License expirationedit
Your license is time based and expires at a future date. If you’re using monitoring features and your license will expire within 30 days, a license expiration warning is displayed prominently. Warnings are also displayed on startup and written to the Elasticsearch log starting 30 days from the expiration date. These error messages tell you when the license expires and what features will be disabled if you fail to update the license.
Kibanaedit
- Users can still log into Kibana.
- It is still usable for data exploration and visualization, but some features are disabled.
- The license management UI is available to easily upgrade your license. See Updating your license and License management.
Watcheredit
- The PUT and GET watch APIs are disabled. The DELETE watch API continues to work.
- Watches execute and write to the history.
- The actions of the watches do not execute.
Monitoringedit
- The agent stops collecting cluster and indices metrics.
-
The agent stops automatically cleaning indices older than
xpack.monitoring.history.duration.
Graphedit
- Graph explore APIs are disabled.
Reportingedit
- Reporting is no longer be available in Kibana.
- Report generation URLs stop working.
- Existing reports are no longer accessible.
Securityedit
- Cluster health, cluster stats, and indices stats operations are blocked.
- All data operations (read and write) continue to work.
Once the license expires, calls to the cluster health, cluster stats, and index
stats APIs fail with a security_exception and return a 403 HTTP status code.
{
"error": {
"root_cause": [
{
"type": "security_exception",
"reason": "current license is non-compliant for [security]",
"license.expired.feature": "security"
}
],
"type": "security_exception",
"reason": "current license is non-compliant for [security]",
"license.expired.feature": "security"
},
"status": 403
}
This message enables automatic monitoring systems to easily detect the license failure without immediately impacting other users.
Machine learningedit
- APIs to create jobs, open jobs, send data to jobs, create datafeeds, and start datafeeds are disabled.
- All started datafeeds are stopped. All open jobs are closed.
- Existing job results continue to be available by using Kibana or APIs.
Logstash pipeline managementedit
- Cannot create new pipelines or edit or delete existing pipelines from the UI.
- Cannot list or view existing pipelines from the UI.
- Cannot run Logstash instances which are registered to listen to existing pipelines.
You should update your license as soon as possible. You are essentially flying blind when running with an expired license. Access to the cluster health and stats APIs is critical for monitoring and managing an Elasticsearch cluster.