Cluster health changing from GREEN to RED

I am running elastic cluster on kubernetes

Master Logs

{"@timestamp":"2022-06-11T06:31:02.487Z", "log.level": "INFO", "message":"transport connection to [{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d}] closed by remote", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][transport_worker][T#7]","log.logger":"org.elasticsearch.transport.ClusterConnectionManager","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.488Z", "log.level": "INFO", "message":"close connection exception caught on transport layer [Netty4TcpChannel{localAddress=/10.244.1.57:42194, remoteAddress=10.244.2.154/10.244.2.154:9300, profile=default}], disconnecting from relevant node: Connection reset", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][transport_worker][T#5]","log.logger":"org.elasticsearch.transport.TcpTransport","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.488Z", "log.level": "INFO", "message":"close connection exception caught on transport layer [Netty4TcpChannel{localAddress=/10.244.1.57:42202, remoteAddress=10.244.2.154/10.244.2.154:9300, profile=default}], disconnecting from relevant node: Connection reset", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][transport_worker][T#6]","log.logger":"org.elasticsearch.transport.TcpTransport","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.488Z", "log.level": "INFO", "message":"close connection exception caught on transport layer [Netty4TcpChannel{localAddress=/10.244.1.57:42190, remoteAddress=10.244.2.154/10.244.2.154:9300, profile=default}], disconnecting from relevant node: Connection reset", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][transport_worker][T#3]","log.logger":"org.elasticsearch.transport.TcpTransport","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.488Z", "log.level": "INFO", "message":"close connection exception caught on transport layer [Netty4TcpChannel{localAddress=/10.244.1.57:42192, remoteAddress=10.244.2.154/10.244.2.154:9300, profile=default}], disconnecting from relevant node: Connection reset", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][transport_worker][T#4]","log.logger":"org.elasticsearch.transport.TcpTransport","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.492Z", "log.level": "INFO",  "current.health":"RED","message":"Cluster health status changed from [GREEN] to [RED] (reason: [{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d} reason: disconnected]).","previous.health":"GREEN","reason":"{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d} reason: disconnected" , "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.routing.allocation.AllocationService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.494Z", "log.level": "INFO", "message":"node-left[{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d} reason: disconnected], term: 1, version: 71, delta: removed {{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d}}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.MasterService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.502Z", "log.level": "INFO", "message":"removed {{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb_g7GXQyQ}{10.244.2.154}{10.244.2.154:9300}{d}}, term: 1, version: 71, reason: Publication{term=1, version=71}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.505Z", "log.level": "INFO", "message":"scheduling reroute for delayed shards in [59.9s] (12 delayed shards)", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.routing.DelayedAllocationService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.513Z", "log.level": "INFO", "message":"moving index [.ds-ilm-history-5-2022.06.11-000001] from [{\"phase\":\"new\",\"action\":\"complete\",\"name\":\"complete\"}] to [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] in policy [ilm-history-ilm-policy]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.ilm.IndexLifecycleTransition","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:02.525Z", "log.level": "INFO", "message":"moving index [.ds-ilm-history-5-2022.06.11-000001] from [{\"phase\":\"hot\",\"action\":\"unfollow\",\"name\":\"branch-check-unfollow-prerequisites\"}] to [{\"phase\":\"hot\",\"action\":\"rollover\",\"name\":\"check-rollover-ready\"}] in policy [ilm-history-ilm-policy]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.ilm.IndexLifecycleTransition","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:15.326Z", "log.level": "INFO", "message":"node-join[{es-data}{52IKSV6aSiat5x1pt-Q2vQ}{eMprsq6YRyen_VfnH5sKZA}{10.244.2.154}{10.244.2.154:9300}{d} joining], term: 1, version: 74, delta: added {{es-data}{52IKSV6aSiat5x1pt-Q2vQ}{eMprsq6YRyen_VfnH5sKZA}{10.244.2.154}{10.244.2.154:9300}{d}}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][masterService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.MasterService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:15.483Z", "log.level": "INFO", "message":"added {{es-data}{52IKSV6aSiat5x1pt-Q2vQ}{eMprsq6YRyen_VfnH5sKZA}{10.244.2.154}{10.244.2.154:9300}{d}}, term: 1, version: 74, reason: Publication{term=1, version=74}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:32:05.283Z", "log.level":"ERROR", "message":"failures: [{F3x1UYEBVJO9wKJXhXQs=org.elasticsearch.action.UnavailableShardsException: [.ds-ilm-history-5-2022.06.11-000001][0] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[.ds-ilm-history-5-2022.06.11-000001][0]] containing [2] requests], Fnx1UYEBVJO9wKJXhXQs=org.elasticsearch.action.UnavailableShardsException: [.ds-ilm-history-5-2022.06.11-000001][0] primary shard is not active Timeout: [1m], request: [BulkShardRequest [[.ds-ilm-history-5-2022.06.11-000001][0]] containing [2] requests]}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-master][generic][T#10]","log.logger":"org.elasticsearch.xpack.ilm.history.ILMHistoryStore","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"_CCJ8n0iSgqCIPZP1SdRHw","elasticsearch.node.name":"es-master","elasticsearch.cluster.name":"elasticsearch"}

