-
Notifications
You must be signed in to change notification settings - Fork 0
/
kibana.log
294 lines (294 loc) · 121 KB
/
kibana.log
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T11:20:36.191+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":13788},"trace":{"id":"0ba4c13ad477a42433fbada364653a97"},"transaction":{"id":"fbeb80c5f23f453a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T11:20:36.243+00:00","message":"http server running at http://localhost:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":13788},"trace":{"id":"0ba4c13ad477a42433fbada364653a97"},"transaction":{"id":"fbeb80c5f23f453a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T11:20:36.266+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":13788},"trace":{"id":"0ba4c13ad477a42433fbada364653a97"},"transaction":{"id":"fbeb80c5f23f453a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T11:20:36.267+00:00","message":"\"interactiveSetup\" plugin is holding setup: Validating Elasticsearch connection configuration…","log":{"level":"INFO","logger":"preboot"},"process":{"pid":13788},"trace":{"id":"0ba4c13ad477a42433fbada364653a97"},"transaction":{"id":"fbeb80c5f23f453a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T11:20:36.286+00:00","message":"Holding setup until preboot stage is completed.","log":{"level":"INFO","logger":"root"},"process":{"pid":13788}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:43.725+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":13788}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.079+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":51397},"trace":{"id":"7f0aba9e09b9d2ba323ec6f3f05ce6f2"},"transaction":{"id":"2a8f02ecec514e5d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.145+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":51397},"trace":{"id":"7f0aba9e09b9d2ba323ec6f3f05ce6f2"},"transaction":{"id":"2a8f02ecec514e5d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.169+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":51397},"trace":{"id":"7f0aba9e09b9d2ba323ec6f3f05ce6f2"},"transaction":{"id":"2a8f02ecec514e5d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.200+00:00","message":"The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set \"xpack.reporting.roles.enabled\" to \"false\" to adopt the future behavior before upgrading.","log":{"level":"WARN","logger":"config.deprecation"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.334+00:00","message":"Setting up [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.344+00:00","message":"TaskManager is identified by the Kibana UUID: 59a0f210-c09d-4ed3-aac6-59b71ccd2ef3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.379+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.380+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.394+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.394+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.398+00:00","message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.encryptedSavedObjects"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.412+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.actions"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.460+00:00","message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.reporting.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.464+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.alerting"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.473+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.818+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:50.944+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T12:58:51.131+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:18:50.473+00:00","message":"Timeout: it took more than 1200000ms","error":{"message":"Timeout: it took more than 1200000ms","type":"Error","stack_trace":"Error: Timeout: it took more than 1200000ms\n at Timeout._onTimeout (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:54:20)\n at listOnTimeout (node:internal/timers:559:17)\n at processTimers (node:internal/timers:502:7)"},"log":{"level":"ERROR","logger":"plugins.ruleRegistry"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:18:50.475+00:00","message":"Failure installing common resources shared between all indices. Timeout: it took more than 1200000ms","error":{"message":"Failure installing common resources shared between all indices. Timeout: it took more than 1200000ms","type":"Error","stack_trace":"Error: Failure installing common resources shared between all indices. Timeout: it took more than 1200000ms\n at ResourceInstaller.installWithTimeout (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:63:13)\n at ResourceInstaller.installCommonResources (/usr/share/kibana/x-pack/plugins/rule_registry/server/rule_data_plugin_service/resource_installer.js:77:5)"},"log":{"level":"ERROR","logger":"plugins.ruleRegistry"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:34:43.436+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:34:58.479+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:46:33.419+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:46:45.973+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. write EPROTO 140458445805504:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:50:03.427+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T13:50:33.439+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. write EPROTO 140458445805504:error:1408F10B:SSL routines:ssl3_get_record:wrong version number:../deps/openssl/openssl/ssl/record/ssl3_record.c:332:\n","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:14:45.977+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:15:01.068+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:19:05.985+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:19:21.068+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. self signed certificate in certificate