Skip to content

Instantly share code, notes, and snippets.

@muthug91

muthug91/--log.level debug Secret

Created February 15, 2021 18:02
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save muthug91/d9e898d3880bfb4073c06d053e6212b0 to your computer and use it in GitHub Desktop.
Save muthug91/d9e898d3880bfb4073c06d053e6212b0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
--log.level debug
[INFO ] 2021-02-15 18:31:56.176 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7}
[WARN ] 2021-02-15 18:31:56.176 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7}
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44868<->IP:9200
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[WARN ] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "name" : "VDC-Dev-Node2",[\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.247 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.247 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51178<->IP:9200
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.309 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.309 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[WARN ] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.314 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "name" : "VDC-Dev-Node3",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.335 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.335 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000
[INFO ] 2021-02-15 18:31:56.342 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]}
[DEBUG] 2021-02-15 18:31:56.346 [[main]-pipeline-manager] elasticsearch - Normalizing http path {:path=>nil, :normalized=>nil}
[INFO ] 2021-02-15 18:31:56.350 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/]}}
[DEBUG] 2021-02-15 18:31:56.351 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 0; route allocated: 0 of 100; total allocated: 0 of 1000]
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "name" : "VDC-Dev-Node1",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.387 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.387 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[INFO ] 2021-02-15 18:31:56.388 [Ruby-0-Thread-9: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled}
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:45880<->IP:9200
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "GET /_xpack HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[WARN ] 2021-02-15 18:31:56.414 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "name" : "VDC-Dev-Node1",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[INFO ] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7}
[WARN ] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7}
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.435 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "content-length: 1228[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}"
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << content-length: 1228
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.444 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.444 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[INFO ] 2021-02-15 18:31:56.445 [Ruby-0-Thread-9: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-length: 696[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-length: 696
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"}
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44874<->IP:9200
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[WARN ] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.511 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "name" : "VDC-Dev-Node2",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.535 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51184<->IP:9200
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[WARN ] 2021-02-15 18:31:56.564 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "name" : "VDC-Dev-Node3",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.611 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000
[INFO ] 2021-02-15 18:31:56.623 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]}
[DEBUG] 2021-02-15 18:31:56.624 [[main]-pipeline-manager] elasticsearch - Normalizing http path {:path=>nil, :normalized=>nil}
[INFO ] 2021-02-15 18:31:56.628 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/]}}
[DEBUG] 2021-02-15 18:31:56.628 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 0; route allocated: 0 of 100; total allocated: 0 of 1000]
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.662 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "name" : "VDC-Dev-Node2",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[INFO ] 2021-02-15 18:31:56.664 [Ruby-0-Thread-11: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled}
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "GET /_xpack HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:45886<->IP:9200
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "content-length: 1228[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}"
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << content-length: 1228
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[INFO ] 2021-02-15 18:31:56.736 [Ruby-0-Thread-11: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[WARN ] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "name" : "VDC-Dev-Node1",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[INFO ] 2021-02-15 18:31:56.744 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7}
[WARN ] 2021-02-15 18:31:56.744 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7}
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-length: 696[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-length: 696
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"}
[DEBUG] 2021-02-15 18:31:56.783 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000]
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44880<->IP:9200
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[WARN ] 2021-02-15 18:31:56.803 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.805 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "name" : "VDC-Dev-Node2",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.842 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"}
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000]
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2]
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256]
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N]
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51190<->IP:9200
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> HEAD / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "HEAD / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[WARN ] 2021-02-15 18:31:56.878 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"}
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "name" : "VDC-Dev-Node3",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> GET /_license HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "GET /_license HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 335[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "license" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "status" : "active",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "type" : "basic",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issue_date_in_millis" : 1612432324803,[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "max_nodes" : 1000,[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issued_to" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issuer" : "elasticsearch",[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "start_date_in_millis" : -1[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " }[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 335
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.913 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000
[INFO ] 2021-02-15 18:31:56.924 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]}
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Executing request GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> GET / HTTP/1.1
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "GET / HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "content-length: 536[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "{[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "name" : "VDC-Dev-Node3",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "cluster_name" : "VDC-ELK-Dev",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "version" : {[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "number" : "7.9.1",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_flavor" : "default",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_type" : "rpm",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_snapshot" : false,[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "lucene_version" : "8.6.2",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " },[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "tagline" : "You Know, for Search"[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "}[\n]"
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << content-length: 536
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[INFO ] 2021-02-15 18:31:57.048 [Ruby-0-Thread-13: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled}
[DEBUG] 2021-02-15 18:31:57.050 [[main]-pipeline-manager] grok - Grok patterns path {:paths=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-patterns-core-4.1.2/patterns", "/usr/share/logstash/patterns/*"]}
[DEBUG] 2021-02-15 18:31:57.054 [[main]-pipeline-manager] grok - Grok patterns path {:paths=>[]}
[DEBUG] 2021-02-15 18:31:57.055 [[main]-pipeline-manager] grok - Match data {:match=>{"message"=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}}
[DEBUG] 2021-02-15 18:31:57.059 [[main]-pipeline-manager] grok - regexp: /message {:pattern=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:57.084 [Ruby-0-Thread-13: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> GET /_xpack HTTP/1.1
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Length: 0
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "GET /_xpack HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.128 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-length: 1228[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}"
