Closed DaveCTurner closed 2 years ago
Pinging @elastic/es-core-infra (Team:Core/Infra)
I am facing the same issue, and am looking forward to any updates! 😄
I was experiencing the same issue.
as hotfix, I opened the _state
(in my case /var/lib/elasticsearch/_state
) in luke
and deleted the broken indices.
Make sure to use 9.0.0's luke, as can be found in apache archives since lucene91 is not supported by elastic. (warning from poster below: this may cause damage to your cluster and is unsafe))
The troublesome indices in my case were elastalert_status_error
, elastalert_status_silence
, elastalert_status_past
, elastalert_status
and elastalert_status_status
.
I hope that this may help someone.
as hotfix, I opened the
_state
This is likely to be harmful to your cluster and we very strongly recommend not to do this. See for instance these docs:
WARNING: Don’t modify anything within the data directory or run processes that might interfere with its contents. If something other than Elasticsearch modifies the contents of the data directory, then Elasticsearch may fail, reporting corruption or other data inconsistencies, or may appear to work correctly having silently lost some of your data.
You can do whatever you want to your own data of course, but it is irresponsible to suggest this path to anyone else.
Any solution for this? I don't remember having any critical warnings regarding this in the Update Assistant. For my case it would be ok even if this particular index would be deleted, doesn't really matter unless it will affect other indexes
Edit: Somehow managed to fix it. In my case I didn't need those broken indexes, they were leftovers from the previous config, so it was probably a bit easier than trying to fix everything. What I did was building elastic from source changing the place where the exception is thrown to just return null
similar to the normal output. After that I've booted up all required nodes with this version, deleted faulty indexes, and restarted the stock version of elastic.
Worked fine except that I used the master branch for the custom build and it updated the syntax to Lucene91, which kinda forced me to move to the snapshot from the stable build. Still better than having everything down
Any solution for this? I don't remember having any critical warnings regarding this in the Update Assistant. For my case it would be ok even if this particular index would be deleted, doesn't really matter unless it will affect other indexes
Edit: Somehow managed to fix it. In my case I didn't need those broken indexes, they were leftovers from the previous config, so it was probably a bit easier than trying to fix everything. What I did was building elastic from source changing the place where the exception is thrown to just
return null
similar to the normal output. After that I've booted up all required nodes with this version, deleted faulty indexes, and restarted the stock version of elastic. Worked fine except that I used the master branch for the custom build and it updated the syntax to Lucene91, which kinda forced me to move to the snapshot from the stable build. Still better than having everything down
This was really helpful. Thank you!
For reference, I checked out the v8.2.0 branch, then changed line 198-201 of the IndexMetadataVerifier.java file as follows:
from:
} catch (Exception ex) {
// Wrap the inner exception so we have the index name in the exception message
throw new IllegalStateException("Failed to parse mappings for index [" + indexMetadata.getIndex() + "]", ex);
}
to:
} catch (Exception ignore) {
// Wrap the inner exception so we have the index name in the exception message
// throw new IllegalStateException("Failed to parse mappings for index [" + indexMetadata.getIndex() + "]", ex);
}
setting the catch block to return null;
did not work for me, as the gradle compiler did not like that.
