Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Self-generated Docker images on third-party integrations #523

Closed
1 task
Tracked by #485
AlexRuiz7 opened this issue Nov 6, 2024 · 1 comment · May be fixed by #627
Closed
1 task
Tracked by #485

Self-generated Docker images on third-party integrations #523

AlexRuiz7 opened this issue Nov 6, 2024 · 1 comment · May be fixed by #627
Assignees
@AlexRuiz7
Labels
level/task Task issue request/operational Operational requests type/enhancement Enhancement issue

Comments

@AlexRuiz7
Copy link
Member

AlexRuiz7 commented Nov 6, 2024 •
edited
Loading

Description

Our Docker Compose projects for the 3rd party integrations' development environments currently use "fake" Wazuh Indexer and Wazuh Dashboard Docker images, as they actually use OpenSearch's images.

Replace these with our images in Quay.io.

Related issues:

Functional requirements

  • The development environments of the integrations use Wazuh Indexer docker images.

Implementation restrictions

  • The docker images are pulled from the Quay container registry.

Plan

  • Replace OpenSearch's Docker images with Wazuh's Indexer and Dashboard docker images.
@AlexRuiz7 AlexRuiz7 mentioned this issue Nov 6, 2024
Closed
12 tasks
@AlexRuiz7 AlexRuiz7 added level/task Task issue request/operational Operational requests type/enhancement Enhancement issue labels Nov 6, 2024
@wazuhci wazuhci moved this to Triage in XDR+SIEM/Release 5.0.0 Nov 6, 2024
This was referenced Nov 11, 2024
Closed
Closed
@wazuhci wazuhci moved this from Triage to Backlog in XDR+SIEM/Release 5.0.0 Nov 11, 2024
@wazuhci wazuhci moved this from Backlog to In progress in XDR+SIEM/Release 5.0.0 Nov 29, 2024
@wazuhci wazuhci moved this from In progress to Backlog in XDR+SIEM/Release 5.0.0 Nov 29, 2024
@mcasas993 mcasas993 assigned mcasas993 and unassigned QU3B1M Dec 19, 2024
@wazuhci wazuhci moved this from Backlog to Blocked in XDR+SIEM/Release 5.0.0 Dec 24, 2024
@AlexRuiz7 AlexRuiz7 assigned AlexRuiz7 and unassigned mcasas993 Dec 27, 2024
@wazuhci wazuhci moved this from Blocked to In progress in XDR+SIEM/Release 5.0.0 Dec 27, 2024
@AlexRuiz7 AlexRuiz7 mentioned this issue Jan 7, 2025
Draft
3 tasks
@AlexRuiz7 AlexRuiz7 closed this as not planned Won't fix, can't repro, duplicate, stale Jan 7, 2025
@AlexRuiz7
Copy link
Member Author

It is currently not possible to perform the migration due to the existing errors on the Command Manager.

Related issues:

Details 

[2025-01-07T16:17:23,497][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:17:24,766][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.kibana_1/WXIxohenRwOOiUzQcteiCw]
[2025-01-07T16:17:24,771][INFO ][o.o.c.m.MetadataCreateIndexService] [wazuh.indexer] [.kibana_1] creating index, cause [api], templates [], shards [1]/[1]
[2025-01-07T16:17:24,771][INFO ][o.o.c.r.a.AllocationService] [wazuh.indexer] updating number_of_replicas to [0] for indices [.kibana_1]
[2025-01-07T16:17:24,772][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:17:24,821][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.kibana_1/WXIxohenRwOOiUzQcteiCw]
[2025-01-07T16:17:24,883][INFO ][o.o.c.r.a.AllocationService] [wazuh.indexer] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.kibana_1][0]]]).
[2025-01-07T16:17:24,913][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:17:30,370][INFO ][o.o.m.a.MLModelAutoReDeployer] [wazuh.indexer] Index not found, not performing auto reloading!
[2025-01-07T16:17:30,371][INFO ][o.o.m.c.MLCommonsClusterManagerEventListener] [wazuh.indexer] Starting ML sync up job...
Security Admin v7
Will connect to localhost:9200 ... done
[2025-01-07T16:17:38,636][ERROR][o.o.h.n.s.SecureNetty4HttpServerTransport] [wazuh.indexer] Exception during establishing a SSL connection: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1263) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1167) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1144) ~[?:?]
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[?:?]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1679) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1525) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1366) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1415) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.114.Final.jar:4.1.114.Final]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:318) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        ... 30 more
Caused by: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83) ~[?:?]
        at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:313) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        ... 30 more
Caused by: java.security.SignatureException: Signature does not match.
        at java.base/sun.security.x509.X509CertImpl.verify(X509CertImpl.java:371) ~[?:?]
        at java.base/sun.security.provider.certpath.BasicChecker.verifySignature(BasicChecker.java:166) ~[?:?]
        at java.base/sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:147) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83) ~[?:?]
        at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:313) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        ... 30 more
ERR: An unexpected SSLHandshakeException occured: Received fatal alert: certificate_unknown
See https://opensearch.org/docs/latest/clients/java-rest-high-level/ for troubleshooting.
Trace:
[2025-01-07T16:17:38,639][WARN ][o.o.h.AbstractHttpServerTransport] [wazuh.indexer] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:60554}
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:500) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1357) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:868) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:689) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:652) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562) [netty-transport-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.114.Final.jar:4.1.114.Final]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326) ~[?:?]
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1263) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1167) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1144) ~[?:?]
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[?:?]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1679) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1525) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1366) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1415) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        ... 16 more
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:318) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1167) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1144) ~[?:?]
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[?:?]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1679) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1525) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1366) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1415) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        ... 16 more
Caused by: java.security.cert.CertPathValidatorException: signature check failed
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83) ~[?:?]
        at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:313) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1167) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1144) ~[?:?]
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[?:?]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1679) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1525) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1366) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1415) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        ... 16 more
Caused by: java.security.SignatureException: Signature does not match.
        at java.base/sun.security.x509.X509CertImpl.verify(X509CertImpl.java:371) ~[?:?]
        at java.base/sun.security.provider.certpath.BasicChecker.verifySignature(BasicChecker.java:166) ~[?:?]
        at java.base/sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:147) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144) ~[?:?]
        at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83) ~[?:?]
        at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:313) ~[?:?]
        at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:267) ~[?:?]
        at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[?:?]
        at java.base/sun.security.ssl.X509TrustManagerImpl.checkClientTrusted(X509TrustManagerImpl.java:138) ~[?:?]
        at io.netty.handler.ssl.EnhancingX509ExtendedTrustManager.checkClientTrusted(EnhancingX509ExtendedTrustManager.java:62) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1241) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1167) ~[?:?]
        at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1144) ~[?:?]
        at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[?:?]
        at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:476) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[?:?]
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[?:?]
        at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[?:?]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1679) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1525) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1366) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1415) ~[netty-handler-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:530) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:469) ~[netty-codec-4.1.114.Final.jar:4.1.114.Final]
        ... 16 more
javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
See https://opensearch.org/docs/latest/clients/java-rest-high-level/ for troubleshooting.
        at org.opensearch.client.RestClient.extractAndWrapCause(RestClient.java:1241)
        at org.opensearch.client.RestClient.performRequest(RestClient.java:358)
        at org.opensearch.client.RestClient.performRequest(RestClient.java:346)
        at org.opensearch.security.tools.SecurityAdmin.execute(SecurityAdmin.java:575)
        at org.opensearch.security.tools.SecurityAdmin.main(SecurityAdmin.java:165)
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)
        at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
        at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:370)
        at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:287)
        at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:209)
        at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
        at java.base/sun.security.ssl.SSLEngineImpl.decode(SSLEngineImpl.java:736)
        at java.base/sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:691)
        at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:506)
        at java.base/sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:482)
        at java.base/javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:679)
        at org.apache.http.nio.reactor.ssl.SSLIOSession.doUnwrap(SSLIOSession.java:279)
        at org.apache.http.nio.reactor.ssl.SSLIOSession.decryptData(SSLIOSession.java:505)
        at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:548)
        at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)
        at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)
        at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)
        at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
        at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591)
        at java.base/java.lang.Thread.run(Thread.java:1583)


[2025-01-07T16:17:40,379][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.plugins-ml-config/mEUnl4fZTVq8vLilTG4BgA]
[2025-01-07T16:17:40,384][INFO ][o.o.c.m.MetadataCreateIndexService] [wazuh.indexer] [.plugins-ml-config] creating index, cause [api], templates [], shards [1]/[1]
[2025-01-07T16:17:40,386][INFO ][o.o.c.r.a.AllocationService] [wazuh.indexer] updating number_of_replicas to [0] for indices [.plugins-ml-config]
[2025-01-07T16:17:40,386][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:17:40,426][INFO ][o.o.p.PluginsService     ] [wazuh.indexer] PluginService:onIndexModule index:[.plugins-ml-config/mEUnl4fZTVq8vLilTG4BgA]
[2025-01-07T16:17:40,487][INFO ][o.o.c.r.a.AllocationService] [wazuh.indexer] Cluster health status changed from [YELLOW] to [GREEN] (reason: [shards started [[.plugins-ml-config][0]]]).
[2025-01-07T16:17:40,515][INFO ][o.o.m.e.i.MLIndicesHandler] [wazuh.indexer] create index:.plugins-ml-config
[2025-01-07T16:17:40,518][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:17:40,544][INFO ][o.o.m.c.MLSyncUpCron     ] [wazuh.indexer] ML configuration initialized successfully
[2025-01-07T16:18:20,354][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Performing ISM template migration.
[2025-01-07T16:18:20,356][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] Doing ISM template migration 1 time.
[2025-01-07T16:18:20,356][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] Use 2025-01-07T15:17:20.352Z as migrating ISM template last_updated_time
[2025-01-07T16:18:20,358][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] ISM templates: {}
[2025-01-07T16:18:20,358][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] Policies to update: []
[2025-01-07T16:18:20,363][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] Failure experienced when migrating ISM Template and update ISM policies: {}
[2025-01-07T16:18:20,361][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseStart listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseStart(SearchRequestStats.java:76) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseStart(SearchRequestOperationsListener.java:87) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseStart(AbstractSearchAsyncAction.java:465) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:18:20,369][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseEnd listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseEnd(SearchRequestStats.java:81) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseEnd(SearchRequestOperationsListener.java:98) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseEnd(AbstractSearchAsyncAction.java:458) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:447) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:18:20,373][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Performing move cluster state metadata.
[2025-01-07T16:18:20,374][INFO ][o.o.i.i.MetadataService  ] [wazuh.indexer] ISM config index not exist, so we cancel the metadata migration job.
[2025-01-07T16:18:20,376][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseStart listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseStart(SearchRequestStats.java:76) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseStart(SearchRequestOperationsListener.java:87) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseStart(AbstractSearchAsyncAction.java:465) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:448) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:18:20,386][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseEnd listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseEnd(SearchRequestStats.java:81) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseEnd(SearchRequestOperationsListener.java:98) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseEnd(AbstractSearchAsyncAction.java:458) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.sendSearchResponse(AbstractSearchAsyncAction.java:762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1$1.run(TransportSearchAction.java:401) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:448) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:18:20,440][INFO ][o.o.c.s.ClusterSettings  ] [wazuh.indexer] updating [plugins.index_state_management.template_migration.control] from [0] to [-1]
[2025-01-07T16:18:20,444][WARN ][o.o.c.r.a.AllocationService] [wazuh.indexer] Falling back to single shard assignment since batch mode disable or multiple custom allocators set
[2025-01-07T16:18:20,445][INFO ][o.o.i.i.m.ISMTemplateService] [wazuh.indexer] Successfully update template migration setting
[2025-01-07T16:19:20,356][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseStart listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseStart(SearchRequestStats.java:76) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseStart(SearchRequestOperationsListener.java:87) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseStart(AbstractSearchAsyncAction.java:465) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:19:20,360][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseEnd listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseEnd(SearchRequestStats.java:81) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseEnd(SearchRequestOperationsListener.java:98) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseEnd(AbstractSearchAsyncAction.java:458) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:447) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:19:20,365][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseStart listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseStart(SearchRequestStats.java:76) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseStart(SearchRequestOperationsListener.java:87) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseStart(AbstractSearchAsyncAction.java:465) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:448) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:19:20,374][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Cancel background move metadata process.
[2025-01-07T16:19:20,371][WARN ][o.o.a.s.TransportSearchAction] [wazuh.indexer] onPhaseEnd listener [org.opensearch.action.search.SearchRequestStats@24ff6ad] failed
java.lang.IllegalArgumentException: No enum constant org.opensearch.action.search.SearchPhaseName.CREATE_PIT
        at java.base/java.lang.Enum.valueOf(Enum.java:293) ~[?:?]
        at org.opensearch.action.search.SearchPhaseName.valueOf(SearchPhaseName.java:18) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.getSearchPhaseName(SearchPhase.java:77) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestStats.onPhaseEnd(SearchRequestStats.java:81) ~[opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchRequestOperationsListener$CompositeListener.onPhaseEnd(SearchRequestOperationsListener.java:98) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseEnd(AbstractSearchAsyncAction.java:458) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.sendSearchResponse(AbstractSearchAsyncAction.java:762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1$1.run(TransportSearchAction.java:401) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executeNextPhase(AbstractSearchAsyncAction.java:448) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onPhaseDone(AbstractSearchAsyncAction.java:815) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.successfulShardExecution(AbstractSearchAsyncAction.java:663) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResultConsumed(AbstractSearchAsyncAction.java:650) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$onShardResult$9(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.ArraySearchPhaseResults.consumeResult(ArraySearchPhaseResults.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.onShardResult(AbstractSearchAsyncAction.java:628) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction$1.innerOnResponse(AbstractSearchAsyncAction.java:303) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:59) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchActionListener.onResponse(SearchActionListener.java:44) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.lambda$executeOnShardTarget$0(CreatePitController.java:147) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.action.ActionListenerResponseHandler.handleResponse(ActionListenerResponseHandler.java:70) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$9.handleResponse(TransportService.java:1735) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor$RestoringTransportResponseHandler.handleResponse(SecurityInterceptor.java:414) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService$ContextRestoreResponseHandler.handleResponse(TransportService.java:1517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.processResponse(TransportService.java:1600) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$DirectResponseChannel.sendResponse(TransportService.java:1580) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TaskTransportChannel.sendResponse(TaskTransportChannel.java:72) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.ChannelActionListener.onResponse(ChannelActionListener.java:62) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$15(SearchTransportService.java:690) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.lambda$createPitReaderContext$7(SearchService.java:1040) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.shard.IndexShard.awaitShardSearchActive(IndexShard.java:4791) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.SearchService.createPitReaderContext(SearchService.java:1008) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.lambda$registerRequestHandler$16(SearchTransportService.java:686) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceivedDecorate(SecuritySSLRequestHandler.java:207) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.transport.SecurityRequestHandler.messageReceivedDecorate(SecurityRequestHandler.java:211) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.ssl.transport.SecuritySSLRequestHandler.messageReceived(SecuritySSLRequestHandler.java:106) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$1.messageReceived(OpenSearchSecurityPlugin.java:865) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.indexmanagement.rollup.interceptor.RollupInterceptor$interceptHandler$1.messageReceived(RollupInterceptor.kt:119) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.PerformanceAnalyzerTransportRequestHandler.messageReceived(PerformanceAnalyzerTransportRequestHandler.java:44) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.performanceanalyzer.transport.RTFPerformanceAnalyzerTransportRequestHandler.messageReceived(RTFPerformanceAnalyzerTransportRequestHandler.java:63) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.wlm.WorkloadManagementTransportInterceptor$RequestHandler.messageReceived(WorkloadManagementTransportInterceptor.java:63) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:108) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendLocalRequest(TransportService.java:1065) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService$3.sendRequest(TransportService.java:161) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequestInternal(TransportService.java:1001) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.transport.SecurityInterceptor.sendRequestDecorate(SecurityInterceptor.java:282) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.OpenSearchSecurityPlugin$6$2.sendRequest(OpenSearchSecurityPlugin.java:884) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.transport.TransportService.sendRequestAsync(TransportService.java:1762) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendRequest(TransportService.java:897) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.transport.TransportService.sendChildRequest(TransportService.java:963) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchTransportService.createPitContext(SearchTransportService.java:172) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController$1.executeOnShardTarget(CreatePitController.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction$1$1.executePhaseOnShard(TransportSearchAction.java:392) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.lambda$performPhaseOnShard$3(AbstractSearchAsyncAction.java:299) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.performPhaseOnShard(AbstractSearchAsyncAction.java:347) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.run(AbstractSearchAsyncAction.java:269) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.SearchPhase.recordAndRun(SearchPhase.java:61) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.executePhase(AbstractSearchAsyncAction.java:481) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.AbstractSearchAsyncAction.start(AbstractSearchAsyncAction.java:235) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeSearch(TransportSearchAction.java:1112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeLocalSearch(TransportSearchAction.java:877) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$buildRewriteListener$5(TransportSearchAction.java:517) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:140) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.index.query.Rewriteable.rewriteAndFetch(Rewriteable.java:105) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.lambda$executeRequest$1(TransportSearchAction.java:476) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.core.action.ActionListener$1.onResponse(ActionListener.java:82) [opensearch-core-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.Pipeline.transformRequest(Pipeline.java:125) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.search.pipeline.PipelinedRequest.transformRequest(PipelinedRequest.java:34) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:483) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportSearchAction.executeRequest(TransportSearchAction.java:345) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:127) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.CreatePitController.executeCreatePit(CreatePitController.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:76) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.search.TransportCreatePitAction.doExecute(TransportCreatePitAction.java:35) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:220) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.rollup.actionfilter.FieldCapsFilter.apply(FieldCapsFilter.kt:118) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.indexmanagement.controlcenter.notification.filter.IndexOperationActionFilter.apply(IndexOperationActionFilter.kt:39) [opensearch-index-management-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.security.filter.SecurityFilter.apply0(SecurityFilter.java:325) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.security.filter.SecurityFilter.apply(SecurityFilter.java:166) [opensearch-security-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.performanceanalyzer.action.PerformanceAnalyzerActionFilter.apply(PerformanceAnalyzerActionFilter.java:77) [opensearch-performance-analyzer-2.18.0.0.jar:2.18.0.0]
        at org.opensearch.action.support.TransportAction$RequestFilterChain.proceed(TransportAction.java:218) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:190) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.action.support.TransportAction.execute(TransportAction.java:109) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.executeLocally(NodeClient.java:112) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.node.NodeClient.doExecute(NodeClient.java:99) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.execute(AbstractClient.java:480) [opensearch-2.18.0.jar:2.18.0]
        at org.opensearch.client.support.AbstractClient.createPit(AbstractClient.java:636) [opensearch-2.18.0.jar:2.18.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.buildPit(SearchThread.java:323) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at com.wazuh.commandmanager.jobscheduler.SearchThread.run(SearchThread.java:234) [wazuh-indexer-command-manager-5.0.0.0.jar:5.0.0.0]
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572) [?:?]
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317) [?:?]
        at org.opensearch.common.util.concurrent.ThreadContext$ContextPreservingRunnable.run(ThreadContext.java:946) [opensearch-2.18.0.jar:2.18.0]
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) [?:?]
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) [?:?]
        at java.base/java.lang.Thread.run(Thread.java:1583) [?:?]
[2025-01-07T16:19:20,375][INFO ][o.o.i.i.ManagedIndexCoordinator] [wazuh.indexer] Performing move cluster state metadata.
[2025-01-07T16:19:20,375][INFO ][o.o.i.i.MetadataService  ] [wazuh.indexer] Move metadata has finished.

We'll revisit this in the future.

@wazuhci wazuhci moved this from In progress to Done in XDR+SIEM/Release 5.0.0 Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@AlexRuiz7 AlexRuiz7

Labels
level/task Task issue request/operational Operational requests type/enhancement Enhancement issue
Projects
XDR+SIEM/Release 5.0.0
Status: Done
Milestone
No milestone
3 participants
@AlexRuiz7 @mcasas993 @QU3B1M