chain","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":51397},"trace":{"id":"91fc42eb15e8c1cd4d0c254824670475"},"transaction":{"id":"8448a9683ac218a9"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:12.044+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":51397}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:18.475+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":87085},"trace":{"id":"147e54c05944cbfbf76d3b7cd99939f0"},"transaction":{"id":"7022bde31f4e7c3d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:18.536+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":87085},"trace":{"id":"147e54c05944cbfbf76d3b7cd99939f0"},"transaction":{"id":"7022bde31f4e7c3d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:18.558+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":87085},"trace":{"id":"147e54c05944cbfbf76d3b7cd99939f0"},"transaction":{"id":"7022bde31f4e7c3d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:18.559+00:00","message":"\"interactiveSetup\" plugin is holding setup: Validating Elasticsearch connection configuration…","log":{"level":"INFO","logger":"preboot"},"process":{"pid":87085},"trace":{"id":"147e54c05944cbfbf76d3b7cd99939f0"},"transaction":{"id":"7022bde31f4e7c3d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:28:18.578+00:00","message":"Holding setup until preboot stage is completed.","log":{"level":"INFO","logger":"root"},"process":{"pid":87085}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:36:56.556+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":87085}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:02.955+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":90351},"trace":{"id":"7db372587669be15fae13827e1b21d76"},"transaction":{"id":"58e522ba7a48014a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:02.990+00:00","message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","error":{"message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","type":"Error","stack_trace":"Error: [config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html\n at ensureValidConfiguration (/usr/share/kibana/src/core/server/config/ensure_valid_configuration.js:25:11)\n at Server.preboot (/usr/share/kibana/src/core/server/server.js:180:5)\n at Root.preboot (/usr/share/kibana/src/core/server/root/index.js:48:14)\n at bootstrap (/usr/share/kibana/src/core/server/bootstrap.js:99:9)\n at Command.<anonymous> (/usr/share/kibana/src/cli/serve/serve.js:216:5)"},"log":{"level":"FATAL","logger":"root"},"process":{"pid":90351},"trace":{"id":"7db372587669be15fae13827e1b21d76"},"transaction":{"id":"58e522ba7a48014a"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:12.457+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":90457},"trace":{"id":"e8f20e39773d8217e128e4fa9f4983ae"},"transaction":{"id":"40b030c7213c7a60"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:12.492+00:00","message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","error":{"message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","type":"Error","stack_trace":"Error: [config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html\n at ensureValidConfiguration (/usr/share/kibana/src/core/server/config/ensure_valid_configuration.js:25:11)\n at Server.preboot (/usr/share/kibana/src/core/server/server.js:180:5)\n at Root.preboot (/usr/share/kibana/src/core/server/root/index.js:48:14)\n at bootstrap (/usr/share/kibana/src/core/server/bootstrap.js:99:9)\n at Command.<anonymous> (/usr/share/kibana/src/cli/serve/serve.js:216:5)"},"log":{"level":"FATAL","logger":"root"},"process":{"pid":90457},"trace":{"id":"e8f20e39773d8217e128e4fa9f4983ae"},"transaction":{"id":"40b030c7213c7a60"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:21.966+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":90551},"trace":{"id":"c81adfa93a47a709b5dbfd3b753e6099"},"transaction":{"id":"eee1a1b5c7843b17"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:37:22.005+00:00","message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","error":{"message":"[config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html","type":"Error","stack_trace":"Error: [config validation of [elasticsearch].username]: value of \"elastic\" is forbidden. This is a superuser account that cannot write to system indices that Kibana needs to function. Use a service account token instead. Learn more: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/service-accounts.html\n at ensureValidConfiguration (/usr/share/kibana/src/core/server/config/ensure_valid_configuration.js:25:11)\n at Server.preboot (/usr/share/kibana/src/core/server/server.js:180:5)\n at Root.preboot (/usr/share/kibana/src/core/server/root/index.js:48:14)\n at bootstrap (/usr/share/kibana/src/core/server/bootstrap.js:99:9)\n at Command.<anonymous> (/usr/share/kibana/src/cli/serve/serve.js:216:5)"},"log":{"level":"FATAL","logger":"root"},"process":{"pid":90551},"trace":{"id":"c81adfa93a47a709b5dbfd3b753e6099"},"transaction":{"id":"eee1a1b5c7843b17"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:38:59.937+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":91171},"trace":{"id":"f82431586426fd86f8dd1141e523cd4c"},"transaction":{"id":"7cd659a09505ceba"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.004+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":91171},"trace":{"id":"f82431586426fd86f8dd1141e523cd4c"},"transaction":{"id":"7cd659a09505ceba"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.029+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":91171},"trace":{"id":"f82431586426fd86f8dd1141e523cd4c"},"transaction":{"id":"7cd659a09505ceba"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.061+00:00","message":"The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set \"xpack.reporting.roles.enabled\" to \"false\" to adopt the future behavior before upgrading.","log":{"level":"WARN","logger":"config.deprecation"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.199+00:00","message":"Setting up [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.208+00:00","message":"TaskManager is identified by the Kibana UUID: 59a0f210-c09d-4ed3-aac6-59b71ccd2ef3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.245+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.246+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.259+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.259+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.263+00:00","message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.encryptedSavedObjects"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.277+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.actions"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.326+00:00","message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.reporting.