Briefly, this error occurs when a connection is made to Elasticsearch and the IP address of the origin is allowed by the IP filter rules set in the transport profile. This is not an error but an informational message indicating that the connection has been successfully granted. If you don’t want to see these messages, you can adjust the logging level in Elasticsearch. Alternatively, if you want to restrict certain IP addresses, you can modify the IP filter rules in the transport profile.
This guide will help you check for common problems that cause the log ” {}[ip_filter] [connection_granted]\torigin_address=[{}]; transport_profile=[{}]; rule=[{}]{} ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin.
Log Context
Log “{}[ip_filter] [connection_granted]\torigin_address=[{}]; transport_profile=[{}]; rule=[{}]{}” classname is DeprecatedLoggingAuditTrail.java.
We extracted the following from Elasticsearch source code for those seeking an in-depth context :
}
@Override
public void connectionGranted(InetAddress inetAddress; String profile; SecurityIpFilterRule rule) {
if (events.contains(CONNECTION_GRANTED) && (eventFilterPolicyRegistry.ignorePredicate().test(AuditEventMetaInfo.EMPTY) == false)) {
logger.info("{}[ip_filter] [connection_granted]\torigin_address=[{}]; transport_profile=[{}]; rule=[{}]{}";
localNodeInfo.prefix; NetworkAddress.format(inetAddress); profile; rule; opaqueId());
}
}
@Override
[ratemypost]