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-length: 1228
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.182 [[main]-pipeline-manager] grok - Adding pattern {"S3_REQUEST_LINE"=>"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})"}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"S3_ACCESS_LOG"=>"%{WORD:owner} %{NOTSPACE:bucket} \\[%{HTTPDATE:timestamp}\\] %{IP:clientip} %{NOTSPACE:requester} %{NOTSPACE:request_id} %{NOTSPACE:operation} %{NOTSPACE:key} (?:\"%{S3_REQUEST_LINE}\"|-) (?:%{INT:response:int}|-) (?:-|%{NOTSPACE:error_code}) (?:%{INT:bytes:int}|-) (?:%{INT:object_size:int}|-) (?:%{INT:request_time_ms:int}|-) (?:%{INT:turnaround_time_ms:int}|-) (?:%{QS:referrer}|-) (?:\"?%{QS:agent}\"?|-) (?:-|%{NOTSPACE:version_id})"}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_URIPATHPARAM"=>"%{URIPATH:path}(?:%{URIPARAM:params})?"}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_URI"=>"%{URIPROTO:proto}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST:urihost})?(?:%{ELB_URIPATHPARAM})?"}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_REQUEST_LINE"=>"(?:%{WORD:verb} %{ELB_URI:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})"}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_ACCESS_LOG"=>"%{TIMESTAMP_ISO8601:timestamp} %{NOTSPACE:elb} %{IP:clientip}:%{INT:clientport:int} (?:(%{IP:backendip}:?:%{INT:backendport:int})|-) %{NUMBER:request_processing_time:float} %{NUMBER:backend_processing_time:float} %{NUMBER:response_processing_time:float} %{INT:response:int} %{INT:backend_response:int} %{INT:received_bytes:int} %{INT:bytes:int} \"%{ELB_REQUEST_LINE}\""}
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"CLOUDFRONT_ACCESS_LOG"=>"(?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY}\\t%{TIME})\\t%{WORD:x_edge_location}\\t(?:%{NUMBER:sc_bytes:int}|-)\\t%{IPORHOST:clientip}\\t%{WORD:cs_method}\\t%{HOSTNAME:cs_host}\\t%{NOTSPACE:cs_uri_stem}\\t%{NUMBER:sc_status:int}\\t%{GREEDYDATA:referrer}\\t%{GREEDYDATA:agent}\\t%{GREEDYDATA:cs_uri_query}\\t%{GREEDYDATA:cookies}\\t%{WORD:x_edge_result_type}\\t%{NOTSPACE:x_edge_request_id}\\t%{HOSTNAME:x_host_header}\\t%{URIPROTO:cs_protocol}\\t%{INT:cs_bytes:int}\\t%{GREEDYDATA:time_taken:float}\\t%{GREEDYDATA:x_forwarded_for}\\t%{GREEDYDATA:ssl_protocol}\\t%{GREEDYDATA:ssl_cipher}\\t%{GREEDYDATA:x_edge_response_result_type}"}
[DEBUG] 2021-02-15 18:31:57.184 [[main]-pipeline-manager] grok - Adding pattern {"BRO_HTTP"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{INT:trans_depth}\\t%{GREEDYDATA:method}\\t%{GREEDYDATA:domain}\\t%{GREEDYDATA:uri}\\t%{GREEDYDATA:referrer}\\t%{GREEDYDATA:user_agent}\\t%{NUMBER:request_body_len}\\t%{NUMBER:response_body_len}\\t%{GREEDYDATA:status_code}\\t%{GREEDYDATA:status_msg}\\t%{GREEDYDATA:info_code}\\t%{GREEDYDATA:info_msg}\\t%{GREEDYDATA:filename}\\t%{GREEDYDATA:bro_tags}\\t%{GREEDYDATA:username}\\t%{GREEDYDATA:password}\\t%{GREEDYDATA:proxied}\\t%{GREEDYDATA:orig_fuids}\\t%{GREEDYDATA:orig_mime_types}\\t%{GREEDYDATA:resp_fuids}\\t%{GREEDYDATA:resp_mime_types}"}
[DEBUG] 2021-02-15 18:31:57.189 [[main]-pipeline-manager] grok - Adding pattern {"BRO_DNS"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{WORD:proto}\\t%{INT:trans_id}\\t%{GREEDYDATA:query}\\t%{GREEDYDATA:qclass}\\t%{GREEDYDATA:qclass_name}\\t%{GREEDYDATA:qtype}\\t%{GREEDYDATA:qtype_name}\\t%{GREEDYDATA:rcode}\\t%{GREEDYDATA:rcode_name}\\t%{GREEDYDATA:AA}\\t%{GREEDYDATA:TC}\\t%{GREEDYDATA:RD}\\t%{GREEDYDATA:RA}\\t%{GREEDYDATA:Z}\\t%{GREEDYDATA:answers}\\t%{GREEDYDATA:TTLs}\\t%{GREEDYDATA:rejected}"}
[DEBUG] 2021-02-15 18:31:57.189 [[main]-pipeline-manager] grok - Adding pattern {"BRO_CONN"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{WORD:proto}\\t%{GREEDYDATA:service}\\t%{NUMBER:duration}\\t%{NUMBER:orig_bytes}\\t%{NUMBER:resp_bytes}\\t%{GREEDYDATA:conn_state}\\t%{GREEDYDATA:local_orig}\\t%{GREEDYDATA:missed_bytes}\\t%{GREEDYDATA:history}\\t%{GREEDYDATA:orig_pkts}\\t%{GREEDYDATA:orig_ip_bytes}\\t%{GREEDYDATA:resp_pkts}\\t%{GREEDYDATA:resp_ip_bytes}\\t%{GREEDYDATA:tunnel_parents}"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"BRO_FILES"=>"%{NUMBER:ts}\\t%{NOTSPACE:fuid}\\t%{IP:tx_hosts}\\t%{IP:rx_hosts}\\t%{NOTSPACE:conn_uids}\\t%{GREEDYDATA:source}\\t%{GREEDYDATA:depth}\\t%{GREEDYDATA:analyzers}\\t%{GREEDYDATA:mime_type}\\t%{GREEDYDATA:filename}\\t%{GREEDYDATA:duration}\\t%{GREEDYDATA:local_orig}\\t%{GREEDYDATA:is_orig}\\t%{GREEDYDATA:seen_bytes}\\t%{GREEDYDATA:total_bytes}\\t%{GREEDYDATA:missing_bytes}\\t%{GREEDYDATA:overflow_bytes}\\t%{GREEDYDATA:timedout}\\t%{GREEDYDATA:parent_fuid}\\t%{GREEDYDATA:md5}\\t%{GREEDYDATA:sha1}\\t%{GREEDYDATA:sha256}\\t%{GREEDYDATA:extracted}"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"RUBY_LOGLEVEL"=>"(?:DEBUG|FATAL|ERROR|WARN|INFO)"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"RUBY_LOGGER"=>"[DFEWI], \\[%{TIMESTAMP_ISO8601:timestamp} #%{POSINT:pid}\\] *%{RUBY_LOGLEVEL:loglevel} -- +%{DATA:progname}: %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_MSGID"=>"[0-9A-Za-z]{6}-[0-9A-Za-z]{6}-[0-9A-Za-z]{2}"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_FLAGS"=>"(<=|[-=>*]>|[*]{2}|==)"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_DATE"=>"%{YEAR:exim_year}-%{MONTHNUM:exim_month}-%{MONTHDAY:exim_day} %{TIME:exim_time}"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_PID"=>"\\[%{POSINT}\\]"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_QT"=>"((\\d+y)?(\\d+w)?(\\d+d)?(\\d+h)?(\\d+m)?(\\d+s)?)"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_EXCLUDE_TERMS"=>"(Message is frozen|(Start|End) queue run| Warning: | retry time not reached | no (IP address|host name) found for (IP address|host) | unexpected disconnection while reading SMTP command | no immediate delivery: |another process is handling this message)"}
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_REMOTE_HOST"=>"(H=(%{NOTSPACE:remote_hostname} )?(\\(%{NOTSPACE:remote_heloname}\\) )?\\[%{IP:remote_host}\\])"}
[INFO ] 2021-02-15 18:31:57.200 [Ruby-0-Thread-13: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> HEAD /_template/logstash HTTP/1.1
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Connection: Keep-Alive
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Type: application/json
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Host: IP:9200
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_INTERFACE"=>"(I=\\[%{IP:exim_interface}\\](:%{NUMBER:exim_interface_port}))"}
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_PROTOCOL"=>"(P=%{NOTSPACE:protocol})"}
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_MSG_SIZE"=>"(S=%{NUMBER:exim_msg_size})"}
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_HEADER_ID"=>"(id=%{NOTSPACE:exim_header_id})"}
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_SUBJECT"=>"(T=%{QS:exim_subject})"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVEAUDIT"=>"%{TIMESTAMP_ISO8601:timestamp}:"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"POSTGRESQL"=>"%{DATESTAMP:timestamp} %{TZ} %{DATA:user_id} %{GREEDYDATA:connection_id} %{POSINT:pid}"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOSTIME"=>"\\[%{NUMBER:nagios_epoch}\\]"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_CURRENT_SERVICE_STATE"=>"CURRENT SERVICE STATE"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_CURRENT_HOST_STATE"=>"CURRENT HOST STATE"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_NOTIFICATION"=>"SERVICE NOTIFICATION"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_NOTIFICATION"=>"HOST NOTIFICATION"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_ALERT"=>"SERVICE ALERT"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_ALERT"=>"HOST ALERT"}
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_FLAPPING_ALERT"=>"SERVICE FLAPPING ALERT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_FLAPPING_ALERT"=>"HOST FLAPPING ALERT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_DOWNTIME_ALERT"=>"SERVICE DOWNTIME ALERT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_DOWNTIME_ALERT"=>"HOST DOWNTIME ALERT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_PASSIVE_SERVICE_CHECK"=>"PASSIVE SERVICE CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_PASSIVE_HOST_CHECK"=>"PASSIVE HOST CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_EVENT_HANDLER"=>"SERVICE EVENT HANDLER"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_EVENT_HANDLER"=>"HOST EVENT HANDLER"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_EXTERNAL_COMMAND"=>"EXTERNAL COMMAND"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_TIMEPERIOD_TRANSITION"=>"TIMEPERIOD TRANSITION"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_SVC_CHECK"=>"DISABLE_SVC_CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_SVC_CHECK"=>"ENABLE_SVC_CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_CHECK"=>"DISABLE_HOST_CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_CHECK"=>"ENABLE_HOST_CHECK"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_PROCESS_SERVICE_CHECK_RESULT"=>"PROCESS_SERVICE_CHECK_RESULT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_PROCESS_HOST_CHECK_RESULT"=>"PROCESS_HOST_CHECK_RESULT"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_SCHEDULE_SERVICE_DOWNTIME"=>"SCHEDULE_SERVICE_DOWNTIME"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_SCHEDULE_HOST_DOWNTIME"=>"SCHEDULE_HOST_DOWNTIME"}