DATA NODE LOGS

{"@timestamp":"2022-06-11T06:31:00.751Z", "log.level": "INFO", "message":"heap size [31gb], compressed ordinary object pointers [true]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.env.NodeEnvironment","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:00.760Z", "log.level": "INFO", "message":"node name [es-data], node ID [52IKSV6aSiat5x1pt-Q2vQ], cluster name [elasticsearch], roles [data]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:01.992Z", "log.level": "WARN",  "data_stream.dataset":"deprecation.elasticsearch","data_stream.namespace":"default","data_stream.type":"logs","elasticsearch.event.category":"settings","event.code":"xpack.monitoring.collection.enabled","message":"[xpack.monitoring.collection.enabled] setting was deprecated in Elasticsearch and will be removed in a future release." , "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"deprecation.elasticsearch","process.thread.name":"main","log.logger":"org.elasticsearch.deprecation.common.settings.Settings","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:03.275Z", "log.level": "INFO", "message":"[controller/335] [Main.cc@123] controller (64 bit): Version 8.2.0 (Build a8c0a88ede0ff2) Copyright (c) 2022 Elasticsearch BV", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"ml-cpp-log-tail-thread","log.logger":"org.elasticsearch.xpack.ml.process.logging.CppLogMessageHandler","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:03.365Z", "log.level": "INFO", "message":"Security is enabled", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.Security","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:03.579Z", "log.level": "INFO", "message":"license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:03.584Z", "log.level": "INFO", "message":"parsed [0] roles from file [/usr/share/elasticsearch/config/roles.yml]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.security.authz.store.FileRolesStore","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:04.527Z", "log.level": "INFO", "message":"creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=16mb}]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.netty4.NettyAllocator","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:04.545Z", "log.level": "INFO", "message":"using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.indices.recovery.RecoverySettings","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:04.564Z", "log.level": "INFO", "message":"using discovery type [multi-node] and seed hosts providers [settings]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.discovery.DiscoveryModule","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.233Z", "log.level": "INFO", "message":"initialized", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.233Z", "log.level": "INFO", "message":"starting ...", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.240Z", "log.level": "INFO", "message":"persistent cache index loaded", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.searchablesnapshots.cache.full.PersistentCache","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.240Z", "log.level": "INFO", "message":"deprecation component started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.xpack.deprecation.logging.DeprecationIndexingComponent","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.301Z", "log.level": "INFO", "message":"publish_address {10.244.2.154:9300}, bound_addresses {0.0.0.0:9300}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.transport.TransportService","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.356Z", "log.level": "INFO", "message":"bound or publishing to a non-loopback address, enforcing bootstrap checks", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.BootstrapChecks","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.632Z", "log.level": "INFO", "message":"master node changed {previous [], current [{es-master}{_CCJ8n0iSgqCIPZP1SdRHw}{lfMsal41T2-AToW0Va4_bA}{10.244.1.57}{10.244.1.57:9300}{m}]}, added {{es-master}{_CCJ8n0iSgqCIPZP1SdRHw}{lfMsal41T2-AToW0Va4_bA}{10.244.1.57}{10.244.1.57:9300}{m}}, term: 1, version: 74, reason: ApplyCommitRequest{term=1, version=74, sourceNode={es-master}{_CCJ8n0iSgqCIPZP1SdRHw}{lfMsal41T2-AToW0Va4_bA}{10.244.1.57}{10.244.1.57:9300}{m}{xpack.installed=true}}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-data][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.cluster.service.ClusterApplierService","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.639Z", "log.level": "INFO", "message":"refresh keys", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-data][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.TokenService","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.747Z", "log.level": "INFO", "message":"refreshed keys", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-data][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.TokenService","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.771Z", "log.level": "INFO", "message":"license [bc9c6205-f38f-4f12-899f-10794832ccd1] mode [basic] - valid", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-data][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.license.LicenseService","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.772Z", "log.level": "INFO", "message":"license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[es-data][clusterApplierService#updateTask][T#1]","log.logger":"org.elasticsearch.xpack.security.authc.Realms","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.777Z", "log.level": "INFO", "message":"publish_address {10.244.2.154:9200}, bound_addresses {0.0.0.0:9200}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.http.AbstractHttpServerTransport","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"52IKSV6aSiat5x1pt-Q2vQ","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}
{"@timestamp":"2022-06-11T06:31:05.777Z", "log.level": "INFO", "message":"started", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.node.Node","elasticsearch.cluster.uuid":"SrFdgHa8QEW_NOC1joiI_A","elasticsearch.node.id":"52IKSV6aSiat5x1pt-Q2vQ","elasticsearch.node.name":"es-data","elasticsearch.cluster.name":"elasticsearch"}