# ERROR: Failed to determine the health of the cluster. , with exit code 69

**URL:** <https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150>\
**Category:** Elasticsearch\
**Tags:** painless, runtime-fields\
**Created:** [December 31, 2023, 2:02am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150 "2023-12-31T02:02:31Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![zeynepyz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zeynepyz/32/114656_2.png) [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\
**Post date:** [December 31, 2023, 2:02am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/1 "2023-12-31T02:02:31Z")

</div>

In /usr/share/elasticsearch/bin file i run "sudo ./elasticsearch-create-enrollment-token --scope kibana" command and i get this output:

```auto
03:26:10.736 [main] WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [192.168.1.7]; the server provided a certificate with subject name [CN=zeymira], fingerprint [20414e765f5a0a7895c3d3ac31987a7082893385], no keyUsage and extendedKeyUsage [serverAuth]; the certificate is valid between [2023-11-28T19:34:41Z] and [2025-11-27T19:34:41Z] (current time is [2023-12-31T00:26:10.734022055Z], certificate dates are valid); the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
java.security.cert.CertificateException: No subject alternative names matching IP address 192.168.1.7 found
	at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:160) ~[?:?]
	at sun.security.util.HostnameChecker.match(HostnameChecker.java:101) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:457) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:431) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:237) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
	at org.elasticsearch.common.ssl.DiagnosticTrustManager.checkServerTrusted(DiagnosticTrustManager.java:80) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1302) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1195) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1138) ~[?:?]
	at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:447) ~[?:?]
	at sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) ~[?:?]
	at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) ~[?:?]
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:586) ~[?:?]
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187) ~[?:?]
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.lambda$doPrivileged$0(SocketAccess.java:42) ~[?:?]
	at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.doPrivileged(SocketAccess.java:41) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:178) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:112) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.checkClusterHealthWithRetries(BaseRunAsSuperuserCommand.java:214) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.execute(BaseRunAsSuperuserCommand.java:127) ~[?:?]
	at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:54) ~[elasticsearch-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:85) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.main(Command.java:50) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java:64) ~[cli-launcher-8.11.3.jar:8.11.3]

ERROR: Failed to determine the health of the cluster. , with exit code 69

```

and here is my elasticsearch logs:

```auto
[2023-12-31T04:33:15,378][INFO][o.a.l.i.v.PanamaVectorizationProvider] [zeymira] Java vector incubator API enabled; uses preferredBitSize=256
[2023-12-31T04:33:15,756][INFO][o.e.n.Node] [zeymira] version[8.11.3], pid[14662], build[deb/64cf052f3b56b1fd4449f5454cb88aca7e739d9a/2023-12-08T11:33:53.634979452Z], OS[Linux/6.2.0-39-generic/amd64], JVM[Oracle Corporation/OpenJDK 64-Bit Server VM/21.0.1/21.0.1+12-29]
[2023-12-31T04:33:15,757][INFO][o.e.n.Node] [zeymira] JVM home [/usr/share/elasticsearch/jdk], using bundled JDK [true]
[2023-12-31T04:33:15,757][INFO][o.e.n.Node] [zeymira] JVM arguments [-Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -Djava.security.manager=allow, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Dlog4j2.formatMsgNoLookups=true, -Djava.locale.providers=SPI,COMPAT, --add-opens=java.base/java.io=org.elasticsearch.preallocate, -XX:+UseG1GC, -Djava.io.tmpdir=/tmp/elasticsearch-13324923362030457468, --add-modules=jdk.incubator.vector, -XX:+HeapDumpOnOutOfMemoryError, -XX:+ExitOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/elasticsearch/gc.log:utctime,level,pid,tags:filecount=32,filesize=64m, -Xms3895m, -Xmx3895m, -XX:MaxDirectMemorySize=2042626048, -XX:G1HeapRegionSize=4m, -XX:InitiatingHeapOccupancyPercent=30, -XX:G1ReservePercent=15, -Des.distribution.type=deb, --module-path=/usr/share/elasticsearch/lib, --add-modules=jdk.net, --add-modules=ALL-MODULE-PATH, -Djdk.module.main=org.elasticsearch.server]
[2023-12-31T04:33:19,352][INFO][o.e.p.PluginsService] [zeymira] loaded module [repository-url]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [rest-root]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-core]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-redact]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [ingest-user-agent]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-async-search]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-monitoring]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [repository-s3]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-analytics]
[2023-12-31T04:33:19,354][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-ent-search]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-autoscaling]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [lang-painless]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-ml]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [lang-mustache]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [legacy-geo]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-ql]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [rank-rrf]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [analysis-common]
[2023-12-31T04:33:19,355][INFO][o.e.p.PluginsService] [zeymira] loaded module [transport-netty4]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [aggregations]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [ingest-common]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-identity-provider]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [frozen-indices]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-shutdown]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-text-structure]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [snapshot-repo-test-kit]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [ml-package-loader]
[2023-12-31T04:33:19,356][INFO][o.e.p.PluginsService] [zeymira] loaded module [kibana]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [constant-keyword]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-logstash]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-ccr]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-graph]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-esql]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [parent-join]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-enrich]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [repositories-metering-api]
[2023-12-31T04:33:19,357][INFO][o.e.p.PluginsService] [zeymira] loaded module [transform]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [repository-azure]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [repository-gcs]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [spatial]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [apm]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [mapper-version]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [mapper-extras]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-rollup]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [percolator]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [data-streams]
[2023-12-31T04:33:19,358][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-stack]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [rank-eval]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [systemd]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [reindex]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-security]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [blob-cache]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [searchable-snapshots]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-slm]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [snapshot-based-recoveries]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-watcher]
[2023-12-31T04:33:19,359][INFO][o.e.p.PluginsService] [zeymira] loaded module [old-lucene-versions]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-ilm]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-voting-only-node]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-deprecation]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-fleet]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-profiling]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-aggregate-metric]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-downsample]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [ingest-geoip]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-write-load-forecaster]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [inference]
[2023-12-31T04:33:19,360][INFO][o.e.p.PluginsService] [zeymira] loaded module [search-business-rules]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [ingest-attachment]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [wildcard]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-sql]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [unsigned-long]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-async]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [runtime-fields-common]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [vector-tile]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [lang-expression]
[2023-12-31T04:33:19,361][INFO][o.e.p.PluginsService] [zeymira] loaded module [x-pack-eql]
[2023-12-31T04:33:25,040][INFO][o.e.e.NodeEnvironment] [zeymira] using [1] data paths, mounts [[/ (/dev/sda2)]], net usable_space [378.6gb], net total_space [438.5gb], types [ext4]
[2023-12-31T04:33:25,041][INFO][o.e.e.NodeEnvironment] [zeymira] heap size [3.8gb], compressed ordinary object pointers [true]
[2023-12-31T04:33:25,116][INFO][o.e.n.Node] [zeymira] node name [zeymira], node ID [DUX60HVlRjWub5dnXJfgKw], cluster name [elasticsearch], roles [data_hot, transform, data_content, data_warm, master, remote_cluster_client, data, data_cold, ingest, data_frozen, ml]
[2023-12-31T04:33:32,205][INFO][o.e.x.m.p.l.CppLogMessageHandler] [zeymira] [controller/14689] [Main.cc@123] controller (64 bit): Version 8.11.3 (Build c16ff912638f0a) Copyright (c) 2023 Elasticsearch BV
[2023-12-31T04:33:35,982][INFO][o.e.x.s.Security] [zeymira] Security is enabled
[2023-12-31T04:33:36,887][INFO][o.e.x.s.a.s.FileRolesStore] [zeymira] parsed [0] roles from file [/etc/elasticsearch/roles.yml]
[2023-12-31T04:33:38,434][INFO][o.e.x.s.InitialNodeSecurityAutoConfiguration] [zeymira] Auto-configuration will not generate a password for the elastic built-in superuser, as we cannot determine if there is a terminal attached to the elasticsearch process. You can use the `bin/elasticsearch-reset-password` tool to set the password for the elastic user.
[2023-12-31T04:33:39,139][INFO][o.e.x.p.ProfilingPlugin] [zeymira] Profiling is enabled
[2023-12-31T04:33:39,166][INFO][o.e.x.p.ProfilingPlugin] [zeymira] profiling index templates will not be installed or reinstalled
[2023-12-31T04:33:42,600][INFO][o.e.t.n.NettyAllocator] [zeymira] creating NettyAllocator with the following configs: [name=elasticsearch_configured, chunk_size=1mb, suggested_max_allocation_size=1mb, factors={es.unsafe.use_netty_default_chunk_and_page_size=false, g1gc_enabled=true, g1gc_region_size=4mb}]
[2023-12-31T04:33:42,625][INFO][o.e.i.r.RecoverySettings] [zeymira] using rate limit [40mb] with [default=40mb, read=0b, write=0b, max=0b]
[2023-12-31T04:33:42,669][INFO][o.e.d.DiscoveryModule] [zeymira] using discovery type [multi-node] and seed hosts providers [settings]
[2023-12-31T04:33:43,775][INFO][o.e.n.Node] [zeymira] initialized
[2023-12-31T04:33:43,776][INFO][o.e.n.Node] [zeymira] starting ...
[2023-12-31T04:33:43,791][INFO][o.e.x.s.c.f.PersistentCache] [zeymira] persistent cache index loaded
[2023-12-31T04:33:43,793][INFO][o.e.x.d.l.DeprecationIndexingComponent] [zeymira] deprecation component started
[2023-12-31T04:33:43,861][INFO][o.e.t.TransportService] [zeymira] publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}
[2023-12-31T04:33:44,029][WARN][o.e.c.c.ClusterBootstrapService] [zeymira] this node is locked into cluster UUID [u8UWYp1QTauwJLRm9YdcqQ] but [cluster.initial_master_nodes] is set to [zeymira]; remove this setting to avoid possible data loss caused by subsequent cluster bootstrap attempts; for further information see https://www.elastic.co/guide/en/elasticsearch/reference/8.11/important-settings.html#initial_master_nodes
[2023-12-31T04:33:44,140][INFO][o.e.c.s.MasterService] [zeymira] elected-as-master ([1] nodes joined in term 24)[_FINISH_ELECTION_, {zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003} completing election], term: 24, version: 146, delta: master node changed {previous [], current [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}]}
[2023-12-31T04:33:44,172][INFO][o.e.c.s.ClusterApplierService] [zeymira] master node changed {previous [], current [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}]}, term: 24, version: 146, reason: Publication{term=24, version=146}
[2023-12-31T04:33:44,195][INFO][o.e.c.f.AbstractFileWatchingService] [zeymira] starting file watcher ...
[2023-12-31T04:33:44,199][INFO][o.e.c.f.AbstractFileWatchingService] [zeymira] file settings service up and running [tid=77]
[2023-12-31T04:33:44,204][INFO][o.e.h.AbstractHttpServerTransport] [zeymira] publish_address {192.168.1.7:9200}, bound_addresses {[::]:9200}
[2023-12-31T04:33:44,204][INFO][o.e.c.c.NodeJoinExecutor] [zeymira] node-join: [{zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}] with reason [completing election]
[2023-12-31T04:33:44,205][INFO][o.e.n.Node] [zeymira] started {zeymira}{DUX60HVlRjWub5dnXJfgKw}{DlFGJxZ3QVmPhymAOGI9xw}{zeymira}{127.0.0.1}{127.0.0.1:9300}{cdfhilmrstw}{8.11.3}{7000099-8500003}{ml.max_jvm_size=4085252096, ml.config_version=11.0.0, xpack.installed=true, transform.config_version=10.0.0, ml.machine_memory=8169013248, ml.allocated_processors=8, ml.allocated_processors_double=8.0}
[2023-12-31T04:33:44,448][INFO][o.e.l.ClusterStateLicenseService] [zeymira] license [279b626f-d4e0-4877-ab8c-7eaceaa5a95a] mode [basic] - valid
[2023-12-31T04:33:44,449][INFO][o.e.x.s.a.Realms] [zeymira] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2023-12-31T04:33:44,451][INFO][o.e.g.GatewayService] [zeymira] recovered [0] indices into cluster_state
[2023-12-31T04:33:44,497][INFO][o.e.h.n.s.HealthNodeTaskExecutor] [zeymira] Node [{zeymira}{DUX60HVlRjWub5dnXJfgKw}] is selected as the current health node.
[2023-12-31T04:37:41,467][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56088}
[2023-12-31T04:37:41,467][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56082}
[2023-12-31T04:37:41,469][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/[0:0:0:0:0:0:0:1]:9200, remoteAddress=/[0:0:0:0:0:0:0:1]:56098}
[2023-12-31T04:37:44,084][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42626}
[2023-12-31T04:37:44,086][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42632}
[2023-12-31T04:37:44,088][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42636}
[2023-12-31T04:37:45,114][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42650}
[2023-12-31T04:37:45,116][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42666}
[2023-12-31T04:37:45,117][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42670}
[2023-12-31T04:37:46,685][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42686}
[2023-12-31T04:37:46,685][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42702}
[2023-12-31T04:37:46,687][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:42710}
[2023-12-31T04:38:55,769][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37344}
[2023-12-31T04:38:55,769][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37356}
[2023-12-31T04:38:55,770][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:37366}
[2023-12-31T04:51:10,734][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:43986}
[2023-12-31T04:51:10,735][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:43998}
[2023-12-31T04:51:10,737][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44000}
[2023-12-31T04:51:11,771][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44004}
[2023-12-31T04:51:11,771][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44008}
[2023-12-31T04:51:11,773][WARN][o.e.h.n.Netty4HttpServerTransport] [zeymira] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:44018}

```

how can i solve this? i am trying to get enrollment token.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [December 31, 2023, 3:55am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/2 "2023-12-31T03:55:59Z")

</div>

Per the [docs](https://www.elastic.co/guide/en/elasticsearch/reference/current/create-enrollment-token.html) Use the

`--url` option with hostname or IP that is listed as the SAN in that first line error message like

`--url https://192.168.1.105:9200`

> [@zeynepyz](#):
>
> ```auto
> .....
> the certificate has subject alternative names 
> 
> [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; 
> 
> the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
> 
> java.security.cert.CertificateException: 
> 
> No subject alternative names matching 
> IP address 192.168.1.7 found
> 
> ```

---

<div class="post-metadata">

**Author:** ![zeynepyz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zeynepyz/32/114656_2.png) [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\
**Post date:** [December 31, 2023, 8:34am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/3 "2023-12-31T08:34:08Z")

</div>

I run the "sudo ./elasticsearch-create-enrollment-token --scope kibana --url [https://192.168.1.7:9200](https://192.168.1.7:9200)  
" command and i get the same error.

```auto
11:29:08.984 [main] WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [192.168.1.7]; the server provided a certificate with subject name [CN=zeymira], fingerprint [20414e765f5a0a7895c3d3ac31987a7082893385], no keyUsage and extendedKeyUsage [serverAuth]; the certificate is valid between [2023-11-28T19:34:41Z] and [2025-11-27T19:34:41Z] (current time is [2023-12-31T08:29:08.981384352Z], certificate dates are valid); the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names [IP:fe80:0:0:0:b9bc:f274:5403:3ea9,DNS:localhost,IP:192.168.1.104,IP:0:0:0:0:0:0:0:1,IP:127.0.0.1,IP:192.168.1.105,IP:fe80:0:0:0:75d5:a12b:1d99:f2f,DNS:zeymira]; the certificate is issued by [CN=Elasticsearch security auto-configuration HTTP CA]; the certificate is signed by (subject [CN=Elasticsearch security auto-configuration HTTP CA] fingerprint [2ca0f51b78a95e3ee9d16cc005646b149fe564e8] {trusted issuer}) which is self-issued; the [CN=Elasticsearch security auto-configuration HTTP CA] certificate is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: Composite-Trust{JDK-trusted-certs,StoreTrustConfig{path=certs/http.p12, password=<non-empty>, type=PKCS12, algorithm=PKIX}})])
java.security.cert.CertificateException: No subject alternative names matching IP address 192.168.1.7 found
	at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:160) ~[?:?]
	at sun.security.util.HostnameChecker.match(HostnameChecker.java:101) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:457) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:431) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:237) ~[?:?]
	at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:132) ~[?:?]
	at org.elasticsearch.common.ssl.DiagnosticTrustManager.checkServerTrusted(DiagnosticTrustManager.java:80) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1302) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1195) ~[?:?]
	at sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1138) ~[?:?]
	at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:447) ~[?:?]
	at sun.security.ssl.TransportContext.dispatch(TransportContext.java:201) ~[?:?]
	at sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455) ~[?:?]
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426) ~[?:?]
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:586) ~[?:?]
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187) ~[?:?]
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:141) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.lambda$doPrivileged$0(SocketAccess.java:42) ~[?:?]
	at java.security.AccessController.doPrivileged(AccessController.java:571) ~[?:?]
	at org.elasticsearch.xpack.core.common.socket.SocketAccess.doPrivileged(SocketAccess.java:41) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:178) ~[?:?]
	at org.elasticsearch.xpack.core.security.CommandLineHttpClient.execute(CommandLineHttpClient.java:112) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.checkClusterHealthWithRetries(BaseRunAsSuperuserCommand.java:214) ~[?:?]
	at org.elasticsearch.xpack.security.tool.BaseRunAsSuperuserCommand.execute(BaseRunAsSuperuserCommand.java:127) ~[?:?]
	at org.elasticsearch.common.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:54) ~[elasticsearch-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:85) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.cli.Command.main(Command.java:50) ~[elasticsearch-cli-8.11.3.jar:8.11.3]
	at org.elasticsearch.launcher.CliToolLauncher.main(CliToolLauncher.java:64) ~[cli-launcher-8.11.3.jar:8.11.3]

ERROR: Failed to determine the health of the cluster. , with exit code 69

```

I wanna share my config file too.

```auto
# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
# Before you set out to tweak and tune the configuration, make sure you
# understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
#cluster.name: my-application
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: node-1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
path.data: /var/lib/elasticsearch
#
# Path to log files:
#
path.logs: /var/log/elasticsearch
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
#
#network.host: 192.168.0.1
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.seed_hosts: ["host1", "host2"]
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["node-1", "node-2"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false

#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically      
# generated to configure Elasticsearch security features on 28-11-2023 19:34:37
#
# --------------------------------------------------------------------------------

# Enable security features
xpack.security.enabled: true

xpack.security.enrollment.enabled: true

# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Create a new cluster with the current node only
# Additional nodes can still join the cluster later
cluster.initial_master_nodes: ["zeymira"]

# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 0.0.0.0

# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
#transport.host: 0.0.0.0

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

```

Idk what is the problem

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [December 31, 2023, 10:13am UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/4 "2023-12-31T10:13:47Z")

</div>

192.168.1.7 isn't one of the SANs of the certificate:

```plaintext
No subject alternative names matching IP address 192.168.1.7 found
...
the certificate has subject alternative names [
  IP:fe80:0:0:0:b9bc:f274:5403:3ea9,
  DNS:localhost,
  IP:192.168.1.104,
  IP:0:0:0:0:0:0:0:1,
  IP:127.0.0.1,
  IP:192.168.1.105,
  IP:fe80:0:0:0:75d5:a12b:1d99:f2f,
  DNS:zeymira
]

```

---

<div class="post-metadata">

**Author:** ![zeynepyz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zeynepyz/32/114656_2.png) [@zeynepyz](https://discuss.elastic.co/u/zeynepyz)\
**Post date:** [December 31, 2023, 2:29pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/5 "2023-12-31T14:29:40Z")

</div>

I don't undersand what should i do. I've tried to "sudo ./elasticsearch-create-enrollment-token --scope kibana --url [https://192.168.1.105:9200](https://192.168.1.105:9200)" command too but i get the same error again

> ERROR: Failed to determine the health of the cluster. , with exit code 69

What should I do?

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [December 31, 2023, 3:18pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/6 "2023-12-31T15:18:35Z")

</div>

> [@zeynepyz](#):
>
> i get the same error again

I do not believe the error will be _exactly_ the same in this case, and the difference is likely important.

> [@zeynepyz](#):
>
> What should I do?

Either access your cluster at one of the addresses in its TLS certificate, or give it a new certificate.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 28, 2024, 3:18pm UTC](https://discuss.elastic.co/t/error-failed-to-determine-the-health-of-the-cluster-with-exit-code-69/350150/7 "2024-01-28T15:18:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.