The code then compiled cleanly, and I was able to build a docker image to run in my cluster, then delete the bad indices using "curl":
# Check on the unassigned shards:
$ curl -k -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD https://localhost:9200/_cat/shards?h=index,shards,state,prirep,unassigned.reason | grep UNASSIGNED
elastalert_status_status UNASSIGNED p ALLOCATION_FAILED
elastalert_status_status UNASSIGNED r CLUSTER_RECOVERED
elastalert_status_error UNASSIGNED p ALLOCATION_FAILED
elastalert_status_error UNASSIGNED r CLUSTER_RECOVERED
elastalert_status UNASSIGNED p ALLOCATION_FAILED
elastalert_status UNASSIGNED r CLUSTER_RECOVERED
elastalert_status_past UNASSIGNED p ALLOCATION_FAILED
elastalert_status_past UNASSIGNED r CLUSTER_RECOVERED
elastalert_status_silence UNASSIGNED p ALLOCATION_FAILED
elastalert_status_silence UNASSIGNED r CLUSTER_RECOVERED
# If you are ready to delete all of the indices related to these shards, run:
curl -k -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD https://localhost:9200/_cat/shards | \
grep UNASSIGNED | awk {'print $1'} | \
xargs -i curl -k -u $ELASTIC_USERNAME:$ELASTIC_PASSWORD -XDELETE "https://localhost:9200/{}"
Just sorted this out with compiling from sources for my 4VM cluster because I had elastalert deprecated indices
Here are the commands I executed to compile fix and go back to the official release
`git clone https://github.com/elastic/elasticsearch.git cd elasticsearch git checkout v8.2.0 vim server/src/main/java/org/elasticsearch/cluster/metadata/IndexMetadataVerifier.java ###########commment line 200 with double slash ############ change line 197 from ex to ignore wget https://download.java.net/java/GA/jdk17.0.2/dfd4a8d0985749f896bed50d7138ee7f/8/GPL/openjdk-17.0.2_linux-x64_bin.tar.gz tar xvf openjdk-17.0.2_linux-x64_bin.tar.gz sudo mv jdk-17.0.2/ /opt/jdk-17/ echo 'export JAVA_HOME=/opt/jdk-17' | sudo tee /etc/profile.d/java17.sh echo 'export PATH=$JAVA_HOME/bin:$PATH'|sudo tee -a /etc/profile.d/java17.sh source /etc/profile.d/java17.sh echo $JAVA_HOME
apt-get install -y unzip zip curl -s "https://get.sdkman.io" | bash bash sdk install gradle 7.4.2 ./gradlew localDistro ########### the binary should be in ./build/distribution/local/elasticsearch-8.2.0-SNAPSHOT
########compress your SNAPSHOT to distribute it across your cluster fleet cd ./build/distribution/local/ tar -czvf elasticsearch-8.2.0-SNAPSHOT.tar.gz elasticsearch-8.2.0-SNAPSHOT cp -R ./build/distribution/local/elasticsearch-8.2.0-SNAPSHOT /usr/share/elasticsearch-8.2.0-SNAPSHOT
scp the SNAPSHOT to all the servers.
##########make a local backup mv /usr/share/elasticsearch /usr/share/elasticsearch_backup #########untar cd /tmp tar -xvf elasticsearch-8.2.0-SNAPSHOT.tar.gz
cp -R /tmp/elasticsearch-8.2.0-SNAPSHOT/ /usr/share/elasticsearch/ #######cp -R build/distribution/local/elasticsearch-8.2.0-SNAPSHOT /usr/share/elasticsearch rm -rf /usr/share/elasticsearch/jdk/ cp -R /usr/share/elasticsearch_backup/jdk/ /usr/share/elasticsearch/jdk/
vim /etc/passwd --- /bin/bash to elasticsearch user
chmod +x /etc/default/elasticsearch su elasticsearch /etc/default/elasticsearch export ES_PATH_CONF=/etc/elasticsearch export PID_DIR=/var/run/elasticsearch export ES_SD_NOTIFY=true cd /usr/share/elasticsearch/ ./bin/elasticsearch
#########clean indices from UI
###########GO BACK TO THE ELASTIC RELEASE
mv /usr/share/elasticsearch /usr/share/patch cp -R /usr/share/elasticsearch_backup /usr/share/elasticsearch systemctl restart elasticsearch systemctl status elasticsearch
vim /etc/passwd --- /bin/false to elasticsearch user `
hi @jgregmac Do you have the patched docker image with you that I can use? I am currently facing the same problem as described here.
Thanks, I have solved the problem with the pointers above. Thanks!
@yenonn , sorry for the delay in reply, but I am glad to hear that you were able to resolve your problem.
I did not keep my docker image, but I will note that it is easy enough to build your own (for a given value of "easy"). @kaisbaccour provides a good starting point. In addition to cloning the elasticsearch repo and installing the JDK and Gradle prerequisites, you also will need Docker (docker-ce) and have configured permissions for the current user to run docker without sudo. I was hoping that "podman" with the "podman-docker" packages would be adequate, but they were not.
