Here are. Nodes es-01-1 and es-01-2, which are in the same VM, are seems OK(The logs are after from some failures to download the geo-DB, which are omitted, but it is done eventually as see):
# es-01-1
[2022-04-07T16:44:45,391][INFO ][o.e.x.s.a.TokenService ] [crema-es-01-1] refresh keys
[2022-04-07T16:44:45,598][INFO ][o.e.x.s.a.TokenService ] [crema-es-01-1] refreshed keys
[2022-04-07T16:44:45,746][INFO ][o.e.l.LicenseService ] [crema-es-01-1] license [f3a86413-7dbc-4c39-b406-98424da0271a] mode [basic] - valid
[2022-04-07T16:44:45,749][INFO ][o.e.x.s.a.Realms ] [crema-es-01-1] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-07T16:44:45,750][INFO ][o.e.x.s.s.SecurityStatusChangeListener] [crema-es-01-1] Active license is now [BASIC]; Security is enabled
[2022-04-07T16:44:45,788][INFO ][o.e.h.AbstractHttpServerTransport] [crema-es-01-1] publish_address {192.168.200.10:9201}, bound_addresses {192.168.200.10:9201}
[2022-04-07T16:44:45,790][INFO ][o.e.n.Node ] [crema-es-01-1] started
[2022-04-07T16:44:46,309][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] downloading geoip database [GeoLite2-Country.mmdb] to [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-Country.mmdb.tmp.gz]
[2022-04-07T16:44:46,318][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] downloading geoip database [GeoLite2-City.mmdb] to [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-City.mmdb.tmp.gz]
[2022-04-07T16:44:46,322][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] downloading geoip database [GeoLite2-ASN.mmdb] to [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-ASN.mmdb.tmp.gz]
[2022-04-07T16:44:47,473][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] successfully reloaded changed geoip database file [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-Country.mmdb]
[2022-04-07T16:44:47,679][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] successfully reloaded changed geoip database file [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-ASN.mmdb]
[2022-04-07T16:44:53,029][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-1] successfully reloaded changed geoip database file [/tmp/elasticsearch-7825820029223194837/geoip-databases/ck-vVKQIQWiDHQo10QNgbQ/GeoLite2-City.mmdb]
# es-01-2
[2022-04-07T16:44:11,673][INFO ][o.e.x.s.a.TokenService ] [crema-es-01-2] refresh keys
[2022-04-07T16:44:11,882][INFO ][o.e.x.s.a.TokenService ] [crema-es-01-2] refreshed keys
[2022-04-07T16:44:11,998][INFO ][o.e.l.LicenseService ] [crema-es-01-2] license [f3a86413-7dbc-4c39-b406-98424da0271a] mode [basic] - valid
[2022-04-07T16:44:12,000][INFO ][o.e.x.s.a.Realms ] [crema-es-01-2] license mode is [basic], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-07T16:44:12,001][INFO ][o.e.x.s.s.SecurityStatusChangeListener] [crema-es-01-2] Active license is now [BASIC]; Security is enabled
[2022-04-07T16:44:12,034][INFO ][o.e.h.AbstractHttpServerTransport] [crema-es-01-2] publish_address {192.168.200.10:9202}, bound_addresses {192.168.200.10:9202}
[2022-04-07T16:44:12,037][INFO ][o.e.n.Node ] [crema-es-01-2] started
[2022-04-07T16:44:12,376][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] downloading geoip database [GeoLite2-Country.mmdb] to [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-Country.mmdb.tmp.gz]
[2022-04-07T16:44:12,386][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] downloading geoip database [GeoLite2-City.mmdb] to [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-City.mmdb.tmp.gz]
[2022-04-07T16:44:12,387][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] downloading geoip database [GeoLite2-ASN.mmdb] to [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-ASN.mmdb.tmp.gz]
[2022-04-07T16:44:13,238][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] successfully reloaded changed geoip database file [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-Country.mmdb]
[2022-04-07T16:44:13,376][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] successfully reloaded changed geoip database file [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-ASN.mmdb]
[2022-04-07T16:44:17,694][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-01-2] successfully reloaded changed geoip database file [/tmp/elasticsearch-15740498085232538048/geoip-databases/HtRj8DfNRdetS6oNf2q70Q/GeoLite2-City.mmdb]
[2022-04-07T16:44:44,647][INFO ][o.e.c.s.ClusterApplierService] [crema-es-01-2] added {{crema-es-01-1}{ck-vVKQIQWiDHQo10QNgbQ}{CP9c3usbTjmlSaqgRJFjew}{192.168.200.10}{192.168.200.10:9301}{cdfhilmrstw}}, term: 17, version: 1131, reason: ApplyCommitRequest{term=17, version=1131, sourceNode={crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{JlZgQA13ROSyki2DS13XDQ}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}{ml.machine_memory=3133280256, ml.max_open_jobs=512, xpack.installed=true, ml.max_jvm_size=1073741824, server_id=server2, transform.node=true}}
es-02-1 and es-02-2, which are in the other VM, are say the same log, I said, over 10 minutes:
# es-02-1
[2022-04-11T10:53:58,150][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [crema-es-02-1] [controller/17049] [Main.cc@122] controller (64 bit): Version 7.15.2 (Build 65497bb5299534) Copyright (c) 2021 Elasticsearch BV
[2022-04-11T10:53:59,216][INFO ][o.e.x.s.a.Realms ] [crema-es-02-1] license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-11T10:54:01,243][INFO ][o.e.i.g.LocalDatabases ] [crema-es-02-1] initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/etc/elasticsearch1/ingest-geoip] for changes
[2022-04-11T10:54:01,257][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-02-1] initialized database registry, using geoip-databases directory [/tmp/elasticsearch-8882953503902859882/geoip-databases/7BDNjBbYSy2DgDvUdZ95MQ]
[2022-04-11T10:54:03,049][INFO ][o.e.t.NettyAllocator ] [crema-es-02-1] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=1mb, factors={es.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=4mb, heap_size=1gb}]
[2022-04-11T10:54:03,213][INFO ][o.e.d.DiscoveryModule ] [crema-es-02-1] using discovery type [zen] and seed hosts providers [settings]
[2022-04-11T10:54:04,541][INFO ][o.e.g.DanglingIndicesState] [crema-es-02-1] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2022-04-11T10:54:05,721][INFO ][o.e.n.Node ] [crema-es-02-1] initialized
[2022-04-11T10:54:05,738][INFO ][o.e.n.Node ] [crema-es-02-1] starting ...
[2022-04-11T10:54:05,808][INFO ][o.e.x.s.c.f.PersistentCache] [crema-es-02-1] persistent cache index loaded
[2022-04-11T10:54:06,060][INFO ][o.e.t.TransportService ] [crema-es-02-1] publish_address {192.168.200.20:9301}, bound_addresses {192.168.200.20:9301}
[2022-04-11T10:54:08,225][INFO ][o.e.b.BootstrapChecks ] [crema-es-02-1] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2022-04-11T10:54:08,235][INFO ][o.e.c.c.Coordinator ] [crema-es-02-1] cluster UUID [nA5JMB2bQnCu4vTbhb6k2A]
[2022-04-11T10:54:18,276][WARN ][o.e.c.c.ClusterFormationFailureHelper] [crema-es-02-1] master not discovered or elected yet, an election requires at least 2 nodes with ids from [7BDNjBbYSy2DgDvUdZ95MQ, FlgasqSnRTK3GuJ1EVN8-Q, 8fxmMWPPTHKg118NPnBy7Q], have only discovered non-quorum [{crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}, {crema-es-01-1}{HC9ZnmlBTjSOIdHNVyfIbg}{VrCOrxbQQMKyamp__XJw3w}{192.168.200.10}{192.168.200.10:9301}{cdfhilmrstw}, {crema-es-01-2}{kCq5b1LvSHiy1DW0LquQmg}{0UR5n91ORMKCYNpQamD2Lg}{192.168.200.10}{192.168.200.10:9302}{cdfhilmrstw}, {crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}]; discovery will continue using [192.168.200.10:9301, 192.168.200.10:9302, 192.168.200.20:9302] from hosts providers and [{crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}] from last-known cluster state; node term 29, last-accepted version 1651 in term 29
...
[2022-04-11T11:11:19,093][WARN ][o.e.c.c.ClusterFormationFailureHelper] [crema-es-02-1] master not discovered or elected yet, an election requires at least 2 nodes with ids from [7BDNjBbYSy2DgDvUdZ95MQ, FlgasqSnRTK3GuJ1EVN8-Q, 8fxmMWPPTHKg118NPnBy7Q], have only discovered non-quorum [{crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}, {crema-es-01-1}{HC9ZnmlBTjSOIdHNVyfIbg}{VrCOrxbQQMKyamp__XJw3w}{192.168.200.10}{192.168.200.10:9301}{cdfhilmrstw}, {crema-es-01-2}{kCq5b1LvSHiy1DW0LquQmg}{0UR5n91ORMKCYNpQamD2Lg}{192.168.200.10}{192.168.200.10:9302}{cdfhilmrstw}, {crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}]; discovery will continue using [192.168.200.10:9301, 192.168.200.10:9302, 192.168.200.20:9302] from hosts providers and [{crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}] from last-known cluster state; node term 29, last-accepted version 1651 in term 29