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_SVC_NOTIFICATIONS"=>"DISABLE_HOST_SVC_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_SVC_NOTIFICATIONS"=>"ENABLE_HOST_SVC_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_NOTIFICATIONS"=>"DISABLE_HOST_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_NOTIFICATIONS"=>"ENABLE_HOST_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_SVC_NOTIFICATIONS"=>"DISABLE_SVC_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_SVC_NOTIFICATIONS"=>"ENABLE_SVC_NOTIFICATIONS"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_WARNING"=>"Warning:%{SPACE}%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_CURRENT_SERVICE_STATE"=>"%{NAGIOS_TYPE_CURRENT_SERVICE_STATE:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statetype};%{DATA:nagios_statecode};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_CURRENT_HOST_STATE"=>"%{NAGIOS_TYPE_CURRENT_HOST_STATE:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statetype};%{DATA:nagios_statecode};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_NOTIFICATION"=>"%{NAGIOS_TYPE_SERVICE_NOTIFICATION:nagios_type}: %{DATA:nagios_notifyname};%{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_contact};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_NOTIFICATION"=>"%{NAGIOS_TYPE_HOST_NOTIFICATION:nagios_type}: %{DATA:nagios_notifyname};%{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_contact};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_ALERT"=>"%{NAGIOS_TYPE_SERVICE_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{NUMBER:nagios_attempt};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_ALERT"=>"%{NAGIOS_TYPE_HOST_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{NUMBER:nagios_attempt};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_FLAPPING_ALERT"=>"%{NAGIOS_TYPE_SERVICE_FLAPPING_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_FLAPPING_ALERT"=>"%{NAGIOS_TYPE_HOST_FLAPPING_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_message}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_DOWNTIME_ALERT"=>"%{NAGIOS_TYPE_SERVICE_DOWNTIME_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_DOWNTIME_ALERT"=>"%{NAGIOS_TYPE_HOST_DOWNTIME_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_PASSIVE_SERVICE_CHECK"=>"%{NAGIOS_TYPE_PASSIVE_SERVICE_CHECK:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_PASSIVE_HOST_CHECK"=>"%{NAGIOS_TYPE_PASSIVE_HOST_CHECK:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_EVENT_HANDLER"=>"%{NAGIOS_TYPE_SERVICE_EVENT_HANDLER:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{DATA:nagios_event_handler_name}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_EVENT_HANDLER"=>"%{NAGIOS_TYPE_HOST_EVENT_HANDLER:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{DATA:nagios_event_handler_name}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TIMEPERIOD_TRANSITION"=>"%{NAGIOS_TYPE_TIMEPERIOD_TRANSITION:nagios_type}: %{DATA:nagios_service};%{DATA:nagios_unknown1};%{DATA:nagios_unknown2}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_SVC_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_SVC_CHECK:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_CHECK:nagios_command};%{DATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_SVC_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_SVC_CHECK:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_CHECK:nagios_command};%{DATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_PROCESS_SERVICE_CHECK_RESULT"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_PROCESS_SERVICE_CHECK_RESULT:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_check_result}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_PROCESS_HOST_CHECK_RESULT"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_PROCESS_HOST_CHECK_RESULT:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_check_result}"}
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_SVC_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_SVC_NOTIFICATIONS:nagios_command};%{DATA:nagios_hostname};%{GREEDYDATA:nagios_service}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_SVC_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_SVC_NOTIFICATIONS:nagios_command};%{DATA:nagios_hostname};%{GREEDYDATA:nagios_service}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_SCHEDULE_HOST_DOWNTIME"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_SCHEDULE_HOST_DOWNTIME:nagios_command};%{DATA:nagios_hostname};%{NUMBER:nagios_start_time};%{NUMBER:nagios_end_time};%{NUMBER:nagios_fixed};%{NUMBER:nagios_trigger_id};%{NUMBER:nagios_duration};%{DATA:author};%{DATA:comment}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOSLOGLINE"=>"%{NAGIOSTIME} (?:%{NAGIOS_WARNING}|%{NAGIOS_CURRENT_SERVICE_STATE}|%{NAGIOS_CURRENT_HOST_STATE}|%{NAGIOS_SERVICE_NOTIFICATION}|%{NAGIOS_HOST_NOTIFICATION}|%{NAGIOS_SERVICE_ALERT}|%{NAGIOS_HOST_ALERT}|%{NAGIOS_SERVICE_FLAPPING_ALERT}|%{NAGIOS_HOST_FLAPPING_ALERT}|%{NAGIOS_SERVICE_DOWNTIME_ALERT}|%{NAGIOS_HOST_DOWNTIME_ALERT}|%{NAGIOS_PASSIVE_SERVICE_CHECK}|%{NAGIOS_PASSIVE_HOST_CHECK}|%{NAGIOS_SERVICE_EVENT_HANDLER}|%{NAGIOS_HOST_EVENT_HANDLER}|%{NAGIOS_TIMEPERIOD_TRANSITION}|%{NAGIOS_EC_LINE_DISABLE_SVC_CHECK}|%{NAGIOS_EC_LINE_ENABLE_SVC_CHECK}|%{NAGIOS_EC_LINE_DISABLE_HOST_CHECK}|%{NAGIOS_EC_LINE_ENABLE_HOST_CHECK}|%{NAGIOS_EC_LINE_PROCESS_HOST_CHECK_RESULT}|%{NAGIOS_EC_LINE_PROCESS_SERVICE_CHECK_RESULT}|%{NAGIOS_EC_LINE_SCHEDULE_HOST_DOWNTIME}|%{NAGIOS_EC_LINE_DISABLE_HOST_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_HOST_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_DISABLE_HOST_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_HOST_NOTIFICATIONS}|%{NAGIOS_EC_LINE_DISABLE_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_SVC_NOTIFICATIONS})"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISTIMESTAMP"=>"%{MONTHDAY} %{MONTH} %{TIME}"}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISLOG"=>"\\[%{POSINT:pid}\\] %{REDISTIMESTAMP:timestamp} \\* "}
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISMONLOG"=>"%{NUMBER:timestamp} \\[%{INT:database} %{IP:client}:%{NUMBER:port}\\] \"%{WORD:command}\"\\s?%{GREEDYDATA:params}"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"SQUID3"=>"%{NUMBER:timestamp}\\s+%{NUMBER:duration}\\s%{IP:client_address}\\s%{WORD:cache_result}/%{POSINT:status_code}\\s%{NUMBER:bytes}\\s%{WORD:request_method}\\s%{NOTSPACE:url}\\s(%{NOTSPACE:user}|-)\\s%{WORD:hierarchy_code}/%{IPORHOST:server}\\s%{NOTSPACE:content_type}"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"USERNAME"=>"[a-zA-Z0-9._-]+"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"USER"=>"%{USERNAME}"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"EMAILLOCALPART"=>"[a-zA-Z][a-zA-Z0-9_.+-=:]+"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"EMAILADDRESS"=>"%{EMAILLOCALPART}@%{HOSTNAME}"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"INT"=>"(?:[+-]?(?:[0-9]+))"}
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"BASE10NUM"=>"(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NUMBER"=>"(?:%{BASE10NUM})"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"BASE16NUM"=>"(?<![0-9A-Fa-f])(?:[+-]?(?:0x)?(?:[0-9A-Fa-f]+))"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"BASE16FLOAT"=>"\\b(?<![0-9A-Fa-f.])(?:[+-]?(?:0x)?(?:(?:[0-9A-Fa-f]+(?:\\.[0-9A-Fa-f]*)?)|(?:\\.[0-9A-Fa-f]+)))\\b"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"POSINT"=>"\\b(?:[1-9][0-9]*)\\b"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NONNEGINT"=>"\\b(?:[0-9]+)\\b"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"WORD"=>"\\b\\w+\\b"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NOTSPACE"=>"\\S+"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"SPACE"=>"\\s*"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"DATA"=>".*?"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"GREEDYDATA"=>".*"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"QUOTEDSTRING"=>"(?>(?<!\\\\)(?>\"(?>\\\\.|[^\\\\\"]+)+\"|\"\"|(?>'(?>\\\\.|[^\\\\']+)+')|''|(?>`(?>\\\\.|[^\\\\`]+)+`)|``))"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"UUID"=>"[A-Fa-f0-9]{8}-(?:[A-Fa-f0-9]{4}-){3}[A-Fa-f0-9]{12}"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"URN"=>"urn:[0-9A-Za-z][0-9A-Za-z-]{0,31}:(?:%[0-9a-fA-F]{2}|[0-9A-Za-z()+,.:=@;$_!*'/?#-])+"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"MAC"=>"(?:%{CISCOMAC}|%{WINDOWSMAC}|%{COMMONMAC})"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"CISCOMAC"=>"(?:(?:[A-Fa-f0-9]{4}\\.){2}[A-Fa-f0-9]{4})"}
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"WINDOWSMAC"=>"(?:(?:[A-Fa-f0-9]{2}-){5}[A-Fa-f0-9]{2})"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"COMMONMAC"=>"(?:(?:[A-Fa-f0-9]{2}:){5}[A-Fa-f0-9]{2})"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPV6"=>"((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:)))(%.+)?"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPV4"=>"(?<![0-9])(?:(?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]))(?![0-9])"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IP"=>"(?:%{IPV6}|%{IPV4})"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"HOSTNAME"=>"\\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\\.?|\\b)"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPORHOST"=>"(?:%{IP}|%{HOSTNAME})"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"HOSTPORT"=>"%{IPORHOST}:%{POSINT}"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"PATH"=>"(?:%{UNIXPATH}|%{WINPATH})"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"UNIXPATH"=>"(/([\\w_%!$@:.,+~-]+|\\\\.)*)+"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"TTY"=>"(?:/dev/(pts|tty([pq])?)(\\w+)?/?(?:[0-9]+))"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"WINPATH"=>"(?>[A-Za-z]+:|\\\\)(?:\\\\[^\\\\?*]*)+"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPROTO"=>"[A-Za-z]([A-Za-z0-9+\\-.]+)+"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIHOST"=>"%{IPORHOST}(?::%{POSINT:port})?"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPATH"=>"(?:/[A-Za-z0-9$.+!*'(){},~:;=@#%&_\\-]*)+"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPARAM"=>"\\?[A-Za-z0-9$.+!*'|(){},~@#%&/=:;_?\\-\\[\\]<>]*"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPATHPARAM"=>"%{URIPATH}(?:%{URIPARAM})?"}
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URI"=>"%{URIPROTO}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST})?(?:%{URIPATHPARAM})?"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTH"=>"\\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\\b"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHNUM"=>"(?:0?[1-9]|1[0-2])"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHNUM2"=>"(?:0[1-9]|1[0-2])"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHDAY"=>"(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"DAY"=>"(?:Mon(?:day)?|Tue(?:sday)?|Wed(?:nesday)?|Thu(?:rsday)?|Fri(?:day)?|Sat(?:urday)?|Sun(?:day)?)"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"YEAR"=>"(?>\\d\\d){1,2}"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"HOUR"=>"(?:2[0123]|[01]?[0-9])"}