Once all the prerequisites are in place, you cd to the elasticsearch repo root and simply run:
/gradlew :distribution:docker:docker-export:assemble
elasticsearch should compile and build a container image using the Dockerfile in the repo. The resulting container image can be accessed using docker image list
and can be published using docker image push
.
Anyone having proxy/ssl issues should add their proxy to the gradle.properties
file like to:
systemProp.https.proxyHost=your-proxy
systemProp.https.proxyPort=8888
I also faced that problem with elastalert indices when was upgrading Elastic stack from 7.17 to 8.x (running ECK k8s, with 4 replicas of elasticsearch)
Firstly, there is a small how-to about it on elastalert2 docs
Second, even I deleted indices before, one of my node was failing with Failed to parse mappings for index
My workaround was: I manually decreased Statefulset replicas count from 4 to 3, then ECK applied back 4 replicas and all of them green.
Thanks to https://github.com/elastic/elasticsearch/pull/88914 you can now go straight from 7.17.7 to 8.5.0 without having this issue (you'll still have to recreate the indices as stated in https://elastalert2.readthedocs.io/en/latest/recipes/faq.html?highlight=create-index#does-elastalert-2-support-elasticsearch-8 )
Elasticsearch Version
8.x
Installed Plugins
N/A
Java Version
bundled
OS Version
N/A
Problem Description
In https://github.com/elastic/elasticsearch/issues/81326 we added some protection against starting up Elasticsearch 8.x where the cluster held indices created in 6.x, allowing the user to downgrade back to 7.x and address the problem.
A user reported a related but still-extant problem: they were using a deprecated feature in their 7.x indices and missed the deprecation log message so they couldn't start the 8.x node, but Elasticsearch didn't detect the problem until after rearranging the data path (https://github.com/elastic/elasticsearch/pull/42489) so they could not downgrade to fix it either.
Steps to Reproduce
Create an index in 7.x using a deprecated feature. In this case the deprecation warning was as follows:
Try and upgrade to 8.x and observe that the node won't start.
Downgrade back to 7.x and observe that this node won't start either.
Logs (if relevant)
From the 8.x node when attempting to upgrade
``` kubectl -n mas logs elasticsearch-84b66fb459-gjpfc {"@timestamp":"2022-02-21T18:48:43.416Z", "log.level": "INFO", "message":"version[8.0.0], pid[7], build[default/docker/1b6a7ece17463df5ff54a3e1302d825889aa1161/2022-02-03T16:47:57.507843096Z], OS[Linux/5.4.0-91-generic/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.1/17.0.1+12]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:43.418Z", "log.level": "INFO", "message":"JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:43.418Z", "log.level": "INFO", "message":"JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-18423929716915370894, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms31744m, -Xmx31744m, -XX:MaxDirectMemorySize=16642998272, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=25, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:44.369Z", "log.level": "WARN", "message":"SLF4J: Failed to load class \"org.slf4j.impl.StaticLoggerBinder\".", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"stderr","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:44.370Z", "log.level": "WARN", "message":"SLF4J: Defaulting to no-operation (NOP) logger implementation", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"stderr","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:44.370Z", "log.level": "WARN", "message":"SLF4J: See http://www.slf4j.org/codes.html#StaticLoggerBinder for further details.", "ecs.version": [some module loaded lines deleted, this is standard docker image] "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.019Z", "log.level": "INFO", "message":"loaded module [repositories-metering-api]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.019Z", "log.level": "INFO", "message":"loaded module [repository-azure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.020Z", "log.level": "INFO", "message":"loaded module [repository-encrypted]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.020Z", "log.level": "INFO", "message":"loaded module [repository-gcs]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.020Z", "log.level": "INFO", "message":"loaded module [repository-s3]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.020Z", "log.level": "INFO", "message":"loaded module [repository-url]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.020Z", "log.level": "INFO", "message":"loaded module [runtime-fields-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [search-business-rules]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [searchable-snapshots]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [snapshot-based-recoveries]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [snapshot-repo-test-kit]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [spatial]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.021Z", "log.level": "INFO", "message":"loaded module [transport-netty4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [unsigned-long]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [vector-tile]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [vectors]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [wildcard]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [x-pack-aggregate-metric]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [x-pack-analytics]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [x-pack-async]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [x-pack-async-search]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.022Z", "log.level": "INFO", "message":"loaded