# es-02-2
[2022-04-11T10:54:09,238][INFO ][o.e.x.m.p.l.CppLogMessageHandler] [crema-es-02-2] [controller/17306] [Main.cc@122] controller (64 bit): Version 7.15.2 (Build 65497bb5299534) Copyright (c) 2021 Elasticsearch BV
[2022-04-11T10:54:10,960][INFO ][o.e.x.s.a.Realms ] [crema-es-02-2] license mode is [trial], currently licensed security realms are [reserved/reserved,file/default_file,native/default_native]
[2022-04-11T10:54:12,272][INFO ][o.e.i.g.LocalDatabases ] [crema-es-02-2] initialized default databases [[GeoLite2-Country.mmdb, GeoLite2-City.mmdb, GeoLite2-ASN.mmdb]], config databases [[]] and watching [/etc/elasticsearch2/ingest-geoip] for changes
[2022-04-11T10:54:12,278][INFO ][o.e.i.g.DatabaseRegistry ] [crema-es-02-2] initialized database registry, using geoip-databases directory [/tmp/elasticsearch-16860011800677364149/geoip-databases/au75-y-xSV6bADfPwnxf1g]
[2022-04-11T10:54:13,806][INFO ][o.e.t.NettyAllocator ] [crema-es-02-2] creating NettyAllocator with the following configs: [name=unpooled, suggested_max_allocation_size=1mb, factors={es.unsafe.use_unpooled_allocator=null, g1gc_enabled=true, g1gc_region_size=4mb, heap_size=1gb}]
[2022-04-11T10:54:13,956][INFO ][o.e.d.DiscoveryModule ] [crema-es-02-2] using discovery type [zen] and seed hosts providers [settings]
[2022-04-11T10:54:14,561][INFO ][o.e.g.DanglingIndicesState] [crema-es-02-2] gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2022-04-11T10:54:15,061][INFO ][o.e.n.Node ] [crema-es-02-2] initialized
[2022-04-11T10:54:15,062][INFO ][o.e.n.Node ] [crema-es-02-2] starting ...
[2022-04-11T10:54:15,090][INFO ][o.e.x.s.c.f.PersistentCache] [crema-es-02-2] persistent cache index loaded
[2022-04-11T10:54:15,206][INFO ][o.e.t.TransportService ] [crema-es-02-2] publish_address {192.168.200.20:9302}, bound_addresses {192.168.200.20:9302}
[2022-04-11T10:54:16,106][INFO ][o.e.b.BootstrapChecks ] [crema-es-02-2] bound or publishing to a non-loopback address, enforcing bootstrap checks
[2022-04-11T10:54:16,110][INFO ][o.e.c.c.Coordinator ] [crema-es-02-2] cluster UUID [nA5JMB2bQnCu4vTbhb6k2A]
[2022-04-11T10:54:26,162][WARN ][o.e.c.c.ClusterFormationFailureHelper] [crema-es-02-2] master not discovered or elected yet, an election requires at least 2 nodes with ids from [au75-y-xSV6bADfPwnxf1g, 7BDNjBbYSy2DgDvUdZ95MQ, FlgasqSnRTK3GuJ1EVN8-Q], have discovered possible quorum [{crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}, {crema-es-01-1}{HC9ZnmlBTjSOIdHNVyfIbg}{VrCOrxbQQMKyamp__XJw3w}{192.168.200.10}{192.168.200.10:9301}{cdfhilmrstw}, {crema-es-01-2}{kCq5b1LvSHiy1DW0LquQmg}{0UR5n91ORMKCYNpQamD2Lg}{192.168.200.10}{192.168.200.10:9302}{cdfhilmrstw}, {crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}]; discovery will continue using [192.168.200.10:9301, 192.168.200.10:9302, 192.168.200.20:9301] from hosts providers and [{crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}] from last-known cluster state; node term 26, last-accepted version 1542 in term 24
...
[2022-04-11T11:19:17,690][WARN ][o.e.c.c.ClusterFormationFailureHelper] [crema-es-02-2] master not discovered or elected yet, an election requires at least 2 nodes with ids from [au75-y-xSV6bADfPwnxf1g, 7BDNjBbYSy2DgDvUdZ95MQ, FlgasqSnRTK3GuJ1EVN8-Q], have discovered possible quorum [{crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}, {crema-es-01-1}{HC9ZnmlBTjSOIdHNVyfIbg}{VrCOrxbQQMKyamp__XJw3w}{192.168.200.10}{192.168.200.10:9301}{cdfhilmrstw}, {crema-es-01-2}{kCq5b1LvSHiy1DW0LquQmg}{0UR5n91ORMKCYNpQamD2Lg}{192.168.200.10}{192.168.200.10:9302}{cdfhilmrstw}, {crema-es-02-1}{7BDNjBbYSy2DgDvUdZ95MQ}{1hGzqDiWT-Gj-_jMBzlEbw}{192.168.200.20}{192.168.200.20:9301}{cdfhilmrstw}]; discovery will continue using [192.168.200.10:9301, 192.168.200.10:9302, 192.168.200.20:9301] from hosts providers and [{crema-es-02-2}{au75-y-xSV6bADfPwnxf1g}{tE22GiiRQGCulGBHxx7aKw}{192.168.200.20}{192.168.200.20:9302}{cdfhilmrstw}] from last-known cluster state; node term 26, last-accepted version 1542 in term 24