Errors related to http requests

Elastic Stack Elasticsearch
1

Hello,

from time to time I see the next errors among elasticsearch logs:

[2020-01-25T01:20:41,285][ERROR][o.e.r.RestController ] failed to send failure response for uri [/]
java.lang.IllegalArgumentException: Unexpected http method: PROPFIND
Suppressed: java.lang.IllegalArgumentException: Unexpected http method: PROPFIND
Suppressed: java.lang.IllegalArgumentException: Unexpected http method: SEARCH
[2020-01-25T01:20:48,805][ERROR][o.e.r.RestController ] failed to send failure response for uri [/]
[2020-01-25T01:20:49,098][ERROR][o.e.r.RestController ] failed to send failure response for uri [/Nessus598570297.html]
java.lang.IllegalArgumentException: Unexpected http method: TRACK

I don't use SSL in Elasticsearch.

2

Hi @George_Wainwright

it looks like some client that is not a proper ES client is trying to communicate with ES.

This URL looks fairly specific. Maybe you can use it to understand who or what is sending those requests. The fact that ES is logging errors here is due to a bug in ES related to handling unknown/broken HTTP methods that we fixed here.

3

Hi @Armin_Braun,

thank you so much for providing with version in which it was fixed.

Regarding that failed URI you were right. It appeared that it was Nessus security software.

Thanks again for your help.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.