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MINUTE"=>"(?:[0-5][0-9])"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SECOND"=>"(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TIME"=>"(?!<[0-9])%{HOUR}:%{MINUTE}(?::%{SECOND})(?![0-9])"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE_US"=>"%{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE_EU"=>"%{MONTHDAY}[./-]%{MONTHNUM}[./-]%{YEAR}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"ISO8601_TIMEZONE"=>"(?:Z|[+-]%{HOUR}(?::?%{MINUTE}))"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"ISO8601_SECOND"=>"(?:%{SECOND}|60)"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TIMESTAMP_ISO8601"=>"%{YEAR}-%{MONTHNUM}-%{MONTHDAY}[T ]%{HOUR}:?%{MINUTE}(?::?%{SECOND})?%{ISO8601_TIMEZONE}?"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE"=>"%{DATE_US}|%{DATE_EU}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP"=>"%{DATE}[- ]%{TIME}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TZ"=>"(?:[APMCE][SD]T|UTC)"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_RFC822"=>"%{DAY} %{MONTH} %{MONTHDAY} %{YEAR} %{TIME} %{TZ}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_RFC2822"=>"%{DAY}, %{MONTHDAY} %{MONTH} %{YEAR} %{TIME} %{ISO8601_TIMEZONE}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_OTHER"=>"%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{TZ} %{YEAR}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_EVENTLOG"=>"%{YEAR}%{MONTHNUM2}%{MONTHDAY}%{HOUR}%{MINUTE}%{SECOND}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGTIMESTAMP"=>"%{MONTH} +%{MONTHDAY} %{TIME}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"PROG"=>"[\\x21-\\x5a\\x5c\\x5e-\\x7e]+"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGPROG"=>"%{PROG:program}(?:\\[%{POSINT:pid}\\])?"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGHOST"=>"%{IPORHOST}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGFACILITY"=>"<%{NONNEGINT:facility}.%{NONNEGINT:priority}>"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDATE"=>"%{MONTHDAY}/%{MONTH}/%{YEAR}:%{TIME} %{INT}"}
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"QS"=>"%{QUOTEDSTRING}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGBASE"=>"%{SYSLOGTIMESTAMP:timestamp} (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource} %{SYSLOGPROG}:"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"LOGLEVEL"=>"([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDUSER"=>"%{EMAILADDRESS}|%{USER}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDERROR_DATE"=>"%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_COMMONLOG"=>"%{IPORHOST:clientip} %{HTTPDUSER:ident} %{HTTPDUSER:auth} \\[%{HTTPDATE:timestamp}\\] \"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})\" %{NUMBER:response} (?:%{NUMBER:bytes}|-)"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_COMBINEDLOG"=>"%{HTTPD_COMMONLOG} %{QS:referrer} %{QS:agent}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD20_ERRORLOG"=>"\\[%{HTTPDERROR_DATE:timestamp}\\] \\[%{LOGLEVEL:loglevel}\\] (?:\\[client %{IPORHOST:clientip}\\] ){0,1}%{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD24_ERRORLOG"=>"\\[%{HTTPDERROR_DATE:timestamp}\\] \\[%{WORD:module}:%{LOGLEVEL:loglevel}\\] \\[pid %{POSINT:pid}(:tid %{NUMBER:tid})?\\]( \\(%{POSINT:proxy_errorcode}\\)%{DATA:proxy_message}:)?( \\[client %{IPORHOST:clientip}:%{POSINT:clientport}\\])?( %{DATA:errorcode}:)? %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_ERRORLOG"=>"%{HTTPD20_ERRORLOG}|%{HTTPD24_ERRORLOG}"}
[DEBUG] 2021-02-15 18:31:57.271 [[main]-pipeline-manager] grok - Adding pattern {"COMMONAPACHELOG"=>"%{HTTPD_COMMONLOG}"}
[DEBUG] 2021-02-15 18:31:57.271 [[main]-pipeline-manager] grok - Adding pattern {"COMBINEDAPACHELOG"=>"%{HTTPD_COMBINEDLOG}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYTIME"=>"(?!<[0-9])%{HOUR:haproxy_hour}:%{MINUTE:haproxy_minute}(?::%{SECOND:haproxy_second})(?![0-9])"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYDATE"=>"%{MONTHDAY:haproxy_monthday}/%{MONTH:haproxy_month}/%{YEAR:haproxy_year}:%{HAPROXYTIME:haproxy_time}.%{INT:haproxy_milliseconds}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYCAPTUREDREQUESTHEADERS"=>"%{DATA:captured_request_headers}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYCAPTUREDRESPONSEHEADERS"=>"%{DATA:captured_response_headers}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYHTTPBASE"=>"%{IP:client_ip}:%{INT:client_port} \\[%{HAPROXYDATE:accept_date}\\] %{NOTSPACE:frontend_name} %{NOTSPACE:backend_name}/%{NOTSPACE:server_name} %{INT:time_request}/%{INT:time_queue}/%{INT:time_backend_connect}/%{INT:time_backend_response}/%{NOTSPACE:time_duration} %{INT:http_status_code} %{NOTSPACE:bytes_read} %{DATA:captured_request_cookie} %{DATA:captured_response_cookie} %{NOTSPACE:termination_state} %{INT:actconn}/%{INT:feconn}/%{INT:beconn}/%{INT:srvconn}/%{NOTSPACE:retries} %{INT:srv_queue}/%{INT:backend_queue} (\\{%{HAPROXYCAPTUREDREQUESTHEADERS}\\})?( )?(\\{%{HAPROXYCAPTUREDRESPONSEHEADERS}\\})?( )?\"(<BADREQ>|(%{WORD:http_verb} (%{URIPROTO:http_proto}://)?(?:%{USER:http_user}(?::[^@]*)?@)?(?:%{URIHOST:http_host})?(?:%{URIPATHPARAM:http_request})?( HTTP/%{NUMBER:http_version})?))?\""}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYHTTP"=>"(?:%{SYSLOGTIMESTAMP:syslog_timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) %{IPORHOST:syslog_server} %{SYSLOGPROG}: %{HAPROXYHTTPBASE}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYTCP"=>"(?:%{SYSLOGTIMESTAMP:syslog_timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) %{IPORHOST:syslog_server} %{SYSLOGPROG}: %{IP:client_ip}:%{INT:client_port} \\[%{HAPROXYDATE:accept_date}\\] %{NOTSPACE:frontend_name} %{NOTSPACE:backend_name}/%{NOTSPACE:server_name} %{INT:time_queue}/%{INT:time_backend_connect}/%{NOTSPACE:time_duration} %{NOTSPACE:bytes_read} %{NOTSPACE:termination_state} %{INT:actconn}/%{INT:feconn}/%{INT:beconn}/%{INT:srvconn}/%{NOTSPACE:retries} %{INT:srv_queue}/%{INT:backend_queue}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"NETSCREENSESSIONLOG"=>"%{SYSLOGTIMESTAMP:date} %{IPORHOST:device} %{IPORHOST}: NetScreen device_id=%{WORD:device_id}%{DATA}: start_time=%{QUOTEDSTRING:start_time} duration=%{INT:duration} policy_id=%{INT:policy_id} service=%{DATA:service} proto=%{INT:proto} src zone=%{WORD:src_zone} dst zone=%{WORD:dst_zone} action=%{WORD:action} sent=%{INT:sent} rcvd=%{INT:rcvd} src=%{IPORHOST:src_ip} dst=%{IPORHOST:dst_ip} src_port=%{INT:src_port} dst_port=%{INT:dst_port} src-xlated ip=%{IPORHOST:src_xlated_ip} port=%{INT:src_xlated_port} dst-xlated ip=%{IPORHOST:dst_xlated_ip} port=%{INT:dst_xlated_port} session_id=%{INT:session_id} reason=%{GREEDYDATA:reason}"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_TAGGED_SYSLOG"=>"^<%{POSINT:syslog_pri}>%{CISCOTIMESTAMP:timestamp}( %{SYSLOGHOST:sysloghost})? ?: %%{CISCOTAG:ciscotag}:"}
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"CISCOTIMESTAMP"=>"%{MONTH} +%{MONTHDAY}(?: %{YEAR})? %{TIME}"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOTAG"=>"[A-Z0-9]+-%{INT}-(?:[A-Z0-9_]+)"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_ACTION"=>"Built|Teardown|Deny|Denied|denied|requested|permitted|denied by ACL|discarded|est-allowed|Dropping|created|deleted"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_REASON"=>"Duplicate TCP SYN|Failed to locate egress interface|Invalid transport field|No matching connection|DNS Response|DNS Query|(?:%{WORD}\\s*)*"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_DIRECTION"=>"Inbound|inbound|Outbound|outbound"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_INTERVAL"=>"first hit|%{INT}-second interval"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_XLATE_TYPE"=>"static|dynamic"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104001"=>"\\((?:Primary|Secondary)\\) Switching to ACTIVE - %{GREEDYDATA:switch_reason}"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104002"=>"\\((?:Primary|Secondary)\\) Switching to STANDBY - %{GREEDYDATA:switch_reason}"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104003"=>"\\((?:Primary|Secondary)\\) Switching to FAILED\\."}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104004"=>"\\((?:Primary|Secondary)\\) Switching to OK\\."}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105003"=>"\\((?:Primary|Secondary)\\) Monitoring on [Ii]nterface %{GREEDYDATA:interface_name} waiting"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105004"=>"\\((?:Primary|Secondary)\\) Monitoring on [Ii]nterface %{GREEDYDATA:interface_name} normal"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105005"=>"\\((?:Primary|Secondary)\\) Lost Failover communications with mate on [Ii]nterface %{GREEDYDATA:interface_name}"}
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105008"=>"\\((?:Primary|Secondary)\\) Testing [Ii]nterface %{GREEDYDATA:interface_name}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105009"=>"\\((?:Primary|Secondary)\\) Testing on [Ii]nterface %{GREEDYDATA:interface_name} (?:Passed|Failed)"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106001"=>"%{CISCO_DIRECTION:direction} %{WORD:protocol} connection %{CISCO_ACTION:action} from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port} flags %{GREEDYDATA:tcp_flags} on interface %{GREEDYDATA:interface}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106006_106007_106010"=>"%{CISCO_ACTION:action} %{CISCO_DIRECTION:direction} %{WORD:protocol} (?:from|src) %{IP:src_ip}/%{INT:src_port}(\\(%{DATA:src_fwuser}\\))? (?:to|dst) %{IP:dst_ip}/%{INT:dst_port}(\\(%{DATA:dst_fwuser}\\))? (?:on interface %{DATA:interface}|due to %{CISCO_REASON:reason})"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106014"=>"%{CISCO_ACTION:action} %{CISCO_DIRECTION:direction} %{WORD:protocol} src %{DATA:src_interface}:%{IP:src_ip}(\\(%{DATA:src_fwuser}\\))? dst %{DATA:dst_interface}:%{IP:dst_ip}(\\(%{DATA:dst_fwuser}\\))? \\(type %{INT:icmp_type}, code %{INT:icmp_code}\\)"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106015"=>"%{CISCO_ACTION:action} %{WORD:protocol} \\(%{DATA:policy_id}\\) from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port} flags %{DATA:tcp_flags} on interface %{GREEDYDATA:interface}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106021"=>"%{CISCO_ACTION:action} %{WORD:protocol} reverse path check from %{IP:src_ip} to %{IP:dst_ip} on interface %{GREEDYDATA:interface}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106023"=>"%{CISCO_ACTION:action}( protocol)? %{WORD:protocol} src %{DATA:src_interface}:%{DATA:src_ip}(/%{INT:src_port})?(\\(%{DATA:src_fwuser}\\))? dst %{DATA:dst_interface}:%{DATA:dst_ip}(/%{INT:dst_port})?(\\(%{DATA:dst_fwuser}\\))?( \\(type %{INT:icmp_type}, code %{INT:icmp_code}\\))? by access-group \"?