[es@localhost elasticsearch-8.0.1]$ vim config/elasticsearch.yml
[es@localhost elasticsearch-8.0.1]$ bin/elasticsearch
warning: ignoring JAVA_HOME=/usr/local/java/jdk1.8.0_311; using bundled JDK
warning: ignoring JAVA_HOME=/usr/local/java/jdk1.8.0_311; using bundled JDK
warning: ignoring JAVA_HOME=/usr/local/java/jdk1.8.0_311; using bundled JDK
[2022-03-11T03:53:02,444][INFO ][o.e.n.Node ] [localhost.localdomain] version[8.0.1], pid[6888], build[default/tar/801d9ccc7c2ee0f2cb121bbe22ab5af77a902372/2022-02-24T13:55:40.601285296Z], OS[Linux/3.10.0-1160.el7.x86_64/amd64], JVM[Eclipse Adoptium/OpenJDK 64-Bit Server VM/17.0.2/17.0.2+8]
[2022-03-11T03:53:02,452][INFO ][o.e.n.Node ] [localhost.localdomain] JVM home [/usr/software/es/elasticsearch-8.0.1/jdk], using bundled JDK [true]
[2022-03-11T03:53:02,453][INFO ][o.e.n.Node ] [localhost.localdomain] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=ALL-UNNAMED, -Xms4g, -Xmx4g, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-3548652660160315292, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=data, -XX:ErrorFile=logs/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=logs/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -XX:MaxDirectMemorySize=2147483648, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.path.home=/usr/software/es/elasticsearch-8.0.1, -Des.path.conf=/usr/software/es/elasticsearch-8.0.1/config, -Des.distribution.flavor=default, -Des.distribution.type=tar, -Des.bundled_jdk=true]
[2022-03-11T03:53:06,267][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [aggs-matrix-stats]
[2022-03-11T03:53:06,267][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [analysis-common]
[2022-03-11T03:53:06,268][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [constant-keyword]
[2022-03-11T03:53:06,268][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [frozen-indices]
[2022-03-11T03:53:06,269][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [ingest-common]
[2022-03-11T03:53:06,269][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [ingest-geoip]
[2022-03-11T03:53:06,269][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [ingest-user-agent]
[2022-03-11T03:53:06,270][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [kibana]
[2022-03-11T03:53:06,270][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [lang-expression]
[2022-03-11T03:53:06,271][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [lang-mustache]
[2022-03-11T03:53:06,271][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [lang-painless]
[2022-03-11T03:53:06,271][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [legacy-geo]
[2022-03-11T03:53:06,273][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [mapper-extras]
[2022-03-11T03:53:06,273][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [mapper-version]
[2022-03-11T03:53:06,273][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [parent-join]
[2022-03-11T03:53:06,274][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [percolator]
[2022-03-11T03:53:06,274][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [rank-eval]
[2022-03-11T03:53:06,274][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [reindex]
[2022-03-11T03:53:06,275][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repositories-metering-api]
[2022-03-11T03:53:06,275][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repository-azure]
[2022-03-11T03:53:06,276][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repository-encrypted]
[2022-03-11T03:53:06,276][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repository-gcs]
[2022-03-11T03:53:06,276][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repository-s3]
[2022-03-11T03:53:06,277][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [repository-url]
[2022-03-11T03:53:06,277][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [runtime-fields-common]
[2022-03-11T03:53:06,277][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [search-business-rules]
[2022-03-11T03:53:06,278][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [searchable-snapshots]
[2022-03-11T03:53:06,278][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [snapshot-based-recoveries]
[2022-03-11T03:53:06,278][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [snapshot-repo-test-kit]
[2022-03-11T03:53:06,279][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [spatial]
[2022-03-11T03:53:06,279][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [transform]
[2022-03-11T03:53:06,280][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [transport-netty4]
[2022-03-11T03:53:06,280][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [unsigned-long]
[2022-03-11T03:53:06,280][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [vector-tile]
[2022-03-11T03:53:06,281][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [vectors]
[2022-03-11T03:53:06,281][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [wildcard]
[2022-03-11T03:53:06,281][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-aggregate-metric]
[2022-03-11T03:53:06,282][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-analytics]
[2022-03-11T03:53:06,282][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-async]
[2022-03-11T03:53:06,282][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-async-search]
[2022-03-11T03:53:06,283][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-autoscaling]
[2022-03-11T03:53:06,283][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-ccr]
[2022-03-11T03:53:06,284][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-core]
[2022-03-11T03:53:06,284][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-data-streams]
[2022-03-11T03:53:06,284][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-deprecation]
[2022-03-11T03:53:06,285][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-enrich]
[2022-03-11T03:53:06,285][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-eql]
[2022-03-11T03:53:06,285][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-fleet]
[2022-03-11T03:53:06,285][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-graph]
[2022-03-11T03:53:06,286][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-identity-provider]
[2022-03-11T03:53:06,286][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-ilm]
[2022-03-11T03:53:06,286][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-logstash]
[2022-03-11T03:53:06,287][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-ml]
[2022-03-11T03:53:06,287][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-monitoring]
[2022-03-11T03:53:06,287][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-ql]
[2022-03-11T03:53:06,288][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-rollup]
[2022-03-11T03:53:06,288][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-security]
[2022-03-11T03:53:06,288][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-shutdown]
[2022-03-11T03:53:06,288][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-sql]
[2022-03-11T03:53:06,289][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-stack]
[2022-03-11T03:53:06,289][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-text-structure]
[2022-03-11T03:53:06,290][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-voting-only-node]
[2022-03-11T03:53:06,290][INFO ][o.e.p.PluginsService ] [localhost.localdomain] loaded module [x-pack-watcher]
[2022-03-11T03:53:06,291][INFO ][o.e.p.PluginsService ] [localhost.localdomain] no plugins loaded
[2022-03-11T03:53:06,358][INFO ][o.e.e.NodeEnvironment ] [localhost.localdomain] using [1] data paths, mounts [[/ (/dev/mapper/centos-root)]], net usable_space [1.7gb], net total_space [49.9gb], types [xfs]
[2022-03-11T03:53:06,358][INFO ][o.e.e.NodeEnvironment ] [localhost.localdomain] heap size [4gb], compressed ordinary object pointers [true]
[2022-03-11T03:53:06,451][INFO ][o.e.n.Node ] [localhost.localdomain] node name [localhost.localdomain], node ID [-DzqsBQRTuG-bo8gVHgkDA], cluster name [elasticsearch], roles [data, data_cold, ingest, data_frozen, ml, data_hot, transform, data_content, data_warm, master, remote_cluster_client]
[2022-03-11T03:53:14,613][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [localhost.localdomain] [controller/7455] [Main.cc@123] controller (64 bit): Version 8.0.1 (Build e8dee7fcd7a31a) Copyright (c) 2022 Elasticsearch BV
[2022-03-11T03:53:14,835][INFO ][o.e.x.s.Security ] [localhost.localdomain] Security is enabled
[2022-03-11T03:53:15,413][INFO ][o.e.x.s.a.Realms ] [localhost.localdomain] license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-03-11T03:53:15,428][INFO ][o.e.x.s.a.s.FileRolesStore] [localhost.localdomain] parsed [0] roles from file [/usr/software/es/elasticsearch-8.0.1/config/roles.yml]
[2022-03-11T03:53:17,982][INFO ][o.e.t.n.NettyAllocator ] [localhost.localdomain] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2022-03-11T03:53:18,030][INFO ][o.e.i.r.RecoverySettings ] [localhost.localdomain] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2022-03-11T03:53:18,089][INFO ][o.e.d.DiscoveryModule ] [localhost.localdomain] using discovery type [single-node] and seed hosts providers [settings]
[2022-03-11T03:53:19,974][INFO ][o.e.n.Node ] [localhost.localdomain] initialized
[2022-03-11T03:53:19,975][INFO ][o.e.n.Node ] [localhost.localdomain] starting ...
[2022-03-11T03:53:20,027][INFO ][o.e.x.s.c.f.PersistentCache] [localhost.localdomain] persistent cache index loaded
[2022-03-11T03:53:20,028][INFO ][o.e.x.d.l.DeprecationIndexingComponent] [localhost.localdomain] deprecation component started
[2022-03-11T03:53:20,185][INFO ][o.e.t.TransportService ] [localhost.localdomain] publish_address {192.168.2.37:9300}, bound_addresses {[::]:9300}
[2022-03-11T03:53:21,377][INFO ][o.e.c.c.Coordinator ] [localhost.localdomain] cluster UUID [IzQg9YmHRBSj9I2qEbYEDw]
[2022-03-11T03:53:21,648][INFO ][o.e.c.s.MasterService ] [localhost.localdomain] elected-as-master ([1] nodes joined)[{localhost.localdomain}{-DzqsBQRTuG-bo8gVHgkDA}{6RfntaK4SG6lGGn7iO2vRg}{192.168.2.37}{192.168.2.37:9300}{cdfhilmrstw} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 12, version: 90, delta: master node changed {previous [], current [{localhost.localdomain}{-DzqsBQRTuG-bo8gVHgkDA}{6RfntaK4SG6lGGn7iO2vRg}{192.168.2.37}{192.168.2.37:9300}{cdfhilmrstw}]}
[2022-03-11T03:53:22,043][INFO ][o.e.c.s.ClusterApplierService] [localhost.localdomain] master node changed {previous [], current [{localhost.localdomain}{-DzqsBQRTuG-bo8gVHgkDA}{6RfntaK4SG6lGGn7iO2vRg}{192.168.2.37}{192.168.2.37:9300}{cdfhilmrstw}]}, term: 12, version: 90, reason: Publication{term=12, version=90}
[2022-03-11T03:53:22,231][INFO ][o.e.h.AbstractHttpServerTransport] [localhost.localdomain] publish_address {192.168.2.37:9200}, bound_addresses {[::1]:9200}, {127.0.0.1:9200}, {192.168.3.43:9200}, {192.168.2.37:9200}
[2022-03-11T03:53:22,233][INFO ][o.e.n.Node ] [localhost.localdomain] started
[2022-03-11T03:53:23,098][INFO ][o.e.l.LicenseService ] [localhost.localdomain] license [79d8d5f6-b6d7-42f4-8df9-2547e81d46e2] mode [basic] - valid
[2022-03-11T03:53:23,101][INFO ][o.e.x.s.a.Realms ] [localhost.localdomain] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-03-11T03:53:23,124][INFO ][o.e.g.GatewayService ] [localhost.localdomain] recovered [1] indices into cluster_state
[2022-03-11T03:53:23,310][INFO ][o.e.c.r.a.AllocationService] [localhost.localdomain] current.health="GREEN" message="Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.security-7][0]]])." previous.health="YELLOW" reason="shards started [[.security-7][0]]"
[2022-03-11T03:53:24,825][ERROR][o.e.i.g.GeoIpDownloader ] [localhost.localdomain] exception during geoip databases update
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:371) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:314) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:309) ~[?:?]
at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654) ~[?:?]
at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473) ~[?:?]
at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369) ~[?:?]
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396) ~[?:?]
at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480) ~[?:?]
at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:458) ~[?:?]
at sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) ~[?:?]
at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1500) ~[?:?]
at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1415) ~[?:?]
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450) ~[?:?]
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:421) ~[?:?]
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:580) ~[?:?]
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:183) ~[?:?]
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1665) ~[?:?]
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1589) ~[?:?]
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:529) ~[?:?]
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:308) ~[?:?]
at org.elasticsearch.ingest.geoip.HttpClient.lambda$get$0(HttpClient.java:46) ~[ingest-geoip-8.0.1.jar:8.0.1]
at java.security.AccessController.doPrivileged(AccessController.java:569) ~[?:?]
at org.elasticsearch.ingest.geoip.HttpClient.doPrivileged(HttpClient.java:88) ~[ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.HttpClient.get(HttpClient.java:40) ~[ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.HttpClient.getBytes(HttpClient.java:36) ~[ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.GeoIpDownloader.fetchDatabasesOverview(GeoIpDownloader.java:143) ~[ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.GeoIpDownloader.updateDatabases(GeoIpDownloader.java:131) ~[ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.GeoIpDownloader.runDownloader(GeoIpDownloader.java:265) [ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:100) [ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.ingest.geoip.GeoIpDownloaderTaskExecutor.nodeOperation(GeoIpDownloaderTaskExecutor.java:46) [ingest-geoip-8.0.1.jar:8.0.1]
at org.elasticsearch.persistent.NodePersistentTasksExecutor$1.doRun(NodePersistentTasksExecutor.java:42) [elasticsearch-8.0.1.jar:8.0.1]
at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:776) [elasticsearch-8.0.1.jar:8.0.1]
at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26) [elasticsearch-8.0.1.jar:8.0.1]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
at java.lang.Thread.run(Thread.java:833) [?:?]
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439) ~[?:?]
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306) ~[?:?]
at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231) ~[?:?]
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) ~[?:?]
... 33 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) ~[?:?]
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) ~[?:?]
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[?:?]
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434) ~[?:?]
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306) ~[?:?]
at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231) ~[?:?]
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) ~[?:?]
... 33 more
# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
# Before you set out to tweak and tune the configuration, make sure you
# understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
#cluster.name: yg_elk
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: es_mater
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
#path.data: /path/to/data
#
# Path to log files:
#
#path.logs: /path/to/logs
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
network.host: 0.0.0.0
http.cors.enabled: true
http.cors.allow-origin: "*"
bootstrap.memory_lock: false
#http.cors.allow-headers: Authorization,X-Requested-With,Content-Length,Content-Type
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.seed_hosts: ["host1", "host2"]
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["node-1", "node-2"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false
#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically
# generated to configure Elasticsearch security features on 04-03-2022 02:25:08
#
# --------------------------------------------------------------------------------
# Enable security features
#
#xpack.license.self_generated.type: basic
xpack.security.enabled: true
#xpack.security.enrollment.enabled: true
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
#xpack.security.http.ssl.enabled: true
#keystore.path: /usr/software/es/elasticsearch-8.0.1/config/certs/http.p12
xpack.security.transport.ssl.enabled: true
#
xpack.security.transport.ssl:
enabled: true
verification_mode: certificate
client_authentication: required
keystore.path: /usr/software/es/elasticsearch-8.0.1/config/certs/elastic-certificates.p12
truststore.path: /usr/software/es/elasticsearch-8.0.1/config/certs/elastic-certificates.p12
cluster.routing.allocation.disk.threshold_enabled: false
#
#xpack.security.transport.ssl.client_authentication: required
#
#xpack.security.transport.ssl.keystore.path: /usr/software/es/elasticsearch-8.0.1/config/certs/elastic-certificates.p12
#
#xpack.security.transport.ssl.truststore.path: /usr/software/es/elasticsearch-8.0.1/config/certs/elastic-certificates.p12
#
#cluster.initial_master_nodes: ["localhost.localdomain"]
discovery.type: single-node
# Allow HTTP API connections from localhost and local networks
# Connections are encrypted and require user authentication
http.host: [_local_, _site_]
# Allow other nodes to join the cluster from localhost and local networks
# Connections are encrypted and mutually authenticated
#transport.host: [_local_, _site_]
#----------------------- END SECURITY AUTO CONFIGURATION -------------------------
Could this be because of the built-in JDK?
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.