module [x-pack-autoscaling]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-ccr]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-core]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-data-streams]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-deprecation]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-enrich]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-eql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-fleet]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-graph]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-identity-provider]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.023Z", "log.level": "INFO", "message":"loaded module [x-pack-ilm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-logstash]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-ml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-monitoring]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-ql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-rollup]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-security]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-shutdown]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.024Z", "log.level": "INFO", "message":"loaded module [x-pack-sql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.025Z", "log.level": "INFO", "message":"loaded module [x-pack-stack]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.025Z", "log.level": "INFO", "message":"loaded module [x-pack-text-structure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.025Z", "log.level": "INFO", "message":"loaded module [x-pack-voting-only-node]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.025Z", "log.level": "INFO", "message":"loaded module [x-pack-watcher]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.025Z", "log.level": "INFO", "message":"no plugins loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.045Z", "log.level": "INFO", "message":"using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/md2)]], net usable_space [188.9gb], net total_space [461gb], types [ext4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.045Z", "log.level": "INFO", "message":"heap size [31gb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:45.097Z", "log.level": "INFO", "message":"node name [elasticsearch-84b66fb459-gjpfc], node ID [jSFuEwKUR9q65j4Ta4E-cQ], cluster name [docker-cluster], roles [data_content, transform, data_hot, ml, data_frozen, ingest, data_cold, data, remote_cluster_client, master, data_warm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:48.398Z", "log.level": "INFO", "message":"Security is disabled", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.Security","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:48.728Z", "log.level": "INFO", "message":"creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=16mb}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.netty4.NettyAllocator","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:48.763Z", "log.level": "INFO", "message":"using discovery type [single-node] and seed hosts providers [settings]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.discovery.DiscoveryModule","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.150Z", "log.level": "INFO", "message":"initialized", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.150Z", "log.level": "INFO", "message":"starting ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.161Z", "log.level": "INFO", "message":"persistent cache index loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.searchablesnapshots.cache.full.PersistentCache","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.161Z", "log.level": "INFO", "message":"deprecation component started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.deprecation.logging.DeprecationIndexingComponent","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.212Z", "log.level": "INFO", "message":"publish_address {10.1.51.245:9300}, bound_addresses {[::]:9300}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.TransportService","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.286Z", "log.level": "WARN", "message":"Skipping unknown custom object with type system_index_migration", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.cluster.metadata.Metadata","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.364Z", "log.level":"ERROR", "message":"uncaught exception in thread [main]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.ElasticsearchUncaughtExceptionHandler","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster","error.type":"org.elasticsearch.bootstrap.StartupException","error.message":"java.lang.IllegalStateException: Failed to parse mappings for index [[reindexed-v7-messages1-2.4.0/x7yO_28nSVaRv08z3qnr1A]]","error.stack_trace":"java.lang.IllegalStateException: Failed to parse mappings for index [[reindexed-v7-messages1-2.4.0/x7yO_28nSVaRv08z3qnr1A]]\nLikely root cause: java.lang.IllegalArgumentException: Unknown pattern letter: t\n\tat java.base/java.time.format.DateTimeFormatterBuilder.parsePattern(DateTimeFormatterBuilder.java:1882)\n\tat java.base/java.time.format.DateTimeFormatterBuilder.appendPattern(DateTimeFormatterBuilder.java:1772)\n\tat org.elasticsearch.common.time.DateFormatters.forPattern(DateFormatters.java:2135)\n\tat org.elasticsearch.common.time.DateFormatter.forPattern(DateFormatter.java:116)\n\tat org.elasticsearch.index.mapper.DateFieldMapper$Builder.buildFormatter(DateFieldMapper.java:277)\n\tat org.elasticsearch.index.mapper.DateFieldMapper$Builder.build(DateFieldMapper.java:331)\n\tat org.elasticsearch.index.mapper.DateFieldMapper$Builder.build(DateFieldMapper.java:220)\n\tat org.elasticsearch.index.mapper.ObjectMapper$Builder.buildMappers(ObjectMapper.java:100)\n\tat org.elasticsearch.index.mapper.RootObjectMapper$Builder.build(RootObjectMapper.java:101)\n\tat org.elasticsearch.index.mapper.MappingParser.parse(MappingParser.java:149)\n\tat org.elasticsearch.index.mapper.MappingParser.parse(MappingParser.java:94)\n\tat org.elasticsearch.index.mapper.MapperService.parseMapping(MapperService.java:359)\n\tat org.elasticsearch.index.mapper.MapperService.mergeAndApplyMappings(MapperService.java:338)\n\tat org.elasticsearch.index.mapper.MapperService.merge(MapperService.java:324)\n\tat org.elasticsearch.cluster.metadata.IndexMetadataVerifier.checkMappingsCompatibility(IndexMetadataVerifier.java:195)\n\tat org.elasticsearch.cluster.metadata.IndexMetadataVerifier.verifyIndexMetadata(IndexMetadataVerifier.java:91)\n\tat org.elasticsearch.gateway.GatewayMetaState.upgradeMetadata(GatewayMetaState.java:226)\n\tat org.elasticsearch.gateway.GatewayMetaState.upgradeMetadataForNode(GatewayMetaState.java:213)\n\tat org.elasticsearch.gateway.GatewayMetaState.start(GatewayMetaState.java:127)\n\tat org.elasticsearch.node.Node.start(Node.java:1124)\n\tat org.elasticsearch.bootstrap.Bootstrap.start(Bootstrap.java:272)\n\tat org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:367)\n\tat org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:166)\n\tat org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:157)\n\tat org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:77)\n\tat org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112)\n\tat org.elasticsearch.cli.Command.main(Command.java:77)\n\tat org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:122)\n\tat org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80)\nFor complete error details, refer to the log at /usr/share/elasticsearch/logs/docker-cluster.log\n"} uncaught exception in thread [main] java.lang.IllegalStateException: Failed to parse mappings for index [[reindexed-v7-messages1-2.4.0/x7yO_28nSVaRv08z3qnr1A]] Likely root cause: java.lang.IllegalArgumentException: Unknown pattern letter: t at java.base/java.time.format.DateTimeFormatterBuilder.parsePattern(DateTimeFormatterBuilder.java:1882) at java.base/java.time.format.DateTimeFormatterBuilder.appendPattern(DateTimeFormatterBuilder.java:1772) at org.elasticsearch.common.time.DateFormatters.forPattern(DateFormatters.java:2135) at org.elasticsearch.common.time.DateFormatter.forPattern(DateFormatter.java:116) at org.elasticsearch.index.mapper.DateFieldMapper$Builder.buildFormatter(DateFieldMapper.java:277) at org.elasticsearch.index.mapper.DateFieldMapper$Builder.build(DateFieldMapper.java:331) at org.elasticsearch.index.mapper.DateFieldMapper$Builder.build(DateFieldMapper.java:220) at org.elasticsearch.index.mapper.ObjectMapper$Builder.buildMappers(ObjectMapper.java:100) at org.elasticsearch.index.mapper.RootObjectMapper$Builder.build(RootObjectMapper.java:101) at org.elasticsearch.index.mapper.MappingParser.parse(MappingParser.java:149) at org.elasticsearch.index.mapper.MappingParser.parse(MappingParser.java:94) at org.elasticsearch.index.mapper.MapperService.parseMapping(MapperService.java:359) at org.elasticsearch.index.mapper.MapperService.mergeAndApplyMappings(MapperService.java:338) at org.elasticsearch.index.mapper.MapperService.merge(MapperService.java:324) at org.elasticsearch.cluster.metadata.IndexMetadataVerifier.checkMappingsCompatibility(IndexMetadataVerifier.java:195) at org.elasticsearch.cluster.metadata.IndexMetadataVerifier.verifyIndexMetadata(IndexMetadataVerifier.java:91) at org.elasticsearch.gateway.GatewayMetaState.upgradeMetadata(GatewayMetaState.java:226) at org.elasticsearch.gateway.GatewayMetaState.upgradeMetadataForNode(GatewayMetaState.java:213) at org.elasticsearch.gateway.GatewayMetaState.start(GatewayMetaState.java:127) at org.elasticsearch.node.Node.start(Node.java:1124) at org.elasticsearch.bootstrap.Bootstrap.start(Bootstrap.java:272) at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:367) at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:166) at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:157) at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:77) at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:112) at org.elasticsearch.cli.Command.main(Command.java:77) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:122) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:80) For complete error details, refer to the log at /usr/share/elasticsearch/logs/docker-cluster.log {"@timestamp":"2022-02-21T18:48:49.366Z", "log.level": "INFO", "message":"stopping ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"Thread-2","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.392Z", "log.level": "INFO", "message":"stopped", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"Thread-2","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.392Z", "log.level": "INFO", "message":"closing ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"Thread-2","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} {"@timestamp":"2022-02-21T18:48:49.397Z", "log.level": "INFO", "message":"closed", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"Thread-2","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"elasticsearch-84b66fb459-gjpfc","elasticsearch.cluster.name":"docker-cluster"} ```From the 7.x node when attempting to downgrade