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.329+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.alerting"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.342+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.689+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.921+00:00","message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.921+00:00","message":"Starting saved objects migrations","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.949+00:00","message":"[.kibana] INIT -> CREATE_NEW_TARGET. took: 14ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:00.951+00:00","message":"[.kibana_task_manager] INIT -> CREATE_NEW_TARGET. took: 14ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.105+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.461+00:00","message":"[.kibana_task_manager] CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 510ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.613+00:00","message":"[.kibana_task_manager] MARK_VERSION_INDEX_READY -> DONE. took: 152ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.614+00:00","message":"[.kibana_task_manager] Migration completed after 677ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.670+00:00","message":"[.kibana] CREATE_NEW_TARGET -> MARK_VERSION_INDEX_READY. took: 721ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.871+00:00","message":"[.kibana] MARK_VERSION_INDEX_READY -> DONE. took: 201ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.872+00:00","message":"[.kibana] Migration completed after 937ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":91171},"span":{"id":"97cceb541717815d"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.877+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:01.878+00:00","message":"Starting [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:02.584+00:00","message":"config sourced from: production cluster","log":{"level":"INFO","logger":"plugins.monitoring.monitoring"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.422+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Kibana"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.556+00:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.556+00:00","message":"Beginning fleet setup","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.609+00:00","message":"Kibana is now degraded","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.839+00:00","message":"Installed common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.839+00:00","message":"Installing resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.840+00:00","message":"Installing resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.840+00:00","message":"Installing resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.840+00:00","message":"Installing resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.841+00:00","message":"Installing resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:03.841+00:00","message":"Installing resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:04.778+00:00","message":"Installed resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:04.779+00:00","message":"Installed resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:04.780+00:00","message":"Installed resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:04.781+00:00","message":"Installed resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:04.781+00:00","message":"Installed resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:05.310+00:00","message":"Task ML:saved-objects-sync-task: scheduled with interval 1h","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:06.129+00:00","message":"Installed resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:08.620+00:00","message":"Fleet setup completed","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:08.624+00:00","message":"Dependent plugin setup complete - Starting ManifestTask","log":{"level":"INFO","logger":"plugins.securitySolution"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:09.668+00:00","message":"no endpoint installation found","log":{"level":"INFO","logger":"plugins.securitySolution.endpoint:metadata-check-transforms-task:0.0.1"},"process":{"pid":91171},"span":{"id":"07d9a33a85f1589c"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:10.328+00:00","message":"Task ML:saved-objects-sync-task: 1 ML saved object synced","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":91171},"span":{"id":"eb689d70bbfecd66"},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:12.525+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"95501bd2e3081cf45ca4e3c4d5e0bbbb"},"transaction":{"id":"442bf0352658ef1d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:39:12.536+00:00","message":"Creating ILM policy for managing reporting indices: kibana-reporting","log":{"level":"INFO","logger":"plugins.reporting.store"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:40.957+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:41.051+00:00","message":"Kibana is now critical (was available)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:41.904+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:41.905+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:43.565+00:00","message":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at Monitoring.bulk (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/monitoring.js:53:16)\n at sendBulkPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/lib/send_bulk_payload.js:22:10)\n at BulkUploader._onPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:188:12)\n at BulkUploader._fetchAndUpload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:174:9)","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:43.565+00:00","message":"Unable