{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.016+02:00","message":"[.kibana_analytics] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1458ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.825944559},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.019+02:00","message":"[.kibana_analytics] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 3ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.830938962},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.032+02:00","message":"[.kibana_alerting_cases] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1487ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.840424719},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.033+02:00","message":"[.kibana_alerting_cases] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 1ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.842275758},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.109+02:00","message":"[.kibana_security_solution] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1568ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.917438403},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.110+02:00","message":"[.kibana_security_solution] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 1ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.919916842},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.185+02:00","message":"[.kibana] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1631ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.995757922},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.188+02:00","message":"[.kibana] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 3ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":15.996749284},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.244+02:00","message":"[.kibana_analytics] MARK_VERSION_INDEX_READY -> DONE. took: 225ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.056427799},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.248+02:00","message":"[.kibana_analytics] Migration completed after 1763ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.057026801},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.251+02:00","message":"[.kibana_alerting_cases] MARK_VERSION_INDEX_READY -> DONE. took: 218ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.059949434},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.252+02:00","message":"[.kibana_alerting_cases] Migration completed after 1762ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.061669642},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.321+02:00","message":"[.kibana_security_solution] MARK_VERSION_INDEX_READY -> DONE. took: 211ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.130008436},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.322+02:00","message":"[.kibana_security_solution] Migration completed after 1834ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.131831539},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.326+02:00","message":"[.kibana] MARK_VERSION_INDEX_READY -> DONE. took: 138ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.134848234},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.327+02:00","message":"[.kibana] Migration completed after 1846ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.137415111},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.892+02:00","message":"[.kibana_usage_counters] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 2356ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.701420402},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.896+02:00","message":"[.kibana_usage_counters] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 4ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.704695516},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.907+02:00","message":"[.kibana_task_manager] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 2358ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.715566397},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:50.910+02:00","message":"[.kibana_task_manager] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 4ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.718832097},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.066+02:00","message":"[.kibana_usage_counters] MARK_VERSION_INDEX_READY -> DONE. took: 170ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.875520502},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.067+02:00","message":"[.kibana_usage_counters] Migration completed after 2584ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.876016078},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.073+02:00","message":"[.kibana_task_manager] MARK_VERSION_INDEX_READY -> DONE. took: 163ms.","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.883217988},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.075+02:00","message":"[.kibana_task_manager] Migration completed after 2591ms","log":{"level":"INFO","logger":"savedobjects-service"},"process":{"pid":10020,"uptime":16.884066956},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.092+02:00","message":"elasticsearch service is now available: Elasticsearch is available","log":{"level":"INFO","logger":"status.core.elasticsearch"},"process":{"pid":10020,"uptime":16.90397192},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.096+02:00","message":"savedObjects service is now available: SavedObjects service has completed migrations and is available","log":{"level":"INFO","logger":"status.core.savedObjects"},"process":{"pid":10020,"uptime":16.905692951},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.103+02:00","message":"Stopping all plugins.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":10020,"uptime":16.918179968},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.114+02:00","message":"All plugins stopped.","log":{"level":"INFO","logger":"plugins-system.preboot"},"process":{"pid":10020,"uptime":16.922974748},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.115+02:00","message":"Starting [163] plugins: [devTools,translations,share,searchConnectors,screenshotMode,usageCollection,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,contentManagement,cloud,taskManager,newsfeed,savedObjectsFinder,noDataPage,monitoringCollection,licensing,productDocBase,mapsEms,globalSearch,globalSearchProviders,features,guidedOnboarding,banners,licenseApiGuard,customBranding,ftrApis,fieldsMetadata,fieldFormats,expressions,screenshotting,dataViews,esUiShared,entitiesDataAccess,customIntegrations,home,searchprofiler,painlessLab,management,spaces,security,telemetry,licenseManagement,snapshotRestore,lists,files,encryptedSavedObjects,entityManager,eventLog,actions,notifications,inference,observabilityAIAssistant,llmTasks,cloudDataMigration,aiAssistantManagementSelection,advancedSettings,grokdebugger,console,searchSynonyms,searchNotebooks,bfetch,data,savedObjectsTagging,globalSearchBar,savedObjectsManagement,unifiedSearch,navigation,inferenceEndpoint,graph,embeddable,uiActionsEnhanced,savedSearch,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,alerting,streams,logsDataAccess,fileUpload,ingestPipelines,ecsDataQualityDashboard,dataViewFieldEditor,dataViewManagement,charts,watcher,visualizations,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeMarkdown,visTypeHeatmap,inputControlVis,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionLegacyMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,eventAnnotation,expressionXY,lens,maps,dataVisualizer,dashboard,triggersActionsUi,transform,stackConnectors,integrationAssistant,stackAlerts,ruleRegistry,cases,timelines,sessionView,kubernetesSecurity,threatIntelligence,streamsApp,metricsDataAccess,aiops,discover,reporting,canvas,osquery,ml,searchPlayground,searchInferenceEndpoints,searchAssistant,observabilityAiAssistantManagement,indexManagement,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,esql,elasticAssistant,logsExplorer,inventory,discoverEnhanced,monitoring,logstash,links,dashboardEnhanced,logsShared,upgradeAssistant,observability,slo,observabilityAIAssistantApp,enterpriseSearch,apmDataAccess,infra,apm,ux]","log":{"level":"INFO","logger":"plugins-system.standard"},"process":{"pid":10020,"uptime":16.923567464},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.126+02:00","message":"Task manager isCloud=false isServerless=false claimStrategy=mget isBackgroundTaskNodeOnly=false heapSizeLimit=2103705600 defaultCapacity=10 autoCalculateDefaultEchCapacity=false","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":16.935253471},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"tags":["taskClaiming"],"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.136+02:00","message":"using task claiming strategy: mget","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":16.945516668},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.138+02:00","message":"Starting the task poller","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":16.947393226},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.677+02:00","message":"config sourced from: production cluster","log":{"level":"INFO","logger":"plugins.monitoring.monitoring"},"process":{"pid":10020,"uptime":17.485962536},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.698+02:00","message":"Skipping initialization of Profiling endpoints because 'profilingDataAccess' plugin is not available","log":{"level":"INFO","logger":"plugins.infra"},"process":{"pid":10020,"uptime":17.507113546},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.733+02:00","message":"Installing SLO shared resources","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":17.541589399},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.787+02:00","message":"Installing component template .kibana-data-quality-dashboard-ecs-mappings","log":{"level":"INFO","logger":"plugins.ecsDataQualityDashboard"},"process":{"pid":10020,"uptime":17.595533789},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.791+02:00","message":"Installing component template .kibana-data-quality-dashboard-results-mappings","log":{"level":"INFO","logger":"plugins.ecsDataQualityDashboard"},"process":{"pid":10020,"uptime":17.60004066},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:51.828+02:00","message":"Installing component template .kibana-elastic-ai-assistant-component-template-conversations","log":{"level":"INFO","logger":"plugins.elasticAssistant.service"},"process":{"pid":10020,"uptime":17.636407839},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:53.750+02:00","message":"http server running at https://0.0.0.0:5601","log":{"level":"INFO","logger":"http.server.Kibana"},"process":{"pid":10020,"uptime":19.559216751},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"tags":["taskClaiming","claimAvailableTasksMget"],"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:53.769+02:00","message":"Background task node \"78978c54-bd49-48eb-a05d-dc925c0d8a2d\" has no assigned partitions, claiming against all partitions","log":{"level":"WARN","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":19.577588844},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.053+02:00","message":"Kibana Discovery Service has been started","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":19.862287038},"trace":{"id":"b165e241546efbbd0a4c20439afacfb2"},"transaction":{"id":"49ca6f453c6f0445"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.545+02:00","message":"Starting monitoring stats collection","log":{"level":"INFO","logger":"plugins.monitoring.monitoring.kibana-monitoring"},"process":{"pid":10020,"uptime":20.358209715},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.575+02:00","message":"Creating ILM policy for reporting data stream: kibana-reporting","log":{"level":"INFO","logger":"plugins.reporting.store"},"process":{"pid":10020,"uptime":20.384284093},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.584+02:00","message":"Installing SLO component template [.slo-observability.summary-mappings]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":20.393326436},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.587+02:00","message":"Installing SLO component template [.slo-observability.sli-mappings]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":20.396188995},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.604+02:00","message":"Installing SLO component template [.slo-observability.sli-settings]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":20.413352392},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.698+02:00","message":"Telemetry collection is enabled. For more information on telemetry settings, refer to https://www.elastic.co/guide/en/kibana/8.18/telemetry-settings-kbn.html.","log":{"level":"INFO","logger":"plugins.telemetry"},"process":{"pid":10020,"uptime":20.507316767},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.765+02:00","message":"Installing index template .kibana-event-log-template","log":{"level":"INFO","logger":"plugins.eventLog"},"process":{"pid":10020,"uptime":20.573930847},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:54.903+02:00","message":"Installing SLO component template [.slo-observability.summary-settings]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":20.712187208},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.055+02:00","message":"Disabled managed entity discovery","log":{"level":"INFO","logger":"plugins.entityManager"},"process":{"pid":10020,"uptime":20.863721448},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"tags":["taskClaiming","claimAvailableTasksMget"],"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.079+02:00","message":"Background task node \"78978c54-bd49-48eb-a05d-dc925c0d8a2d\" now claiming with assigned partitions","log":{"level":"INFO","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":20.888187368},"trace":{"id":"388c80930c8ae6cb125f49c1377ad0c6"},"transaction":{"id":"dd6461ece45ff26c"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.642+02:00","message":"Task Manager is unhealthy, the assumedAverageRecurringRequiredThroughputPerMinutePerKibana (0) < capacityPerMinutePerKibana (1200)","log":{"level":"WARN","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":21.451404969},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.648+02:00","message":"alerting plugin is now available: Alerting is (probably) ready","log":{"level":"INFO","logger":"status.plugins.alerting"},"process":{"pid":10020,"uptime":21.456967702},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.649+02:00","message":"licensing plugin is now available: License fetched","log":{"level":"INFO","logger":"status.plugins.licensing"},"process":{"pid":10020,"uptime":21.457283783},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.649+02:00","message":"taskManager plugin is now available: Task Manager is healthy","log":{"level":"INFO","logger":"status.plugins.taskManager"},"process":{"pid":10020,"uptime":21.457461617},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:55.729+02:00","message":"Kibana is now available","log":{"level":"INFO","logger":"status"},"process":{"pid":10020,"uptime":21.538114817},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.096+02:00","message":"Installing index template .kibana-elastic-ai-assistant-index-template-conversations","log":{"level":"INFO","logger":"plugins.elasticAssistant.service"},"process":{"pid":10020,"uptime":21.904820719},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.105+02:00","message":"Installing index template .kibana-data-quality-dashboard-results-index-template","log":{"level":"INFO","logger":"plugins.ecsDataQualityDashboard"},"process":{"pid":10020,"uptime":21.913800524},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.139+02:00","message":"Installing SLO index template [.slo-observability.sli]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":21.947494193},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.363+02:00","message":"Creating datastream .kibana-event-log-ds","log":{"level":"INFO","logger":"plugins.eventLog"},"process":{"pid":10020,"uptime":22.172347631},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.819+02:00","message":"Task ProductDocBase:EnsureUpToDate scheduled to run soon","log":{"level":"INFO","logger":"plugins.productDocBase.doc-manager"},"process":{"pid":10020,"uptime":22.627944814},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.924+02:00","message":"Could not create index: '.apm-custom-link'. Retrying...","log":{"level":"WARN","logger":"plugins.apm"},"process":{"pid":10020,"uptime":22.733168313},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:56.925+02:00","message":"resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.apm-custom-link/-5RIUT_yShmslNzLTO9oHg] already exists","error":{"message":"resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.apm-custom-link/-5RIUT_yShmslNzLTO9oHg] already exists","type":"ResponseError","stack_trace":"ResponseError: resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.apm-custom-link/-5RIUT_yShmslNzLTO9oHg] already exists\n at KibanaTransport._request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:543:27)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)\n at /usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:641:32\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:637:20)\n at KibanaTransport.request (/usr/share/kibana/node_modules/@kbn/core-elasticsearch-client-server-internal/src/create_transport.js:60:16)\n at Indices.create (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/indices.js:229:16)\n at /usr/share/kibana/node_modules/@kbn/observability-plugin/server/utils/create_or_update_index.js:39:12\n at RetryOperation._fn (/usr/share/kibana/node_modules/p-retry/index.js:50:12)"},"log":{"level":"WARN","logger":"plugins.apm"},"process":{"pid":10020,"uptime":22.738349647},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:57.340+02:00","message":"Updating data streams - .kibana-data-quality-dashboard-results-*","log":{"level":"INFO","logger":"plugins.ecsDataQualityDashboard"},"process":{"pid":10020,"uptime":23.149684375},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:57.347+02:00","message":"Installing SLO index template [.slo-observability.summary]","log":{"level":"INFO","logger":"plugins.slo"},"process":{"pid":10020,"uptime":23.155837377},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:57.352+02:00","message":"Updating data streams - .kibana-elastic-ai-assistant-conversations-*","log":{"level":"INFO","logger":"plugins.elasticAssistant.service"},"process":{"pid":10020,"uptime":23.162433313},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:57.425+02:00","message":"Error initializing AI assistant resources: Platinum, Enterprise or trial license needed","log":{"level":"WARN","logger":"plugins.elasticAssistant.service"},"process":{"pid":10020,"uptime":23.234211961},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:57.674+02:00","message":"Installing built in entity definitions","log":{"level":"INFO","logger":"plugins.entityManager"},"process":{"pid":10020,"uptime":23.482892757},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"tags":["apm-source-map-migration-task","apm-source-map-migration-task-id","task-run-failed","framework-error"],"error":{"stack_trace":"ResponseError: resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.apm-source-map/BQP4nPIkT5ixqGQKAw_SUA] already exists\n at KibanaTransport._request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:543:27)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)\n at /usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:641:32\n at KibanaTransport.request (/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:637:20)\n at KibanaTransport.request (/usr/share/kibana/node_modules/@kbn/core-elasticsearch-client-server-internal/src/create_transport.js:60:16)\n at Indices.create (/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/indices.js:229:16)\n at createApmSourceMapIndexTemplate (/usr/share/kibana/node_modules/@kbn/apm-plugin/server/routes/source_maps/create_apm_source_map_index_template.js:75:5)\n at Object.run (/usr/share/kibana/node_modules/@kbn/apm-plugin/server/routes/source_maps/schedule_source_map_migration.js:49:13)\n at TaskManagerRunner.run (/usr/share/kibana/node_modules/@kbn/task-manager-plugin/server/task_running/task_runner.js:325:22)"},"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:55:58.167+02:00","message":"Task apm-source-map-migration-task \"apm-source-map-migration-task-id\" failed: ResponseError: resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.apm-source-map/BQP4nPIkT5ixqGQKAw_SUA] already exists","log":{"level":"ERROR","logger":"plugins.taskManager"},"process":{"pid":10020,"uptime":23.976333133},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"fe36f0062c40e251"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:00.544+02:00","message":"Linking ILM policy to reporting data stream: .kibana-reporting, component template: kibana-reporting@custom","log":{"level":"INFO","logger":"plugins.reporting.store"},"process":{"pid":10020,"uptime":26.35290058},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"5ef38c9c1749a0b1"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.214+02:00","message":"Found 0 concrete indices for .internal.alerts-default.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.022709463},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"tags":["alerting","telemetry-failed"],"error":{"stack_trace":"TypeError: Cannot read properties of undefined (reading 'by_rule_type_id')\n at getTotalAlertsCountAggregations (/usr/share/kibana/node_modules/@kbn/alerting-plugin/server/usage/lib/get_telemetry_from_alerts.js:49:109)\n at processTicksAndRejections (node:internal/process/task_queues:95:5)\n at async Promise.all (index 6)\n at TaskManagerRunner.run (/usr/share/kibana/node_modules/@kbn/task-manager-plugin/server/task_running/task_runner.js:325:22)"},"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.349+02:00","message":"Error executing alerting telemetry task: getTotalAlertsCountAggregations - {}","log":{"level":"WARN","logger":"plugins.alerting.usage"},"process":{"pid":10020,"uptime":27.158309481},"trace":{"id":"0078e95da303dcd4aef8b30759a223d5"},"transaction":{"id":"3cae5961c52de67b"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.668+02:00","message":"Found 0 concrete indices for .internal.alerts-observability.threshold.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.476853267},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.678+02:00","message":"Found 0 concrete indices for .internal.alerts-stack.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.487512174},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.690+02:00","message":"Found 0 concrete indices for .internal.alerts-observability.slo.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.499348049},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.693+02:00","message":"Found 0 concrete indices for .internal.alerts-observability.metrics.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.501543723},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.695+02:00","message":"Found 0 concrete indices for .internal.alerts-transform.health.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.505534815},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.699+02:00","message":"Found 0 concrete indices for .internal.alerts-observability.apm.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.508050928},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.704+02:00","message":"Found 0 concrete indices for .internal.alerts-ml.anomaly-detection.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.513397972},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.708+02:00","message":"Found 0 concrete indices for .internal.alerts-observability.logs.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.516931411},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.718+02:00","message":"Found 0 concrete indices for .internal.alerts-ml.anomaly-detection-health.alerts-default-000001 - []","log":{"level":"INFO","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.528252317},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:01.794+02:00","message":"Error creating concrete write index - resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.internal.alerts-default.alerts-default-000001/uWMn1OUTQZW0NDLmHDMJ5A] already exists","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":27.602916588},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:02.700+02:00","message":"Error creating concrete write index - resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.internal.alerts-observability.apm.alerts-default-000001/Dz2ArFwaSUOpxlxovmwOYQ] already exists","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":28.510006724},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:02.719+02:00","message":"Error creating concrete write index - resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.internal.alerts-observability.slo.alerts-default-000001/S9TWgtfJRKiL9AU6Baunrg] already exists","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":28.527800509},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:02.733+02:00","message":"Error creating concrete write index - resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.internal.alerts-observability.logs.alerts-default-000001/C6kHQOd6SPWmFco9msEcCg] already exists","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":28.542397525},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
{"service":{"node":{"roles":["background_tasks","ui"]}},"ecs":{"version":"8.11.0"},"@timestamp":"2025-08-13T10:56:02.749+02:00","message":"Error creating concrete write index - resource_already_exists_exception\n\tRoot causes:\n\t\tresource_already_exists_exception: index [.internal.alerts-transform.health.alerts-default-000001/JrtaFWOvQeK1-b_yOGwPzQ] already exists","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":10020,"uptime":28.5589537},"trace":{"id":"5f8f04e9fbe5e12aee42f35155bdefb4"},"transaction":{"id":"c6b1e01971561626"}}
Kibana.yml
``
Ansible managed: Do NOT edit this file manually!
csp.strict: false
elasticsearch.hosts:
- https://1xx.xxx.xxx.x:9200
- https://1xx.xxx.xxx.x:9200
- https://1xx.xxx.xxx.x:9200
elasticsearch.password: admin
elasticsearch.ssl.certificateAuthorities:
- /etc/kibana/ssl/Root-G1.crt
elasticsearch.ssl.verificationMode: certificate
elasticsearch.username: admin
logging:
appenders:
rolling-file:
fileName: /var/log/kibana/kibana.json
layout:
type: json
policy:
size: 100mb
type: size-limit
strategy:
max: 3
pattern: -%i
type: numeric
type: rolling-file
root:
appenders:
- default
- rolling-file
migrations.discardCorruptObjects: 8.18.4
migrations.discardUnknownObjects: 8.18.4
server.host: 0.0.0.0
server.name: virtlog1
server.port: 5601
server.publicBaseUrl: https://kibana.virt.gpe
server.ssl.certificate: /etc/kibana/ssl/kibana.crt
server.ssl.cipherSuites:
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_CHACHA20_POLY1305_SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-RSA-CHACHA20-POLY1305
- ECDHE-RSA-AES128-GCM-SHA256
server.ssl.enabled: true
server.ssl.key: /etc/kibana/ssl/kibana.key
server.ssl.supportedProtocols:
- TLSv1.2
- TLSv1.3
xpack.fleet.agents.enabled: false
xpack.fleet.enabled: false
xpack.infra.sources.default.fields.message:
- msg
- message
- '@message'
xpack.productDocBase.artifactRepositoryUrl: file:///etc/kibana/
xpack.reporting.enabled: true
xpack.reporting.encryptionKey: 8sYDfEm6MGDiWSEZEiYGksgCYErTegyL
xpack.reporting.queue.timeout: 15m
xpack.reporting.roles.enabled: false
xpack.security.audit.appender:
fileName: /var/log/kibana/audit.json
layout:
type: json
policy:
interval: 24h
type: time-interval
strategy:
max: 10
type: numeric
type: rolling-file
xpack.security.audit.enabled: true
xpack.security.encryptionKey: dgdgdgdgdgdgdgdgdgd
xpack.security.secureCookies: false
xpack.security.session.idleTimeout: 1w
xpack.security.session.lifespan: 60d