text:
Kibana server is not ready yet

Client: Docker Engine - Community
 Version:           20.10.12
 API version:       1.41
 Go version:        go1.16.12
 Git commit:        e91ed57
 Built:             Mon Dec 13 11:45:41 2021
 OS/Arch:           linux/amd64
 Context:           default
 Experimental:      true

Server: Docker Engine - Community
 Engine:
  Version:          20.10.12
  API version:      1.41 (minimum version 1.12)
  Go version:       go1.16.12
  Git commit:       459d0df
  Built:            Mon Dec 13 11:44:05 2021
  OS/Arch:          linux/amd64
  Experimental:     false
 containerd:
  Version:          1.4.13
  GitCommit:        9cc61520f4cd876b86e77edfeb88fbcd536d1f9d
 runc:
  Version:          1.0.3
  GitCommit:        v1.0.3-0-gf46b6ba
 docker-init:
  Version:          0.19.0
  GitCommit:        de40ad0

docker-compose version 1.29.2, build 5becea4c
docker-py version: 5.0.0
CPython version: 3.7.10
OpenSSL version: OpenSSL 1.1.0l  10 Sep 2019

Followed the instructions exactly, but just got the error Kibana server is not ready yet. At the same time, the following prompt "Configuration missing" appears in the lower right corner
server.publicBaseUrl is missing and should be configured when running in a production environment. Some features may not behave correctly. See the documentation.”
Add server.publicBaseUrl="xxx" to kibana/config/kibana.yml, there is no prompt in the lower right corner, but the error Kibana server is not ready yet is still prompted。

# docker logs elk_kibana_1
[2022-03-10T10:00:56.888+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip]

edit: formatting (@antoineco)

@fictioner I see you didn't include the information requested in the issue template, so I'm unable to help you. For instance, I'm missing the output of docker-compose logs. To understand why Kibana is not ready I need to understand what's going on with other components (especially Elasticsearch).
Kind reminder that we typically close issues when the author doesn't make the effort to share the basic information we request, because it causes unnecessary round trips asking always the same questions over and over again:
<!--
Thanks for your issue report!

In order for us to be able to reproduce the problem and identify the root cause
quickly, we kindly ask you to include *all* the information requested below in
your issue report. It saves us a lot of effort and allows us to provide you
with a solution with as little delay as possible.

Issues submitted without the requested information will be closed.
Thank you for your understanding.
-->

Please include everything mentioned at https://github.com/deviantony/docker-elk/blob/main/.github/ISSUE_TEMPLATE/issue_report.md in the future.
The "configuration missing" warning is expected and can safely be ignored in the case of docker-elk. We could add server.publicBaseUrl=http://localhost:5601 to the Kibana config to suppress it, but it's not what's causing your problem here.
Again, please share your logs.

I have the same problem
[root@local docker-elk]# docker-compose logs
Attaching to docker-elk_kibana_1, docker-elk_logstash_1, docker-elk_elasticsearch_1, docker-elk_setup_1
kibana_1         | [2022-03-11T01:25:55.870+00:00][INFO ][plugins-service] Plugin "metricsEntities" is disabled.
kibana_1         | [2022-03-11T01:25:57.169+00:00][INFO ][http.server.Preboot] http server running at http://0.0.0.0:5601
kibana_1         | [2022-03-11T01:25:57.711+00:00][INFO ][plugins-system.preboot] Setting up [1] plugins: [interactiveSetup]
kibana_1         | [2022-03-11T01:25:58.038+00:00][WARN ][config.deprecation] The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false" to adopt the future behavior before upgrading.
kibana_1         | [2022-03-11T01:25:59.762+00:00][INFO ][plugins-system.standard] Setting up [107] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,mapsEms,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,ingestPipelines,fileUpload,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,expressionTagcloud,expressionMetricVis,savedObjectsManagement,console,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboard,maps,dashboardEnhanced,visualize,visTypeTimeseries,rollup,indexPatternFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexPatternManagement]
kibana_1         | [2022-03-11T01:26:00.251+00:00][INFO ][plugins.taskManager] TaskManager is identified by the Kibana UUID: f7036897-eb2c-403b-a6c1-26721fdc48c5
kibana_1         | [2022-03-11T01:26:02.389+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:02.410+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
kibana_1         | [2022-03-11T01:26:02.697+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:02.700+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
kibana_1         | [2022-03-11T01:26:02.964+00:00][WARN ][plugins.reporting.config] Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:02.977+00:00][WARN ][plugins.reporting.config] Found 'server.host: "0.0.0.0"' in Kibana configuration. Reporting is not able to use this as the Kibana server hostname. To enable PNG/PDF Reporting to work, 'xpack.reporting.kibanaServer.hostname: localhost' is automatically set in the configuration. You can prevent this message by adding 'xpack.reporting.kibanaServer.hostname: localhost' in kibana.yml.
kibana_1         | [2022-03-11T01:26:03.206+00:00][WARN ][plugins.encryptedSavedObjects] Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:03.377+00:00][WARN ][plugins.actions] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:03.751+00:00][WARN ][plugins.alerting] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T01:26:04.058+00:00][INFO ][plugins.ruleRegistry] Installing common resources shared between all indices
kibana_1         | [2022-03-11T01:26:12.725+00:00][INFO ][plugins.screenshotting.config] Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.
kibana_1         | [2022-03-11T01:26:38.794+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.18.0.3:9200
kibana_1         | [2022-03-11T01:27:17.434+00:00][INFO ][plugins.screenshotting.chromium] Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell
setup_1          | -------- Fri Mar 11 01:23:57 UTC 2022 --------
setup_1          | [+] Waiting for availability of Elasticsearch
logstash_1       | Using bundled JDK: /usr/share/logstash/jdk
logstash_1       | OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
elasticsearch_1  | Created elasticsearch keystore in /usr/share/elasticsearch/config/elasticsearch.keystore
elasticsearch_1  | {"@timestamp":"2022-03-11T01:26:22.441Z", "log.level": "INFO", "message":"version[8.0.1], pid[7], build[default/docker/801d9ccc7c2ee0f2cb121bbe22ab5af77a902372/2022-02-24T13:55:40.601285296Z], OS[Linux/3.10.0-1160.59.1.el7.x86_64/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:26:22.519Z", "log.level": "INFO", "message":"JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:26:22.545Z", "log.level": "INFO", "message":"JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-4653252052792349309, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xmx256m, -Xms256m, -XX:MaxDirectMemorySize=134217728, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.550Z", "log.level": "INFO", "message":"loaded module [aggs-matrix-stats]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.556Z", "log.level": "INFO", "message":"loaded module [analysis-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.557Z", "log.level": "INFO", "message":"loaded module [constant-keyword]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.566Z", "log.level": "INFO", "message":"loaded module [frozen-indices]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.567Z", "log.level": "INFO", "message":"loaded module [ingest-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.567Z", "log.level": "INFO", "message":"loaded module [ingest-geoip]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.583Z", "log.level": "INFO", "message":"loaded module [ingest-user-agent]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.584Z", "log.level": "INFO", "message":"loaded module [kibana]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.584Z", "log.level": "INFO", "message":"loaded module [lang-expression]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.585Z", "log.level": "INFO", "message":"loaded module [lang-mustache]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.585Z", "log.level": "INFO", "message":"loaded module [lang-painless]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.601Z", "log.level": "INFO", "message":"loaded module [legacy-geo]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.602Z", "log.level": "INFO", "message":"loaded module [mapper-extras]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.602Z", "log.level": "INFO", "message":"loaded module [mapper-version]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.617Z", "log.level": "INFO", "message":"loaded module [parent-join]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.622Z", "log.level": "INFO", "message":"loaded module [percolator]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.623Z", "log.level": "INFO", "message":"loaded module [rank-eval]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.623Z", "log.level": "INFO", "message":"loaded module [reindex]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.623Z", "log.level": "INFO", "message":"loaded module [repositories-metering-api]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.624Z", "log.level": "INFO", "message":"loaded module [repository-azure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.624Z", "log.level": "INFO", "message":"loaded module [repository-encrypted]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.624Z", "log.level": "INFO", "message":"loaded module [repository-gcs]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.625Z", "log.level": "INFO", "message":"loaded module [repository-s3]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.625Z", "log.level": "INFO", "message":"loaded module [repository-url]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.643Z", "log.level": "INFO", "message":"loaded module [runtime-fields-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.644Z", "log.level": "INFO", "message":"loaded module [search-business-rules]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.645Z", "log.level": "INFO", "message":"loaded module [searchable-snapshots]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.645Z", "log.level": "INFO", "message":"loaded module [snapshot-based-recoveries]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.645Z", "log.level": "INFO", "message":"loaded module [snapshot-repo-test-kit]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.646Z", "log.level": "INFO", "message":"loaded module [spatial]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.646Z", "log.level": "INFO", "message":"loaded module [transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.659Z", "log.level": "INFO", "message":"loaded module [transport-netty4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.660Z", "log.level": "INFO", "message":"loaded module [unsigned-long]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.661Z", "log.level": "INFO", "message":"loaded module [vector-tile]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.661Z", "log.level": "INFO", "message":"loaded module [vectors]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.669Z", "log.level": "INFO", "message":"loaded module [wildcard]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.670Z", "log.level": "INFO", "message":"loaded module [x-pack-aggregate-metric]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.671Z", "log.level": "INFO", "message":"loaded module [x-pack-analytics]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.671Z", "log.level": "INFO", "message":"loaded module [x-pack-async]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.672Z", "log.level": "INFO", "message":"loaded module [x-pack-async-search]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.672Z", "log.level": "INFO", "message":"loaded module [x-pack-autoscaling]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.719Z", "log.level": "INFO", "message":"loaded module [x-pack-ccr]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.721Z", "log.level": "INFO", "message":"loaded module [x-pack-core]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.721Z", "log.level": "INFO", "message":"loaded module [x-pack-data-streams]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.721Z", "log.level": "INFO", "message":"loaded module [x-pack-deprecation]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.722Z", "log.level": "INFO", "message":"loaded module [x-pack-enrich]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.722Z", "log.level": "INFO", "message":"loaded module [x-pack-eql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.722Z", "log.level": "INFO", "message":"loaded module [x-pack-fleet]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.723Z", "log.level": "INFO", "message":"loaded module [x-pack-graph]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.723Z", "log.level": "INFO", "message":"loaded module [x-pack-identity-provider]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.725Z", "log.level": "INFO", "message":"loaded module [x-pack-ilm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.725Z", "log.level": "INFO", "message":"loaded module [x-pack-logstash]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.726Z", "log.level": "INFO", "message":"loaded module [x-pack-ml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.726Z", "log.level": "INFO", "message":"loaded module [x-pack-monitoring]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.726Z", "log.level": "INFO", "message":"loaded module [x-pack-ql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.727Z", "log.level": "INFO", "message":"loaded module [x-pack-rollup]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.727Z", "log.level": "INFO", "message":"loaded module [x-pack-security]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.727Z", "log.level": "INFO", "message":"loaded module [x-pack-shutdown]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.728Z", "log.level": "INFO", "message":"loaded module [x-pack-sql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.728Z", "log.level": "INFO", "message":"loaded module [x-pack-stack]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.728Z", "log.level": "INFO", "message":"loaded module [x-pack-text-structure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.750Z", "log.level": "INFO", "message":"loaded module [x-pack-voting-only-node]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.750Z", "log.level": "INFO", "message":"loaded module [x-pack-watcher]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:23.769Z", "log.level": "INFO", "message":"no plugins loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:24.512Z", "log.level": "INFO", "message":"using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/vda1)]], net usable_space [27.1gb], net total_space [34.1gb], types [ext4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:24.513Z", "log.level": "INFO", "message":"heap size [256mb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T01:27:24.854Z", "log.level": "INFO", "message":"node name [4a96b58299c3], node ID [g_FMBEhuT4S9tMOWd71ihA], cluster name [docker-cluster], roles [data_frozen, ml, data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold, ingest]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a96b58299c3","elasticsearch.cluster.name":"docker-cluster"}

