{"type": "server", "timestamp": "2026-03-01T18:56:17,445Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "version[7.17.0], pid[7], build[default/docker/bee86328705acaa9a6daede7140defd4d9ec56bd/2022-01-28T08:36:04.875279988Z], OS[Linux/6.8.0-90-generic/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.1/17.0.1+12]" }
{"type": "server", "timestamp": "2026-03-01T18:56:17,448Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]" }
{"type": "server", "timestamp": "2026-03-01T18:56:17,449Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-16527452924563692781, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms2g, -Xmx2g, -XX:MaxDirectMemorySize=1073741824, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [aggs-matrix-stats]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [analysis-common]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [constant-keyword]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [frozen-indices]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [ingest-common]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,936Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [ingest-geoip]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [ingest-user-agent]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [kibana]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [lang-expression]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [lang-mustache]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [lang-painless]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [legacy-geo]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [mapper-extras]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [mapper-version]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,937Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [parent-join]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [percolator]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [rank-eval]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [reindex]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [repositories-metering-api]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [repository-encrypted]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [repository-url]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [runtime-fields-common]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [search-business-rules]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,938Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [searchable-snapshots]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [snapshot-repo-test-kit]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [spatial]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [transform]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [transport-netty4]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [unsigned-long]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [vector-tile]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [vectors]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,939Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [wildcard]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-aggregate-metric]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-analytics]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-async]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-async-search]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-autoscaling]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-ccr]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-core]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,940Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-data-streams]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-deprecation]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-enrich]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-eql]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-fleet]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-graph]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-identity-provider]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-ilm]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-logstash]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,941Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-ml]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-monitoring]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-ql]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-rollup]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-security]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-shutdown]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-sql]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-stack]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-text-structure]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,942Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-voting-only-node]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,943Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "loaded module [x-pack-watcher]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,943Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "no plugins loaded" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,981Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "using [1] data paths, mounts [[/ (overlay)]], net usable_space [338.5gb], net total_space [435.7gb], types [overlay]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,982Z", "level": "INFO", "component": "o.e.e.NodeEnvironment", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "heap size [2gb], compressed ordinary object pointers [true]" }
{"type": "server", "timestamp": "2026-03-01T18:56:18,993Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "node name [7d864a9fe9f9], node ID [FPlAnKU4RH60WE6VYP6Lug], cluster name [docker-cluster], roles [transform, data_frozen, master, remote_cluster_client, data, ml, data_content, data_hot, data_warm, data_cold, ingest]" }
{"type": "server", "timestamp": "2026-03-01T18:56:21,805Z", "level": "INFO", "component": "o.e.x.m.p.l.CppLogMessageHandler", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[controller/222] [Main.cc@122] controller (64 bit): Version 7.17.0 (Build 447aed7cba032c) Copyright (c) 2022 Elasticsearch BV" }
{"type": "server", "timestamp": "2026-03-01T18:56:22,089Z", "level": "INFO", "component": "o.e.x.s.a.s.FileRolesStore", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]" }
{"type": "server", "timestamp": "2026-03-01T18:56:22,541Z", "level": "INFO", "component": "o.e.i.g.ConfigDatabases", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/usr/share/elasticsearch/config/ingest-geoip] for changes" }
{"type": "server", "timestamp": "2026-03-01T18:56:22,542Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "initialized database registry, using geoip-databases directory [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug]" }
{"type": "server", "timestamp": "2026-03-01T18:56:22,895Z", "level": "INFO", "component": "o.e.t.NettyAllocator", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]" }
{"type": "server", "timestamp": "2026-03-01T18:56:22,937Z", "level": "INFO", "component": "o.e.d.DiscoveryModule", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "using discovery type [single-node] and seed hosts providers [settings]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,238Z", "level": "INFO", "component": "o.e.g.DanglingIndicesState", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,541Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "initialized" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,541Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "starting ..." }