to bulk upload the stats payload to the local cluster","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:53.601+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip]","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:53.638+00:00","message":"ResponseError: security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_monitoring/bulk?system_id=kibana&system_api_version=7&interval=10000ms]\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:476:27)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at Monitoring.bulk (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/monitoring.js:53:16)\n at sendBulkPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/lib/send_bulk_payload.js:22:10)\n at BulkUploader._onPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:188:12)\n at BulkUploader._fetchAndUpload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:174:9)","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:53.638+00:00","message":"Unable to bulk upload the stats payload to the local cluster","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:46:56.263+00:00","message":"Kibana is now degraded (was critical)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:47:02.277+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"7025c241eda376f2a55bb9c850fef587"},"transaction":{"id":"3a0d4d85c799073f"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:28.467+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:28.558+00:00","message":"Kibana is now critical (was available)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.735+00:00","message":"License information could not be obtained from Elasticsearch due to ConnectionError: connect ECONNREFUSED 74.208.203.247:9200 error","log":{"level":"WARN","logger":"plugins.licensing"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.739+00:00","message":"You cannot use searchprofiler because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.searchprofiler"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.740+00:00","message":"You cannot use painlessLab because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.painlessLab"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.741+00:00","message":"You cannot use snapshot_restore because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.snapshotRestore"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.742+00:00","message":"You cannot use transform because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.transform"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.743+00:00","message":"You cannot use rollup because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.rollup"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.744+00:00","message":"You cannot use Remote Clusters because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.remoteClusters"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.744+00:00","message":"You cannot use index_lifecycle_management because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.indexLifecycleManagement"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.755+00:00","message":"Monitoring status upload endpoint is not enabled in Elasticsearch:Monitoring stats collection is stopped","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:30.771+00:00","message":"Unable to verify endpoint policies in line with license change: failed to fetch package policies: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"WARN","logger":"plugins.securitySolution"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:31.920+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:31.921+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:33.442+00:00","message":"License information could not be obtained from Elasticsearch due to ConnectionError: connect ECONNREFUSED 74.208.203.247:9200 error","log":{"level":"WARN","logger":"plugins.licensing"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:33.442+00:00","message":"X-Pack Monitoring Cluster Alerts will not be available: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"WARN","logger":"plugins.monitoring.monitoring"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:40.969+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip]","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:51:43.711+00:00","message":"Kibana is now unavailable (was critical)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:52:00.746+00:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:52:00.826+00:00","message":"Kibana is now available (was unavailable)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:19.630+00:00","message":"Failed to poll for work: ConnectionError: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"plugins.taskManager"},"process":{"pid":91171},"trace":{"id":"fcc445b758cde79f39264877e3b4aac5"},"transaction":{"id":"8935c8f6d7d27fd8"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:20.753+00:00","message":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at Monitoring.bulk (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/monitoring.js:53:16)\n at sendBulkPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/lib/send_bulk_payload.js:22:10)\n at BulkUploader._onPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:188:12)\n at BulkUploader._fetchAndUpload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:174:9)","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:20.753+00:00","message":"Unable to bulk upload the stats payload to the local cluster","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:20.972+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:21.063+00:00","message":"Kibana is now critical (was available)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:21.931+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:21.932+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.715+00:00","message":"License information could not be obtained from Elasticsearch due to ConnectionError: connect ECONNREFUSED 74.208.203.247:9200 error","log":{"level":"WARN","logger":"plugins.licensing"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.716+00:00","message":"You