add docker-composer logs:
Attaching to elk_kibana_1, elk_logstash_1, elk_elasticsearch_1, elk_setup_1
logstash_1       | Using bundled JDK: /usr/share/logstash/jdk
logstash_1       | OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
logstash_1       | Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties
logstash_1       | [2022-03-11T02:01:38,442][INFO ][logstash.runner          ] Log4j configuration path used is: /usr/share/logstash/config/log4j2.properties
logstash_1       | [2022-03-11T02:01:38,457][INFO ][logstash.runner          ] Starting Logstash {"logstash.version"=>"8.0.1", "jruby.version"=>"jruby 9.2.20.1 (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.13+8 on 11.0.13+8 +indy +jit [linux-x86_64]"}
logstash_1       | [2022-03-11T02:01:38,460][INFO ][logstash.runner          ] JVM bootstrap flags: [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -Djruby.jit.threshold=0, -Djruby.regexp.interruptible=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED, -Dls.cgroup.cpuacct.path.override=/, -Dls.cgroup.cpu.path.override=/, -Xmx256m, -Xms256m]
logstash_1       | [2022-03-11T02:01:38,515][INFO ][logstash.settings        ] Creating directory {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"}
logstash_1       | [2022-03-11T02:01:38,533][INFO ][logstash.settings        ] Creating directory {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"}
logstash_1       | [2022-03-11T02:01:39,271][INFO ][logstash.agent           ] No persistent UUID file found. Generating new UUID {:uuid=>"a4e9e33d-63d3-4479-8261-b6d49a413a59", :path=>"/usr/share/logstash/data/uuid"}
logstash_1       | [2022-03-11T02:01:41,504][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600, :ssl_enabled=>false}
logstash_1       | [2022-03-11T02:01:42,957][INFO ][org.reflections.Reflections] Reflections took 91 ms to scan 1 urls, producing 120 keys and 417 values
logstash_1       | [2022-03-11T02:01:43,961][INFO ][logstash.javapipeline    ] Pipeline main is configured with pipeline.ecs_compatibility: v8 setting. All plugins in this pipeline will default to ecs_compatibility => v8 unless explicitly configured otherwise.
logstash_1       | [2022-03-11T02:01:44,017][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//elasticsearch:9200"]}
logstash_1       | [2022-03-11T02:01:44,341][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://logstash_internal:xxxxxx@elasticsearch:9200/]}}
logstash_1       | [2022-03-11T02:01:44,581][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:01:44,621][INFO ][logstash.outputs.elasticsearch][main] Config is compliant with data streams. data_stream => auto resolved to true
logstash_1       | [2022-03-11T02:01:44,626][WARN ][logstash.outputs.elasticsearch][main] Elasticsearch Output configured with ecs_compatibility => v8, which resolved to an UNRELEASED preview of version 8.0.0 of the Elastic Common Schema. Once ECS v8 and an updated release of this plugin are publicly available, you will need to update this plugin to resolve this warning.
logstash_1       | [2022-03-11T02:01:44,702][INFO ][logstash.javapipeline    ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>8, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>1000, "pipeline.sources"=>["/usr/share/logstash/pipeline/logstash.conf"], :thread=>"#<Thread:0x7b9488da run>"}
logstash_1       | [2022-03-11T02:01:45,655][INFO ][logstash.javapipeline    ][main] Pipeline Java execution initialization time {"seconds"=>0.95}
logstash_1       | [2022-03-11T02:01:45,682][INFO ][logstash.inputs.beats    ][main] Starting input listener {:address=>"0.0.0.0:5044"}
logstash_1       | [2022-03-11T02:01:45,909][INFO ][logstash.javapipeline    ][main] Pipeline started {"pipeline.id"=>"main"}
logstash_1       | [2022-03-11T02:01:45,915][INFO ][logstash.inputs.tcp      ][main][c15c0e9d24530a53e2530254c037deff8c49a2140c6b89c577cbcde717c01af0] Starting tcp input listener {:address=>"0.0.0.0:5000", :ssl_enable=>false}
logstash_1       | [2022-03-11T02:01:46,147][INFO ][logstash.agent           ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
logstash_1       | [2022-03-11T02:01:46,157][INFO ][org.logstash.beats.Server][main][27dfbb7f38dfc5bffbd7ce11deb78daf39a131fcbb4eceab2c6a1d7100069751] Starting server on port: 5044
logstash_1       | [2022-03-11T02:01:49,611][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:01:54,626][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:01:59,662][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:04,681][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:09,693][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:14,704][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:19,716][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:24,726][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:29,737][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:34,750][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:39,761][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:44,773][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:49,783][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:54,793][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:02:59,809][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:04,820][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:09,831][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:14,842][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:19,853][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:24,864][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
logstash_1       | [2022-03-11T02:03:29,875][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
kibana_1         | [2022-03-11T02:01:22.272+00:00][INFO ][plugins-service] Plugin "metricsEntities" is disabled.
kibana_1         | [2022-03-11T02:01:22.689+00:00][INFO ][http.server.Preboot] http server running at http://0.0.0.0:5601
kibana_1         | [2022-03-11T02:01:22.870+00:00][INFO ][plugins-system.preboot] Setting up [1] plugins: [interactiveSetup]
kibana_1         | [2022-03-11T02:01:22.986+00:00][WARN ][config.deprecation] The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false" to adopt the future behavior before upgrading.
kibana_1         | [2022-03-11T02:01:23.496+00:00][INFO ][plugins-system.standard] Setting up [107] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,mapsEms,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,ingestPipelines,fileUpload,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,expressionTagcloud,expressionMetricVis,savedObjectsManagement,console,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboard,maps,dashboardEnhanced,visualize,visTypeTimeseries,rollup,indexPatternFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexPatternManagement]
kibana_1         | [2022-03-11T02:01:23.615+00:00][INFO ][plugins.taskManager] TaskManager is identified by the Kibana UUID: bbf6b877-c2b2-4d0c-83b4-da4a55aba93d
kibana_1         | [2022-03-11T02:01:24.305+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.305+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
kibana_1         | [2022-03-11T02:01:24.474+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.475+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
kibana_1         | [2022-03-11T02:01:24.551+00:00][WARN ][plugins.reporting.config] Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.553+00:00][WARN ][plugins.reporting.config] Found 'server.host: "0.0.0.0"' in Kibana configuration. Reporting is not able to use this as the Kibana server hostname. To enable PNG/PDF Reporting to work, 'xpack.reporting.kibanaServer.hostname: localhost' is automatically set in the configuration. You can prevent this message by adding 'xpack.reporting.kibanaServer.hostname: localhost' in kibana.yml.
kibana_1         | [2022-03-11T02:01:24.586+00:00][WARN ][plugins.encryptedSavedObjects] Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.647+00:00][WARN ][plugins.actions] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.732+00:00][WARN ][plugins.alerting] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
kibana_1         | [2022-03-11T02:01:24.813+00:00][INFO ][plugins.ruleRegistry] Installing common resources shared between all indices
kibana_1         | [2022-03-11T02:01:26.929+00:00][INFO ][plugins.screenshotting.config] Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.
kibana_1         | [2022-03-11T02:01:32.958+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.18.0.3:9200
kibana_1         | [2022-03-11T02:01:38.763+00:00][INFO ][plugins.screenshotting.chromium] Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell
kibana_1         | [2022-03-11T02:01:42.214+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes..version%2Cnodes..http.publish_address%2Cnodes..ip]
setup_1          | -------- Fri Mar 11 02:00:56 UTC 2022 --------
setup_1          | [+] Waiting for availability of Elasticsearch
elasticsearch_1  | Created elasticsearch keystore in /usr/share/elasticsearch/config/elasticsearch.keystore
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:08.787Z", "log.level": "INFO", "message":"version[8.0.1], pid[7], build[default/docker/801d9ccc7c2ee0f2cb121bbe22ab5af77a902372/2022-02-24T13:55:40.601285296Z], OS[Linux/5.12.5-1.el7.elrepo.x86_64/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:08.796Z", "log.level": "INFO", "message":"JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:08.797Z", "log.level": "INFO", "message":"JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-3065925921021162167, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xmx256m, -Xms256m, -XX:MaxDirectMemorySize=134217728, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.133Z", "log.level": "INFO", "message":"loaded module [aggs-matrix-stats]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.133Z", "log.level": "INFO", "message":"loaded module [analysis-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [constant-keyword]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [frozen-indices]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [ingest-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [ingest-geoip]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [ingest-user-agent]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.134Z", "log.level": "INFO", "message":"loaded module [kibana]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.135Z", "log.level": "INFO", "message":"loaded module [lang-expression]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.135Z", "log.level": "INFO", "message":"loaded module [lang-mustache]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.135Z", "log.level": "INFO", "message":"loaded module [lang-painless]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.135Z", "log.level": "INFO", "message":"loaded module [legacy-geo]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.135Z", "log.level": "INFO", "message":"loaded module [mapper-extras]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.136Z", "log.level": "INFO", "message":"loaded module [mapper-version]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.136Z", "log.level": "INFO", "message":"loaded module [parent-join]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.136Z", "log.level": "INFO", "message":"loaded module [percolator]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.136Z", "log.level": "INFO", "message":"loaded module [rank-eval]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.136Z", "log.level": "INFO", "message":"loaded module [reindex]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.137Z", "log.level": "INFO", "message":"loaded module [repositories-metering-api]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.137Z", "log.level": "INFO", "message":"loaded module [repository-azure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.138Z", "log.level": "INFO", "message":"loaded module [repository-encrypted]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.138Z", "log.level": "INFO", "message":"loaded module [repository-gcs]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.138Z", "log.level": "INFO", "message":"loaded module [repository-s3]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.138Z", "log.level": "INFO", "message":"loaded module [repository-url]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.138Z", "log.level": "INFO", "message":"loaded module [runtime-fields-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.139Z", "log.level": "INFO", "message":"loaded module [search-business-rules]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.139Z", "log.level": "INFO", "message":"loaded module [searchable-snapshots]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.139Z", "log.level": "INFO", "message":"loaded module [snapshot-based-recoveries]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.139Z", "log.level": "INFO", "message":"loaded module [snapshot-repo-test-kit]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.139Z", "log.level": "INFO", "message":"loaded module [spatial]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [transport-netty4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [unsigned-long]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [vector-tile]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [vectors]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.140Z", "log.level": "INFO", "message":"loaded module [wildcard]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.141Z", "log.level": "INFO", "message":"loaded module [x-pack-aggregate-metric]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.141Z", "log.level": "INFO", "message":"loaded module [x-pack-analytics]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.141Z", "log.level": "INFO", "message":"loaded module [x-pack-async]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.141Z", "log.level": "INFO", "message":"loaded module [x-pack-async-search]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.141Z", "log.level": "INFO", "message":"loaded module [x-pack-autoscaling]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-ccr]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-core]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-data-streams]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-deprecation]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-enrich]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.142Z", "log.level": "INFO", "message":"loaded module [x-pack-eql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-fleet]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-graph]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-identity-provider]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-ilm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-logstash]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-ml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.143Z", "log.level": "INFO", "message":"loaded module [x-pack-monitoring]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-ql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-rollup]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-security]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-shutdown]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-sql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.144Z", "log.level": "INFO", "message":"loaded module [x-pack-stack]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.145Z", "log.level": "INFO", "message":"loaded module [x-pack-text-structure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.145Z", "log.level": "INFO", "message":"loaded module [x-pack-voting-only-node]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.145Z", "log.level": "INFO", "message":"loaded module [x-pack-watcher]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.146Z", "log.level": "INFO", "message":"no plugins loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.457Z", "log.level": "INFO", "message":"using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/mapper/centos-root)]], net usable_space [7.2gb], net total_space [19.5gb], types [ext4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.458Z", "log.level": "INFO", "message":"heap size [256mb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:16.656Z", "log.level": "INFO", "message":"node name [4a24e63f24a4], node ID [CNDudqWURumrFF1_RauZcg], cluster name [docker-cluster], roles [master, remote_cluster_client, data, data_cold, ingest, data_frozen, ml, data_hot, transform, data_content, data_warm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:30.652Z", "log.level": "INFO", "message":"[controller/611] [Main.cc@123] controller (64 bit): Version 8.0.1 (Build e8dee7fcd7a31a) Copyright (c) 2022 Elasticsearch BV", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"ml-cpp-log-tail-thread","log.logger":"org.elasticsearch.xpack.ml.process.logging.CppLogMessageHandler","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:31.114Z", "log.level": "INFO", "message":"Security is enabled", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.Security","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:31.867Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:31.888Z", "log.level": "INFO", "message":"parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authz.store.FileRolesStore","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:35.432Z", "log.level": "INFO", "message":"creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=1mb, factors={es.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=4mb, heap_size=256mb}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.netty4.NettyAllocator","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:35.491Z", "log.level": "INFO", "message":"using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.indices.recovery.RecoverySettings","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:35.580Z", "log.level": "INFO", "message":"using discovery type [single-node] and seed hosts providers [settings]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.discovery.DiscoveryModule","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:38.178Z", "log.level": "INFO", "message":"initialized", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:38.178Z", "log.level": "INFO", "message":"starting ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:38.227Z", "log.level": "INFO", "message":"persistent cache index loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.searchablesnapshots.cache.full.PersistentCache","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:38.228Z", "log.level": "INFO", "message":"deprecation component started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.deprecation.logging.DeprecationIndexingComponent","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:38.485Z", "log.level": "INFO", "message":"publish_address {172.18.0.3:9300}, bound_addresses {0.0.0.0:9300}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.TransportService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.136Z", "log.level": "WARN", "message":"max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.137Z", "log.level": "WARN", "message":"Transport SSL must be enabled if security is enabled. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled] to [false]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.139Z", "log.level": "INFO", "message":"cluster UUID [Y6MOEzkhSM2LuKa3erNYig]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.cluster.coordination.Coordinator","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.310Z", "log.level": "INFO", "message":"elected-as-master ([1] nodes joined)[{4a24e63f24a4}{CNDudqWURumrFF1_RauZcg}{8pvpR6TYTi-Jbcarkw5ROA}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw} elect leader, BECOME_MASTER_TASK, FINISH_ELECTION], term: 16, version: 185, delta: master node changed {previous [], current [{4a24e63f24a4}{CNDudqWURumrFF1_RauZcg}{8pvpR6TYTi-Jbcarkw5ROA}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw}]}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.MasterService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.507Z", "log.level": "INFO", "message":"master node changed {previous [], current [{4a24e63f24a4}{CNDudqWURumrFF1_RauZcg}{8pvpR6TYTi-Jbcarkw5ROA}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw}]}, term: 16, version: 185, reason: Publication{term=16, version=185}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.610Z", "log.level": "INFO", "message":"publish_address {172.18.0.3:9200}, bound_addresses {0.0.0.0:9200}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.http.AbstractHttpServerTransport","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.611Z", "log.level": "INFO", "message":"started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.836Z", "log.level": "INFO", "message":"license [d4a92361-fc47-4299-bac0-0b82dca79a9c] mode [trial] - valid", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.license.LicenseService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.837Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:39.848Z", "log.level": "INFO", "message":"recovered [2] indices into cluster_state", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.gateway.GatewayService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:40.794Z", "log.level": "INFO",  "current.health":"GREEN","message":"Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[.security-7][0], [.geoip_databases][0]]]).","previous.health":"RED","reason":"shards started [[.security-7][0], [.geoip_databases][0]]" , "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.routing.allocation.AllocationService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:41.430Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:41.449Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#1]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:41.555Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:42.835Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:43.150Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:43.745Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:46.184Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:46.249Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:46.344Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-3065925921021162167/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:46.344Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:47.941Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:48.758Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:51.238Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:52.129Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.036Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.134Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.219Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-3065925921021162167/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.219Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.226Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-3065925921021162167/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.226Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:53.738Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:56.237Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:58.132Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:01:58.738Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:01.244Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:03.243Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:03.740Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:06.241Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:08.337Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:08.742Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:11.278Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:13.428Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:13.745Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:16.245Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:18.516Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:18.744Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:21.245Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:23.604Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:23.747Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:26.248Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:28.694Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:28.750Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:31.250Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:33.753Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:33.783Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:36.252Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:38.753Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:38.871Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:41.254Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:43.757Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:43.961Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:46.255Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:48.759Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:49.052Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:51.256Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:53.757Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:54.143Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:56.259Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:58.761Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:02:59.230Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:01.260Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:03.760Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:04.318Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:06.261Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:08.779Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:09.405Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:11.263Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:13.764Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:14.496Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:16.265Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:18.765Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:19.582Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:21.266Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:23.767Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:24.671Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:26.276Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:28.768Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:29.760Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}
elasticsearch_1  | {"@timestamp":"2022-03-11T02:03:31.267Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4a24e63f24a4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4a24e63f24a4","elasticsearch.cluster.name":"docker-cluster"}

