Master 1:
[2021-10-12T07:18:09,975][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [ingest-common]
[2021-10-12T07:18:09,975][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [ingest-geoip]
[2021-10-12T07:18:09,975][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [ingest-user-agent]
[2021-10-12T07:18:09,976][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [lang-expression]
[2021-10-12T07:18:09,976][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [lang-mustache]
[2021-10-12T07:18:09,976][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [lang-painless]
[2021-10-12T07:18:09,976][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [mapper-extras]
[2021-10-12T07:18:09,976][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [parent-join]
[2021-10-12T07:18:09,977][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [percolator]
[2021-10-12T07:18:09,977][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [rank-eval]
[2021-10-12T07:18:09,977][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [reindex]
[2021-10-12T07:18:09,977][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [repository-url]
[2021-10-12T07:18:09,977][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [transport-netty4]
[2021-10-12T07:18:09,978][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-ccr]
[2021-10-12T07:18:09,978][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-core]
[2021-10-12T07:18:09,978][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-deprecation]
[2021-10-12T07:18:09,978][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-graph]
[2021-10-12T07:18:09,979][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-ilm]
[2021-10-12T07:18:09,979][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-logstash]
[2021-10-12T07:18:09,979][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-ml]
[2021-10-12T07:18:09,979][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-monitoring]
[2021-10-12T07:18:09,979][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-rollup]
[2021-10-12T07:18:09,980][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-security]
[2021-10-12T07:18:09,980][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-sql]
[2021-10-12T07:18:09,980][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] loaded module [x-pack-watcher]
[2021-10-12T07:18:09,981][INFO ][o.e.p.PluginsService ] [orw-elkm1-vm] no plugins loaded
[2021-10-12T07:18:14,006][INFO ][o.e.x.s.a.s.FileRolesStore] [orw-elkm1-vm] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2021-10-12T07:18:15,082][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [orw-elkm1-vm] [controller/8525] [Main.cc@109] controller (64 bit): Version 7.0.0 (Build cdaa022645f38d) Copyright (c) 2019 Elasticsearch BV
[2021-10-12T07:18:15,527][DEBUG][o.e.a.ActionModule ] [orw-elkm1-vm] Using REST wrapper from plugin org.elasticsearch.xpack.security.Security
[2021-10-12T07:18:15,880][INFO ][o.e.d.DiscoveryModule ] [orw-elkm1-vm] using discovery type [zen] and seed hosts providers [settings]
[2021-10-12T07:18:16,793][INFO ][o.e.n.Node ] [orw-elkm1-vm] initialized
[2021-10-12T07:18:16,793][INFO ][o.e.n.Node ] [orw-elkm1-vm] starting ...
[2021-10-12T07:18:16,939][INFO ][o.e.t.TransportService ] [orw-elkm1-vm] publish_address {10.102.85.117:9300}, bound_addresses {10.102.85.117:9300}
[2021-10-12T07:18:16,947][INFO ][o.e.b.BootstrapChecks ] [orw-elkm1-vm] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2021-10-12T07:18:17,086][INFO ][o.e.c.s.MasterService ] [orw-elkm1-vm] elected-as-master ([1] nodes joined)[{orw-elkm1-vm}{_2E98E7iRYyuAffWMAI7hg}{GQzmK66hSuWrzpub-FUVdQ}{10.102.85.117}{10.102.85.117:9300}{ml.machine_memory=67388039168, xpack.installed=true, zone=1, ml.max_open_jobs=20} elect leader, _BECOME_MASTER_TASK_, _FINISH_ELECTION_], term: 7, version: 48, reason: master node changed {previous [], current [{orw-elkm1-vm}{_2E98E7iRYyuAffWMAI7hg}{GQzmK66hSuWrzpub-FUVdQ}{10.102.85.117}{10.102.85.117:9300}{ml.machine_memory=67388039168, xpack.installed=true, zone=1, ml.max_open_jobs=20}]}
[2021-10-12T07:18:17,426][INFO ][o.e.c.s.ClusterApplierService] [orw-elkm1-vm] master node changed {previous [], current [{orw-elkm1-vm}{_2E98E7iRYyuAffWMAI7hg}{GQzmK66hSuWrzpub-FUVdQ}{10.102.85.117}{10.102.85.117:9300}{ml.machine_memory=67388039168, xpack.installed=true, zone=1, ml.max_open_jobs=20}]}, term: 7, version: 48, reason: Publication{term=7, version=48}
[2021-10-12T07:18:17,482][INFO ][o.e.h.AbstractHttpServerTransport] [orw-elkm1-vm] publish_address {10.102.85.117:9200}, bound_addresses {[::]:9200}
[2021-10-12T07:18:17,483][INFO ][o.e.n.Node ] [orw-elkm1-vm] started
[2021-10-12T07:18:17,669][WARN ][o.e.x.s.a.s.m.NativeRoleMappingStore] [orw-elkm1-vm] Failed to clear cache for realms [[]]
[2021-10-12T07:18:17,702][INFO ][o.e.l.LicenseService ] [orw-elkm1-vm] license [23d1d6a7-f36b-4586-b935-fae561f80375] mode [basic] - valid
[2021-10-12T07:18:17,712][INFO ][o.e.g.GatewayService ] [orw-elkm1-vm] recovered [3] indices into cluster_state
[2021-10-12T07:18:17,721][INFO ][o.e.c.s.MasterService ] [orw-elkm1-vm] node-join[{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1} join existing leader], term: 7, version: 50, reason: added {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}
[2021-10-12T07:18:17,855][INFO ][o.e.c.s.ClusterApplierService] [orw-elkm1-vm] added {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}, term: 7, version: 50, reason: Publication{term=7, version=50}
[2021-10-12T07:18:18,257][INFO ][o.e.c.r.a.AllocationService] [orw-elkm1-vm] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana_1][0]] ...]).
[2021-10-12T07:27:23,036][INFO ][o.e.c.s.MasterService ] [orw-elkm1-vm] node-left[{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1} disconnected], term: 7, version: 55, reason: removed {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}
[2021-10-12T07:27:23,052][INFO ][o.e.c.s.ClusterApplierService] [orw-elkm1-vm] removed {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{ZQVwF8_NQxC-4RY8_Ubecg}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}, term: 7, version: 55, reason: Publication{term=7, version=55}
[2021-10-12T07:27:23,057][INFO ][o.e.c.r.DelayedAllocationService] [orw-elkm1-vm] scheduling reroute for delayed shards in [59.9s] (3 delayed shards)
[2021-10-12T07:27:46,618][INFO ][o.e.c.s.MasterService ] [orw-elkm1-vm] node-join[{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{Zfxg5W0MR6KIhgXau4fozw}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1} join existing leader], term: 7, version: 56, reason: added {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{Zfxg5W0MR6KIhgXau4fozw}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}
[2021-10-12T07:27:47,145][INFO ][o.e.c.s.ClusterApplierService] [orw-elkm1-vm] added {{orw-elkd1-vm}{9KSQd4TET-epF3fv9TDmPg}{Zfxg5W0MR6KIhgXau4fozw}{10.102.85.245}{10.102.85.245:9300}{ml.machine_memory=67388039168, ml.max_open_jobs=20, xpack.installed=true, zone=1},}, term: 7, version: 56, reason: Publication{term=7, version=56}
[2021-10-12T07:27:47,488][INFO ][o.e.c.r.a.AllocationService] [orw-elkm1-vm] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[.kibana][0], [.kibana_task_manager][0]] ...]).