cannot use searchprofiler because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.searchprofiler"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.716+00:00","message":"You cannot use painlessLab because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.painlessLab"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.716+00:00","message":"You cannot use snapshot_restore because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.snapshotRestore"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.717+00:00","message":"You cannot use transform because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.transform"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.717+00:00","message":"You cannot use rollup because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.rollup"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.717+00:00","message":"You cannot use Remote Clusters because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.remoteClusters"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.719+00:00","message":"You cannot use index_lifecycle_management because license information is not available at this time.","log":{"level":"INFO","logger":"plugins.indexLifecycleManagement"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.720+00:00","message":"Monitoring status upload endpoint is not enabled in Elasticsearch:Monitoring stats collection is stopped","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:30.725+00:00","message":"Unable to verify endpoint policies in line with license change: failed to fetch package policies: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"WARN","logger":"plugins.securitySolution"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:54:33.937+00:00","message":"Kibana is now unavailable (was critical)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:55:00.749+00:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:55:00.842+00:00","message":"Kibana is now available (was unavailable)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:35.980+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:36.071+00:00","message":"Kibana is now critical (was available)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:36.941+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:36.941+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":91171},"trace":{"id":"67eab2d308f05fdf4346add5ccb3cded"},"transaction":{"id":"e6c372817692daac"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:40.755+00:00","message":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at Monitoring.bulk (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/monitoring.js:53:16)\n at sendBulkPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/lib/send_bulk_payload.js:22:10)\n at BulkUploader._onPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:188:12)\n at BulkUploader._fetchAndUpload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:174:9)","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:40.756+00:00","message":"Unable to bulk upload the stats payload to the local cluster","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:48.612+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip]","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:51.112+00:00","message":"Kibana is now degraded (was critical)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"d540454d4eac3f3b2e1f0b57a9f5cec1"},"transaction":{"id":"6e78b19be5d5e74e"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:58:57.125+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":91171},"trace":{"id":"100c59a4f0e3b810a6771b51e197b81e"},"transaction":{"id":"433a558ad0cf5c36"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:02.299+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":91171}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:02.300+00:00","message":"Monitoring stats collection is stopped","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":91171}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:08.759+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":100000},"trace":{"id":"adb9a588ba02bfaa0ce57c555228b4a6"},"transaction":{"id":"c4c1c2c1f54938eb"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:08.826+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":100000},"trace":{"id":"adb9a588ba02bfaa0ce57c555228b4a6"},"transaction":{"id":"c4c1c2c1f54938eb"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:08.850+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":100000},"trace":{"id":"adb9a588ba02bfaa0ce57c555228b4a6"},"transaction":{"id":"c4c1c2c1f54938eb"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:08.881+00:00","message":"The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set \"xpack.reporting.roles.enabled\" to \"false\" to adopt the future behavior before upgrading.","log":{"level":"WARN","logger":"config.deprecation"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.011+00:00","message":"Setting up [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.020+00:00","message":"TaskManager is identified by the Kibana UUID: 59a0f210-c09d-4ed3-aac6-59b71ccd2ef3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.055+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.055+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.068+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.068+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.073+00:00","message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.encryptedSavedObjects"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.087+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.actions"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.136+00:00","message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.reporting.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.139+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.alerting"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.149+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.489+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.574+00:00","message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.575+00:00","message":"Starting saved objects migrations","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.597+00:00","message":"[.kibana_task_manager] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 11ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.600+00:00","message":"[.kibana] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 15ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.605+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 5ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.606+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 9ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.620+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 14ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.622+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 17ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.625+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 3ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.627+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 7ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.712+00:00","message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 85ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.797+00:00","message":"[.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 172ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:09.889+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.418+00:00","message":"[.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 621ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.418+00:00","message":"[.kibana] Migration completed after 833ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.419+00:00","message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 707ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.419+00:00","message":"[.kibana_task_manager] Migration completed after 833ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.424+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:10.425+00:00","message":"Starting [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.185+00:00","message":"config sourced from: production cluster","log":{"level":"INFO","logger":"plugins.monitoring.monitoring"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.879+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Kibana"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.950+00:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.951+00:00","message":"Beginning fleet setup","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.990+00:00","message":"Installed common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.990+00:00","message":"Installing resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.990+00:00","message":"Installing resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.991+00:00","message":"Installing resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.991+00:00","message":"Installing resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.991+00:00","message":"Installing resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:11.991+00:00","message":"Installing resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.005+00:00","message":"Kibana is now degraded","log":{"level":"INFO","logger":"status"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.024+00:00","message":"Installed resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.024+00:00","message":"Installed resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.024+00:00","message":"Installed resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.025+00:00","message":"Installed resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.025+00:00","message":"Installed resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.029+00:00","message":"Installed resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.048+00:00","message":"Task ML:saved-objects-sync-task: scheduled with interval 1h","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.055+00:00","message":"Fleet setup completed","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:12.059+00:00","message":"Dependent plugin setup complete - Starting ManifestTask","log":{"level":"INFO","logger":"plugins.securitySolution"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:15.198+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":100000},"trace":{"id":"4ffbadf0c4dc24507f2db1df743af0bd"},"transaction":{"id":"c5e91bd8af5a9a06"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T14:59:15.234+00:00","message":"Task ML:saved-objects-sync-task: No ML saved objects in need of synchronization","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"2287025dc98f1ef6"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:14.902+00:00","message":"Failed to poll for work: ConnectionError: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"plugins.taskManager"},"process":{"pid":100000},"trace":{"id":"e317909fd801a46773b554cde6de09dd"},"transaction":{"id":"9269b42ec7f3a939"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:17.048+00:00","message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"elasticsearch-service"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:17.143+00:00","message":"Kibana is now critical (was available)","log":{"level":"INFO","logger":"status"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:20.445+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at ClientTraced.UpdateApi [as update] (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/update.js:50:12)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:20.446+00:00","message":"connect ECONNREFUSED 74.208.203.247:9200","error":{"message":"connect ECONNREFUSED 74.208.203.247:9200","type":"ConnectionError","stack_trace":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at ClientTraced.UpdateApi [as update] (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/update.js:50:12)"},"log":{"level":"WARN","logger":"plugins.usageCollection.usage-collection.usage-counters-service"},"process":{"pid":100000},"trace":{"id":"965755c3a96879afad6d8c7901563006"},"transaction":{"id":"79b56fef8a49a435"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:21.959+00:00","message":"ConnectionError: connect ECONNREFUSED 74.208.203.247:9200\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:525:31)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at KibanaTransport.request (/usr/share/kibana/src/core/server/elasticsearch/client/create_transport.js:58:16)\n at Monitoring.bulk (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/monitoring.js:53:16)\n at sendBulkPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/lib/send_bulk_payload.js:22:10)\n at BulkUploader._onPayload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:188:12)\n at BulkUploader._fetchAndUpload (/usr/share/kibana/x-pack/plugins/monitoring/server/kibana_monitoring/bulk_uploader.js:174:9)","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:21.959+00:00","message":"Unable to bulk upload the stats payload to the local cluster","log":{"level":"WARN","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:30.055+00:00","message":"Kibana is now degraded (was critical)","log":{"level":"INFO","logger":"status"},"process":{"pid":100000},"trace":{"id":"38fa5a6e602b21df530b2a849e9ef5b7"},"transaction":{"id":"258ba1a19ed83350"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:05:36.071+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":100000},"trace":{"id":"de6da81669920ecf4c78afc7251ebfcc"},"transaction":{"id":"91c6d129fd1df2ca"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:07:51.032+00:00","message":"Failed to poll for work: ConnectionError: connect ECONNREFUSED 74.208.203.247:9200","log":{"level":"ERROR","logger":"plugins.taskManager"},"process":{"pid":100000},"trace":{"id":"46ffebe0266a25be8aaccd96c9ba52bf"},"transaction":{"id":"9b6a3854e9991e5c"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:07:51.081+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":100000}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:07:51.083+00:00","message":"Monitoring stats collection is stopped","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":100000}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:07:51.099+00:00","message":"error writing bulk events: \"connect ECONNREFUSED 74.208.203.247:9200\"; docs: [{\"create\":{\"_index\":\".kibana-event-log-8.3.2\",\"require_alias\":true}},{\"@timestamp\":\"2022-07-16T15:07:51.091Z\",\"event\":{\"provider\":\"eventLog\",\"action\":\"stopping\"},\"message\":\"eventLog stopping\",\"ecs\":{\"version\":\"1.8.0\"},\"kibana\":{\"server_uuid\":\"59a0f210-c09d-4ed3-aac6-59b71ccd2ef3\",\"version\":\"8.3.2\"}}]","log":{"level":"ERROR","logger":"plugins.eventLog"},"process":{"pid":100000}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.014+00:00","message":"Plugin \"cloudSecurityPosture\" is disabled.","log":{"level":"INFO","logger":"plugins-service"},"process":{"pid":1238},"trace":{"id":"a01ec91e60b7a25bbf39339e8c8ddc60"},"transaction":{"id":"bb75c3c0c1e66e6d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.206+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Preboot"},"process":{"pid":1238},"trace":{"id":"a01ec91e60b7a25bbf39339e8c8ddc60"},"transaction":{"id":"bb75c3c0c1e66e6d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.289+00:00","message":"Setting up [1] plugins: [interactiveSetup]","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":1238},"trace":{"id":"a01ec91e60b7a25bbf39339e8c8ddc60"},"transaction":{"id":"bb75c3c0c1e66e6d"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.321+00:00","message":"The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set \"xpack.reporting.roles.enabled\" to \"false\" to adopt the future behavior before upgrading.","log":{"level":"WARN","logger":"config.deprecation"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.504+00:00","message":"Setting up [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.514+00:00","message":"TaskManager is identified by the Kibana UUID: 59a0f210-c09d-4ed3-aac6-59b71ccd2ef3","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.551+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.551+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.564+00:00","message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.564+00:00","message":"Session cookies will be transmitted over insecure connections. This is not recommended.","log":{"level":"WARN","logger":"plugins.security.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.568+00:00","message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.encryptedSavedObjects"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.586+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.actions"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.653+00:00","message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.reporting.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.656+00:00","message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.","log":{"level":"WARN","logger":"plugins.alerting"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:46.667+00:00","message":"Installing common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.146+00:00","message":"Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.","log":{"level":"INFO","logger":"plugins.screenshotting.config"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.465+00:00","message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.466+00:00","message":"Starting saved objects migrations","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.498+00:00","message":"[.kibana_task_manager] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 20ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.502+00:00","message":"[.kibana] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 26ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.524+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 26ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.528+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 26ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.567+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 43ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.569+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 41ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.575+00:00","message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 8ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.577+00:00","message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 8ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.688+00:00","message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 113ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:47.727+00:00","message":"[.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 150ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.906+00:00","message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 1218ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.907+00:00","message":"[.kibana_task_manager] Migration completed after 1429ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.934+00:00","message":"[.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 1207ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.934+00:00","message":"[.kibana] Migration completed after 1458ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":1238},"span":{"id":"d5e58965c6fd1ab7"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.939+00:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:48.939+00:00","message":"Starting [118] plugins: [translations,monitoringCollection,licensing,globalSearch,globalSearchProviders,features,mapsEms,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,share,embeddable,uiActionsEnhanced,screenshotMode,banners,newsfeed,fieldFormats,expressions,eventAnnotation,dataViews,charts,esUiShared,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,advancedSettings,spaces,security,lists,encryptedSavedObjects,cloud,snapshotRestore,screenshotting,telemetry,licenseManagement,kibanaUsageCollection,eventLog,actions,console,bfetch,data,watcher,reporting,fileUpload,ingestPipelines,alerting,aiops,unifiedSearch,savedObjects,triggersActionsUi,transform,stackAlerts,ruleRegistry,graph,savedObjectsTagging,savedObjectsManagement,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,dataViewFieldEditor,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeHeatmap,visTypeMarkdown,dashboard,dashboardEnhanced,expressionXY,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,sharedUX,discover,lens,maps,dataVisualizer,ml,cases,timelines,sessionView,observability,fleet,synthetics,osquery,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,discoverEnhanced,dataViewManagement]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:49.999+00:00","message":"config sourced from: production cluster","log":{"level":"INFO","logger":"plugins.monitoring.monitoring"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.821+00:00","message":"http server running at http://74.208.203.247:5601","log":{"level":"INFO","logger":"http.server.Kibana"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.922+00:00","message":"Kibana is now degraded","log":{"level":"INFO","logger":"status"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.953+00:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.954+00:00","message":"Beginning fleet setup","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.963+00:00","message":"Installed common resources shared between all indices","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.963+00:00","message":"Installing resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.964+00:00","message":"Installing resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.964+00:00","message":"Installing resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.964+00:00","message":"Installing resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.964+00:00","message":"Installing resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.965+00:00","message":"Installing resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.992+00:00","message":"Installed resources for index .alerts-observability.uptime.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:50.994+00:00","message":"Installed resources for index .alerts-observability.metrics.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.006+00:00","message":"Installed resources for index .alerts-observability.apm.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.013+00:00","message":"Installed resources for index .alerts-observability.logs.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.015+00:00","message":"Installed resources for index .alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.015+00:00","message":"Installed resources for index .preview.alerts-security.alerts","log":{"level":"INFO","logger":"plugins.ruleRegistry"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.059+00:00","message":"Fleet setup completed","log":{"level":"INFO","logger":"plugins.fleet"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.066+00:00","message":"Dependent plugin setup complete - Starting ManifestTask","log":{"level":"INFO","logger":"plugins.securitySolution"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.680+00:00","message":"Task ML:saved-objects-sync-task: scheduled with interval 1h","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":1238},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"},"transaction":{"id":"f5779a7dba3f5eed"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:51.908+00:00","message":"Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell","log":{"level":"INFO","logger":"plugins.screenshotting.chromium"},"process":{"pid":1238},"trace":{"id":"51c5a47db3d6af2109e86add493cd822"},"transaction":{"id":"8b53a8da13c78150"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:54.185+00:00","message":"Kibana is now available (was degraded)","log":{"level":"INFO","logger":"status"},"process":{"pid":1238},"trace":{"id":"ec3a04bebfcf682d362efd99c62482f1"},"transaction":{"id":"9d7cde270861eea1"}}
{"ecs":{"version":"8.0.0"},"@timestamp":"2022-07-16T15:12:54.270+00:00","message":"Task ML:saved-objects-sync-task: No ML saved objects in need of synchronization","log":{"level":"INFO","logger":"plugins.ml"},"process":{"pid":1238},"span":{"id":"3fdb78aac05b22a9"},"trace":{"id":"6fb410553b358e47a40d1d91e56a7e90"}}