@since2006 in your logs, Elasticsearch hasn't finished starting yet.
@fictioner thanks!
The following message caught my attention:
elasticsearch_1 | {"@timestamp":"2022-03-11T02:53:03.081Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]"

The setup service is trying to set the password for kibana_system user by authenticating as elastic, but fails.
It is stuck on the message: Waiting for availability of Elasticsearch.
This means that the value of the ELASTIC_PASSWORD variables inside docker-compose.yml differ between the setup service and the elasticsearch service.

after 5 hours, still have the same problem
docker-compose logs
elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:22.807Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:25.309Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:27.810Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:30.310Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:32.810Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:35.311Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:37.812Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:40.311Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:42.812Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:45.312Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:47.813Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:50.314Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:52.814Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:55.316Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:07:57.816Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:00.315Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:02.815Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:05.316Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:07.816Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:10.316Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:12.817Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:15.317Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:17.818Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:20.318Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:22.818Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:25.318Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:27.819Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:30.320Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:32.821Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:35.324Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:37.825Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:40.325Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:42.825Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:45.325Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:47.824Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:50.325Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:52.826Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:55.324Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:08:57.825Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:00.325Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:02.838Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:05.325Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:07.830Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:10.331Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:12.831Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:15.330Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:17.830Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:20.330Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:22.831Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:25.331Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:27.831Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:30.331Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:32.835Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:35.331Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:37.833Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:40.333Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:42.832Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:45.333Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:47.833Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:50.334Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:52.834Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:55.335Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:09:57.835Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:00.336Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:02.837Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:05.337Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:07.837Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:10.337Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:12.838Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:15.338Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:17.839Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:20.341Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:22.844Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:25.343Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:27.848Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:30.349Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:32.849Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:35.349Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:37.848Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:40.349Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:42.850Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:45.350Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:47.851Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:50.351Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:52.852Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:55.353Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:10:57.855Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:00.355Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:02.855Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:05.355Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:07.855Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:10.356Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:12.857Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:15.357Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:17.857Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:20.357Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:22.858Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:25.357Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:27.857Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:30.359Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:32.859Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:35.360Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:37.859Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:40.359Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:42.859Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:45.359Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:47.860Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:50.363Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:52.861Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:55.362Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:11:57.862Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:00.368Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:02.869Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:05.369Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:07.869Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:10.370Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:12.871Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:15.371Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:17.871Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:20.371Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:22.870Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:25.370Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:27.870Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:30.371Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:32.872Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:35.377Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:37.877Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:40.377Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:42.880Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:45.386Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:47.885Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:50.390Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:52.891Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:55.390Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:12:57.891Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:00.392Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:02.893Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:05.393Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:07.893Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:10.394Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:12.894Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:15.393Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:17.894Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:20.394Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:22.894Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:25.394Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:27.898Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:30.397Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:32.897Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:35.397Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:37.898Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:40.399Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:42.899Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:45.399Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:47.900Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:50.401Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:52.901Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:55.402Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:13:57.903Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:00.414Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:02.903Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:05.403Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:07.902Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:10.403Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:12.903Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:15.402Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:17.915Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:20.416Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:22.915Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:25.416Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:27.915Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:30.416Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:32.916Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:35.416Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:37.916Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:40.416Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:42.922Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:45.422Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:47.923Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:50.423Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:52.923Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:55.423Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:14:57.923Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:00.422Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:02.922Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:05.423Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:07.923Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:10.423Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:12.927Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:15.428Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:17.927Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:20.427Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:22.928Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:25.430Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:27.931Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:30.431Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:32.931Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:35.431Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:37.932Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:40.437Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:42.940Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:45.441Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:47.947Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:50.447Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:52.948Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:55.446Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:15:57.947Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:00.448Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:02.954Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:05.454Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:07.956Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:10.456Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:12.957Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:15.458Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:17.962Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:20.468Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:22.967Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:25.467Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:27.968Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:30.469Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:32.969Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:35.468Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:37.969Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:40.469Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:42.970Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:45.471Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:47.974Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:50.475Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:52.975Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:55.477Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:16:57.987Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:00.478Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:02.979Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:05.479Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:07.982Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:10.480Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:12.986Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:15.487Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:17.987Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:20.488Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:22.988Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:25.488Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:27.989Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:30.493Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:33.004Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:35.504Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:38.004Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:40.505Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:43.005Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:45.505Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:48.007Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:50.507Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:53.007Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:55.507Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:17:58.007Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:00.508Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:03.008Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:05.509Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:08.010Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:10.510Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:13.010Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:15.510Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:18.010Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:20.511Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:23.012Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:25.513Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:28.013Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:30.513Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:33.013Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:35.512Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:38.011Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:40.512Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:43.013Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:45.512Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:48.011Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:50.515Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:53.012Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:55.512Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:18:58.012Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:00.513Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:03.014Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:05.515Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:08.014Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:10.514Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:13.015Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:15.514Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:18.015Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:20.515Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:23.014Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:25.523Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:28.014Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:30.515Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:33.016Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:35.516Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:38.016Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:40.516Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:43.016Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:45.516Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:48.016Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:50.520Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:53.020Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:55.520Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:19:58.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:00.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:03.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:05.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:08.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:10.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:13.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:15.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:18.022Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:20.520Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:23.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:25.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:28.022Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:30.524Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:33.024Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:35.525Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:38.025Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:40.535Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:43.037Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:45.537Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:48.038Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:50.537Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:53.038Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:55.539Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:20:58.039Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:00.539Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:03.043Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:05.540Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:08.040Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:10.541Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:13.042Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:15.542Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:18.042Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:20.542Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:23.042Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:25.544Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:28.044Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:30.550Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:33.053Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:35.553Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:38.057Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:40.558Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:43.057Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:45.558Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:48.059Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:50.558Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:53.059Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:55.559Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:21:58.061Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:00.561Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:03.062Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:05.562Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:08.062Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:10.570Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"} elasticsearch_1  | {"@timestamp":"2022-03-11T06:22:13.065Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] -er","process.thread.name":"elasticsearch[4a96b58299c3][transport_worker][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticse9c3","elasticsearch.cluster.name":"docker-cluster"}

@since2006 what does docker-compose up setup print?

Starting docker-elk_setup_1 ... done
Attaching to docker-elk_setup_1
setup_1          | -------- Fri Mar 11 06:48:44 UTC 2022 --------
setup_1          | [+] Waiting for availability of Elasticsearch
setup_1          |    ⠿ Elasticsearch is running
setup_1          | [+] Role 'logstash_writer'
setup_1          |    ⠿ Creating/updating
setup_1          | [+] User 'kibana_system'
setup_1          |    ⠿ User exists, setting password
setup_1          | [+] User 'logstash_internal'
setup_1          |    ⠿ User does not exist, creating
docker-elk_setup_1 exited with code 0

@since2006 setup runs by default along with other components when you start the stack.
There is usually no need to run it manually. But In your case, it probably timed out because Elasticsearch was taking a long time to start.

@since2006 in your logs, Elasticsearch hasn't finished starting yet.
@fictioner thanks! The following message caught my attention:
elasticsearch_1 | {"@timestamp":"2022-03-11T02:53:03.081Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]"

The setup service is trying to set the password for kibana_system user by authenticating as elastic, but fails. It is stuck on the message: Waiting for availability of Elasticsearch.
This means that the value of the ELASTIC_PASSWORD variables inside docker-compose.yml differ between the setup service and the elasticsearch service.
https://github.com/deviantony/docker-elk/blob/12dc0a4b74b2e983af36e4e2b04cead202427e85/docker-compose.yml#L20-L21
https://github.com/deviantony/docker-elk/blob/12dc0a4b74b2e983af36e4e2b04cead202427e85/docker-compose.yml#L38-L43
The value ${ELASTIC_PASSWORD:-} indicates that the value comes from the .env file, but in your case, I suspect that this value is different in the two services.

But I directly git clone to the local and operate according to the document, without making any other modifications.
docker-compose build
docker-compose up -d```
Just these three steps, but can't get in.

@fictioner interesting.
What does docker-compose config print?

@fictioner interesting.
What does docker-compose config print?
And what about docker-compose up setup? Maybe it's the same issue as @since2006 had, in which case I need to increase the default timeout.

docker-compose config:
networks:
  elk:
    driver: bridge
services:
  elasticsearch:
    build:
      args:
        ELASTIC_VERSION: 8.0.1
      context: /root/elk/elasticsearch
    environment:
      ELASTIC_PASSWORD: changeme
      ES_JAVA_OPTS: -Xmx256m -Xms256m
      discovery.type: single-node
    networks:
      elk: null
    ports:
    - published: 9200
      target: 9200
    - published: 9300
      target: 9300
    volumes:
    - /root/elk/elasticsearch/config/elasticsearch.yml:/usr/share/elasticsearch/config/elasticsearch.yml:ro,z
    - elasticsearch:/usr/share/elasticsearch/data:z
  kibana:
    build:
      args:
        ELASTIC_VERSION: 8.0.1
      context: /root/elk/kibana
    depends_on:
      elasticsearch:
        condition: service_started
    environment:
      KIBANA_SYSTEM_PASSWORD: changeme
    networks:
      elk: null
    ports:
    - published: 5601
      target: 5601
    volumes:
    - /root/elk/kibana/config/kibana.yml:/usr/share/kibana/config/kibana.yml:ro,Z
  logstash:
    build:
      args:
        ELASTIC_VERSION: 8.0.1
      context: /root/elk/logstash
    depends_on:
      elasticsearch:
        condition: service_started
    environment:
      LOGSTASH_INTERNAL_PASSWORD: changeme
      LS_JAVA_OPTS: -Xmx256m -Xms256m
    networks:
      elk: null
    ports:
    - published: 5044
      target: 5044
    - protocol: tcp
      published: 5000
      target: 5000
    - protocol: udp
      published: 5000
      target: 5000
    - published: 9600
      target: 9600
    volumes:
    - /root/elk/logstash/config/logstash.yml:/usr/share/logstash/config/logstash.yml:ro,Z
    - /root/elk/logstash/pipeline:/usr/share/logstash/pipeline:ro,Z
  setup:
    build:
      args:
        ELASTIC_VERSION: 8.0.1
      context: /root/elk/setup
    environment:
      ELASTIC_PASSWORD: changeme
      KIBANA_SYSTEM_PASSWORD: changeme
      LOGSTASH_INTERNAL_PASSWORD: changeme
    init: true
    networks:
      elk: null
    volumes:
    - setup:/state:Z
version: '3.7'
volumes:
  elasticsearch: {}
  setup: {}

docker-compose up setup:
Starting elk_setup_1 ... done
Attaching to elk_setup_1
setup_1          | -------- Fri Mar 11 08:52:52 UTC 2022 --------
setup_1          | [+] Waiting for availability of Elasticsearch

There you go. The setup container` doesn't seem to be able to authenticate with Elasticsearch.
After a while, it will print an error. I'm interested in seeing that error.

There you go. The setup container doesn't seem to be able to authenticate with Elasticsearch. After 5 minutes, it will print an error. I'm interested in seeing that error.

think reply。remove repeat line：
···
Attaching to elk_logstash_1, elk_kibana_1, elk_elasticsearch_1, elk_setup_1
36melasticsearch_1  |0m Created elasticsearch keystore in /usr/share/elasticsearch/config/elasticsearch.keystore
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:31:56.777Z", "log.level": "INFO", "message":"version[8.0.1], pid[8], build[default/docker/801d9ccc7c2ee0f2cb121bbe22ab5af77a902372/2022-02-24T13:55:40.601285296Z], OS[Linux/5.12.5-1.el7.elrepo.x86_64/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:31:56.788Z", "log.level": "INFO", "message":"JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:31:56.793Z", "log.level": "INFO", "message":"JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-4596723164211842085, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Des.cgroups.hierarchy.override=/, -Xmx256m, -Xms256m, -XX:MaxDirectMemorySize=134217728, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/usr/share/elasticsearch/config, -Des.distribution.flavor=default, -Des.distribution.type=docker, -Des.bundled_jdk=true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.036Z", "log.level": "INFO", "message":"loaded module [aggs-matrix-stats]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.036Z", "log.level": "INFO", "message":"loaded module [analysis-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.037Z", "log.level": "INFO", "message":"loaded module [constant-keyword]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.037Z", "log.level": "INFO", "message":"loaded module [frozen-indices]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.037Z", "log.level": "INFO", "message":"loaded module [ingest-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [ingest-geoip]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [ingest-user-agent]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [kibana]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [lang-expression]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [lang-mustache]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.038Z", "log.level": "INFO", "message":"loaded module [lang-painless]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.039Z", "log.level": "INFO", "message":"loaded module [legacy-geo]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.039Z", "log.level": "INFO", "message":"loaded module [mapper-extras]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.039Z", "log.level": "INFO", "message":"loaded module [mapper-version]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.039Z", "log.level": "INFO", "message":"loaded module [parent-join]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.039Z", "log.level": "INFO", "message":"loaded module [percolator]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.040Z", "log.level": "INFO", "message":"loaded module [rank-eval]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.040Z", "log.level": "INFO", "message":"loaded module [reindex]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.041Z", "log.level": "INFO", "message":"loaded module [repositories-metering-api]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.041Z", "log.level": "INFO", "message":"loaded module [repository-azure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.042Z", "log.level": "INFO", "message":"loaded module [repository-encrypted]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.042Z", "log.level": "INFO", "message":"loaded module [repository-gcs]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.042Z", "log.level": "INFO", "message":"loaded module [repository-s3]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.042Z", "log.level": "INFO", "message":"loaded module [repository-url]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.043Z", "log.level": "INFO", "message":"loaded module [runtime-fields-common]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.043Z", "log.level": "INFO", "message":"loaded module [search-business-rules]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.043Z", "log.level": "INFO", "message":"loaded module [searchable-snapshots]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.043Z", "log.level": "INFO", "message":"loaded module [snapshot-based-recoveries]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.043Z", "log.level": "INFO", "message":"loaded module [snapshot-repo-test-kit]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [spatial]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [transform]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [transport-netty4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [unsigned-long]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [vector-tile]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.044Z", "log.level": "INFO", "message":"loaded module [vectors]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.045Z", "log.level": "INFO", "message":"loaded module [wildcard]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.045Z", "log.level": "INFO", "message":"loaded module [x-pack-aggregate-metric]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.045Z", "log.level": "INFO", "message":"loaded module [x-pack-analytics]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.045Z", "log.level": "INFO", "message":"loaded module [x-pack-async]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.045Z", "log.level": "INFO", "message":"loaded module [x-pack-async-search]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-autoscaling]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-ccr]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-core]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-data-streams]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-deprecation]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.046Z", "log.level": "INFO", "message":"loaded module [x-pack-enrich]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.047Z", "log.level": "INFO", "message":"loaded module [x-pack-eql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.047Z", "log.level": "INFO", "message":"loaded module [x-pack-fleet]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.047Z", "log.level": "INFO", "message":"loaded module [x-pack-graph]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.047Z", "log.level": "INFO", "message":"loaded module [x-pack-identity-provider]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.049Z", "log.level": "INFO", "message":"loaded module [x-pack-ilm]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.049Z", "log.level": "INFO", "message":"loaded module [x-pack-logstash]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-ml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-monitoring]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-ql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-rollup]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-security]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.050Z", "log.level": "INFO", "message":"loaded module [x-pack-shutdown]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.051Z", "log.level": "INFO", "message":"loaded module [x-pack-sql]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.051Z", "log.level": "INFO", "message":"loaded module [x-pack-stack]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.051Z", "log.level": "INFO", "message":"loaded module [x-pack-text-structure]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.051Z", "log.level": "INFO", "message":"loaded module [x-pack-voting-only-node]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.051Z", "log.level": "INFO", "message":"loaded module [x-pack-watcher]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.052Z", "log.level": "INFO", "message":"no plugins loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.plugins.PluginsService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.132Z", "log.level": "INFO", "message":"using [1] data paths, mounts [[/usr/share/elasticsearch/data (/dev/mapper/centos-root)]], net usable_space [7.2gb], net total_space [19.5gb], types [ext4]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.133Z", "log.level": "INFO", "message":"heap size [256mb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:03.332Z", "log.level": "INFO", "message":"node name [4b76818433d4], node ID [CNDudqWURumrFF1_RauZcg], cluster name [docker-cluster], roles [ingest, data_frozen, ml, data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:13.077Z", "log.level": "INFO", "message":"[controller/611] [Main.cc@123] controller (64 bit): Version 8.0.1 (Build e8dee7fcd7a31a) Copyright (c) 2022 Elasticsearch BV", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"ml-cpp-log-tail-thread","log.logger":"org.elasticsearch.xpack.ml.process.logging.CppLogMessageHandler","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:13.499Z", "log.level": "INFO", "message":"Security is enabled", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.Security","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:14.005Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:14.023Z", "log.level": "INFO", "message":"parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authz.store.FileRolesStore","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:16.968Z", "log.level": "INFO", "message":"creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=1mb, factors={es.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=4mb, heap_size=256mb}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.netty4.NettyAllocator","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:17.027Z", "log.level": "INFO", "message":"using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.indices.recovery.RecoverySettings","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:17.102Z", "log.level": "INFO", "message":"using discovery type [single-node] and seed hosts providers [settings]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.discovery.DiscoveryModule","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:19.296Z", "log.level": "INFO", "message":"initialized", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:19.296Z", "log.level": "INFO", "message":"starting ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:19.319Z", "log.level": "INFO", "message":"persistent cache index loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.searchablesnapshots.cache.full.PersistentCache","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:19.321Z", "log.level": "INFO", "message":"deprecation component started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.deprecation.logging.DeprecationIndexingComponent","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:19.521Z", "log.level": "INFO", "message":"publish_address {172.18.0.3:9300}, bound_addresses {0.0.0.0:9300}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.TransportService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.222Z", "log.level": "WARN", "message":"max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.222Z", "log.level": "WARN", "message":"Transport SSL must be enabled if security is enabled. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled] to [false]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.223Z", "log.level": "INFO", "message":"cluster UUID [Y6MOEzkhSM2LuKa3erNYig]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.cluster.coordination.Coordinator","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.399Z", "log.level": "INFO", "message":"elected-as-master ([1] nodes joined)[{4b76818433d4}{CNDudqWURumrFF1_RauZcg}{Fu1ssVbaTD2hNcB8XslJ4A}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw} elect leader, BECOME_MASTER_TASK, FINISH_ELECTION], term: 20, version: 222, delta: master node changed {previous [], current [{4b76818433d4}{CNDudqWURumrFF1_RauZcg}{Fu1ssVbaTD2hNcB8XslJ4A}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw}]}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.MasterService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.595Z", "log.level": "INFO", "message":"master node changed {previous [], current [{4b76818433d4}{CNDudqWURumrFF1_RauZcg}{Fu1ssVbaTD2hNcB8XslJ4A}{172.18.0.3}{172.18.0.3:9300}{cdfhilmrstw}]}, term: 20, version: 222, reason: Publication{term=20, version=222}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.722Z", "log.level": "INFO", "message":"publish_address {172.18.0.3:9200}, bound_addresses {0.0.0.0:9200}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.http.AbstractHttpServerTransport","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:20.723Z", "log.level": "INFO", "message":"started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:21.012Z", "log.level": "INFO", "message":"license [d4a92361-fc47-4299-bac0-0b82dca79a9c] mode [trial] - valid", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.license.LicenseService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:21.013Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:21.034Z", "log.level": "INFO", "message":"recovered [2] indices into cluster_state", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.gateway.GatewayService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:22.057Z", "log.level": "INFO",	"current.health":"GREEN","message":"Cluster health status changed from [RED] to [GREEN] (reason: [shards started [[.security-7][0], [.geoip_databases][0]]]).","previous.health":"RED","reason":"shards started [[.security-7][0], [.geoip_databases][0]]" , "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.routing.allocation.AllocationService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:22.831Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:22.979Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:23.037Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:24.362Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#5]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:25.031Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:25.297Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:25.308Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:25.412Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-4596723164211842085/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:25.413Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-ASN.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:27.513Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:29.342Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.005Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.043Z", "log.level": "INFO", "message":"successfully downloaded geoip database [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#2]","log.logger":"org.elasticsearch.ingest.geoip.GeoIpDownloader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.114Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-4596723164211842085/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.115Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-Country.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#4]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.387Z", "log.level": "INFO", "message":"evicted [0] entries from cache after reloading database [/tmp/elasticsearch-4596723164211842085/geoip-databases/CNDudqWURumrFF1_RauZcg/GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseReaderLazyLoader","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.388Z", "log.level": "INFO", "message":"successfully loaded geoip database file [GeoLite2-City.mmdb]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][generic][T#3]","log.logger":"org.elasticsearch.ingest.geoip.DatabaseNodeService","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:30.415Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:32.498Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:34.996Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:35.506Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:37.495Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:39.997Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:40.595Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:42.498Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:45.000Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:45.685Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:47.502Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:50.002Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:50.776Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:52.503Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:55.004Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:55.866Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:32:57.504Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:00.013Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:00.957Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:02.506Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:05.007Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:06.046Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:07.507Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:10.008Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:11.134Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:12.509Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:15.009Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:16.223Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:17.511Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:20.011Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:21.310Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:22.512Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:25.012Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:26.400Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:27.515Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:30.014Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:31.490Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:32.516Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:35.015Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:36.579Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:37.516Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:40.015Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:41.667Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:42.518Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:45.020Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:46.756Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:47.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:50.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:51.846Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:52.520Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:55.021Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:56.934Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:33:57.521Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:00.024Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:02.022Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:02.525Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:05.027Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:07.111Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:07.526Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:10.026Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:12.200Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:12.527Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:15.029Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:17.288Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:17.529Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:20.030Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:22.381Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:22.531Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:25.033Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:27.472Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:27.534Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:30.032Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:32.536Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:32.563Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:35.033Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:37.534Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:37.654Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:40.035Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:42.535Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:42.743Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:45.035Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:47.535Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:47.831Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:50.035Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:52.537Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:52.919Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:55.036Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:57.538Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:34:58.006Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:00.042Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:02.542Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:03.095Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:05.042Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:07.542Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:08.183Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:10.045Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:12.545Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:13.273Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:15.046Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:17.547Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:18.362Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:20.048Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:22.550Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:23.450Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:25.049Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:27.551Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:28.538Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:30.053Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:32.552Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:33.625Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:35.055Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:37.554Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:38.713Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:40.055Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:42.558Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:43.804Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:45.061Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:47.560Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:48.895Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:50.061Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:52.560Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:53.987Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:55.063Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:57.564Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:35:59.078Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:00.065Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:02.566Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:04.166Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:05.065Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:07.567Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:09.259Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:10.066Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:12.570Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:14.350Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:15.069Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:17.570Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:19.440Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:20.071Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:22.570Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:24.529Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:25.072Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:27.572Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:29.616Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:30.074Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:32.574Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:34.704Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:35.075Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:37.577Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:39.792Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:40.076Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:42.577Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#3]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:44.879Z", "log.level": "INFO", "message":"Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:45.077Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:47.577Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#4]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:50.079Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
36melasticsearch_1  |0m {"@timestamp":"2022-03-15T02:36:52.580Z", "log.level": "INFO", "message":"Authentication of [kibana_system] was terminated by realm [reserved] - failed to authenticate user [kibana_system]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[4b76818433d4][system_critical_read][T#2]","log.logger":"org.elasticsearch.xpack.security.authc.RealmsAuthenticator","elasticsearch.cluster.uuid":"Y6MOEzkhSM2LuKa3erNYig","elasticsearch.node.id":"CNDudqWURumrFF1_RauZcg","elasticsearch.node.name":"4b76818433d4","elasticsearch.cluster.name":"docker-cluster"}
35msetup_1	    |0m -------- Tue Mar 15 02:31:43 UTC 2022 --------
35msetup_1	    |0m [+] Waiting for availability of Elasticsearch
35msetup_1	    |0m
35msetup_1	    |0m HTTP/1.1 401 Unauthorized
35msetup_1	    |0m WWW-Authenticate: Basic realm="security" charset="UTF-8"
35msetup_1	    |0m WWW-Authenticate: ApiKey
35msetup_1	    |0m content-type: application/json;charset=utf-8
35msetup_1	    |0m content-length: 409
35msetup_1	    |0m
35msetup_1	    |0m {"error":{"root_cause":[{"type":"security_exception","reason":"unable to authenticate user [elastic] for REST request [/]","header":{"WWW-Authenticate":["Basic realm="security" charset="UTF-8"","ApiKey"]}}],"type":"security_exception","reason":"unable to authenticate user [elastic] for REST request [/]","header":{"WWW-Authenticate":["Basic realm="security" charset="UTF-8"","ApiKey"]}},"status":401}
33mkibana_1	    |0m [2022-03-15T02:32:07.983+00:00][INFO ][plugins-service] Plugin "metricsEntities" is disabled.
33mkibana_1	    |0m [2022-03-15T02:32:08.218+00:00][INFO ][http.server.Preboot] http server running at http://0.0.0.0:5601
33mkibana_1	    |0m [2022-03-15T02:32:08.313+00:00][INFO ][plugins-system.preboot] Setting up [1] plugins: [interactiveSetup]
33mkibana_1	    |0m [2022-03-15T02:32:08.422+00:00][WARN ][config.deprecation] The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false" to adopt the future behavior before upgrading.
33mkibana_1	    |0m [2022-03-15T02:32:08.807+00:00][INFO ][plugins-system.standard] Setting up [107] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,licenseApiGuard,usageCollection,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced,screenshotMode,screenshotting,banners,telemetry,newsfeed,mapsEms,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,lists,ingestPipelines,fileUpload,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,visualizations,canvas,visTypeXy,visTypeVislib,visTypeVega,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,expressionTagcloud,expressionMetricVis,savedObjectsManagement,console,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboard,maps,dashboardEnhanced,visualize,visTypeTimeseries,rollup,indexPatternFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,indexPatternManagement]
33mkibana_1	    |0m [2022-03-15T02:32:08.906+00:00][INFO ][plugins.taskManager] TaskManager is identified by the Kibana UUID: 61f4c0d0-e4eb-467d-9169-9fce9742c778
33mkibana_1	    |0m [2022-03-15T02:32:09.300+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.302+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
33mkibana_1	    |0m [2022-03-15T02:32:09.376+00:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.377+00:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
33mkibana_1	    |0m [2022-03-15T02:32:09.420+00:00][WARN ][plugins.reporting.config] Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.422+00:00][WARN ][plugins.reporting.config] Found 'server.host: "0.0.0.0"' in Kibana configuration. Reporting is not able to use this as the Kibana server hostname. To enable PNG/PDF Reporting to work, 'xpack.reporting.kibanaServer.hostname: localhost' is automatically set in the configuration. You can prevent this message by adding 'xpack.reporting.kibanaServer.hostname: localhost' in kibana.yml.
33mkibana_1	    |0m [2022-03-15T02:32:09.439+00:00][WARN ][plugins.encryptedSavedObjects] Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.466+00:00][WARN ][plugins.actions] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.497+00:00][WARN ][plugins.alerting] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
33mkibana_1	    |0m [2022-03-15T02:32:09.532+00:00][INFO ][plugins.ruleRegistry] Installing common resources shared between all indices
33mkibana_1	    |0m [2022-03-15T02:32:11.130+00:00][INFO ][plugins.screenshotting.config] Chromium sandbox provides an additional layer of protection, and is supported for Linux Ubuntu 20.04 OS. Automatically enabling Chromium sandbox.
33mkibana_1	    |0m [2022-03-15T02:32:16.365+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 172.18.0.3:9200
33mkibana_1	    |0m [2022-03-15T02:32:22.210+00:00][INFO ][plugins.screenshotting.chromium] Browser executable: /usr/share/kibana/x-pack/plugins/screenshotting/chromium/headless_shell-linux_x64/headless_shell
33mkibana_1	    |0m [2022-03-15T02:32:23.733+00:00][ERROR][elasticsearch-service] Unable to retrieve version information from Elasticsearch nodes. security_exception: [security_exception] Reason: unable to authenticate user [kibana_system] for REST request [/_nodes?filter_path=nodes..version%2Cnodes..http.publish_address%2Cnodes.*.ip]
32mlogstash_1	    |0m Using bundled JDK: /usr/share/logstash/jdk
32mlogstash_1	    |0m OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 and will likely be removed in a future release.
32mlogstash_1	    |0m Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties
32mlogstash_1	    |0m [2022-03-15T02:32:20,474][INFO ][logstash.runner	  ] Log4j configuration path used is: /usr/share/logstash/config/log4j2.properties
32mlogstash_1	    |0m [2022-03-15T02:32:20,507][INFO ][logstash.runner	  ] Starting Logstash {"logstash.version"=>"8.0.1", "jruby.version"=>"jruby 9.2.20.1 (2.5.8) 2021-11-30 2a2962fbd1 OpenJDK 64-Bit Server VM 11.0.13+8 on 11.0.13+8 +indy +jit [linux-x86_64]"}
32mlogstash_1	    |0m [2022-03-15T02:32:20,512][INFO ][logstash.runner	  ] JVM bootstrap flags: [-Xms1g, -Xmx1g, -XX:+UseConcMarkSweepGC, -XX:CMSInitiatingOccupancyFraction=75, -XX:+UseCMSInitiatingOccupancyOnly, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -Djruby.jit.threshold=0, -Djruby.regexp.interruptible=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED, -Dls.cgroup.cpuacct.path.override=/, -Dls.cgroup.cpu.path.override=/, -Xmx256m, -Xms256m]
32mlogstash_1	    |0m [2022-03-15T02:32:20,593][INFO ][logstash.settings	  ] Creating directory {:setting=>"path.queue", :path=>"/usr/share/logstash/data/queue"}
32mlogstash_1	    |0m [2022-03-15T02:32:20,614][INFO ][logstash.settings	  ] Creating directory {:setting=>"path.dead_letter_queue", :path=>"/usr/share/logstash/data/dead_letter_queue"}
32mlogstash_1	    |0m [2022-03-15T02:32:21,328][INFO ][logstash.agent		  ] No persistent UUID file found. Generating new UUID {:uuid=>"e88227ac-cf8a-4589-8e0c-6098548c4b58", :path=>"/usr/share/logstash/data/uuid"}
32mlogstash_1	    |0m [2022-03-15T02:32:23,675][INFO ][logstash.agent		  ] Successfully started Logstash API endpoint {:port=>9600, :ssl_enabled=>false}
32mlogstash_1	    |0m [2022-03-15T02:32:24,945][INFO ][org.reflections.Reflections] Reflections took 102 ms to scan 1 urls, producing 120 keys and 417 values
32mlogstash_1	    |0m [2022-03-15T02:32:26,075][INFO ][logstash.javapipeline	  ] Pipeline main is configured with pipeline.ecs_compatibility: v8 setting. All plugins in this pipeline will default to ecs_compatibility => v8 unless explicitly configured otherwise.
32mlogstash_1	    |0m [2022-03-15T02:32:26,202][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["//elasticsearch:9200"]}
32mlogstash_1	    |0m [2022-03-15T02:32:26,659][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://logstash_internal:xxxxxx@elasticsearch:9200/]}}
32mlogstash_1	    |0m [2022-03-15T02:32:26,936][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
32mlogstash_1	    |0m [2022-03-15T02:32:26,972][INFO ][logstash.outputs.elasticsearch][main] Config is compliant with data streams. data_stream => auto resolved to true
32mlogstash_1	    |0m [2022-03-15T02:32:26,976][WARN ][logstash.outputs.elasticsearch][main] Elasticsearch Output configured with ecs_compatibility => v8, which resolved to an UNRELEASED preview of version 8.0.0 of the Elastic Common Schema. Once ECS v8 and an updated release of this plugin are publicly available, you will need to update this plugin to resolve this warning.
32mlogstash_1	    |0m [2022-03-15T02:32:27,057][INFO ][logstash.javapipeline	  ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>8, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>1000, "pipeline.sources"=>["/usr/share/logstash/pipeline/logstash.conf"], :thread=>"#<Thread:0x18337afa run>"}
32mlogstash_1	    |0m [2022-03-15T02:32:28,119][INFO ][logstash.javapipeline	  ][main] Pipeline Java execution initialization time {"seconds"=>1.06}
32mlogstash_1	    |0m [2022-03-15T02:32:28,330][INFO ][logstash.inputs.beats	  ][main] Starting input listener {:address=>"0.0.0.0:5044"}
32mlogstash_1	    |0m [2022-03-15T02:32:28,347][INFO ][logstash.javapipeline	  ][main] Pipeline started {"pipeline.id"=>"main"}
32mlogstash_1	    |0m [2022-03-15T02:32:28,370][INFO ][logstash.inputs.tcp	  ][main][c15c0e9d24530a53e2530254c037deff8c49a2140c6b89c577cbcde717c01af0] Starting tcp input listener {:address=>"0.0.0.0:5000", :ssl_enable=>false}
32mlogstash_1	    |0m [2022-03-15T02:32:28,406][INFO ][org.logstash.beats.Server][main][27dfbb7f38dfc5bffbd7ce11deb78daf39a131fcbb4eceab2c6a1d7100069751] Starting server on port: 5044
32mlogstash_1	    |0m [2022-03-15T02:32:28,600][INFO ][logstash.agent		  ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
32mlogstash_1	    |0m [2022-03-15T02:32:31,964][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
32mlogstash_1	    |0m [2022-03-15T02:32:36,976][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
32mlogstash_1	    |0m [2022-03-15T02:32:41,988][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
32mlogstash_1	    |0m [2022-03-15T02:32:46,999][WARN ][logstash.outputs.elasticsearch][main] Attempted to resurrect connection to dead ES instance, but got an error {:url=>"http://logstash_internal:xxxxxx@elasticsearch:9200/", :exception=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError, :message=>"Got response code '401' contacting Elasticsearch at URL 'http://elasticsearch:9200/'"}
···

@fictioner to me it seems like the stack was already started in the past, with another password, and that password is still persisted inside Elasticsearch's data volume (removing the repository is not enough, you also need to remove Docker volumes, as indicated in the README).
The simplest solution for you is to run docker-compose down -v and try again.

Thank you very much！
docker-compose down -v

That's the problem. It's because I changed the password before and didn't clean up the volumes.

authors: antoineco fictioner since2006

repo: deviantony/docker-elk