%{DATA:policy_id}\"? \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106100_2_3"=>"access-list %{NOTSPACE:policy_id} %{CISCO_ACTION:action} %{WORD:protocol} for user '%{DATA:src_fwuser}' %{DATA:src_interface}/%{IP:src_ip}\\(%{INT:src_port}\\) -> %{DATA:dst_interface}/%{IP:dst_ip}\\(%{INT:dst_port}\\) hit-cnt %{INT:hit_count} %{CISCO_INTERVAL:interval} \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106100"=>"access-list %{NOTSPACE:policy_id} %{CISCO_ACTION:action} %{WORD:protocol} %{DATA:src_interface}/%{IP:src_ip}\\(%{INT:src_port}\\)(\\(%{DATA:src_fwuser}\\))? -> %{DATA:dst_interface}/%{IP:dst_ip}\\(%{INT:dst_port}\\)(\\(%{DATA:src_fwuser}\\))? hit-cnt %{INT:hit_count} %{CISCO_INTERVAL:interval} \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW304001"=>"%{IP:src_ip}(\\(%{DATA:src_fwuser}\\))? Accessed URL %{IP:dst_ip}:%{GREEDYDATA:dst_url}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW110002"=>"%{CISCO_REASON:reason} for %{WORD:protocol} from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port}"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302010"=>"%{INT:connection_count} in use, %{INT:connection_count_max} most used"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302013_302014_302015_302016"=>"%{CISCO_ACTION:action}(?: %{CISCO_DIRECTION:direction})? %{WORD:protocol} connection %{INT:connection_id} for %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port}( \\(%{IP:src_mapped_ip}/%{INT:src_mapped_port}\\))?(\\(%{DATA:src_fwuser}\\))? to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}( \\(%{IP:dst_mapped_ip}/%{INT:dst_mapped_port}\\))?(\\(%{DATA:dst_fwuser}\\))?( duration %{TIME:duration} bytes %{INT:bytes})?(?: %{CISCO_REASON:reason})?( \\(%{DATA:user}\\))?"}
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302020_302021"=>"%{CISCO_ACTION:action}(?: %{CISCO_DIRECTION:direction})? %{WORD:protocol} connection for faddr %{IP:dst_ip}/%{INT:icmp_seq_num}(?:\\(%{DATA:fwuser}\\))? gaddr %{IP:src_xlated_ip}/%{INT:icmp_code_xlated} laddr %{IP:src_ip}/%{INT:icmp_code}( \\(%{DATA:user}\\))?"}
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW305011"=>"%{CISCO_ACTION:action} %{CISCO_XLATE_TYPE:xlate_type} %{WORD:protocol} translation from %{DATA:src_interface}:%{IP:src_ip}(/%{INT:src_port})?(\\(%{DATA:src_fwuser}\\))? to %{DATA:src_xlated_interface}:%{IP:src_xlated_ip}/%{DATA:src_xlated_port}"}
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW313001_313004_313008"=>"%{CISCO_ACTION:action} %{WORD:protocol} type=%{INT:icmp_type}, code=%{INT:icmp_code} from %{IP:src_ip} on interface %{DATA:interface}( to %{IP:dst_ip})?"}
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW313005"=>"%{CISCO_REASON:reason} for %{WORD:protocol} error message: %{WORD:err_protocol} src %{DATA:err_src_interface}:%{IP:err_src_ip}(\\(%{DATA:err_src_fwuser}\\))? dst %{DATA:err_dst_interface}:%{IP:err_dst_ip}(\\(%{DATA:err_dst_fwuser}\\))? \\(type %{INT:err_icmp_type}, code %{INT:err_icmp_code}\\) on %{DATA:interface} interface\\. Original IP payload: %{WORD:protocol} src %{IP:orig_src_ip}/%{INT:orig_src_port}(\\(%{DATA:orig_src_fwuser}\\))? dst %{IP:orig_dst_ip}/%{INT:orig_dst_port}(\\(%{DATA:orig_dst_fwuser}\\))?"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW321001"=>"Resource '%{WORD:resource_name}' limit of %{POSINT:resource_limit} reached for system"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW402117"=>"%{WORD:protocol}: Received a non-IPSec packet \\(protocol= %{WORD:orig_protocol}\\) from %{IP:src_ip} to %{IP:dst_ip}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW402119"=>"%{WORD:protocol}: Received an %{WORD:orig_protocol} packet \\(SPI= %{DATA:spi}, sequence number= %{DATA:seq_num}\\) from %{IP:src_ip} \\(user= %{DATA:user}\\) to %{IP:dst_ip} that failed anti-replay checking"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW419001"=>"%{CISCO_ACTION:action} %{WORD:protocol} packet from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}, reason: %{GREEDYDATA:reason}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW419002"=>"%{CISCO_REASON:reason} from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port} with different initial sequence number"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW500004"=>"%{CISCO_REASON:reason} for protocol=%{WORD:protocol}, from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW602303_602304"=>"%{WORD:protocol}: An %{CISCO_DIRECTION:direction} %{GREEDYDATA:tunnel_type} SA \\(SPI= %{DATA:spi}\\) between %{IP:src_ip} and %{IP:dst_ip} \\(user= %{DATA:user}\\) has been %{CISCO_ACTION:action}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW710001_710002_710003_710005_710006"=>"%{WORD:protocol} (?:request|access) %{CISCO_ACTION:action} from %{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW713172"=>"Group = %{GREEDYDATA:group}, IP = %{IP:src_ip}, Automatic NAT Detection Status:\\s+Remote end\\s*%{DATA:is_remote_natted}\\s*behind a NAT device\\s+This\\s+end\\s*%{DATA:is_local_natted}\\s*behind a NAT device"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW733100"=>"\\[\\s*%{DATA:drop_type}\\s*\\] drop %{DATA:drop_rate_id} exceeded. Current burst rate is %{INT:drop_rate_current_burst} per second, max configured rate is %{INT:drop_rate_max_burst}; Current average rate is %{INT:drop_rate_current_avg} per second, max configured rate is %{INT:drop_rate_max_avg}; Cumulative total count is %{INT:drop_total_count}"}
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"SHOREWALL"=>"(%{SYSLOGTIMESTAMP:timestamp}) (%{WORD:nf_host}) kernel:.*Shorewall:(%{WORD:nf_action1})?:(%{WORD:nf_action2})?.*IN=(%{USERNAME:nf_in_interface})?.*(OUT= *MAC=(%{COMMONMAC:nf_dst_mac}):(%{COMMONMAC:nf_src_mac})?|OUT=%{USERNAME:nf_out_interface}).*SRC=(%{IPV4:nf_src_ip}).*DST=(%{IPV4:nf_dst_ip}).*LEN=(%{WORD:nf_len}).?*TOS=(%{WORD:nf_tos}).?*PREC=(%{WORD:nf_prec}).?*TTL=(%{INT:nf_ttl}).?*ID=(%{INT:nf_id}).?*PROTO=(%{WORD:nf_protocol}).?*SPT=(%{INT:nf_src_port}?.*DPT=%{INT:nf_dst_port}?.*)"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"SFW2"=>"((%{SYSLOGTIMESTAMP})|(%{TIMESTAMP_ISO8601}))\\s*%{HOSTNAME}\\s*kernel\\S+\\s*%{NAGIOSTIME}\\s*SFW2\\-INext\\-%{NOTSPACE:nf_action}\\s*IN=%{USERNAME:nf_in_interface}.*OUT=((\\s*%{USERNAME:nf_out_interface})|(\\s*))MAC=((%{COMMONMAC:nf_dst_mac}:%{COMMONMAC:nf_src_mac})|(\\s*)).*SRC=%{IP:nf_src_ip}\\s*DST=%{IP:nf_dst_ip}.*PROTO=%{WORD:nf_protocol}((.*SPT=%{INT:nf_src_port}.*DPT=%{INT:nf_dst_port}.*)|())"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RUUID"=>"\\h{32}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RCONTROLLER"=>"(?<controller>[^#]+)#(?<action>\\w+)"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3HEAD"=>"(?m)Started %{WORD:verb} \"%{URIPATHPARAM:request}\" for %{IPORHOST:clientip} at (?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND} %{ISO8601_TIMEZONE})"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RPROCESSING"=>"\\W*Processing by %{RCONTROLLER} as (?<format>\\S+)(?:\\W*Parameters: {%{DATA:params}}\\W*)?"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3FOOT"=>"Completed %{NUMBER:response}%{DATA} in %{NUMBER:totalms}ms %{RAILS3PROFILE}%{GREEDYDATA}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3PROFILE"=>"(?:\\(Views: %{NUMBER:viewms}ms \\| ActiveRecord: %{NUMBER:activerecordms}ms|\\(ActiveRecord: %{NUMBER:activerecordms}ms)?"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3"=>"%{RAILS3HEAD}(?:%{RPROCESSING})?(?<context>(?:%{DATA}\\n)*)(?:%{RAILS3FOOT})?"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_TIMESTAMP"=>"%{MONTHDAY}-%{MONTH} %{HOUR}:%{MINUTE}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_HOST"=>"[a-zA-Z0-9-]+"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_VOLUME"=>"%{USER}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_DEVICE"=>"%{USER}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_DEVICEPATH"=>"%{UNIXPATH}"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_CAPACITY"=>"%{INT}{1,3}(,%{INT}{3})*"}
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_VERSION"=>"%{USER}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_JOB"=>"%{USER}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MAX_CAPACITY"=>"User defined maximum volume capacity %{BACULA_CAPACITY} exceeded on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\)"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_END_VOLUME"=>"End of medium on Volume \\\"%{BACULA_VOLUME:volume}\\\" Bytes=%{BACULA_CAPACITY} Blocks=%{BACULA_CAPACITY} at %{MONTHDAY}-%{MONTH}-%{YEAR} %{HOUR}:%{MINUTE}."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_VOLUME"=>"Created new Volume \\\"%{BACULA_VOLUME:volume}\\\" in catalog."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_LABEL"=>"Labeled new Volume \\\"%{BACULA_VOLUME:volume}\\\" on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\)."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_WROTE_LABEL"=>"Wrote label to prelabeled Volume \\\"%{BACULA_VOLUME:volume}\\\" on device \\\"%{BACULA_DEVICE}\\\" \\(%{BACULA_DEVICEPATH}\\)"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_MOUNT"=>"New volume \\\"%{BACULA_VOLUME:volume}\\\" mounted on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\) at %{MONTHDAY}-%{MONTH}-%{YEAR} %{HOUR}:%{MINUTE}."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOOPEN"=>"\\s+Cannot open %{DATA}: ERR=%{GREEDYDATA:berror}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOOPENDIR"=>"\\s+Could not open directory %{DATA}: ERR=%{GREEDYDATA:berror}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOSTAT"=>"\\s+Could not stat %{DATA}: ERR=%{GREEDYDATA:berror}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOJOBS"=>"There are no more Jobs associated with Volume \\\"%{BACULA_VOLUME:volume}\\\". Marking it purged."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_ALL_RECORDS_PRUNED"=>"All records pruned from Volume \\\"%{BACULA_VOLUME:volume}\\\"; marking it \\\"Purged\\\""}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_BEGIN_PRUNE_JOBS"=>"Begin pruning Jobs older than %{INT} month %{INT} days ."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_BEGIN_PRUNE_FILES"=>"Begin pruning Files."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_PRUNED_JOBS"=>"Pruned %{INT} Jobs* for client %{BACULA_HOST:client} from catalog."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_PRUNED_FILES"=>"Pruned Files from %{INT} Jobs* for client %{BACULA_HOST:client} from catalog."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_ENDPRUNE"=>"End auto prune."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_STARTJOB"=>"Start Backup JobId %{INT}, Job=%{BACULA_JOB:job}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_STARTRESTORE"=>"Start Restore Job %{BACULA_JOB:job}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_USEDEVICE"=>"Using Device \\\"%{BACULA_DEVICE:device}\\\""}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_DIFF_FS"=>"\\s+%{UNIXPATH} is a different filesystem. Will not descend from %{UNIXPATH} into it."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_JOBEND"=>"Job write elapsed time = %{DATA:elapsed}, Transfer rate = %{NUMBER} (K|M|G)? Bytes/second"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRUNE_JOBS"=>"No Jobs found to prune."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRUNE_FILES"=>"No Files found to prune."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_VOLUME_PREVWRITTEN"=>"Volume \\\"%{BACULA_VOLUME:volume}\\\" previously written, moving to end of data."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_READYAPPEND"=>"Ready to append to end of Volume \\\"%{BACULA_VOLUME:volume}\\\" size=%{INT}"}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_CANCELLING"=>"Cancelling duplicate JobId=%{INT}."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MARKCANCEL"=>"JobId %{INT}, Job %{BACULA_JOB:job} marked to be canceled."}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_CLIENT_RBJ"=>"shell command: run ClientRunBeforeJob \\\"%{GREEDYDATA:runjob}\\\""}
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_VSS"=>"(Generate )?VSS (Writer)?"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MAXSTART"=>"Fatal error: Job canceled because max start delay time exceeded."}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_DUPLICATE"=>"Fatal error: JobId %{INT:duplicate} already running. Duplicate job not allowed."}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOJOBSTAT"=>"Fatal error: No Job status returned from FD."}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_FATAL_CONN"=>"Fatal error: bsock.c:133 Unable to connect to (Client: %{BACULA_HOST:client}|Storage daemon) on %{HOSTNAME}:%{POSINT}. ERR=(?<berror>%{GREEDYDATA})"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NO_CONNECT"=>"Warning: bsock.c:127 Could not connect to (Client: %{BACULA_HOST:client}|Storage daemon) on %{HOSTNAME}:%{POSINT}. ERR=(?<berror>%{GREEDYDATA})"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NO_AUTH"=>"Fatal error: Unable to authenticate with File daemon at %{HOSTNAME}. Possible causes:"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOSUIT"=>"No prior or suitable Full backup found in catalog. Doing FULL backup."}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRIOR"=>"No prior Full backup Job record found."}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_JOB"=>"(Error: )?Bacula %{BACULA_HOST} %{BACULA_VERSION} \\(%{BACULA_VERSION}\\):"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOGLINE"=>"%{BACULA_TIMESTAMP:bts} %{BACULA_HOST:hostname} JobId %{INT:jobid}: (%{BACULA_LOG_MAX_CAPACITY}|%{BACULA_LOG_END_VOLUME}|%{BACULA_LOG_NEW_VOLUME}|%{BACULA_LOG_NEW_LABEL}|%{BACULA_LOG_WROTE_LABEL}|%{BACULA_LOG_NEW_MOUNT}|%{BACULA_LOG_NOOPEN}|%{BACULA_LOG_NOOPENDIR}|%{BACULA_LOG_NOSTAT}|%{BACULA_LOG_NOJOBS}|%{BACULA_LOG_ALL_RECORDS_PRUNED}|%{BACULA_LOG_BEGIN_PRUNE_JOBS}|%{BACULA_LOG_BEGIN_PRUNE_FILES}|%{BACULA_LOG_PRUNED_JOBS}|%{BACULA_LOG_PRUNED_FILES}|%{BACULA_LOG_ENDPRUNE}|%{BACULA_LOG_STARTJOB}|%{BACULA_LOG_STARTRESTORE}|%{BACULA_LOG_USEDEVICE}|%{BACULA_LOG_DIFF_FS}|%{BACULA_LOG_JOBEND}|%{BACULA_LOG_NOPRUNE_JOBS}|%{BACULA_LOG_NOPRUNE_FILES}|%{BACULA_LOG_VOLUME_PREVWRITTEN}|%{BACULA_LOG_READYAPPEND}|%{BACULA_LOG_CANCELLING}|%{BACULA_LOG_MARKCANCEL}|%{BACULA_LOG_CLIENT_RBJ}|%{BACULA_LOG_VSS}|%{BACULA_LOG_MAXSTART}|%{BACULA_LOG_DUPLICATE}|%{BACULA_LOG_NOJOBSTAT}|%{BACULA_LOG_FATAL_CONN}|%{BACULA_LOG_NO_CONNECT}|%{BACULA_LOG_NO_AUTH}|%{BACULA_LOG_NOSUIT}|%{BACULA_LOG_JOB}|%{BACULA_LOG_NOPRIOR})"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"MAVEN_VERSION"=>"(?:(\\d+)\\.)?(?:(\\d+)\\.)?(\\*|\\d+)(?:[.-](RELEASE|SNAPSHOT))?"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVACLASS"=>"(?:[a-zA-Z$_][a-zA-Z$_0-9]*\\.)*[a-zA-Z$_][a-zA-Z$_0-9]*"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVAFILE"=>"(?:[A-Za-z0-9_. -]+)"}
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVAMETHOD"=>"(?:(<(?:cl)?init>)|[a-zA-Z$_][a-zA-Z$_0-9]*)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVASTACKTRACEPART"=>"%{SPACE}at %{JAVACLASS:class}\\.%{JAVAMETHOD:method}\\(%{JAVAFILE:file}(?::%{NUMBER:line})?\\)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVATHREAD"=>"(?:[A-Z]{2}-Processor[\\d]+)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVACLASS"=>"(?:[a-zA-Z0-9-]+\\.)+[A-Za-z0-9$]+"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVAFILE"=>"(?:[A-Za-z0-9_.-]+)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVALOGMESSAGE"=>"(.*)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"CATALINA_DATESTAMP"=>"%{MONTH} %{MONTHDAY}, 20%{YEAR} %{HOUR}:?%{MINUTE}(?::?%{SECOND}) (?:AM|PM)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"TOMCAT_DATESTAMP"=>"20%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:?%{MINUTE}(?::?%{SECOND}) %{ISO8601_TIMEZONE}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"CATALINALOG"=>"%{CATALINA_DATESTAMP:timestamp} %{JAVACLASS:class} %{JAVALOGMESSAGE:logmessage}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"TOMCATLOG"=>"%{TOMCAT_DATESTAMP:timestamp} \\| %{LOGLEVEL:level} \\| %{JAVACLASS:class} - %{JAVALOGMESSAGE:logmessage}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"BIND9_TIMESTAMP"=>"%{MONTHDAY}[-]%{MONTH}[-]%{YEAR} %{TIME}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"BIND9"=>"%{BIND9_TIMESTAMP:timestamp} queries: %{LOGLEVEL:loglevel}: client %{IP:clientip}#%{POSINT:clientport} \\(%{GREEDYDATA:query}\\): query: %{GREEDYDATA:query} IN %{GREEDYDATA:querytype} \\(%{IP:dns}\\)"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_LOG"=>"%{SYSLOGTIMESTAMP:timestamp} \\[%{WORD:component}\\] %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_QUERY"=>"\\{ (?<={ ).*(?= } ntoreturn:) \\}"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_SLOWQUERY"=>"%{WORD} %{MONGO_WORDDASH:database}\\.%{MONGO_WORDDASH:collection} %{WORD}: %{MONGO_QUERY:query} %{WORD}:%{NONNEGINT:ntoreturn} %{WORD}:%{NONNEGINT:ntoskip} %{WORD}:%{NONNEGINT:nscanned}.*nreturned:%{NONNEGINT:nreturned}..+ (?<duration>[0-9]+)ms"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_WORDDASH"=>"\\b[\\w-]+\\b"}
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_SEVERITY"=>"\\w"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_COMPONENT"=>"%{WORD}|-"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_LOG"=>"%{TIMESTAMP_ISO8601:timestamp} %{MONGO3_SEVERITY:severity} %{MONGO3_COMPONENT:component}%{SPACE}(?:\\[%{DATA:context}\\])? %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW_EVENT"=>"(RT_FLOW_SESSION_CREATE|RT_FLOW_SESSION_CLOSE|RT_FLOW_SESSION_DENY)"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW1"=>"%{RT_FLOW_EVENT:event}: %{GREEDYDATA:close-reason}: %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{IP:nat-src-ip}/%{INT:nat-src-port}->%{IP:nat-dst-ip}/%{INT:nat-dst-port} %{DATA:src-nat-rule-name} %{DATA:dst-nat-rule-name} %{INT:protocol-id} %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} %{INT:session-id} \\d+\\(%{DATA:sent}\\) \\d+\\(%{DATA:received}\\) %{INT:elapsed-time} .*"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW2"=>"%{RT_FLOW_EVENT:event}: session created %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{IP:nat-src-ip}/%{INT:nat-src-port}->%{IP:nat-dst-ip}/%{INT:nat-dst-port} %{DATA:src-nat-rule-name} %{DATA:dst-nat-rule-name} %{INT:protocol-id} %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} %{INT:session-id} .*"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW3"=>"%{RT_FLOW_EVENT:event}: session denied %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{INT:protocol-id}\\(\\d\\) %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} .*"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVE"=>"., \\[%{TIMESTAMP_ISO8601:timestamp} #%{POSINT:pid}\\]%{SPACE}%{LOGLEVEL:event_level}"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVEAUDIT"=>"%{TIMESTAMP_ISO8601:timestamp}:"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424PRINTASCII"=>"[!-~]+"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGBASE2"=>"(?:%{SYSLOGTIMESTAMP:timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource}+(?: %{SYSLOGPROG}:|)"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGPAMSESSION"=>"%{SYSLOGBASE} (?=%{GREEDYDATA:message})%{WORD:pam_module}\\(%{DATA:pam_caller}\\): session %{WORD:pam_session_state} for user %{USERNAME:username}(?: by %{GREEDYDATA:pam_by})?"}
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"CRON_ACTION"=>"[A-Z ]+"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"CRONLOG"=>"%{SYSLOGBASE} \\(%{USER:user}\\) %{CRON_ACTION:action} \\(%{DATA:message}\\)"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGLINE"=>"%{SYSLOGBASE2} %{GREEDYDATA:message}"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424PRI"=>"<%{NONNEGINT:syslog5424_pri}>"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424SD"=>"\\[%{DATA}\\]+"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424BASE"=>"%{SYSLOG5424PRI}%{NONNEGINT:syslog5424_ver} +(?:%{TIMESTAMP_ISO8601:syslog5424_ts}|-) +(?:%{IPORHOST:syslog5424_host}|-) +(-|%{SYSLOG5424PRINTASCII:syslog5424_app}) +(-|%{SYSLOG5424PRINTASCII:syslog5424_proc}) +(-|%{SYSLOG5424PRINTASCII:syslog5424_msgid}) +(?:%{SYSLOG5424SD:syslog5424_sd}|-|)"}
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424LINE"=>"%{SYSLOG5424BASE} +%{GREEDYDATA:syslog5424_msg}"}
[DEBUG] 2021-02-15 18:31:57.220 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-length: 696[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "[\r][\n]"
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << HTTP/1.1 200 OK
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-length: 696
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000]
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"}
[DEBUG] 2021-02-15 18:31:57.335 [[main]-pipeline-manager] grok - replacement_pattern => (?<LOGLEVEL:loglevel>([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?))
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<NUMBER:tenantId>(?:%{BASE10NUM}))
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<NUMBER:organizationUnitId>(?:%{BASE10NUM}))
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+))))
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<GREEDYDATA:message>.*)
[DEBUG] 2021-02-15 18:31:57.338 [[main]-pipeline-manager] grok - Grok compiled OK {:pattern=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}", :expanded_pattern=>"(?<LOGLEVEL:loglevel>([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)) (?<NUMBER:tenantId>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))))) (?<NUMBER:organizationUnitId>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))))) (?<GREEDYDATA:message>.*)"}
[DEBUG] 2021-02-15 18:31:57.373 [[main]-pipeline-manager] context - skipping register since the script didn't define it
[INFO ] 2021-02-15 18:31:57.511 [[main]-pipeline-manager] javapipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>125, "pipeline.sources"=>["/etc/logstash/pipeline_folder/pipeline.conf"], :thread=>"#<Thread:0x342a6c6e run>"}
[DEBUG] 2021-02-15 18:31:58.450 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:31:58.451 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:31:58.675 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-grok{"match"=>{"message"=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}, "overwrite"=>["message"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:9:5:```
grok {
match => {"message" => "%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}
overwrite => ["message"]
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@53e5cb12
[DEBUG] 2021-02-15 18:31:59.014 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-json{"source"=>"message"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:13:5:```
json {
source => "message"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.102 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if (event.getField('[message]')!='')]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248
[DEBUG] 2021-02-15 18:31:59.159 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('execution ended'.include?event.getField('[message]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248
[DEBUG] 2021-02-15 18:31:59.195 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-mutate{"add_tag"=>["total"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:19:14:```
mutate { add_tag => ["total"] }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.258 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if (('Info'.include?event.getField('[level]'))||(('Warn'.include?event.getField('[level]'))||(('Error'.include?event.getField('[level]'))||('Fatal'.include?event.getField('[level]')))))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@2bf5065b
[DEBUG] 2021-02-15 18:31:59.299 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-mutate{"add_tag"=>["default"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:22:14:```
mutate { add_tag => ["default"] }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.309 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-drop{}|[file]/etc/logstash/pipeline_folder/pipeline.conf:25:14:```
drop {}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.342 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('management_'.include?event.getField('[indexName]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248
[DEBUG] 2021-02-15 18:31:59.370 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-mutate{"add_tag"=>["management"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:30:13:```
mutate { add_tag => ["management"] }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.383 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('environmentcheck_'.include?event.getField('[indexName]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248
[DEBUG] 2021-02-15 18:31:59.411 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-mutate{"add_tag"=>["environmentcheck"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:33:13:```
mutate { add_tag => ["environmentcheck"] }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.442 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-mutate{"add_tag"=>["robotic"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:36:13:```
mutate { add_tag => ["robotic"] }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797
[DEBUG] 2021-02-15 18:31:59.455 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter
P[filter-ruby{"path"=>"/etc/logstash/ruby_scripts/index_name_script.rb"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:39:5:```
ruby { path => "/etc/logstash/ruby_scripts/index_name_script.rb" }
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@778b7b9
[DEBUG] 2021-02-15 18:31:59.493 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('total'.include?event.getField('[tags]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc
[DEBUG] 2021-02-15 18:31:59.506 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output
P[output-elasticsearch{"index"=>["totalexecution_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:45:9:```
elasticsearch {
index => ["totalexecution_%{indexName}_%{+YYYY}"]
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"]
user => elastic
password => ["Global@123"]
ssl => true
cacert => "/etc/logstash/elasticsearch-ca.pem"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279
[DEBUG] 2021-02-15 18:31:59.601 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('default'.include?event.getField('[tags]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc
[DEBUG] 2021-02-15 18:31:59.609 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output
P[output-elasticsearch{"index"=>["default_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:55:10:```
elasticsearch {
index => ["default_%{indexName}_%{+YYYY}"]
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"]
user => elastic
password => ["Global@123"]
ssl => true
cacert => "/etc/logstash/elasticsearch-ca.pem"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279
[DEBUG] 2021-02-15 18:31:59.633 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('management'.include?event.getField('[tags]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc
[DEBUG] 2021-02-15 18:31:59.673 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output
P[output-elasticsearch{"index"=>["management_%{indexName}_%{+YYYY.MM}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:65:10:```
elasticsearch {
index => ["management_%{indexName}_%{+YYYY.MM}"]
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"]
user => elastic
password => ["Global@123"]
ssl => true
cacert => "/etc/logstash/elasticsearch-ca.pem"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279
[DEBUG] 2021-02-15 18:31:59.681 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('robotic'.include?event.getField('[tags]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc
[DEBUG] 2021-02-15 18:31:59.705 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output
P[output-elasticsearch{"index"=>["robot_%{indexName}_%{+YYYY.MM}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:75:10:```
elasticsearch {
index => ["robot_%{indexName}_%{+YYYY.MM}"]
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"]
user => elastic
password => ["Global@123"]
ssl => true
cacert => "/etc/logstash/elasticsearch-ca.pem"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279
[DEBUG] 2021-02-15 18:31:59.720 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional
[if ('environmentcheck'.include?event.getField('[tags]'))]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc
[DEBUG] 2021-02-15 18:31:59.749 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output
P[output-elasticsearch{"index"=>["environmentcheck_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:85:9:```
elasticsearch {
index => ["environmentcheck_%{indexName}_%{+YYYY}"]
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"]
user => elastic
password => ["Global@123"]
ssl => true
cacert => "/etc/logstash/elasticsearch-ca.pem"
}
```]
into
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279
[INFO ] 2021-02-15 18:31:59.798 [[main]-pipeline-manager] javapipeline - Pipeline Java execution initialization time {"seconds"=>2.28}
[INFO ] 2021-02-15 18:31:59.856 [[main]-pipeline-manager] beats - Beats inputs: Starting input listener {:address=>"0.0.0.0:5044"}
[INFO ] 2021-02-15 18:32:00.190 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=>"main"}
[DEBUG] 2021-02-15 18:32:00.196 [Converge PipelineAction::Create<main>] javapipeline - Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"}
[INFO ] 2021-02-15 18:32:00.225 [Agent thread] agent - Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
[DEBUG] 2021-02-15 18:32:00.267 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:00.300 [Api Webserver] agent - Starting puma
[DEBUG] 2021-02-15 18:32:00.305 [Api Webserver] agent - Trying to start WebServer {:port=>9600}
[DEBUG] 2021-02-15 18:32:00.345 [[main]<beats] InternalLoggerFactory - Using SLF4J as the default logging framework
[DEBUG] 2021-02-15 18:32:00.348 [[main]<beats] MultithreadEventLoopGroup - -Dio.netty.eventLoopThreads: 2
[DEBUG] 2021-02-15 18:32:00.375 [[main]<beats] InternalThreadLocalMap - -Dio.netty.threadLocalMap.stringBuilder.initialSize: 1024
[DEBUG] 2021-02-15 18:32:00.376 [[main]<beats] InternalThreadLocalMap - -Dio.netty.threadLocalMap.stringBuilder.maxSize: 4096
[DEBUG] 2021-02-15 18:32:00.382 [[main]<beats] NioEventLoop - -Dio.netty.noKeySetOptimization: false
[DEBUG] 2021-02-15 18:32:00.382 [[main]<beats] NioEventLoop - -Dio.netty.selectorAutoRebuildThreshold: 512
[DEBUG] 2021-02-15 18:32:00.422 [[main]<beats] PlatformDependent0 - -Dio.netty.noUnsafe: false
[DEBUG] 2021-02-15 18:32:00.423 [[main]<beats] PlatformDependent0 - Java version: 8
[DEBUG] 2021-02-15 18:32:00.423 [[main]<beats] PlatformDependent0 - sun.misc.Unsafe.theUnsafe: available
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - sun.misc.Unsafe.copyMemory: available
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - java.nio.Buffer.address: available
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - direct buffer constructor: available
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - java.nio.Bits.unaligned: available, true
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - jdk.internal.misc.Unsafe.allocateUninitializedArray(int): unavailable prior to Java9
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - java.nio.DirectByteBuffer.<init>(long, int): available
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent - sun.misc.Unsafe: available
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.tmpdir: /etc/logstash/tmp_folder (java.io.tmpdir)
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.bitMode: 64 (sun.arch.data.model)
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.maxDirectMemory: 3212509184 bytes
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.uninitializedArrayAllocationThreshold: -1
[DEBUG] 2021-02-15 18:32:00.427 [[main]<beats] CleanerJava6 - java.nio.ByteBuffer.cleaner(): available
[DEBUG] 2021-02-15 18:32:00.427 [[main]<beats] PlatformDependent - -Dio.netty.noPreferDirect: false
[DEBUG] 2021-02-15 18:32:00.437 [[main]<beats] PlatformDependent - org.jctools-core.MpscChunkedArrayQueue: available
[INFO ] 2021-02-15 18:32:00.442 [[main]<beats] Server - Starting server on port: 5044
[DEBUG] 2021-02-15 18:32:00.462 [[main]<beats] DefaultChannelId - -Dio.netty.processId: 73242 (auto-detected)
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - -Djava.net.preferIPv4Stack: false
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - -Djava.net.preferIPv6Addresses: false
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - Loopback interface: lo (lo, 127.0.0.1)
[DEBUG] 2021-02-15 18:32:00.465 [[main]<beats] NetUtil - /proc/sys/net/core/somaxconn: 128
[DEBUG] 2021-02-15 18:32:00.466 [[main]<beats] DefaultChannelId - -Dio.netty.machineId: 00:50:56:ff:fe:ac:36:ab (auto-detected)
[DEBUG] 2021-02-15 18:32:00.480 [[main]<beats] ResourceLeakDetector - -Dio.netty.leakDetection.level: simple
[DEBUG] 2021-02-15 18:32:00.480 [[main]<beats] ResourceLeakDetector - -Dio.netty.leakDetection.targetRecords: 4
[DEBUG] 2021-02-15 18:32:00.491 [Api Webserver] service - [api-service] start
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.numHeapArenas: 2
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.numDirectArenas: 2
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.pageSize: 8192
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxOrder: 11
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.chunkSize: 16777216
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.tinyCacheSize: 512
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.smallCacheSize: 256
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.normalCacheSize: 64
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxCachedBufferCapacity: 32768
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.cacheTrimInterval: 8192
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.cacheTrimIntervalMillis: 0
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.useCacheForAllThreads: true
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxCachedByteBuffersPerChunk: 1023
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.allocator.type: pooled
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.threadLocalDirectBufferSize: 0
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.maxThreadLocalCharBufferSize: 16384
[INFO ] 2021-02-15 18:32:00.830 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600}
[DEBUG] 2021-02-15 18:32:03.461 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:03.462 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:05.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:08.468 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:08.468 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:10.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:13.475 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:13.475 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:15.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:18.481 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:18.481 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:20.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:23.486 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:23.487 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:25.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:28.494 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:28.494 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:30.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:33.500 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:33.500 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:35.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:38.505 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:38.506 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:40.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:43.511 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:43.512 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:45.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:48.518 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:48.519 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:50.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:53.524 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:53.525 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:32:55.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:32:58.530 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:32:58.530 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:33:00.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:33:03.538 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:33:03.538 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:33:05.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:33:08.544 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:33:08.544 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:33:10.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[DEBUG] 2021-02-15 18:33:13.550 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"}
[DEBUG] 2021-02-15 18:33:13.551 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"}
[DEBUG] 2021-02-15 18:33:15.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
^C[WARN ] 2021-02-15 18:33:17.143 [SIGINT handler] runner - SIGINT received. Shutting down.
[DEBUG] 2021-02-15 18:33:17.211 [LogStash::Runner] os - Stopping
[DEBUG] 2021-02-15 18:33:17.217 [LogStash::Runner] jvm - Stopping
[DEBUG] 2021-02-15 18:33:17.218 [LogStash::Runner] persistentqueue - Stopping
[DEBUG] 2021-02-15 18:33:17.218 [LogStash::Runner] deadletterqueue - Stopping
[DEBUG] 2021-02-15 18:33:17.221 [LogStash::Runner] agent - Shutting down all pipelines {:pipelines_count=>1}
[DEBUG] 2021-02-15 18:33:17.225 [LogStash::Runner] agent - Converging pipelines state {:actions_count=>1}
[DEBUG] 2021-02-15 18:33:17.247 [Converge PipelineAction::Stop<main>] agent - Executing action {:action=>LogStash::PipelineAction::Stop/pipeline_id:main}
[DEBUG] 2021-02-15 18:33:17.257 [Converge PipelineAction::Stop<main>] javapipeline - Closing inputs {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e sleep>"}
[DEBUG] 2021-02-15 18:33:17.259 [Converge PipelineAction::Stop<main>] beats - Stopping {:plugin=>"LogStash::Inputs::Beats"}
[DEBUG] 2021-02-15 18:33:17.261 [Converge PipelineAction::Stop<main>] Server - Server shutting down
[DEBUG] 2021-02-15 18:33:20.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline.
[WARN ] 2021-02-15 18:33:22.191 [Ruby-0-Thread-24: :1] runner - Received shutdown signal, but pipeline is still waiting for in-flight events
to be processed. Sending another ^C will force quit Logstash, but this may cause
data loss.
[DEBUG] 2021-02-15 18:33:23.314 [[main]<beats] beats - Closing {:plugin=>"LogStash::Inputs::Beats"}
[DEBUG] 2021-02-15 18:33:23.318 [[main]<beats] pluginmetadata - Removing metadata for plugin b03f3ef7887e15c097994ec2971a2dd34fefe8716bb267be15e4c8d612cc3c8d
[DEBUG] 2021-02-15 18:33:23.319 [Converge PipelineAction::Stop<main>] Server - Server stopped
[DEBUG] 2021-02-15 18:33:23.320 [Converge PipelineAction::Stop<main>] javapipeline - Closed inputs {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e sleep>"}
[DEBUG] 2021-02-15 18:33:23.340 [[main]-pipeline-manager] javapipeline - Input plugins stopped! Will shutdown filter/output workers. {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"}
[DEBUG] 2021-02-15 18:33:23.347 [[main]-pipeline-manager] javapipeline - Shutdown waiting for worker thread {:pipeline_id=>"main", :thread=>"#<Thread:0x14e6e1fa run>"}
[DEBUG] 2021-02-15 18:33:23.449 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"}
[DEBUG] 2021-02-15 18:33:23.451 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin bdd2bea3a7aa54b4d33e9df7b842e20d03853833fed861ab999178e7f40664fa
[DEBUG] 2021-02-15 18:33:23.451 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"}
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 1cde200d7dc228b373a6068a67656daee74d2980ca37757fbc365ab420d664a8
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"}
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 0bed39a26bf72b868ad5296c84fadf916c0c8af04f28785e4c0a351cf33316f8
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"}
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 49834bb9263ecac64fe7df556638ef48003a91873e57c9adef3c5a5877823aa5
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] grok - Closing {:plugin=>"LogStash::Filters::Grok"}
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f52d9945e1925b923c8d2346818cc5b2173bba2ed9e79dee2bc21237f8331951
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] json - Closing {:plugin=>"LogStash::Filters::Json"}
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 5302d66123cb8a8076bcbe9040b548016a2dbfb654bf81b2e8f34a4a6a5ca842
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"}
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f5d48a59f01ab5a933dd1b453714599739b54cd4fe79b0461c1fc885d36ad963
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] drop - Closing {:plugin=>"LogStash::Filters::Drop"}
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin afdc153146ed6e38d5232b4a2e693c9e9a7c6aed0ee05c9ba22c231f3a2182fe
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] ruby - Closing {:plugin=>"LogStash::Filters::Ruby"}
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 8a2fbbd6fd402d91fd197adcba2b557cd31d9b63d97a72a29a576a38b927d4a2
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"}
[DEBUG] 2021-02-15 18:33:23.485 [[main]-pipeline-manager] elasticsearch - Stopping sniffer
[DEBUG] 2021-02-15 18:33:23.487 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist
[DEBUG] 2021-02-15 18:33:23.750 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections
[DEBUG] 2021-02-15 18:33:23.757 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0xb6a7b0d>
[DEBUG] 2021-02-15 18:33:23.759 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down
[DEBUG] 2021-02-15 18:33:23.760 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-0: Close connection
[DEBUG] 2021-02-15 18:33:23.765 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-2: Close connection
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-1: Close connection
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f36ddcadd916ec295caaa9ba6fd3ec3ee0a8e768f2ce62c0a6765f77a0e06fb2
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"}
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Stopping sniffer
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x78b53fcf>
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-3: Close connection
[DEBUG] 2021-02-15 18:33:24.118 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-4: Close connection
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-5: Close connection
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 83260e3f6812d545233c1ee44d5a9840076b0609ab451dc3c18986573cb8a2e9
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"}
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Stopping sniffer
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x167ed2a>
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-6: Close connection
[DEBUG] 2021-02-15 18:33:24.464 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: Close connection
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: Close connection
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 2d208b80218ab62b99fdf9934c10addb066dd15ff8daa21ad717c805537a1c3f
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"}
[DEBUG] 2021-02-15 18:33:24.466 [[main]-pipeline-manager] elasticsearch - Stopping sniffer
[DEBUG] 2021-02-15 18:33:24.466 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x7d623563>
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: Close connection
[DEBUG] 2021-02-15 18:33:24.736 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: Close connection
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: Close connection
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin e1d6033003ee8c5e8250cdcf8ec230525ecb11d0275478f1cd0c9e2b205ba628
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"}
[DEBUG] 2021-02-15 18:33:24.738 [[main]-pipeline-manager] elasticsearch - Stopping sniffer
[DEBUG] 2021-02-15 18:33:24.738 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0xd6630d9>
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: Close connection
[DEBUG] 2021-02-15 18:33:24.971 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: Close connection
[DEBUG] 2021-02-15 18:33:24.971 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: Close connection
[DEBUG] 2021-02-15 18:33:24.972 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down
[DEBUG] 2021-02-15 18:33:24.972 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin c1b831e4bf3cd494c1cf16215787d9a87ed92447b8261f6582c62742dca8209c
[DEBUG] 2021-02-15 18:33:24.973 [[main]-pipeline-manager] javapipeline - Pipeline has been shutdown {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"}
[INFO ] 2021-02-15 18:33:25.360 [Converge PipelineAction::Stop<main>] javapipeline - Pipeline terminated {"pipeline.id"=>"main"}
[INFO ] 2021-02-15 18:33:25.474 [LogStash::Runner] runner - Logstash shut down.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment