Many plugin.readonlyrest.wiring.requestcontext messages in elastic log

1

hi,
we are using cerebro to not on ES machines.
once i turn cerebro on elastic log start filling with messages :

[2017-06-19 12:44:35,062][INFO][plugin.readonlyrest.wiring.requestcontext] id:489961315-1764496868 - Replacing indices. Old:[] New:[shakespeare_01,shakespeare_02,index222,index1,index11,index22,index9,index91]

the part from the yml file look like :
-name: "::CERERO::"
verbosity: error
auth_key:cerebro:cerebro
type: allow
indices:[“index*”,“shake*”]
actions: [“indices:admin/",indices:data/read/”,“indices:monitor/","cluster:admin/”,“cluster:monitor/*”]

it’s important to mention that cerebro is working fine with ROR and it shows only the correct indices. it just fill the elastic log.

please advice

2

Look for “489961315-1764496868” in the logs and show us the incoming request log line

3

i’ve restart ES with DEBUG
these are the relevant lines :

[2017-06-20 10:10:18,046][DEBUG][plugin.readonlyrest.acl] checking request:416750856-707462245

[2017-06-20 10:10:18,050][DEBUG][plugin.readonlyrest.wiring.requestcontext] Finding indices for: 416750856-707462245 GetIndexRequest

[2017-06-20 10:10:18,051][DEBUG][plugin.readonlyrest.acl] [allow all from localhost] the request matches no rules in this block: {ID:416750856-707462245,TYP:GetIndexRequest, USR:cerebro(?), BRS:true, ACT:indices:admin/get, OA:10.0.0.1,IDX:_all, MET:GET, PTH:/_aliases, CNT:<N/A>, HDR:{Accept=/, Authorization=Basic Y2Vy…, Connection=keep-alive, Host=server1:9200, User-Agent=AHC/1.0},HIS:[allow all from localhost->[hosts->false]]}

[2017-06-20 10:10:18,052][INFO][plugin.readonlyrest.acl.blocks.rules] Attempting Login as: cerebro rc: {ID:416750856-707462245,TYP:GetIndexRequest, USR:cerebro(?), BRS:true, ACT:indices:admin/get, OA:10.0.0.1,IDX:_all, MET:GET, PTH:/_aliases, CNT:<N/A>, HDR:{Accept=/, Authorization=Basic Y2Vy…, Connection=keep-alive, Host=server1:9200, User-Agent=AHC/1.0}, HIS:[allow all from localhost->[hosts->false]]}

[2017-06-20 10:10:18,055][INFO][plugin.readonlyrest.wiring.requestcontext] id: 416750856-707462245 - Replacing indices. Old:[_all] New:[shakespeare_01,shakespeare_02,index222,index1,index11,index22,index9000,shakespeare,index2,index9,index91]

(since i’m working offline from internet with my ES i had to type these line manually. i hope i didn’t miss something)

thanks.

4

Hmm… you are in debug mode, that’s why it’s verbose. Right?

5

i turn debug on to see some more messages.

in normal, the relevant part of logging.yml looks like
es.logger.level: INFO
logger:
action: INFO

when it’s only INFO i get one line at the logfile which is :
[2017-06-19 12:44:35,062][INFO][plugin.readonlyrest.wiring.requestcontext] id:489961315-1764496868 - Replacing indices. Old:[] New:[shakespeare_01,shakespeare_02,index222,index1,index11,index22,index9,index91]

one i change those INFO to DEBUG i get those extra lines

1 Like
6

sounds good to me, do you think that last log line should be in debug?

7

i dont know what this message means.
because the log start filling up with these messages once the cerebro plug-in is start quring this cluster i think they should be only on debug mode (if they mean nothing important).

8

Meaning of the message

the intention of that log line is to give some visibility to the index rewriting that occurs in order to prevent users from reading each other’s private indices.

OK I can put those in debug mode, but from the next release.

9

hi,
do you an idea if i can add a logger+appender blocks in logging.yml to filter those messages or at least to write them to a different file?

i tried to add some different blocks(RegexFilter) in the logging.yml file but couldn’t found the correct configuration and those messages kept coming.

thanks