``` $ kubectl -n mas logs elasticsearch-75d4bf46bb-h6xcp {"type": "server", "timestamp": "2022-02-21T18:45:46,138Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "version[7.17.0], pid[7], build[default/docker/bee86328705acaa9a6daede7140defd4d9ec56bd/2022-01-28T08:36:04.875279988Z], OS[Linux/5.4.0-91-generic/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.1/17.0.1+12]" } {"type": "server", "timestamp": "2022-02-21T18:45:46,140Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]" } {"type": "server", "timestamp": "2022-02-21T18:45:46,141Z", "level": "INFO", "component": "o.e.n.Node", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-5817322145606499066, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xms31744m, -Xmx31744m, -XX:MaxDirectMemorySize=16642998272, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=25, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,476Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [aggs-matrix-stats]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,476Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [analysis-common]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,476Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [constant-keyword]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [frozen-indices]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [ingest-common]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [ingest-geoip]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [ingest-user-agent]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [kibana]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [lang-expression]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [lang-mustache]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,477Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [lang-painless]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [legacy-geo]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [mapper-extras]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [mapper-version]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [parent-join]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [percolator]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [rank-eval]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [reindex]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,478Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [repositories-metering-api]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [repository-encrypted]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [repository-url]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [runtime-fields-common]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [search-business-rules]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [searchable-snapshots]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [snapshot-repo-test-kit]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,479Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [spatial]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [transform]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [transport-netty4]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [unsigned-long]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [vector-tile]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [vectors]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [wildcard]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-aggregate-metric]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,480Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-analytics]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-async]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-async-search]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-autoscaling]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-ccr]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-core]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-data-streams]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,481Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-deprecation]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-enrich]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-eql]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-fleet]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-graph]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-identity-provider]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-ilm]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-logstash]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,482Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-ml]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-monitoring]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-ql]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-rollup]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-security]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-shutdown]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-sql]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-stack]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-text-structure]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,483Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-voting-only-node]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,484Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "loaded module [x-pack-watcher]" } {"type": "server", "timestamp": "2022-02-21T18:45:47,484Z", "level": "INFO", "component": "o.e.p.PluginsService", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "no plugins loaded" } {"type": "server", "timestamp": "2022-02-21T18:45:47,495Z", "level": "ERROR", "component": "o.e.b.ElasticsearchUncaughtExceptionHandler", "cluster.name": "docker-cluster", "node.name": "elasticsearch-75d4bf46bb-h6xcp", "message": "uncaught exception in thread [main]", "stacktrace": ["org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: data path [/usr/share/elasticsearch/data] is not compatible with Elasticsearch v7.17.0, perhaps it has already been upgraded to a later version", "at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.17.0.jar:7.17.0]", ```