{"type": "server", "timestamp": "2026-03-01T18:56:23,578Z", "level": "INFO", "component": "o.e.x.s.c.f.PersistentCache", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "persistent cache index loaded" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,578Z", "level": "INFO", "component": "o.e.x.d.l.DeprecationIndexingComponent", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "deprecation component started" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,634Z", "level": "INFO", "component": "o.e.t.TransportService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "publish_address {198.18.14.5:9300}, bound_addresses {[::]:9300}" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,641Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating template [.monitoring-alerts-7] with version [7]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,646Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating template [.monitoring-es] with version [7]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,647Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating template [.monitoring-kibana] with version [7]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,648Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating template [.monitoring-logstash] with version [7]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,651Z", "level": "INFO", "component": "o.e.x.m.Monitoring", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "creating template [.monitoring-beats] with version [7]" }
{"type": "server", "timestamp": "2026-03-01T18:56:23,803Z", "level": "INFO", "component": "o.e.c.c.Coordinator", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "setting initial configuration to VotingConfiguration{FPlAnKU4RH60WE6VYP6Lug}" }
{"type": "server", "timestamp": "2026-03-01T18:56:24,018Z", "level": "INFO", "component": "o.e.c.s.MasterService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "elected-as-master ([1] nodes joined)[{7d864a9fe9f9}{FPlAnKU4RH60WE6VYP6Lug}{IwRYZSK7Tq6PyOy7Tj1SEg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 1, version: 1, delta: master node changed {previous [], current [{7d864a9fe9f9}{FPlAnKU4RH60WE6VYP6Lug}{IwRYZSK7Tq6PyOy7Tj1SEg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw}]}" }
{"type": "server", "timestamp": "2026-03-01T18:56:24,078Z", "level": "INFO", "component": "o.e.c.c.CoordinationState", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "cluster UUID set to [Pd-nb8WrTHy4q5-zi8V6cg]" }
{"type": "server", "timestamp": "2026-03-01T18:56:24,125Z", "level": "INFO", "component": "o.e.c.s.ClusterApplierService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "master node changed {previous [], current [{7d864a9fe9f9}{FPlAnKU4RH60WE6VYP6Lug}{IwRYZSK7Tq6PyOy7Tj1SEg}{198.18.14.5}{198.18.14.5:9300}{cdfhilmrstw}]}, term: 1, version: 1, reason: Publication{term=1, version=1}" }
{"type": "server", "timestamp": "2026-03-01T18:56:24,160Z", "level": "INFO", "component": "o.e.h.AbstractHttpServerTransport", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "publish_address {198.18.14.5:9200}, bound_addresses {[::]:9200}", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,160Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "started", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,244Z", "level": "INFO", "component": "o.e.g.GatewayService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "recovered [0] indices into cluster_state", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,392Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.ml-anomalies-] for index patterns [.ml-anomalies-*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,474Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.ml-state] for index patterns [.ml-state*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,533Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.ml-notifications-000002] for index patterns [.ml-notifications-000002]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,602Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.ml-stats] for index patterns [.ml-stats-*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,670Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [logs-mappings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,738Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [data-streams-mappings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,791Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [metrics-mappings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,848Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [synthetics-settings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,904Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [synthetics-mappings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:24,965Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [metrics-settings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,022Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [logs-settings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,122Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.watch-history-13] for index patterns [.watcher-history-13*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,192Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [ilm-history] for index patterns [ilm-history-5*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,296Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.slm-history] for index patterns [.slm-history-5*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,397Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [.deprecation-indexing-settings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,458Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding component template [.deprecation-indexing-mappings]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,513Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [synthetics] for index patterns [synthetics-*-*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,563Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [metrics] for index patterns [metrics-*-*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,613Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [logs] for index patterns [logs-*-*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,667Z", "level": "INFO", "component": "o.e.c.m.MetadataIndexTemplateService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index template [.deprecation-indexing-template] for index patterns [.logs-deprecation.*]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,725Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [ml-size-based-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,792Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [synthetics]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,848Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [metrics]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,898Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [logs]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:25,953Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [365-days-default]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,011Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [90-days-default]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,061Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [30-days-default]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,107Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [180-days-default]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,155Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [7-days-default]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,208Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [watch-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,268Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [ilm-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,319Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [slm-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,382Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,430Z", "level": "INFO", "component": "o.e.x.i.a.TransportPutLifecycleAction", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding index lifecycle policy [.fleet-actions-results-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,532Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updating geoip databases", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,532Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "fetching geoip databases overview from [https://geoip.elastic.co/v1/database?elastic_geoip_service_tos=agree]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,544Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[provider_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,827Z", "level": "INFO", "component": "o.e.l.LicenseService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "license [12900e02-f498-4025-b585-679d8798bb99] mode [basic] - valid", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,829Z", "level": "INFO", "component": "o.e.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "Active license is now [BASIC]; Security is disabled", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,829Z", "level": "WARN", "component": "o.e.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security.", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "deprecation.elasticsearch", "timestamp": "2026-03-01T18:56:26,831Z", "level": "CRITICAL", "component": "o.e.d.x.s.s.SecurityStatusChangeListener", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "The default behavior of disabling security on basic licenses is deprecated. In a later version of Elasticsearch, the value of [xpack.security.enabled] will default to \"true\" , regardless of the license level. See https://www.elastic.co/guide/en/elasticsearch/reference/7.17/security-minimal-setup.html to enable security, or explicitly disable security by setting [xpack.security.enabled] to false in elasticsearch.yml", "key": "security_implicitly_disabled", "category": "security", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:26,956Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[owner_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,048Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updating geoip database [GeoLite2-ASN.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,224Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[transactions_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,453Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[notifications_elastic_search_index] creating index, cause [api], templates [], shards [1]/[1]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,571Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001] creating index, cause [initialize_data_stream], templates [.deprecation-indexing-template], shards [1]/[1]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,572Z", "level": "INFO", "component": "o.e.c.r.a.AllocationService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updating number_of_replicas to [0] for indices [.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,575Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateDataStreamService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding data stream [.logs-deprecation.elasticsearch-default] with write index [.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001], backing indices [], and aliases []", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:27,941Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001] from [null] to [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:28,040Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[.geoip_databases] creating index, cause [auto(bulk api)], templates [], shards [1]/[0]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:28,189Z", "level": "INFO", "component": "o.e.c.m.MetadataMappingService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001/4RfIYFGjQ3qA6vSIzXUwhg] update_mapping [_doc]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:28,468Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001] from [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] to [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:28,620Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-.logs-deprecation.elasticsearch-default-2026.03.01-000001] from [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] to [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"check-rollover-ready\"}] in policy [.deprecation-indexing-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:29,020Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "downloading geoip database [GeoLite2-ASN.mmdb] to [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-ASN.mmdb.tmp.gz]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:29,029Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updated geoip database [GeoLite2-ASN.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:29,042Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updating geoip database [GeoLite2-City.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:29,188Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-ASN.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:31,734Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "downloading geoip database [GeoLite2-City.mmdb] to [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-City.mmdb.tmp.gz]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:31,746Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updated geoip database [GeoLite2-City.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:31,747Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updating geoip database [GeoLite2-Country.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,318Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-City.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,536Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateIndexService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "[.ds-ilm-history-5-2026.03.01-000001] creating index, cause [initialize_data_stream], templates [ilm-history], shards [1]/[0]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,538Z", "level": "INFO", "component": "o.e.c.m.MetadataCreateDataStreamService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "adding data stream [ilm-history-5] with write index [.ds-ilm-history-5-2026.03.01-000001], backing indices [], and aliases []", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,642Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-ilm-history-5-2026.03.01-000001] from [null] to [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,829Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-ilm-history-5-2026.03.01-000001] from [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] to [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:32,890Z", "level": "INFO", "component": "o.e.x.i.IndexLifecycleTransition", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "moving index [.ds-ilm-history-5-2026.03.01-000001] from [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] to [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"check-rollover-ready\"}] in policy [ilm-history-ilm-policy]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:33,143Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "downloading geoip database [GeoLite2-Country.mmdb] to [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-Country.mmdb.tmp.gz]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:33,153Z", "level": "INFO", "component": "o.e.i.g.GeoIpDownloader", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "updated geoip database [GeoLite2-Country.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T18:56:33,230Z", "level": "INFO", "component": "o.e.i.g.DatabaseNodeService", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "successfully reloaded changed geoip database file [/tmp/elasticsearch-16527452924563692781/geoip-databases/FPlAnKU4RH60WE6VYP6Lug/GeoLite2-Country.mmdb]", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T19:43:02,731Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "invalid internal transport message format, got (4d,47,4c,4e), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/20.64.104.44:57810, profile=default}], closing connection", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T19:53:53,385Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "invalid internal transport message format, got (43,4f,4e,4e), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/176.65.148.95:58724, profile=default}], closing connection", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }
{"type": "server", "timestamp": "2026-03-01T21:47:08,241Z", "level": "WARN", "component": "o.e.t.TcpTransport", "cluster.name": "docker-cluster", "node.name": "7d864a9fe9f9", "message": "invalid internal transport message format, got (4a,52,4d,49), [Netty4TcpChannel{localAddress=/198.18.14.5:9300, remoteAddress=/192.81.129.114:44326, profile=default}], closing connection", "cluster.uuid": "Pd-nb8WrTHy4q5-zi8V6cg", "node.id": "FPlAnKU4RH60WE6VYP6Lug"  }