original":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0 Safari/605.1.15"},"message":"GET /internal/security/me 200 216ms - 333.0B"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /_security/_authenticate"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Request has been authenticated via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate user request to /internal/spaces/_active_space."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","plugins","security","basic","basic"],"pid":45398,"message":"Trying to authenticate via state."}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nGET /.kibana_security_session_1/_doc/u4y5ZwdzrFPgjbry0w56XF0Gs%2FO1gevPNlNpC4mXuqo%3D"}
{"type":"log","@timestamp":"2021-09-27T18:51:36+02:00","tags":["debug","elasticsearch","query","data"],"pid":45398,"message":"200\nPOST /_security/user/_has_privileges\n{\"cluster\":[\"manage_watcher\",\"monitor_watcher\",\"manage\",\"manage_security\",\"manage_api_key\",\"manage_own_api_key\",\"monitor_transform\",\"manage_pipeline\",\"cluster:monitor/nodes/info\",\"cluster:admin/snapshot\",\"cluster:admin/repository\",\"monitor\",\"manage_rollup\",\"manage_ccr\",\"manage_ilm\",\"manage_logstash_pipelines\"],\"index\":[{\"names\":[\".watches\"],\"privileges\":[\"read\",\"rea
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment