-
-
Save muthug91/d9e898d3880bfb4073c06d053e6212b0 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[INFO ] 2021-02-15 18:31:56.176 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7} | |
[WARN ] 2021-02-15 18:31:56.176 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7} | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.178 [[main]-pipeline-manager] wire - http-outgoing-6 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] wire - http-outgoing-6 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.199 [[main]-pipeline-manager] headers - http-outgoing-6 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.200 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.202 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.207 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.226 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44868<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.227 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[WARN ] 2021-02-15 18:31:56.239 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.241 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.242 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "name" : "VDC-Dev-Node2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.243 [[main]-pipeline-manager] wire - http-outgoing-7 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] wire - http-outgoing-7 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.244 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 7][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] headers - http-outgoing-7 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.246 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.247 [[main]-pipeline-manager] wire - http-outgoing-7 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.247 [[main]-pipeline-manager] wire - http-outgoing-7 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] wire - http-outgoing-7 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] headers - http-outgoing-7 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 7][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 7][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.275 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.277 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.279 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51178<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.303 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.309 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.309 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[WARN ] 2021-02-15 18:31:56.310 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.312 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.314 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "name" : "VDC-Dev-Node3",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] wire - http-outgoing-8 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.315 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.317 [[main]-pipeline-manager] wire - http-outgoing-8 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] wire - http-outgoing-8 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] headers - http-outgoing-8 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.334 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.335 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.335 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.341 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000 | |
[INFO ] 2021-02-15 18:31:56.342 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]} | |
[DEBUG] 2021-02-15 18:31:56.346 [[main]-pipeline-manager] elasticsearch - Normalizing http path {:path=>nil, :normalized=>nil} | |
[INFO ] 2021-02-15 18:31:56.350 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/]}} | |
[DEBUG] 2021-02-15 18:31:56.351 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 0; route allocated: 0 of 100; total allocated: 0 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.352 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.353 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.384 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "name" : "VDC-Dev-Node1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.386 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.387 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.387 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[INFO ] 2021-02-15 18:31:56.388 [Ruby-0-Thread-9: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled} | |
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 8][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.391 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-8: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:45880<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.411 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "GET /_xpack HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.412 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.413 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[WARN ] 2021-02-15 18:31:56.414 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.415 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "name" : "VDC-Dev-Node1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] wire - http-outgoing-9 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.416 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[INFO ] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7} | |
[WARN ] 2021-02-15 18:31:56.417 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7} | |
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.418 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.419 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [[main]-pipeline-manager] wire - http-outgoing-9 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.435 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "content-length: 1228[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] wire - http-outgoing-8 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}" | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] headers - http-outgoing-8 << content-length: 1228 | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.443 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.444 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 8][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.444 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 8][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[INFO ] 2021-02-15 18:31:56.445 [Ruby-0-Thread-9: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}} | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 6][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] DefaultManagedHttpClientConnection - http-outgoing-6: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.447 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "content-length: 696[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] wire - http-outgoing-6 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] headers - http-outgoing-6 << content-length: 696 | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection [id: 6][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] PoolingHttpClientConnectionManager - Connection released: [id: 6][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.450 [Ruby-0-Thread-9: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"} | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] wire - http-outgoing-9 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] headers - http-outgoing-9 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.465 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.467 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.468 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44874<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.496 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[WARN ] 2021-02-15 18:31:56.509 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.511 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.512 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "name" : "VDC-Dev-Node2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] wire - http-outgoing-10 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.515 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.517 [[main]-pipeline-manager] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.519 [[main]-pipeline-manager] wire - http-outgoing-10 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.535 [[main]-pipeline-manager] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] wire - http-outgoing-10 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] headers - http-outgoing-10 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.536 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.538 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.539 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51184<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.558 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.559 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.563 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[WARN ] 2021-02-15 18:31:56.564 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.566 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "name" : "VDC-Dev-Node3",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] wire - http-outgoing-11 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.569 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 11][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] headers - http-outgoing-11 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.571 [[main]-pipeline-manager] wire - http-outgoing-11 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.594 [[main]-pipeline-manager] wire - http-outgoing-11 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.611 [[main]-pipeline-manager] wire - http-outgoing-11 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] wire - http-outgoing-11 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] headers - http-outgoing-11 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 11][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.612 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 11][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.619 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000 | |
[INFO ] 2021-02-15 18:31:56.623 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]} | |
[DEBUG] 2021-02-15 18:31:56.624 [[main]-pipeline-manager] elasticsearch - Normalizing http path {:path=>nil, :normalized=>nil} | |
[INFO ] 2021-02-15 18:31:56.628 [[main]-pipeline-manager] elasticsearch - Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/, https://elastic:xxxxxx@IP:9200/]}} | |
[DEBUG] 2021-02-15 18:31:56.628 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 0; route allocated: 0 of 100; total allocated: 0 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.630 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.631 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.656 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.662 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "name" : "VDC-Dev-Node2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.663 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[INFO ] 2021-02-15 18:31:56.664 [Ruby-0-Thread-11: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled} | |
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 9][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.668 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-9: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.691 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "GET /_xpack HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.692 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.707 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:45886<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.708 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "content-length: 1228[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.734 [Ruby-0-Thread-11: :1] wire - http-outgoing-9 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}" | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] headers - http-outgoing-9 << content-length: 1228 | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 9][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.735 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 9][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[INFO ] 2021-02-15 18:31:56.736 [Ruby-0-Thread-11: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}} | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 10][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] DefaultManagedHttpClientConnection - http-outgoing-10: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.739 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[WARN ] 2021-02-15 18:31:56.740 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.742 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "name" : "VDC-Dev-Node1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] wire - http-outgoing-12 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.743 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[INFO ] 2021-02-15 18:31:56.744 [[main]-pipeline-manager] elasticsearch - ES Output version determined {:es_version=>7} | |
[WARN ] 2021-02-15 18:31:56.744 [[main]-pipeline-manager] elasticsearch - Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>7} | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 0; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [[main]-pipeline-manager] wire - http-outgoing-12 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "content-length: 696[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.745 [Ruby-0-Thread-11: :1] wire - http-outgoing-10 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] headers - http-outgoing-10 << content-length: 696 | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection [id: 10][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] PoolingHttpClientConnectionManager - Connection released: [id: 10][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.746 [Ruby-0-Thread-11: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"} | |
[DEBUG] 2021-02-15 18:31:56.783 [[main]-pipeline-manager] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] wire - http-outgoing-12 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] headers - http-outgoing-12 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.784 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 1; route allocated: 0 of 100; total allocated: 1 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.786 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.787 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:44880<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.801 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.802 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[WARN ] 2021-02-15 18:31:56.803 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.805 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.808 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "name" : "VDC-Dev-Node2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] wire - http-outgoing-13 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.810 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 13][route: {s}->https://IP:9200][total kept alive: 1; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] headers - http-outgoing-13 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.812 [[main]-pipeline-manager] wire - http-outgoing-13 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.825 [[main]-pipeline-manager] wire - http-outgoing-13 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] wire - http-outgoing-13 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] headers - http-outgoing-13 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 13][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.841 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 13][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.842 [[main]-pipeline-manager] elasticsearch - Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://elastic:xxxxxx@IP:9200/, :path=>"/"} | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 2; route allocated: 0 of 100; total allocated: 2 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] MainClientExec - Opening connection {s}->https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connecting to /IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.844 [[main]-pipeline-manager] SSLConnectionSocketFactory - Connecting socket to /IP:9200 with timeout 10000 | |
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled protocols: [TLSv1, TLSv1.1, TLSv1.2] | |
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Enabled cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_DSS_WITH_AES_128_GCM_SHA256] | |
[DEBUG] 2021-02-15 18:31:56.845 [[main]-pipeline-manager] SSLConnectionSocketFactory - Starting handshake | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - Secure session established | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated protocol: TLSv1.2 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - negotiated cipher suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer principal: CN=FRAKHRPL100N | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - peer alternative names: [IP, FRAKHRPL101N, IP, IP, FRAKHRPL100N, FRAKHRPL105N] | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] SSLConnectionSocketFactory - issuer principal: CN=Elastic Certificate Tool Autogenerated CA | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] DefaultHttpClientConnectionOperator - Connection established IP:51190<->IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Executing request HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> HEAD / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "HEAD / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.871 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.877 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[WARN ] 2021-02-15 18:31:56.878 [[main]-pipeline-manager] elasticsearch - Restored connection to ES instance {:url=>"https://elastic:xxxxxx@IP:9200/"} | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.880 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "name" : "VDC-Dev-Node3",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] wire - http-outgoing-14 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.886 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Executing request GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> GET /_license HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "GET /_license HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.888 [[main]-pipeline-manager] wire - http-outgoing-14 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "content-length: 335[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.905 [[main]-pipeline-manager] wire - http-outgoing-14 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "license" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "status" : "active",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "uid" : "86c2eca5-8a53-4279-a057-8de1391031ed",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "type" : "basic",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issue_date" : "2021-02-04T09:52:04.803Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issue_date_in_millis" : 1612432324803,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "max_nodes" : 1000,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issued_to" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "issuer" : "elasticsearch",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " "start_date_in_millis" : -1[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << " }[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] wire - http-outgoing-14 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] headers - http-outgoing-14 << content-length: 335 | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.906 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.913 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 14][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:56.914 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-14: set socket timeout to 60000 | |
[INFO ] 2021-02-15 18:31:56.924 [[main]-pipeline-manager] elasticsearch - New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["https://IP:9200", "https://IP:9200", "https://IP:9200"]} | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Executing request GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> GET / HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "GET / HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.937 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "content-length: 536[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "{[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "name" : "VDC-Dev-Node3",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "cluster_name" : "VDC-ELK-Dev",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "cluster_uuid" : "tU4PZG1uRfeBfpwCnRj-5A",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "version" : {[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "number" : "7.9.1",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_flavor" : "default",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_type" : "rpm",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_hash" : "083627f112ba94dffc1232e8b42b73492789ef91",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_date" : "2020-09-01T21:22:21.964974Z",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "build_snapshot" : false,[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "lucene_version" : "8.6.2",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "minimum_wire_compatibility_version" : "6.8.0",[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "minimum_index_compatibility_version" : "6.0.0-beta1"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " },[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << " "tagline" : "You Know, for Search"[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] wire - http-outgoing-14 << "}[\n]" | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] headers - http-outgoing-14 << content-length: 536 | |
[DEBUG] 2021-02-15 18:31:56.958 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 14][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:56.959 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 14][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[INFO ] 2021-02-15 18:31:57.048 [Ruby-0-Thread-13: :1] elasticsearch - Using a default mapping template {:es_version=>7, :ecs_compatibility=>:disabled} | |
[DEBUG] 2021-02-15 18:31:57.050 [[main]-pipeline-manager] grok - Grok patterns path {:paths=>["/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-patterns-core-4.1.2/patterns", "/usr/share/logstash/patterns/*"]} | |
[DEBUG] 2021-02-15 18:31:57.054 [[main]-pipeline-manager] grok - Grok patterns path {:paths=>[]} | |
[DEBUG] 2021-02-15 18:31:57.055 [[main]-pipeline-manager] grok - Match data {:match=>{"message"=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}} | |
[DEBUG] 2021-02-15 18:31:57.059 [[main]-pipeline-manager] grok - regexp: /message {:pattern=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.062 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:57.084 [Ruby-0-Thread-13: :1] MainClientExec - Executing request GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> GET /_xpack HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Length: 0 | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "GET /_xpack HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Length: 0[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.085 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.128 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-length: 1228[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "{"build":{"hash":"083627f112ba94dffc1232e8b42b73492789ef91","date":"2020-09-01T21:22:21.964974Z"},"license":{"uid":"86c2eca5-8a53-4279-a057-8de1391031ed","type":"basic","mode":"basic","status":"active"},"features":{"analytics":{"available":true,"enabled":true},"ccr":{"available":false,"enabled":true},"data_streams":{"available":true,"enabled":true},"enrich":{"available":true,"enabled":true},"eql":{"available":true,"enabled":true},"flattened":{"available":true,"enabled":true},"frozen_indices":{"available":true,"enabled":true},"graph":{"available":false,"enabled":true},"ilm":{"available":true,"enabled":true},"logstash":{"available":false,"enabled":true},"ml":{"available":false,"enabled":false,"native_code_info":{"version":"N/A","build_hash":"N/A"}},"monitoring":{"available":true,"enabled":true},"rollup":{"available":true,"enabled":true},"security":{"available":true,"enabled":true},"slm":{"available":true,"enabled":true},"spatial":{"available":true,"enabled":true},"sql":{"available":true,"enabled":true},"transform":{"available":true,"enabled":true},"vectors":{"available":true,"enabled":true},"voting_only":{"available":true,"enabled":true},"watcher":{"available":false,"enabled":true}},"tagline":"You know, for X"}" | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:57.129 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-length: 1228 | |
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:57.172 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.182 [[main]-pipeline-manager] grok - Adding pattern {"S3_REQUEST_LINE"=>"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})"} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"S3_ACCESS_LOG"=>"%{WORD:owner} %{NOTSPACE:bucket} \\[%{HTTPDATE:timestamp}\\] %{IP:clientip} %{NOTSPACE:requester} %{NOTSPACE:request_id} %{NOTSPACE:operation} %{NOTSPACE:key} (?:\"%{S3_REQUEST_LINE}\"|-) (?:%{INT:response:int}|-) (?:-|%{NOTSPACE:error_code}) (?:%{INT:bytes:int}|-) (?:%{INT:object_size:int}|-) (?:%{INT:request_time_ms:int}|-) (?:%{INT:turnaround_time_ms:int}|-) (?:%{QS:referrer}|-) (?:\"?%{QS:agent}\"?|-) (?:-|%{NOTSPACE:version_id})"} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_URIPATHPARAM"=>"%{URIPATH:path}(?:%{URIPARAM:params})?"} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_URI"=>"%{URIPROTO:proto}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST:urihost})?(?:%{ELB_URIPATHPARAM})?"} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_REQUEST_LINE"=>"(?:%{WORD:verb} %{ELB_URI:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})"} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"ELB_ACCESS_LOG"=>"%{TIMESTAMP_ISO8601:timestamp} %{NOTSPACE:elb} %{IP:clientip}:%{INT:clientport:int} (?:(%{IP:backendip}:?:%{INT:backendport:int})|-) %{NUMBER:request_processing_time:float} %{NUMBER:backend_processing_time:float} %{NUMBER:response_processing_time:float} %{INT:response:int} %{INT:backend_response:int} %{INT:received_bytes:int} %{INT:bytes:int} \"%{ELB_REQUEST_LINE}\""} | |
[DEBUG] 2021-02-15 18:31:57.183 [[main]-pipeline-manager] grok - Adding pattern {"CLOUDFRONT_ACCESS_LOG"=>"(?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY}\\t%{TIME})\\t%{WORD:x_edge_location}\\t(?:%{NUMBER:sc_bytes:int}|-)\\t%{IPORHOST:clientip}\\t%{WORD:cs_method}\\t%{HOSTNAME:cs_host}\\t%{NOTSPACE:cs_uri_stem}\\t%{NUMBER:sc_status:int}\\t%{GREEDYDATA:referrer}\\t%{GREEDYDATA:agent}\\t%{GREEDYDATA:cs_uri_query}\\t%{GREEDYDATA:cookies}\\t%{WORD:x_edge_result_type}\\t%{NOTSPACE:x_edge_request_id}\\t%{HOSTNAME:x_host_header}\\t%{URIPROTO:cs_protocol}\\t%{INT:cs_bytes:int}\\t%{GREEDYDATA:time_taken:float}\\t%{GREEDYDATA:x_forwarded_for}\\t%{GREEDYDATA:ssl_protocol}\\t%{GREEDYDATA:ssl_cipher}\\t%{GREEDYDATA:x_edge_response_result_type}"} | |
[DEBUG] 2021-02-15 18:31:57.184 [[main]-pipeline-manager] grok - Adding pattern {"BRO_HTTP"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{INT:trans_depth}\\t%{GREEDYDATA:method}\\t%{GREEDYDATA:domain}\\t%{GREEDYDATA:uri}\\t%{GREEDYDATA:referrer}\\t%{GREEDYDATA:user_agent}\\t%{NUMBER:request_body_len}\\t%{NUMBER:response_body_len}\\t%{GREEDYDATA:status_code}\\t%{GREEDYDATA:status_msg}\\t%{GREEDYDATA:info_code}\\t%{GREEDYDATA:info_msg}\\t%{GREEDYDATA:filename}\\t%{GREEDYDATA:bro_tags}\\t%{GREEDYDATA:username}\\t%{GREEDYDATA:password}\\t%{GREEDYDATA:proxied}\\t%{GREEDYDATA:orig_fuids}\\t%{GREEDYDATA:orig_mime_types}\\t%{GREEDYDATA:resp_fuids}\\t%{GREEDYDATA:resp_mime_types}"} | |
[DEBUG] 2021-02-15 18:31:57.189 [[main]-pipeline-manager] grok - Adding pattern {"BRO_DNS"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{WORD:proto}\\t%{INT:trans_id}\\t%{GREEDYDATA:query}\\t%{GREEDYDATA:qclass}\\t%{GREEDYDATA:qclass_name}\\t%{GREEDYDATA:qtype}\\t%{GREEDYDATA:qtype_name}\\t%{GREEDYDATA:rcode}\\t%{GREEDYDATA:rcode_name}\\t%{GREEDYDATA:AA}\\t%{GREEDYDATA:TC}\\t%{GREEDYDATA:RD}\\t%{GREEDYDATA:RA}\\t%{GREEDYDATA:Z}\\t%{GREEDYDATA:answers}\\t%{GREEDYDATA:TTLs}\\t%{GREEDYDATA:rejected}"} | |
[DEBUG] 2021-02-15 18:31:57.189 [[main]-pipeline-manager] grok - Adding pattern {"BRO_CONN"=>"%{NUMBER:ts}\\t%{NOTSPACE:uid}\\t%{IP:orig_h}\\t%{INT:orig_p}\\t%{IP:resp_h}\\t%{INT:resp_p}\\t%{WORD:proto}\\t%{GREEDYDATA:service}\\t%{NUMBER:duration}\\t%{NUMBER:orig_bytes}\\t%{NUMBER:resp_bytes}\\t%{GREEDYDATA:conn_state}\\t%{GREEDYDATA:local_orig}\\t%{GREEDYDATA:missed_bytes}\\t%{GREEDYDATA:history}\\t%{GREEDYDATA:orig_pkts}\\t%{GREEDYDATA:orig_ip_bytes}\\t%{GREEDYDATA:resp_pkts}\\t%{GREEDYDATA:resp_ip_bytes}\\t%{GREEDYDATA:tunnel_parents}"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"BRO_FILES"=>"%{NUMBER:ts}\\t%{NOTSPACE:fuid}\\t%{IP:tx_hosts}\\t%{IP:rx_hosts}\\t%{NOTSPACE:conn_uids}\\t%{GREEDYDATA:source}\\t%{GREEDYDATA:depth}\\t%{GREEDYDATA:analyzers}\\t%{GREEDYDATA:mime_type}\\t%{GREEDYDATA:filename}\\t%{GREEDYDATA:duration}\\t%{GREEDYDATA:local_orig}\\t%{GREEDYDATA:is_orig}\\t%{GREEDYDATA:seen_bytes}\\t%{GREEDYDATA:total_bytes}\\t%{GREEDYDATA:missing_bytes}\\t%{GREEDYDATA:overflow_bytes}\\t%{GREEDYDATA:timedout}\\t%{GREEDYDATA:parent_fuid}\\t%{GREEDYDATA:md5}\\t%{GREEDYDATA:sha1}\\t%{GREEDYDATA:sha256}\\t%{GREEDYDATA:extracted}"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"RUBY_LOGLEVEL"=>"(?:DEBUG|FATAL|ERROR|WARN|INFO)"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"RUBY_LOGGER"=>"[DFEWI], \\[%{TIMESTAMP_ISO8601:timestamp} #%{POSINT:pid}\\] *%{RUBY_LOGLEVEL:loglevel} -- +%{DATA:progname}: %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_MSGID"=>"[0-9A-Za-z]{6}-[0-9A-Za-z]{6}-[0-9A-Za-z]{2}"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_FLAGS"=>"(<=|[-=>*]>|[*]{2}|==)"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_DATE"=>"%{YEAR:exim_year}-%{MONTHNUM:exim_month}-%{MONTHDAY:exim_day} %{TIME:exim_time}"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_PID"=>"\\[%{POSINT}\\]"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_QT"=>"((\\d+y)?(\\d+w)?(\\d+d)?(\\d+h)?(\\d+m)?(\\d+s)?)"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_EXCLUDE_TERMS"=>"(Message is frozen|(Start|End) queue run| Warning: | retry time not reached | no (IP address|host name) found for (IP address|host) | unexpected disconnection while reading SMTP command | no immediate delivery: |another process is handling this message)"} | |
[DEBUG] 2021-02-15 18:31:57.190 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_REMOTE_HOST"=>"(H=(%{NOTSPACE:remote_hostname} )?(\\(%{NOTSPACE:remote_heloname}\\) )?\\[%{IP:remote_host}\\])"} | |
[INFO ] 2021-02-15 18:31:57.200 [Ruby-0-Thread-13: :1] elasticsearch - Attempting to install template {:manage_template=>{"index_patterns"=>"logstash-*", "version"=>60001, "settings"=>{"index.refresh_interval"=>"5s", "number_of_shards"=>1}, "mappings"=>{"dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword", "ignore_above"=>256}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date"}, "@version"=>{"type"=>"keyword"}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}} | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] RequestAuthCache - Re-using cached 'basic' auth scheme for https://IP:9200 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection request: [route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection leased: [id: 12][route: {s}->https://IP:9200][total kept alive: 2; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] DefaultManagedHttpClientConnection - http-outgoing-12: set socket timeout to 60000 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Executing request HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Target auth state: CHALLENGED | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] MainClientExec - Proxy auth state: UNCHALLENGED | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> HEAD /_template/logstash HTTP/1.1 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Connection: Keep-Alive | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Content-Type: application/json | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Host: IP:9200 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> User-Agent: Manticore 0.6.4 | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Accept-Encoding: gzip,deflate | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 >> Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "HEAD /_template/logstash HTTP/1.1[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Connection: Keep-Alive[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Content-Type: application/json[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Host: IP:9200[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "User-Agent: Manticore 0.6.4[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Accept-Encoding: gzip,deflate[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "Authorization: Basic ZWxhc3RpYzpHbG9iYWxAMTIz[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.203 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 >> "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_INTERFACE"=>"(I=\\[%{IP:exim_interface}\\](:%{NUMBER:exim_interface_port}))"} | |
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_PROTOCOL"=>"(P=%{NOTSPACE:protocol})"} | |
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_MSG_SIZE"=>"(S=%{NUMBER:exim_msg_size})"} | |
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_HEADER_ID"=>"(id=%{NOTSPACE:exim_header_id})"} | |
[DEBUG] 2021-02-15 18:31:57.204 [[main]-pipeline-manager] grok - Adding pattern {"EXIM_SUBJECT"=>"(T=%{QS:exim_subject})"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVEAUDIT"=>"%{TIMESTAMP_ISO8601:timestamp}:"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"POSTGRESQL"=>"%{DATESTAMP:timestamp} %{TZ} %{DATA:user_id} %{GREEDYDATA:connection_id} %{POSINT:pid}"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOSTIME"=>"\\[%{NUMBER:nagios_epoch}\\]"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_CURRENT_SERVICE_STATE"=>"CURRENT SERVICE STATE"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_CURRENT_HOST_STATE"=>"CURRENT HOST STATE"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_NOTIFICATION"=>"SERVICE NOTIFICATION"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_NOTIFICATION"=>"HOST NOTIFICATION"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_ALERT"=>"SERVICE ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_ALERT"=>"HOST ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.205 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_FLAPPING_ALERT"=>"SERVICE FLAPPING ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_FLAPPING_ALERT"=>"HOST FLAPPING ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_DOWNTIME_ALERT"=>"SERVICE DOWNTIME ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_DOWNTIME_ALERT"=>"HOST DOWNTIME ALERT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_PASSIVE_SERVICE_CHECK"=>"PASSIVE SERVICE CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_PASSIVE_HOST_CHECK"=>"PASSIVE HOST CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_SERVICE_EVENT_HANDLER"=>"SERVICE EVENT HANDLER"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_HOST_EVENT_HANDLER"=>"HOST EVENT HANDLER"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_EXTERNAL_COMMAND"=>"EXTERNAL COMMAND"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TYPE_TIMEPERIOD_TRANSITION"=>"TIMEPERIOD TRANSITION"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_SVC_CHECK"=>"DISABLE_SVC_CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_SVC_CHECK"=>"ENABLE_SVC_CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_CHECK"=>"DISABLE_HOST_CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_CHECK"=>"ENABLE_HOST_CHECK"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_PROCESS_SERVICE_CHECK_RESULT"=>"PROCESS_SERVICE_CHECK_RESULT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_PROCESS_HOST_CHECK_RESULT"=>"PROCESS_HOST_CHECK_RESULT"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_SCHEDULE_SERVICE_DOWNTIME"=>"SCHEDULE_SERVICE_DOWNTIME"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_SCHEDULE_HOST_DOWNTIME"=>"SCHEDULE_HOST_DOWNTIME"} | |
[DEBUG] 2021-02-15 18:31:57.206 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_SVC_NOTIFICATIONS"=>"DISABLE_HOST_SVC_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_SVC_NOTIFICATIONS"=>"ENABLE_HOST_SVC_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_HOST_NOTIFICATIONS"=>"DISABLE_HOST_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_HOST_NOTIFICATIONS"=>"ENABLE_HOST_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_DISABLE_SVC_NOTIFICATIONS"=>"DISABLE_SVC_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_ENABLE_SVC_NOTIFICATIONS"=>"ENABLE_SVC_NOTIFICATIONS"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_WARNING"=>"Warning:%{SPACE}%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_CURRENT_SERVICE_STATE"=>"%{NAGIOS_TYPE_CURRENT_SERVICE_STATE:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statetype};%{DATA:nagios_statecode};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_CURRENT_HOST_STATE"=>"%{NAGIOS_TYPE_CURRENT_HOST_STATE:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statetype};%{DATA:nagios_statecode};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_NOTIFICATION"=>"%{NAGIOS_TYPE_SERVICE_NOTIFICATION:nagios_type}: %{DATA:nagios_notifyname};%{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_contact};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_NOTIFICATION"=>"%{NAGIOS_TYPE_HOST_NOTIFICATION:nagios_type}: %{DATA:nagios_notifyname};%{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_contact};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_ALERT"=>"%{NAGIOS_TYPE_SERVICE_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{NUMBER:nagios_attempt};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_ALERT"=>"%{NAGIOS_TYPE_HOST_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{NUMBER:nagios_attempt};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_FLAPPING_ALERT"=>"%{NAGIOS_TYPE_SERVICE_FLAPPING_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.221 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_FLAPPING_ALERT"=>"%{NAGIOS_TYPE_HOST_FLAPPING_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_message}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_DOWNTIME_ALERT"=>"%{NAGIOS_TYPE_SERVICE_DOWNTIME_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_DOWNTIME_ALERT"=>"%{NAGIOS_TYPE_HOST_DOWNTIME_ALERT:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_PASSIVE_SERVICE_CHECK"=>"%{NAGIOS_TYPE_PASSIVE_SERVICE_CHECK:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_PASSIVE_HOST_CHECK"=>"%{NAGIOS_TYPE_PASSIVE_HOST_CHECK:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_comment}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_SERVICE_EVENT_HANDLER"=>"%{NAGIOS_TYPE_SERVICE_EVENT_HANDLER:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{DATA:nagios_event_handler_name}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_HOST_EVENT_HANDLER"=>"%{NAGIOS_TYPE_HOST_EVENT_HANDLER:nagios_type}: %{DATA:nagios_hostname};%{DATA:nagios_state};%{DATA:nagios_statelevel};%{DATA:nagios_event_handler_name}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_TIMEPERIOD_TRANSITION"=>"%{NAGIOS_TYPE_TIMEPERIOD_TRANSITION:nagios_type}: %{DATA:nagios_service};%{DATA:nagios_unknown1};%{DATA:nagios_unknown2}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_SVC_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_SVC_CHECK:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_CHECK:nagios_command};%{DATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_SVC_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_SVC_CHECK:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_CHECK"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_CHECK:nagios_command};%{DATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_PROCESS_SERVICE_CHECK_RESULT"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_PROCESS_SERVICE_CHECK_RESULT:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_service};%{DATA:nagios_state};%{GREEDYDATA:nagios_check_result}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_PROCESS_HOST_CHECK_RESULT"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_PROCESS_HOST_CHECK_RESULT:nagios_command};%{DATA:nagios_hostname};%{DATA:nagios_state};%{GREEDYDATA:nagios_check_result}"} | |
[DEBUG] 2021-02-15 18:31:57.222 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_SVC_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_HOST_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_HOST_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_DISABLE_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_DISABLE_SVC_NOTIFICATIONS:nagios_command};%{DATA:nagios_hostname};%{GREEDYDATA:nagios_service}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_SVC_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_HOST_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_HOST_NOTIFICATIONS:nagios_command};%{GREEDYDATA:nagios_hostname}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_ENABLE_SVC_NOTIFICATIONS"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_ENABLE_SVC_NOTIFICATIONS:nagios_command};%{DATA:nagios_hostname};%{GREEDYDATA:nagios_service}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOS_EC_LINE_SCHEDULE_HOST_DOWNTIME"=>"%{NAGIOS_TYPE_EXTERNAL_COMMAND:nagios_type}: %{NAGIOS_EC_SCHEDULE_HOST_DOWNTIME:nagios_command};%{DATA:nagios_hostname};%{NUMBER:nagios_start_time};%{NUMBER:nagios_end_time};%{NUMBER:nagios_fixed};%{NUMBER:nagios_trigger_id};%{NUMBER:nagios_duration};%{DATA:author};%{DATA:comment}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"NAGIOSLOGLINE"=>"%{NAGIOSTIME} (?:%{NAGIOS_WARNING}|%{NAGIOS_CURRENT_SERVICE_STATE}|%{NAGIOS_CURRENT_HOST_STATE}|%{NAGIOS_SERVICE_NOTIFICATION}|%{NAGIOS_HOST_NOTIFICATION}|%{NAGIOS_SERVICE_ALERT}|%{NAGIOS_HOST_ALERT}|%{NAGIOS_SERVICE_FLAPPING_ALERT}|%{NAGIOS_HOST_FLAPPING_ALERT}|%{NAGIOS_SERVICE_DOWNTIME_ALERT}|%{NAGIOS_HOST_DOWNTIME_ALERT}|%{NAGIOS_PASSIVE_SERVICE_CHECK}|%{NAGIOS_PASSIVE_HOST_CHECK}|%{NAGIOS_SERVICE_EVENT_HANDLER}|%{NAGIOS_HOST_EVENT_HANDLER}|%{NAGIOS_TIMEPERIOD_TRANSITION}|%{NAGIOS_EC_LINE_DISABLE_SVC_CHECK}|%{NAGIOS_EC_LINE_ENABLE_SVC_CHECK}|%{NAGIOS_EC_LINE_DISABLE_HOST_CHECK}|%{NAGIOS_EC_LINE_ENABLE_HOST_CHECK}|%{NAGIOS_EC_LINE_PROCESS_HOST_CHECK_RESULT}|%{NAGIOS_EC_LINE_PROCESS_SERVICE_CHECK_RESULT}|%{NAGIOS_EC_LINE_SCHEDULE_HOST_DOWNTIME}|%{NAGIOS_EC_LINE_DISABLE_HOST_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_HOST_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_DISABLE_HOST_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_HOST_NOTIFICATIONS}|%{NAGIOS_EC_LINE_DISABLE_SVC_NOTIFICATIONS}|%{NAGIOS_EC_LINE_ENABLE_SVC_NOTIFICATIONS})"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISTIMESTAMP"=>"%{MONTHDAY} %{MONTH} %{TIME}"} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISLOG"=>"\\[%{POSINT:pid}\\] %{REDISTIMESTAMP:timestamp} \\* "} | |
[DEBUG] 2021-02-15 18:31:57.223 [[main]-pipeline-manager] grok - Adding pattern {"REDISMONLOG"=>"%{NUMBER:timestamp} \\[%{INT:database} %{IP:client}:%{NUMBER:port}\\] \"%{WORD:command}\"\\s?%{GREEDYDATA:params}"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"SQUID3"=>"%{NUMBER:timestamp}\\s+%{NUMBER:duration}\\s%{IP:client_address}\\s%{WORD:cache_result}/%{POSINT:status_code}\\s%{NUMBER:bytes}\\s%{WORD:request_method}\\s%{NOTSPACE:url}\\s(%{NOTSPACE:user}|-)\\s%{WORD:hierarchy_code}/%{IPORHOST:server}\\s%{NOTSPACE:content_type}"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"USERNAME"=>"[a-zA-Z0-9._-]+"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"USER"=>"%{USERNAME}"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"EMAILLOCALPART"=>"[a-zA-Z][a-zA-Z0-9_.+-=:]+"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"EMAILADDRESS"=>"%{EMAILLOCALPART}@%{HOSTNAME}"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"INT"=>"(?:[+-]?(?:[0-9]+))"} | |
[DEBUG] 2021-02-15 18:31:57.224 [[main]-pipeline-manager] grok - Adding pattern {"BASE10NUM"=>"(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NUMBER"=>"(?:%{BASE10NUM})"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"BASE16NUM"=>"(?<![0-9A-Fa-f])(?:[+-]?(?:0x)?(?:[0-9A-Fa-f]+))"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"BASE16FLOAT"=>"\\b(?<![0-9A-Fa-f.])(?:[+-]?(?:0x)?(?:(?:[0-9A-Fa-f]+(?:\\.[0-9A-Fa-f]*)?)|(?:\\.[0-9A-Fa-f]+)))\\b"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"POSINT"=>"\\b(?:[1-9][0-9]*)\\b"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NONNEGINT"=>"\\b(?:[0-9]+)\\b"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"WORD"=>"\\b\\w+\\b"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"NOTSPACE"=>"\\S+"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"SPACE"=>"\\s*"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"DATA"=>".*?"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"GREEDYDATA"=>".*"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"QUOTEDSTRING"=>"(?>(?<!\\\\)(?>\"(?>\\\\.|[^\\\\\"]+)+\"|\"\"|(?>'(?>\\\\.|[^\\\\']+)+')|''|(?>`(?>\\\\.|[^\\\\`]+)+`)|``))"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"UUID"=>"[A-Fa-f0-9]{8}-(?:[A-Fa-f0-9]{4}-){3}[A-Fa-f0-9]{12}"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"URN"=>"urn:[0-9A-Za-z][0-9A-Za-z-]{0,31}:(?:%[0-9a-fA-F]{2}|[0-9A-Za-z()+,.:=@;$_!*'/?#-])+"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"MAC"=>"(?:%{CISCOMAC}|%{WINDOWSMAC}|%{COMMONMAC})"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"CISCOMAC"=>"(?:(?:[A-Fa-f0-9]{4}\\.){2}[A-Fa-f0-9]{4})"} | |
[DEBUG] 2021-02-15 18:31:57.231 [[main]-pipeline-manager] grok - Adding pattern {"WINDOWSMAC"=>"(?:(?:[A-Fa-f0-9]{2}-){5}[A-Fa-f0-9]{2})"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"COMMONMAC"=>"(?:(?:[A-Fa-f0-9]{2}:){5}[A-Fa-f0-9]{2})"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPV6"=>"((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)(\\.(25[0-5]|2[0-4]\\d|1\\d\\d|[1-9]?\\d)){3}))|:)))(%.+)?"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPV4"=>"(?<![0-9])(?:(?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5])[.](?:[0-1]?[0-9]{1,2}|2[0-4][0-9]|25[0-5]))(?![0-9])"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IP"=>"(?:%{IPV6}|%{IPV4})"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"HOSTNAME"=>"\\b(?:[0-9A-Za-z][0-9A-Za-z-]{0,62})(?:\\.(?:[0-9A-Za-z][0-9A-Za-z-]{0,62}))*(\\.?|\\b)"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"IPORHOST"=>"(?:%{IP}|%{HOSTNAME})"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"HOSTPORT"=>"%{IPORHOST}:%{POSINT}"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"PATH"=>"(?:%{UNIXPATH}|%{WINPATH})"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"UNIXPATH"=>"(/([\\w_%!$@:.,+~-]+|\\\\.)*)+"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"TTY"=>"(?:/dev/(pts|tty([pq])?)(\\w+)?/?(?:[0-9]+))"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"WINPATH"=>"(?>[A-Za-z]+:|\\\\)(?:\\\\[^\\\\?*]*)+"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPROTO"=>"[A-Za-z]([A-Za-z0-9+\\-.]+)+"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIHOST"=>"%{IPORHOST}(?::%{POSINT:port})?"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPATH"=>"(?:/[A-Za-z0-9$.+!*'(){},~:;=@#%&_\\-]*)+"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPARAM"=>"\\?[A-Za-z0-9$.+!*'|(){},~@#%&/=:;_?\\-\\[\\]<>]*"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URIPATHPARAM"=>"%{URIPATH}(?:%{URIPARAM})?"} | |
[DEBUG] 2021-02-15 18:31:57.232 [[main]-pipeline-manager] grok - Adding pattern {"URI"=>"%{URIPROTO}://(?:%{USER}(?::[^@]*)?@)?(?:%{URIHOST})?(?:%{URIPATHPARAM})?"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTH"=>"\\b(?:[Jj]an(?:uary|uar)?|[Ff]eb(?:ruary|ruar)?|[Mm](?:a|ä)?r(?:ch|z)?|[Aa]pr(?:il)?|[Mm]a(?:y|i)?|[Jj]un(?:e|i)?|[Jj]ul(?:y)?|[Aa]ug(?:ust)?|[Ss]ep(?:tember)?|[Oo](?:c|k)?t(?:ober)?|[Nn]ov(?:ember)?|[Dd]e(?:c|z)(?:ember)?)\\b"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHNUM"=>"(?:0?[1-9]|1[0-2])"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHNUM2"=>"(?:0[1-9]|1[0-2])"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MONTHDAY"=>"(?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"DAY"=>"(?:Mon(?:day)?|Tue(?:sday)?|Wed(?:nesday)?|Thu(?:rsday)?|Fri(?:day)?|Sat(?:urday)?|Sun(?:day)?)"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"YEAR"=>"(?>\\d\\d){1,2}"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"HOUR"=>"(?:2[0123]|[01]?[0-9])"} | |
[DEBUG] 2021-02-15 18:31:57.239 [[main]-pipeline-manager] grok - Adding pattern {"MINUTE"=>"(?:[0-5][0-9])"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SECOND"=>"(?:(?:[0-5]?[0-9]|60)(?:[:.,][0-9]+)?)"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TIME"=>"(?!<[0-9])%{HOUR}:%{MINUTE}(?::%{SECOND})(?![0-9])"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE_US"=>"%{MONTHNUM}[/-]%{MONTHDAY}[/-]%{YEAR}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE_EU"=>"%{MONTHDAY}[./-]%{MONTHNUM}[./-]%{YEAR}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"ISO8601_TIMEZONE"=>"(?:Z|[+-]%{HOUR}(?::?%{MINUTE}))"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"ISO8601_SECOND"=>"(?:%{SECOND}|60)"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TIMESTAMP_ISO8601"=>"%{YEAR}-%{MONTHNUM}-%{MONTHDAY}[T ]%{HOUR}:?%{MINUTE}(?::?%{SECOND})?%{ISO8601_TIMEZONE}?"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATE"=>"%{DATE_US}|%{DATE_EU}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP"=>"%{DATE}[- ]%{TIME}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"TZ"=>"(?:[APMCE][SD]T|UTC)"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_RFC822"=>"%{DAY} %{MONTH} %{MONTHDAY} %{YEAR} %{TIME} %{TZ}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_RFC2822"=>"%{DAY}, %{MONTHDAY} %{MONTH} %{YEAR} %{TIME} %{ISO8601_TIMEZONE}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_OTHER"=>"%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{TZ} %{YEAR}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"DATESTAMP_EVENTLOG"=>"%{YEAR}%{MONTHNUM2}%{MONTHDAY}%{HOUR}%{MINUTE}%{SECOND}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGTIMESTAMP"=>"%{MONTH} +%{MONTHDAY} %{TIME}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"PROG"=>"[\\x21-\\x5a\\x5c\\x5e-\\x7e]+"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGPROG"=>"%{PROG:program}(?:\\[%{POSINT:pid}\\])?"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGHOST"=>"%{IPORHOST}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGFACILITY"=>"<%{NONNEGINT:facility}.%{NONNEGINT:priority}>"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDATE"=>"%{MONTHDAY}/%{MONTH}/%{YEAR}:%{TIME} %{INT}"} | |
[DEBUG] 2021-02-15 18:31:57.240 [[main]-pipeline-manager] grok - Adding pattern {"QS"=>"%{QUOTEDSTRING}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGBASE"=>"%{SYSLOGTIMESTAMP:timestamp} (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource} %{SYSLOGPROG}:"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"LOGLEVEL"=>"([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDUSER"=>"%{EMAILADDRESS}|%{USER}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPDERROR_DATE"=>"%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_COMMONLOG"=>"%{IPORHOST:clientip} %{HTTPDUSER:ident} %{HTTPDUSER:auth} \\[%{HTTPDATE:timestamp}\\] \"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})\" %{NUMBER:response} (?:%{NUMBER:bytes}|-)"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_COMBINEDLOG"=>"%{HTTPD_COMMONLOG} %{QS:referrer} %{QS:agent}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD20_ERRORLOG"=>"\\[%{HTTPDERROR_DATE:timestamp}\\] \\[%{LOGLEVEL:loglevel}\\] (?:\\[client %{IPORHOST:clientip}\\] ){0,1}%{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD24_ERRORLOG"=>"\\[%{HTTPDERROR_DATE:timestamp}\\] \\[%{WORD:module}:%{LOGLEVEL:loglevel}\\] \\[pid %{POSINT:pid}(:tid %{NUMBER:tid})?\\]( \\(%{POSINT:proxy_errorcode}\\)%{DATA:proxy_message}:)?( \\[client %{IPORHOST:clientip}:%{POSINT:clientport}\\])?( %{DATA:errorcode}:)? %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.241 [[main]-pipeline-manager] grok - Adding pattern {"HTTPD_ERRORLOG"=>"%{HTTPD20_ERRORLOG}|%{HTTPD24_ERRORLOG}"} | |
[DEBUG] 2021-02-15 18:31:57.271 [[main]-pipeline-manager] grok - Adding pattern {"COMMONAPACHELOG"=>"%{HTTPD_COMMONLOG}"} | |
[DEBUG] 2021-02-15 18:31:57.271 [[main]-pipeline-manager] grok - Adding pattern {"COMBINEDAPACHELOG"=>"%{HTTPD_COMBINEDLOG}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYTIME"=>"(?!<[0-9])%{HOUR:haproxy_hour}:%{MINUTE:haproxy_minute}(?::%{SECOND:haproxy_second})(?![0-9])"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYDATE"=>"%{MONTHDAY:haproxy_monthday}/%{MONTH:haproxy_month}/%{YEAR:haproxy_year}:%{HAPROXYTIME:haproxy_time}.%{INT:haproxy_milliseconds}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYCAPTUREDREQUESTHEADERS"=>"%{DATA:captured_request_headers}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYCAPTUREDRESPONSEHEADERS"=>"%{DATA:captured_response_headers}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYHTTPBASE"=>"%{IP:client_ip}:%{INT:client_port} \\[%{HAPROXYDATE:accept_date}\\] %{NOTSPACE:frontend_name} %{NOTSPACE:backend_name}/%{NOTSPACE:server_name} %{INT:time_request}/%{INT:time_queue}/%{INT:time_backend_connect}/%{INT:time_backend_response}/%{NOTSPACE:time_duration} %{INT:http_status_code} %{NOTSPACE:bytes_read} %{DATA:captured_request_cookie} %{DATA:captured_response_cookie} %{NOTSPACE:termination_state} %{INT:actconn}/%{INT:feconn}/%{INT:beconn}/%{INT:srvconn}/%{NOTSPACE:retries} %{INT:srv_queue}/%{INT:backend_queue} (\\{%{HAPROXYCAPTUREDREQUESTHEADERS}\\})?( )?(\\{%{HAPROXYCAPTUREDRESPONSEHEADERS}\\})?( )?\"(<BADREQ>|(%{WORD:http_verb} (%{URIPROTO:http_proto}://)?(?:%{USER:http_user}(?::[^@]*)?@)?(?:%{URIHOST:http_host})?(?:%{URIPATHPARAM:http_request})?( HTTP/%{NUMBER:http_version})?))?\""} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYHTTP"=>"(?:%{SYSLOGTIMESTAMP:syslog_timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) %{IPORHOST:syslog_server} %{SYSLOGPROG}: %{HAPROXYHTTPBASE}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"HAPROXYTCP"=>"(?:%{SYSLOGTIMESTAMP:syslog_timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) %{IPORHOST:syslog_server} %{SYSLOGPROG}: %{IP:client_ip}:%{INT:client_port} \\[%{HAPROXYDATE:accept_date}\\] %{NOTSPACE:frontend_name} %{NOTSPACE:backend_name}/%{NOTSPACE:server_name} %{INT:time_queue}/%{INT:time_backend_connect}/%{NOTSPACE:time_duration} %{NOTSPACE:bytes_read} %{NOTSPACE:termination_state} %{INT:actconn}/%{INT:feconn}/%{INT:beconn}/%{INT:srvconn}/%{NOTSPACE:retries} %{INT:srv_queue}/%{INT:backend_queue}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"NETSCREENSESSIONLOG"=>"%{SYSLOGTIMESTAMP:date} %{IPORHOST:device} %{IPORHOST}: NetScreen device_id=%{WORD:device_id}%{DATA}: start_time=%{QUOTEDSTRING:start_time} duration=%{INT:duration} policy_id=%{INT:policy_id} service=%{DATA:service} proto=%{INT:proto} src zone=%{WORD:src_zone} dst zone=%{WORD:dst_zone} action=%{WORD:action} sent=%{INT:sent} rcvd=%{INT:rcvd} src=%{IPORHOST:src_ip} dst=%{IPORHOST:dst_ip} src_port=%{INT:src_port} dst_port=%{INT:dst_port} src-xlated ip=%{IPORHOST:src_xlated_ip} port=%{INT:src_xlated_port} dst-xlated ip=%{IPORHOST:dst_xlated_ip} port=%{INT:dst_xlated_port} session_id=%{INT:session_id} reason=%{GREEDYDATA:reason}"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_TAGGED_SYSLOG"=>"^<%{POSINT:syslog_pri}>%{CISCOTIMESTAMP:timestamp}( %{SYSLOGHOST:sysloghost})? ?: %%{CISCOTAG:ciscotag}:"} | |
[DEBUG] 2021-02-15 18:31:57.272 [[main]-pipeline-manager] grok - Adding pattern {"CISCOTIMESTAMP"=>"%{MONTH} +%{MONTHDAY}(?: %{YEAR})? %{TIME}"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOTAG"=>"[A-Z0-9]+-%{INT}-(?:[A-Z0-9_]+)"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_ACTION"=>"Built|Teardown|Deny|Denied|denied|requested|permitted|denied by ACL|discarded|est-allowed|Dropping|created|deleted"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_REASON"=>"Duplicate TCP SYN|Failed to locate egress interface|Invalid transport field|No matching connection|DNS Response|DNS Query|(?:%{WORD}\\s*)*"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_DIRECTION"=>"Inbound|inbound|Outbound|outbound"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_INTERVAL"=>"first hit|%{INT}-second interval"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCO_XLATE_TYPE"=>"static|dynamic"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104001"=>"\\((?:Primary|Secondary)\\) Switching to ACTIVE - %{GREEDYDATA:switch_reason}"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104002"=>"\\((?:Primary|Secondary)\\) Switching to STANDBY - %{GREEDYDATA:switch_reason}"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104003"=>"\\((?:Primary|Secondary)\\) Switching to FAILED\\."} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW104004"=>"\\((?:Primary|Secondary)\\) Switching to OK\\."} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105003"=>"\\((?:Primary|Secondary)\\) Monitoring on [Ii]nterface %{GREEDYDATA:interface_name} waiting"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105004"=>"\\((?:Primary|Secondary)\\) Monitoring on [Ii]nterface %{GREEDYDATA:interface_name} normal"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105005"=>"\\((?:Primary|Secondary)\\) Lost Failover communications with mate on [Ii]nterface %{GREEDYDATA:interface_name}"} | |
[DEBUG] 2021-02-15 18:31:57.273 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105008"=>"\\((?:Primary|Secondary)\\) Testing [Ii]nterface %{GREEDYDATA:interface_name}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW105009"=>"\\((?:Primary|Secondary)\\) Testing on [Ii]nterface %{GREEDYDATA:interface_name} (?:Passed|Failed)"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106001"=>"%{CISCO_DIRECTION:direction} %{WORD:protocol} connection %{CISCO_ACTION:action} from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port} flags %{GREEDYDATA:tcp_flags} on interface %{GREEDYDATA:interface}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106006_106007_106010"=>"%{CISCO_ACTION:action} %{CISCO_DIRECTION:direction} %{WORD:protocol} (?:from|src) %{IP:src_ip}/%{INT:src_port}(\\(%{DATA:src_fwuser}\\))? (?:to|dst) %{IP:dst_ip}/%{INT:dst_port}(\\(%{DATA:dst_fwuser}\\))? (?:on interface %{DATA:interface}|due to %{CISCO_REASON:reason})"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106014"=>"%{CISCO_ACTION:action} %{CISCO_DIRECTION:direction} %{WORD:protocol} src %{DATA:src_interface}:%{IP:src_ip}(\\(%{DATA:src_fwuser}\\))? dst %{DATA:dst_interface}:%{IP:dst_ip}(\\(%{DATA:dst_fwuser}\\))? \\(type %{INT:icmp_type}, code %{INT:icmp_code}\\)"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106015"=>"%{CISCO_ACTION:action} %{WORD:protocol} \\(%{DATA:policy_id}\\) from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port} flags %{DATA:tcp_flags} on interface %{GREEDYDATA:interface}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106021"=>"%{CISCO_ACTION:action} %{WORD:protocol} reverse path check from %{IP:src_ip} to %{IP:dst_ip} on interface %{GREEDYDATA:interface}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106023"=>"%{CISCO_ACTION:action}( protocol)? %{WORD:protocol} src %{DATA:src_interface}:%{DATA:src_ip}(/%{INT:src_port})?(\\(%{DATA:src_fwuser}\\))? dst %{DATA:dst_interface}:%{DATA:dst_ip}(/%{INT:dst_port})?(\\(%{DATA:dst_fwuser}\\))?( \\(type %{INT:icmp_type}, code %{INT:icmp_code}\\))? by access-group \"?%{DATA:policy_id}\"? \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106100_2_3"=>"access-list %{NOTSPACE:policy_id} %{CISCO_ACTION:action} %{WORD:protocol} for user '%{DATA:src_fwuser}' %{DATA:src_interface}/%{IP:src_ip}\\(%{INT:src_port}\\) -> %{DATA:dst_interface}/%{IP:dst_ip}\\(%{INT:dst_port}\\) hit-cnt %{INT:hit_count} %{CISCO_INTERVAL:interval} \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW106100"=>"access-list %{NOTSPACE:policy_id} %{CISCO_ACTION:action} %{WORD:protocol} %{DATA:src_interface}/%{IP:src_ip}\\(%{INT:src_port}\\)(\\(%{DATA:src_fwuser}\\))? -> %{DATA:dst_interface}/%{IP:dst_ip}\\(%{INT:dst_port}\\)(\\(%{DATA:src_fwuser}\\))? hit-cnt %{INT:hit_count} %{CISCO_INTERVAL:interval} \\[%{DATA:hashcode1}, %{DATA:hashcode2}\\]"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW304001"=>"%{IP:src_ip}(\\(%{DATA:src_fwuser}\\))? Accessed URL %{IP:dst_ip}:%{GREEDYDATA:dst_url}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW110002"=>"%{CISCO_REASON:reason} for %{WORD:protocol} from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port}"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302010"=>"%{INT:connection_count} in use, %{INT:connection_count_max} most used"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302013_302014_302015_302016"=>"%{CISCO_ACTION:action}(?: %{CISCO_DIRECTION:direction})? %{WORD:protocol} connection %{INT:connection_id} for %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port}( \\(%{IP:src_mapped_ip}/%{INT:src_mapped_port}\\))?(\\(%{DATA:src_fwuser}\\))? to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}( \\(%{IP:dst_mapped_ip}/%{INT:dst_mapped_port}\\))?(\\(%{DATA:dst_fwuser}\\))?( duration %{TIME:duration} bytes %{INT:bytes})?(?: %{CISCO_REASON:reason})?( \\(%{DATA:user}\\))?"} | |
[DEBUG] 2021-02-15 18:31:57.277 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW302020_302021"=>"%{CISCO_ACTION:action}(?: %{CISCO_DIRECTION:direction})? %{WORD:protocol} connection for faddr %{IP:dst_ip}/%{INT:icmp_seq_num}(?:\\(%{DATA:fwuser}\\))? gaddr %{IP:src_xlated_ip}/%{INT:icmp_code_xlated} laddr %{IP:src_ip}/%{INT:icmp_code}( \\(%{DATA:user}\\))?"} | |
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW305011"=>"%{CISCO_ACTION:action} %{CISCO_XLATE_TYPE:xlate_type} %{WORD:protocol} translation from %{DATA:src_interface}:%{IP:src_ip}(/%{INT:src_port})?(\\(%{DATA:src_fwuser}\\))? to %{DATA:src_xlated_interface}:%{IP:src_xlated_ip}/%{DATA:src_xlated_port}"} | |
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW313001_313004_313008"=>"%{CISCO_ACTION:action} %{WORD:protocol} type=%{INT:icmp_type}, code=%{INT:icmp_code} from %{IP:src_ip} on interface %{DATA:interface}( to %{IP:dst_ip})?"} | |
[DEBUG] 2021-02-15 18:31:57.278 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW313005"=>"%{CISCO_REASON:reason} for %{WORD:protocol} error message: %{WORD:err_protocol} src %{DATA:err_src_interface}:%{IP:err_src_ip}(\\(%{DATA:err_src_fwuser}\\))? dst %{DATA:err_dst_interface}:%{IP:err_dst_ip}(\\(%{DATA:err_dst_fwuser}\\))? \\(type %{INT:err_icmp_type}, code %{INT:err_icmp_code}\\) on %{DATA:interface} interface\\. Original IP payload: %{WORD:protocol} src %{IP:orig_src_ip}/%{INT:orig_src_port}(\\(%{DATA:orig_src_fwuser}\\))? dst %{IP:orig_dst_ip}/%{INT:orig_dst_port}(\\(%{DATA:orig_dst_fwuser}\\))?"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW321001"=>"Resource '%{WORD:resource_name}' limit of %{POSINT:resource_limit} reached for system"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW402117"=>"%{WORD:protocol}: Received a non-IPSec packet \\(protocol= %{WORD:orig_protocol}\\) from %{IP:src_ip} to %{IP:dst_ip}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW402119"=>"%{WORD:protocol}: Received an %{WORD:orig_protocol} packet \\(SPI= %{DATA:spi}, sequence number= %{DATA:seq_num}\\) from %{IP:src_ip} \\(user= %{DATA:user}\\) to %{IP:dst_ip} that failed anti-replay checking"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW419001"=>"%{CISCO_ACTION:action} %{WORD:protocol} packet from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}, reason: %{GREEDYDATA:reason}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW419002"=>"%{CISCO_REASON:reason} from %{DATA:src_interface}:%{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port} with different initial sequence number"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW500004"=>"%{CISCO_REASON:reason} for protocol=%{WORD:protocol}, from %{IP:src_ip}/%{INT:src_port} to %{IP:dst_ip}/%{INT:dst_port}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW602303_602304"=>"%{WORD:protocol}: An %{CISCO_DIRECTION:direction} %{GREEDYDATA:tunnel_type} SA \\(SPI= %{DATA:spi}\\) between %{IP:src_ip} and %{IP:dst_ip} \\(user= %{DATA:user}\\) has been %{CISCO_ACTION:action}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW710001_710002_710003_710005_710006"=>"%{WORD:protocol} (?:request|access) %{CISCO_ACTION:action} from %{IP:src_ip}/%{INT:src_port} to %{DATA:dst_interface}:%{IP:dst_ip}/%{INT:dst_port}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW713172"=>"Group = %{GREEDYDATA:group}, IP = %{IP:src_ip}, Automatic NAT Detection Status:\\s+Remote end\\s*%{DATA:is_remote_natted}\\s*behind a NAT device\\s+This\\s+end\\s*%{DATA:is_local_natted}\\s*behind a NAT device"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"CISCOFW733100"=>"\\[\\s*%{DATA:drop_type}\\s*\\] drop %{DATA:drop_rate_id} exceeded. Current burst rate is %{INT:drop_rate_current_burst} per second, max configured rate is %{INT:drop_rate_max_burst}; Current average rate is %{INT:drop_rate_current_avg} per second, max configured rate is %{INT:drop_rate_max_avg}; Cumulative total count is %{INT:drop_total_count}"} | |
[DEBUG] 2021-02-15 18:31:57.286 [[main]-pipeline-manager] grok - Adding pattern {"SHOREWALL"=>"(%{SYSLOGTIMESTAMP:timestamp}) (%{WORD:nf_host}) kernel:.*Shorewall:(%{WORD:nf_action1})?:(%{WORD:nf_action2})?.*IN=(%{USERNAME:nf_in_interface})?.*(OUT= *MAC=(%{COMMONMAC:nf_dst_mac}):(%{COMMONMAC:nf_src_mac})?|OUT=%{USERNAME:nf_out_interface}).*SRC=(%{IPV4:nf_src_ip}).*DST=(%{IPV4:nf_dst_ip}).*LEN=(%{WORD:nf_len}).?*TOS=(%{WORD:nf_tos}).?*PREC=(%{WORD:nf_prec}).?*TTL=(%{INT:nf_ttl}).?*ID=(%{INT:nf_id}).?*PROTO=(%{WORD:nf_protocol}).?*SPT=(%{INT:nf_src_port}?.*DPT=%{INT:nf_dst_port}?.*)"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"SFW2"=>"((%{SYSLOGTIMESTAMP})|(%{TIMESTAMP_ISO8601}))\\s*%{HOSTNAME}\\s*kernel\\S+\\s*%{NAGIOSTIME}\\s*SFW2\\-INext\\-%{NOTSPACE:nf_action}\\s*IN=%{USERNAME:nf_in_interface}.*OUT=((\\s*%{USERNAME:nf_out_interface})|(\\s*))MAC=((%{COMMONMAC:nf_dst_mac}:%{COMMONMAC:nf_src_mac})|(\\s*)).*SRC=%{IP:nf_src_ip}\\s*DST=%{IP:nf_dst_ip}.*PROTO=%{WORD:nf_protocol}((.*SPT=%{INT:nf_src_port}.*DPT=%{INT:nf_dst_port}.*)|())"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RUUID"=>"\\h{32}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RCONTROLLER"=>"(?<controller>[^#]+)#(?<action>\\w+)"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3HEAD"=>"(?m)Started %{WORD:verb} \"%{URIPATHPARAM:request}\" for %{IPORHOST:clientip} at (?<timestamp>%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND} %{ISO8601_TIMEZONE})"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RPROCESSING"=>"\\W*Processing by %{RCONTROLLER} as (?<format>\\S+)(?:\\W*Parameters: {%{DATA:params}}\\W*)?"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3FOOT"=>"Completed %{NUMBER:response}%{DATA} in %{NUMBER:totalms}ms %{RAILS3PROFILE}%{GREEDYDATA}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3PROFILE"=>"(?:\\(Views: %{NUMBER:viewms}ms \\| ActiveRecord: %{NUMBER:activerecordms}ms|\\(ActiveRecord: %{NUMBER:activerecordms}ms)?"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"RAILS3"=>"%{RAILS3HEAD}(?:%{RPROCESSING})?(?<context>(?:%{DATA}\\n)*)(?:%{RAILS3FOOT})?"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_TIMESTAMP"=>"%{MONTHDAY}-%{MONTH} %{HOUR}:%{MINUTE}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_HOST"=>"[a-zA-Z0-9-]+"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_VOLUME"=>"%{USER}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_DEVICE"=>"%{USER}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_DEVICEPATH"=>"%{UNIXPATH}"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_CAPACITY"=>"%{INT}{1,3}(,%{INT}{3})*"} | |
[DEBUG] 2021-02-15 18:31:57.287 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_VERSION"=>"%{USER}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_JOB"=>"%{USER}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MAX_CAPACITY"=>"User defined maximum volume capacity %{BACULA_CAPACITY} exceeded on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\)"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_END_VOLUME"=>"End of medium on Volume \\\"%{BACULA_VOLUME:volume}\\\" Bytes=%{BACULA_CAPACITY} Blocks=%{BACULA_CAPACITY} at %{MONTHDAY}-%{MONTH}-%{YEAR} %{HOUR}:%{MINUTE}."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_VOLUME"=>"Created new Volume \\\"%{BACULA_VOLUME:volume}\\\" in catalog."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_LABEL"=>"Labeled new Volume \\\"%{BACULA_VOLUME:volume}\\\" on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\)."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_WROTE_LABEL"=>"Wrote label to prelabeled Volume \\\"%{BACULA_VOLUME:volume}\\\" on device \\\"%{BACULA_DEVICE}\\\" \\(%{BACULA_DEVICEPATH}\\)"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NEW_MOUNT"=>"New volume \\\"%{BACULA_VOLUME:volume}\\\" mounted on device \\\"%{BACULA_DEVICE:device}\\\" \\(%{BACULA_DEVICEPATH}\\) at %{MONTHDAY}-%{MONTH}-%{YEAR} %{HOUR}:%{MINUTE}."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOOPEN"=>"\\s+Cannot open %{DATA}: ERR=%{GREEDYDATA:berror}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOOPENDIR"=>"\\s+Could not open directory %{DATA}: ERR=%{GREEDYDATA:berror}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOSTAT"=>"\\s+Could not stat %{DATA}: ERR=%{GREEDYDATA:berror}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOJOBS"=>"There are no more Jobs associated with Volume \\\"%{BACULA_VOLUME:volume}\\\". Marking it purged."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_ALL_RECORDS_PRUNED"=>"All records pruned from Volume \\\"%{BACULA_VOLUME:volume}\\\"; marking it \\\"Purged\\\""} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_BEGIN_PRUNE_JOBS"=>"Begin pruning Jobs older than %{INT} month %{INT} days ."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_BEGIN_PRUNE_FILES"=>"Begin pruning Files."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_PRUNED_JOBS"=>"Pruned %{INT} Jobs* for client %{BACULA_HOST:client} from catalog."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_PRUNED_FILES"=>"Pruned Files from %{INT} Jobs* for client %{BACULA_HOST:client} from catalog."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_ENDPRUNE"=>"End auto prune."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_STARTJOB"=>"Start Backup JobId %{INT}, Job=%{BACULA_JOB:job}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_STARTRESTORE"=>"Start Restore Job %{BACULA_JOB:job}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_USEDEVICE"=>"Using Device \\\"%{BACULA_DEVICE:device}\\\""} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_DIFF_FS"=>"\\s+%{UNIXPATH} is a different filesystem. Will not descend from %{UNIXPATH} into it."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_JOBEND"=>"Job write elapsed time = %{DATA:elapsed}, Transfer rate = %{NUMBER} (K|M|G)? Bytes/second"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRUNE_JOBS"=>"No Jobs found to prune."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRUNE_FILES"=>"No Files found to prune."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_VOLUME_PREVWRITTEN"=>"Volume \\\"%{BACULA_VOLUME:volume}\\\" previously written, moving to end of data."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_READYAPPEND"=>"Ready to append to end of Volume \\\"%{BACULA_VOLUME:volume}\\\" size=%{INT}"} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_CANCELLING"=>"Cancelling duplicate JobId=%{INT}."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MARKCANCEL"=>"JobId %{INT}, Job %{BACULA_JOB:job} marked to be canceled."} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_CLIENT_RBJ"=>"shell command: run ClientRunBeforeJob \\\"%{GREEDYDATA:runjob}\\\""} | |
[DEBUG] 2021-02-15 18:31:57.288 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_VSS"=>"(Generate )?VSS (Writer)?"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_MAXSTART"=>"Fatal error: Job canceled because max start delay time exceeded."} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_DUPLICATE"=>"Fatal error: JobId %{INT:duplicate} already running. Duplicate job not allowed."} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOJOBSTAT"=>"Fatal error: No Job status returned from FD."} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_FATAL_CONN"=>"Fatal error: bsock.c:133 Unable to connect to (Client: %{BACULA_HOST:client}|Storage daemon) on %{HOSTNAME}:%{POSINT}. ERR=(?<berror>%{GREEDYDATA})"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NO_CONNECT"=>"Warning: bsock.c:127 Could not connect to (Client: %{BACULA_HOST:client}|Storage daemon) on %{HOSTNAME}:%{POSINT}. ERR=(?<berror>%{GREEDYDATA})"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NO_AUTH"=>"Fatal error: Unable to authenticate with File daemon at %{HOSTNAME}. Possible causes:"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOSUIT"=>"No prior or suitable Full backup found in catalog. Doing FULL backup."} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_NOPRIOR"=>"No prior Full backup Job record found."} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOG_JOB"=>"(Error: )?Bacula %{BACULA_HOST} %{BACULA_VERSION} \\(%{BACULA_VERSION}\\):"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"BACULA_LOGLINE"=>"%{BACULA_TIMESTAMP:bts} %{BACULA_HOST:hostname} JobId %{INT:jobid}: (%{BACULA_LOG_MAX_CAPACITY}|%{BACULA_LOG_END_VOLUME}|%{BACULA_LOG_NEW_VOLUME}|%{BACULA_LOG_NEW_LABEL}|%{BACULA_LOG_WROTE_LABEL}|%{BACULA_LOG_NEW_MOUNT}|%{BACULA_LOG_NOOPEN}|%{BACULA_LOG_NOOPENDIR}|%{BACULA_LOG_NOSTAT}|%{BACULA_LOG_NOJOBS}|%{BACULA_LOG_ALL_RECORDS_PRUNED}|%{BACULA_LOG_BEGIN_PRUNE_JOBS}|%{BACULA_LOG_BEGIN_PRUNE_FILES}|%{BACULA_LOG_PRUNED_JOBS}|%{BACULA_LOG_PRUNED_FILES}|%{BACULA_LOG_ENDPRUNE}|%{BACULA_LOG_STARTJOB}|%{BACULA_LOG_STARTRESTORE}|%{BACULA_LOG_USEDEVICE}|%{BACULA_LOG_DIFF_FS}|%{BACULA_LOG_JOBEND}|%{BACULA_LOG_NOPRUNE_JOBS}|%{BACULA_LOG_NOPRUNE_FILES}|%{BACULA_LOG_VOLUME_PREVWRITTEN}|%{BACULA_LOG_READYAPPEND}|%{BACULA_LOG_CANCELLING}|%{BACULA_LOG_MARKCANCEL}|%{BACULA_LOG_CLIENT_RBJ}|%{BACULA_LOG_VSS}|%{BACULA_LOG_MAXSTART}|%{BACULA_LOG_DUPLICATE}|%{BACULA_LOG_NOJOBSTAT}|%{BACULA_LOG_FATAL_CONN}|%{BACULA_LOG_NO_CONNECT}|%{BACULA_LOG_NO_AUTH}|%{BACULA_LOG_NOSUIT}|%{BACULA_LOG_JOB}|%{BACULA_LOG_NOPRIOR})"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"MAVEN_VERSION"=>"(?:(\\d+)\\.)?(?:(\\d+)\\.)?(\\*|\\d+)(?:[.-](RELEASE|SNAPSHOT))?"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVACLASS"=>"(?:[a-zA-Z$_][a-zA-Z$_0-9]*\\.)*[a-zA-Z$_][a-zA-Z$_0-9]*"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVAFILE"=>"(?:[A-Za-z0-9_. -]+)"} | |
[DEBUG] 2021-02-15 18:31:57.300 [[main]-pipeline-manager] grok - Adding pattern {"JAVAMETHOD"=>"(?:(<(?:cl)?init>)|[a-zA-Z$_][a-zA-Z$_0-9]*)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVASTACKTRACEPART"=>"%{SPACE}at %{JAVACLASS:class}\\.%{JAVAMETHOD:method}\\(%{JAVAFILE:file}(?::%{NUMBER:line})?\\)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVATHREAD"=>"(?:[A-Z]{2}-Processor[\\d]+)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVACLASS"=>"(?:[a-zA-Z0-9-]+\\.)+[A-Za-z0-9$]+"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVAFILE"=>"(?:[A-Za-z0-9_.-]+)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"JAVALOGMESSAGE"=>"(.*)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"CATALINA_DATESTAMP"=>"%{MONTH} %{MONTHDAY}, 20%{YEAR} %{HOUR}:?%{MINUTE}(?::?%{SECOND}) (?:AM|PM)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"TOMCAT_DATESTAMP"=>"20%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:?%{MINUTE}(?::?%{SECOND}) %{ISO8601_TIMEZONE}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"CATALINALOG"=>"%{CATALINA_DATESTAMP:timestamp} %{JAVACLASS:class} %{JAVALOGMESSAGE:logmessage}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"TOMCATLOG"=>"%{TOMCAT_DATESTAMP:timestamp} \\| %{LOGLEVEL:level} \\| %{JAVACLASS:class} - %{JAVALOGMESSAGE:logmessage}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"BIND9_TIMESTAMP"=>"%{MONTHDAY}[-]%{MONTH}[-]%{YEAR} %{TIME}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"BIND9"=>"%{BIND9_TIMESTAMP:timestamp} queries: %{LOGLEVEL:loglevel}: client %{IP:clientip}#%{POSINT:clientport} \\(%{GREEDYDATA:query}\\): query: %{GREEDYDATA:query} IN %{GREEDYDATA:querytype} \\(%{IP:dns}\\)"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_LOG"=>"%{SYSLOGTIMESTAMP:timestamp} \\[%{WORD:component}\\] %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_QUERY"=>"\\{ (?<={ ).*(?= } ntoreturn:) \\}"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_SLOWQUERY"=>"%{WORD} %{MONGO_WORDDASH:database}\\.%{MONGO_WORDDASH:collection} %{WORD}: %{MONGO_QUERY:query} %{WORD}:%{NONNEGINT:ntoreturn} %{WORD}:%{NONNEGINT:ntoskip} %{WORD}:%{NONNEGINT:nscanned}.*nreturned:%{NONNEGINT:nreturned}..+ (?<duration>[0-9]+)ms"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO_WORDDASH"=>"\\b[\\w-]+\\b"} | |
[DEBUG] 2021-02-15 18:31:57.301 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_SEVERITY"=>"\\w"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_COMPONENT"=>"%{WORD}|-"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MONGO3_LOG"=>"%{TIMESTAMP_ISO8601:timestamp} %{MONGO3_SEVERITY:severity} %{MONGO3_COMPONENT:component}%{SPACE}(?:\\[%{DATA:context}\\])? %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW_EVENT"=>"(RT_FLOW_SESSION_CREATE|RT_FLOW_SESSION_CLOSE|RT_FLOW_SESSION_DENY)"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW1"=>"%{RT_FLOW_EVENT:event}: %{GREEDYDATA:close-reason}: %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{IP:nat-src-ip}/%{INT:nat-src-port}->%{IP:nat-dst-ip}/%{INT:nat-dst-port} %{DATA:src-nat-rule-name} %{DATA:dst-nat-rule-name} %{INT:protocol-id} %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} %{INT:session-id} \\d+\\(%{DATA:sent}\\) \\d+\\(%{DATA:received}\\) %{INT:elapsed-time} .*"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW2"=>"%{RT_FLOW_EVENT:event}: session created %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{IP:nat-src-ip}/%{INT:nat-src-port}->%{IP:nat-dst-ip}/%{INT:nat-dst-port} %{DATA:src-nat-rule-name} %{DATA:dst-nat-rule-name} %{INT:protocol-id} %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} %{INT:session-id} .*"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"RT_FLOW3"=>"%{RT_FLOW_EVENT:event}: session denied %{IP:src-ip}/%{INT:src-port}->%{IP:dst-ip}/%{INT:dst-port} %{DATA:service} %{INT:protocol-id}\\(\\d\\) %{DATA:policy-name} %{DATA:from-zone} %{DATA:to-zone} .*"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVE"=>"., \\[%{TIMESTAMP_ISO8601:timestamp} #%{POSINT:pid}\\]%{SPACE}%{LOGLEVEL:event_level}"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"MCOLLECTIVEAUDIT"=>"%{TIMESTAMP_ISO8601:timestamp}:"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424PRINTASCII"=>"[!-~]+"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGBASE2"=>"(?:%{SYSLOGTIMESTAMP:timestamp}|%{TIMESTAMP_ISO8601:timestamp8601}) (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource}+(?: %{SYSLOGPROG}:|)"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGPAMSESSION"=>"%{SYSLOGBASE} (?=%{GREEDYDATA:message})%{WORD:pam_module}\\(%{DATA:pam_caller}\\): session %{WORD:pam_session_state} for user %{USERNAME:username}(?: by %{GREEDYDATA:pam_by})?"} | |
[DEBUG] 2021-02-15 18:31:57.302 [[main]-pipeline-manager] grok - Adding pattern {"CRON_ACTION"=>"[A-Z ]+"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"CRONLOG"=>"%{SYSLOGBASE} \\(%{USER:user}\\) %{CRON_ACTION:action} \\(%{DATA:message}\\)"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOGLINE"=>"%{SYSLOGBASE2} %{GREEDYDATA:message}"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424PRI"=>"<%{NONNEGINT:syslog5424_pri}>"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424SD"=>"\\[%{DATA}\\]+"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424BASE"=>"%{SYSLOG5424PRI}%{NONNEGINT:syslog5424_ver} +(?:%{TIMESTAMP_ISO8601:syslog5424_ts}|-) +(?:%{IPORHOST:syslog5424_host}|-) +(-|%{SYSLOG5424PRINTASCII:syslog5424_app}) +(-|%{SYSLOG5424PRINTASCII:syslog5424_proc}) +(-|%{SYSLOG5424PRINTASCII:syslog5424_msgid}) +(?:%{SYSLOG5424SD:syslog5424_sd}|-|)"} | |
[DEBUG] 2021-02-15 18:31:57.303 [[main]-pipeline-manager] grok - Adding pattern {"SYSLOG5424LINE"=>"%{SYSLOG5424BASE} +%{GREEDYDATA:syslog5424_msg}"} | |
[DEBUG] 2021-02-15 18:31:57.220 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "HTTP/1.1 200 OK[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-type: application/json; charset=UTF-8[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "content-length: 696[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] wire - http-outgoing-12 << "[\r][\n]" | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << HTTP/1.1 200 OK | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-type: application/json; charset=UTF-8 | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] headers - http-outgoing-12 << content-length: 696 | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] MainClientExec - Connection can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] HttpAuthenticator - Authentication succeeded | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection [id: 12][route: {s}->https://IP:9200] can be kept alive indefinitely | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] PoolingHttpClientConnectionManager - Connection released: [id: 12][route: {s}->https://IP:9200][total kept alive: 3; route allocated: 1 of 100; total allocated: 3 of 1000] | |
[DEBUG] 2021-02-15 18:31:57.311 [Ruby-0-Thread-13: :1] elasticsearch - Found existing Elasticsearch template. Skipping template management {:name=>"logstash"} | |
[DEBUG] 2021-02-15 18:31:57.335 [[main]-pipeline-manager] grok - replacement_pattern => (?<LOGLEVEL:loglevel>([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)) | |
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<NUMBER:tenantId>(?:%{BASE10NUM})) | |
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))) | |
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<NUMBER:organizationUnitId>(?:%{BASE10NUM})) | |
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\.[0-9]+)?)|(?:\.[0-9]+)))) | |
[DEBUG] 2021-02-15 18:31:57.336 [[main]-pipeline-manager] grok - replacement_pattern => (?<GREEDYDATA:message>.*) | |
[DEBUG] 2021-02-15 18:31:57.338 [[main]-pipeline-manager] grok - Grok compiled OK {:pattern=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}", :expanded_pattern=>"(?<LOGLEVEL:loglevel>([Aa]lert|ALERT|[Tt]race|TRACE|[Dd]ebug|DEBUG|[Nn]otice|NOTICE|[Ii]nfo|INFO|[Ww]arn?(?:ing)?|WARN?(?:ING)?|[Ee]rr?(?:or)?|ERR?(?:OR)?|[Cc]rit?(?:ical)?|CRIT?(?:ICAL)?|[Ff]atal|FATAL|[Ss]evere|SEVERE|EMERG(?:ENCY)?|[Ee]merg(?:ency)?)) (?<NUMBER:tenantId>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))))) (?<NUMBER:organizationUnitId>(?:(?:(?<![0-9.+-])(?>[+-]?(?:(?:[0-9]+(?:\\.[0-9]+)?)|(?:\\.[0-9]+)))))) (?<GREEDYDATA:message>.*)"} | |
[DEBUG] 2021-02-15 18:31:57.373 [[main]-pipeline-manager] context - skipping register since the script didn't define it | |
[INFO ] 2021-02-15 18:31:57.511 [[main]-pipeline-manager] javapipeline - Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>1, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>125, "pipeline.sources"=>["/etc/logstash/pipeline_folder/pipeline.conf"], :thread=>"#<Thread:0x342a6c6e run>"} | |
[DEBUG] 2021-02-15 18:31:58.450 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:31:58.451 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:31:58.675 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-grok{"match"=>{"message"=>"%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"}, "overwrite"=>["message"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:9:5:``` | |
grok { | |
match => {"message" => "%{LOGLEVEL:loglevel} %{NUMBER:tenantId} %{NUMBER:organizationUnitId} %{GREEDYDATA:message}"} | |
overwrite => ["message"] | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@53e5cb12 | |
[DEBUG] 2021-02-15 18:31:59.014 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-json{"source"=>"message"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:13:5:``` | |
json { | |
source => "message" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.102 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if (event.getField('[message]')!='')] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248 | |
[DEBUG] 2021-02-15 18:31:59.159 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('execution ended'.include?event.getField('[message]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248 | |
[DEBUG] 2021-02-15 18:31:59.195 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-mutate{"add_tag"=>["total"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:19:14:``` | |
mutate { add_tag => ["total"] } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.258 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if (('Info'.include?event.getField('[level]'))||(('Warn'.include?event.getField('[level]'))||(('Error'.include?event.getField('[level]'))||('Fatal'.include?event.getField('[level]')))))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@2bf5065b | |
[DEBUG] 2021-02-15 18:31:59.299 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-mutate{"add_tag"=>["default"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:22:14:``` | |
mutate { add_tag => ["default"] } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.309 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-drop{}|[file]/etc/logstash/pipeline_folder/pipeline.conf:25:14:``` | |
drop {} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.342 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('management_'.include?event.getField('[indexName]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248 | |
[DEBUG] 2021-02-15 18:31:59.370 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-mutate{"add_tag"=>["management"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:30:13:``` | |
mutate { add_tag => ["management"] } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.383 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('environmentcheck_'.include?event.getField('[indexName]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e0fde248 | |
[DEBUG] 2021-02-15 18:31:59.411 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-mutate{"add_tag"=>["environmentcheck"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:33:13:``` | |
mutate { add_tag => ["environmentcheck"] } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.442 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-mutate{"add_tag"=>["robotic"]}|[file]/etc/logstash/pipeline_folder/pipeline.conf:36:13:``` | |
mutate { add_tag => ["robotic"] } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@8d7da797 | |
[DEBUG] 2021-02-15 18:31:59.455 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled filter | |
P[filter-ruby{"path"=>"/etc/logstash/ruby_scripts/index_name_script.rb"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:39:5:``` | |
ruby { path => "/etc/logstash/ruby_scripts/index_name_script.rb" } | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@778b7b9 | |
[DEBUG] 2021-02-15 18:31:59.493 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('total'.include?event.getField('[tags]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc | |
[DEBUG] 2021-02-15 18:31:59.506 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output | |
P[output-elasticsearch{"index"=>["totalexecution_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:45:9:``` | |
elasticsearch { | |
index => ["totalexecution_%{indexName}_%{+YYYY}"] | |
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"] | |
user => elastic | |
password => ["Global@123"] | |
ssl => true | |
cacert => "/etc/logstash/elasticsearch-ca.pem" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279 | |
[DEBUG] 2021-02-15 18:31:59.601 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('default'.include?event.getField('[tags]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc | |
[DEBUG] 2021-02-15 18:31:59.609 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output | |
P[output-elasticsearch{"index"=>["default_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:55:10:``` | |
elasticsearch { | |
index => ["default_%{indexName}_%{+YYYY}"] | |
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"] | |
user => elastic | |
password => ["Global@123"] | |
ssl => true | |
cacert => "/etc/logstash/elasticsearch-ca.pem" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279 | |
[DEBUG] 2021-02-15 18:31:59.633 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('management'.include?event.getField('[tags]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc | |
[DEBUG] 2021-02-15 18:31:59.673 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output | |
P[output-elasticsearch{"index"=>["management_%{indexName}_%{+YYYY.MM}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:65:10:``` | |
elasticsearch { | |
index => ["management_%{indexName}_%{+YYYY.MM}"] | |
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"] | |
user => elastic | |
password => ["Global@123"] | |
ssl => true | |
cacert => "/etc/logstash/elasticsearch-ca.pem" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279 | |
[DEBUG] 2021-02-15 18:31:59.681 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('robotic'.include?event.getField('[tags]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc | |
[DEBUG] 2021-02-15 18:31:59.705 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output | |
P[output-elasticsearch{"index"=>["robot_%{indexName}_%{+YYYY.MM}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:75:10:``` | |
elasticsearch { | |
index => ["robot_%{indexName}_%{+YYYY.MM}"] | |
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"] | |
user => elastic | |
password => ["Global@123"] | |
ssl => true | |
cacert => "/etc/logstash/elasticsearch-ca.pem" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279 | |
[DEBUG] 2021-02-15 18:31:59.720 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled conditional | |
[if ('environmentcheck'.include?event.getField('[tags]'))] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@9fb449bc | |
[DEBUG] 2021-02-15 18:31:59.749 [Ruby-0-Thread-14: :1] CompiledPipeline - Compiled output | |
P[output-elasticsearch{"index"=>["environmentcheck_%{indexName}_%{+YYYY}"], "hosts"=>["https://IP:9200", "https://IP:9200", "https://IP:9200"], "user"=>"elastic", "password"=>["Global@123"], "ssl"=>"true", "cacert"=>"/etc/logstash/elasticsearch-ca.pem"}|[file]/etc/logstash/pipeline_folder/pipeline.conf:85:9:``` | |
elasticsearch { | |
index => ["environmentcheck_%{indexName}_%{+YYYY}"] | |
hosts => ["https://IP:9200", "https://IP:9200", "https://IP:9200"] | |
user => elastic | |
password => ["Global@123"] | |
ssl => true | |
cacert => "/etc/logstash/elasticsearch-ca.pem" | |
} | |
```] | |
into | |
org.logstash.config.ir.compiler.ComputeStepSyntaxElement@7c6f4279 | |
[INFO ] 2021-02-15 18:31:59.798 [[main]-pipeline-manager] javapipeline - Pipeline Java execution initialization time {"seconds"=>2.28} | |
[INFO ] 2021-02-15 18:31:59.856 [[main]-pipeline-manager] beats - Beats inputs: Starting input listener {:address=>"0.0.0.0:5044"} | |
[INFO ] 2021-02-15 18:32:00.190 [[main]-pipeline-manager] javapipeline - Pipeline started {"pipeline.id"=>"main"} | |
[DEBUG] 2021-02-15 18:32:00.196 [Converge PipelineAction::Create<main>] javapipeline - Pipeline started successfully {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"} | |
[INFO ] 2021-02-15 18:32:00.225 [Agent thread] agent - Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]} | |
[DEBUG] 2021-02-15 18:32:00.267 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:00.300 [Api Webserver] agent - Starting puma | |
[DEBUG] 2021-02-15 18:32:00.305 [Api Webserver] agent - Trying to start WebServer {:port=>9600} | |
[DEBUG] 2021-02-15 18:32:00.345 [[main]<beats] InternalLoggerFactory - Using SLF4J as the default logging framework | |
[DEBUG] 2021-02-15 18:32:00.348 [[main]<beats] MultithreadEventLoopGroup - -Dio.netty.eventLoopThreads: 2 | |
[DEBUG] 2021-02-15 18:32:00.375 [[main]<beats] InternalThreadLocalMap - -Dio.netty.threadLocalMap.stringBuilder.initialSize: 1024 | |
[DEBUG] 2021-02-15 18:32:00.376 [[main]<beats] InternalThreadLocalMap - -Dio.netty.threadLocalMap.stringBuilder.maxSize: 4096 | |
[DEBUG] 2021-02-15 18:32:00.382 [[main]<beats] NioEventLoop - -Dio.netty.noKeySetOptimization: false | |
[DEBUG] 2021-02-15 18:32:00.382 [[main]<beats] NioEventLoop - -Dio.netty.selectorAutoRebuildThreshold: 512 | |
[DEBUG] 2021-02-15 18:32:00.422 [[main]<beats] PlatformDependent0 - -Dio.netty.noUnsafe: false | |
[DEBUG] 2021-02-15 18:32:00.423 [[main]<beats] PlatformDependent0 - Java version: 8 | |
[DEBUG] 2021-02-15 18:32:00.423 [[main]<beats] PlatformDependent0 - sun.misc.Unsafe.theUnsafe: available | |
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - sun.misc.Unsafe.copyMemory: available | |
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - java.nio.Buffer.address: available | |
[DEBUG] 2021-02-15 18:32:00.424 [[main]<beats] PlatformDependent0 - direct buffer constructor: available | |
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - java.nio.Bits.unaligned: available, true | |
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - jdk.internal.misc.Unsafe.allocateUninitializedArray(int): unavailable prior to Java9 | |
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent0 - java.nio.DirectByteBuffer.<init>(long, int): available | |
[DEBUG] 2021-02-15 18:32:00.425 [[main]<beats] PlatformDependent - sun.misc.Unsafe: available | |
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.tmpdir: /etc/logstash/tmp_folder (java.io.tmpdir) | |
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.bitMode: 64 (sun.arch.data.model) | |
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.maxDirectMemory: 3212509184 bytes | |
[DEBUG] 2021-02-15 18:32:00.426 [[main]<beats] PlatformDependent - -Dio.netty.uninitializedArrayAllocationThreshold: -1 | |
[DEBUG] 2021-02-15 18:32:00.427 [[main]<beats] CleanerJava6 - java.nio.ByteBuffer.cleaner(): available | |
[DEBUG] 2021-02-15 18:32:00.427 [[main]<beats] PlatformDependent - -Dio.netty.noPreferDirect: false | |
[DEBUG] 2021-02-15 18:32:00.437 [[main]<beats] PlatformDependent - org.jctools-core.MpscChunkedArrayQueue: available | |
[INFO ] 2021-02-15 18:32:00.442 [[main]<beats] Server - Starting server on port: 5044 | |
[DEBUG] 2021-02-15 18:32:00.462 [[main]<beats] DefaultChannelId - -Dio.netty.processId: 73242 (auto-detected) | |
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - -Djava.net.preferIPv4Stack: false | |
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - -Djava.net.preferIPv6Addresses: false | |
[DEBUG] 2021-02-15 18:32:00.464 [[main]<beats] NetUtil - Loopback interface: lo (lo, 127.0.0.1) | |
[DEBUG] 2021-02-15 18:32:00.465 [[main]<beats] NetUtil - /proc/sys/net/core/somaxconn: 128 | |
[DEBUG] 2021-02-15 18:32:00.466 [[main]<beats] DefaultChannelId - -Dio.netty.machineId: 00:50:56:ff:fe:ac:36:ab (auto-detected) | |
[DEBUG] 2021-02-15 18:32:00.480 [[main]<beats] ResourceLeakDetector - -Dio.netty.leakDetection.level: simple | |
[DEBUG] 2021-02-15 18:32:00.480 [[main]<beats] ResourceLeakDetector - -Dio.netty.leakDetection.targetRecords: 4 | |
[DEBUG] 2021-02-15 18:32:00.491 [Api Webserver] service - [api-service] start | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.numHeapArenas: 2 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.numDirectArenas: 2 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.pageSize: 8192 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxOrder: 11 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.chunkSize: 16777216 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.tinyCacheSize: 512 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.smallCacheSize: 256 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.normalCacheSize: 64 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxCachedBufferCapacity: 32768 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.cacheTrimInterval: 8192 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.cacheTrimIntervalMillis: 0 | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.useCacheForAllThreads: true | |
[DEBUG] 2021-02-15 18:32:00.531 [[main]<beats] PooledByteBufAllocator - -Dio.netty.allocator.maxCachedByteBuffersPerChunk: 1023 | |
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.allocator.type: pooled | |
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.threadLocalDirectBufferSize: 0 | |
[DEBUG] 2021-02-15 18:32:00.538 [[main]<beats] ByteBufUtil - -Dio.netty.maxThreadLocalCharBufferSize: 16384 | |
[INFO ] 2021-02-15 18:32:00.830 [Api Webserver] agent - Successfully started Logstash API endpoint {:port=>9600} | |
[DEBUG] 2021-02-15 18:32:03.461 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:03.462 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:05.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:08.468 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:08.468 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:10.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:13.475 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:13.475 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:15.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:18.481 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:18.481 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:20.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:23.486 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:23.487 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:25.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:28.494 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:28.494 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:30.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:33.500 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:33.500 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:35.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:38.505 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:38.506 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:40.246 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:43.511 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:43.512 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:45.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:48.518 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:48.519 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:50.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:53.524 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:53.525 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:32:55.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:32:58.530 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:32:58.530 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:33:00.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:33:03.538 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:33:03.538 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:33:05.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:33:08.544 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:33:08.544 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:33:10.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[DEBUG] 2021-02-15 18:33:13.550 [pool-6-thread-1] jvm - collector name {:name=>"ParNew"} | |
[DEBUG] 2021-02-15 18:33:13.551 [pool-6-thread-1] jvm - collector name {:name=>"ConcurrentMarkSweep"} | |
[DEBUG] 2021-02-15 18:33:15.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
^C[WARN ] 2021-02-15 18:33:17.143 [SIGINT handler] runner - SIGINT received. Shutting down. | |
[DEBUG] 2021-02-15 18:33:17.211 [LogStash::Runner] os - Stopping | |
[DEBUG] 2021-02-15 18:33:17.217 [LogStash::Runner] jvm - Stopping | |
[DEBUG] 2021-02-15 18:33:17.218 [LogStash::Runner] persistentqueue - Stopping | |
[DEBUG] 2021-02-15 18:33:17.218 [LogStash::Runner] deadletterqueue - Stopping | |
[DEBUG] 2021-02-15 18:33:17.221 [LogStash::Runner] agent - Shutting down all pipelines {:pipelines_count=>1} | |
[DEBUG] 2021-02-15 18:33:17.225 [LogStash::Runner] agent - Converging pipelines state {:actions_count=>1} | |
[DEBUG] 2021-02-15 18:33:17.247 [Converge PipelineAction::Stop<main>] agent - Executing action {:action=>LogStash::PipelineAction::Stop/pipeline_id:main} | |
[DEBUG] 2021-02-15 18:33:17.257 [Converge PipelineAction::Stop<main>] javapipeline - Closing inputs {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e sleep>"} | |
[DEBUG] 2021-02-15 18:33:17.259 [Converge PipelineAction::Stop<main>] beats - Stopping {:plugin=>"LogStash::Inputs::Beats"} | |
[DEBUG] 2021-02-15 18:33:17.261 [Converge PipelineAction::Stop<main>] Server - Server shutting down | |
[DEBUG] 2021-02-15 18:33:20.245 [logstash-pipeline-flush] PeriodicFlush - Pushing flush onto pipeline. | |
[WARN ] 2021-02-15 18:33:22.191 [Ruby-0-Thread-24: :1] runner - Received shutdown signal, but pipeline is still waiting for in-flight events | |
to be processed. Sending another ^C will force quit Logstash, but this may cause | |
data loss. | |
[DEBUG] 2021-02-15 18:33:23.314 [[main]<beats] beats - Closing {:plugin=>"LogStash::Inputs::Beats"} | |
[DEBUG] 2021-02-15 18:33:23.318 [[main]<beats] pluginmetadata - Removing metadata for plugin b03f3ef7887e15c097994ec2971a2dd34fefe8716bb267be15e4c8d612cc3c8d | |
[DEBUG] 2021-02-15 18:33:23.319 [Converge PipelineAction::Stop<main>] Server - Server stopped | |
[DEBUG] 2021-02-15 18:33:23.320 [Converge PipelineAction::Stop<main>] javapipeline - Closed inputs {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e sleep>"} | |
[DEBUG] 2021-02-15 18:33:23.340 [[main]-pipeline-manager] javapipeline - Input plugins stopped! Will shutdown filter/output workers. {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"} | |
[DEBUG] 2021-02-15 18:33:23.347 [[main]-pipeline-manager] javapipeline - Shutdown waiting for worker thread {:pipeline_id=>"main", :thread=>"#<Thread:0x14e6e1fa run>"} | |
[DEBUG] 2021-02-15 18:33:23.449 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"} | |
[DEBUG] 2021-02-15 18:33:23.451 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin bdd2bea3a7aa54b4d33e9df7b842e20d03853833fed861ab999178e7f40664fa | |
[DEBUG] 2021-02-15 18:33:23.451 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"} | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 1cde200d7dc228b373a6068a67656daee74d2980ca37757fbc365ab420d664a8 | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"} | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 0bed39a26bf72b868ad5296c84fadf916c0c8af04f28785e4c0a351cf33316f8 | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"} | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 49834bb9263ecac64fe7df556638ef48003a91873e57c9adef3c5a5877823aa5 | |
[DEBUG] 2021-02-15 18:33:23.452 [[main]-pipeline-manager] grok - Closing {:plugin=>"LogStash::Filters::Grok"} | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f52d9945e1925b923c8d2346818cc5b2173bba2ed9e79dee2bc21237f8331951 | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] json - Closing {:plugin=>"LogStash::Filters::Json"} | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 5302d66123cb8a8076bcbe9040b548016a2dbfb654bf81b2e8f34a4a6a5ca842 | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] mutate - Closing {:plugin=>"LogStash::Filters::Mutate"} | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f5d48a59f01ab5a933dd1b453714599739b54cd4fe79b0461c1fc885d36ad963 | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] drop - Closing {:plugin=>"LogStash::Filters::Drop"} | |
[DEBUG] 2021-02-15 18:33:23.454 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin afdc153146ed6e38d5232b4a2e693c9e9a7c6aed0ee05c9ba22c231f3a2182fe | |
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] ruby - Closing {:plugin=>"LogStash::Filters::Ruby"} | |
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 8a2fbbd6fd402d91fd197adcba2b557cd31d9b63d97a72a29a576a38b927d4a2 | |
[DEBUG] 2021-02-15 18:33:23.455 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"} | |
[DEBUG] 2021-02-15 18:33:23.485 [[main]-pipeline-manager] elasticsearch - Stopping sniffer | |
[DEBUG] 2021-02-15 18:33:23.487 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist | |
[DEBUG] 2021-02-15 18:33:23.750 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections | |
[DEBUG] 2021-02-15 18:33:23.757 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0xb6a7b0d> | |
[DEBUG] 2021-02-15 18:33:23.759 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down | |
[DEBUG] 2021-02-15 18:33:23.760 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-0: Close connection | |
[DEBUG] 2021-02-15 18:33:23.765 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-2: Close connection | |
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-1: Close connection | |
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down | |
[DEBUG] 2021-02-15 18:33:23.767 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin f36ddcadd916ec295caaa9ba6fd3ec3ee0a8e768f2ce62c0a6765f77a0e06fb2 | |
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"} | |
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Stopping sniffer | |
[DEBUG] 2021-02-15 18:33:23.769 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist | |
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections | |
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x78b53fcf> | |
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down | |
[DEBUG] 2021-02-15 18:33:24.117 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-3: Close connection | |
[DEBUG] 2021-02-15 18:33:24.118 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-4: Close connection | |
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-5: Close connection | |
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down | |
[DEBUG] 2021-02-15 18:33:24.119 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 83260e3f6812d545233c1ee44d5a9840076b0609ab451dc3c18986573cb8a2e9 | |
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"} | |
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Stopping sniffer | |
[DEBUG] 2021-02-15 18:33:24.120 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist | |
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections | |
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x167ed2a> | |
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down | |
[DEBUG] 2021-02-15 18:33:24.463 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-6: Close connection | |
[DEBUG] 2021-02-15 18:33:24.464 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-8: Close connection | |
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-7: Close connection | |
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down | |
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin 2d208b80218ab62b99fdf9934c10addb066dd15ff8daa21ad717c805537a1c3f | |
[DEBUG] 2021-02-15 18:33:24.465 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"} | |
[DEBUG] 2021-02-15 18:33:24.466 [[main]-pipeline-manager] elasticsearch - Stopping sniffer | |
[DEBUG] 2021-02-15 18:33:24.466 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist | |
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections | |
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0x7d623563> | |
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down | |
[DEBUG] 2021-02-15 18:33:24.735 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-10: Close connection | |
[DEBUG] 2021-02-15 18:33:24.736 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-9: Close connection | |
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-11: Close connection | |
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down | |
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin e1d6033003ee8c5e8250cdcf8ec230525ecb11d0275478f1cd0c9e2b205ba628 | |
[DEBUG] 2021-02-15 18:33:24.737 [[main]-pipeline-manager] elasticsearch - Closing {:plugin=>"LogStash::Outputs::ElasticSearch"} | |
[DEBUG] 2021-02-15 18:33:24.738 [[main]-pipeline-manager] elasticsearch - Stopping sniffer | |
[DEBUG] 2021-02-15 18:33:24.738 [[main]-pipeline-manager] elasticsearch - Stopping resurrectionist | |
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] elasticsearch - Waiting for in use manticore connections | |
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] elasticsearch - Closing adapter #<LogStash::Outputs::ElasticSearch::HttpClient::ManticoreAdapter:0xd6630d9> | |
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager is shutting down | |
[DEBUG] 2021-02-15 18:33:24.968 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-12: Close connection | |
[DEBUG] 2021-02-15 18:33:24.971 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-14: Close connection | |
[DEBUG] 2021-02-15 18:33:24.971 [[main]-pipeline-manager] DefaultManagedHttpClientConnection - http-outgoing-13: Close connection | |
[DEBUG] 2021-02-15 18:33:24.972 [[main]-pipeline-manager] PoolingHttpClientConnectionManager - Connection manager shut down | |
[DEBUG] 2021-02-15 18:33:24.972 [[main]-pipeline-manager] pluginmetadata - Removing metadata for plugin c1b831e4bf3cd494c1cf16215787d9a87ed92447b8261f6582c62742dca8209c | |
[DEBUG] 2021-02-15 18:33:24.973 [[main]-pipeline-manager] javapipeline - Pipeline has been shutdown {:pipeline_id=>"main", :thread=>"#<Thread:0x342a6c6e run>"} | |
[INFO ] 2021-02-15 18:33:25.360 [Converge PipelineAction::Stop<main>] javapipeline - Pipeline terminated {"pipeline.id"=>"main"} | |
[INFO ] 2021-02-15 18:33:25.474 [LogStash::Runner] runner - Logstash shut down. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment