Briefly, this error occurs when a task in Elasticsearch is cancelled due to insufficient user privileges. This could be due to the user not having the necessary permissions to execute the task or the task exceeding the allowed execution time. To resolve this issue, you can either grant the necessary permissions to the user or increase the task execution time limit. Additionally, ensure that the task is not being unnecessarily blocked by other tasks.
This guide will help you check for common problems that cause the log ” has privilege task cancelled ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin, task.
Overview
A task is an Elasticsearch operation, which can be any request performed on an Elasticsearch cluster, such as a delete by query request, a search request and so on. Elasticsearch provides a dedicated Task API for the task management which includes various actions, from retrieving the status of current running tasks to canceling any long running task.
Examples
Get all currently running tasks on all nodes of the cluster
Apart from other information, the response of the below request contains task IDs of all the tasks which can be used to get detailed information about the particular task in question.
GET _tasks
Get detailed information of a particular task
Where clQFAL_VRrmnlRyPsu_p8A:1132678759 is the ID of the task in below request
GET _tasks/clQFAL_VRrmnlRyPsu_p8A:1132678759
Get all the current tasks running on particular nodes
GET _tasks?nodes=nodeId1,nodeId2
Cancel a task
Where clQFAL_VRrmnlRyPsu_p8A:1132678759 is the ID of the task in the below request
POST /_tasks/clQFAL_VRrmnlRyPsu_p8A:1132678759/_cancel?pretty
Notes
- The Task API will be most useful when you want to investigate the spike of resource utilization in the cluster or want to cancel an operation.
Log Context
Log “has privilege task cancelled” class name is TransportProfileHasPrivilegesAction.java. We extracted the following from Elasticsearch source code for those seeking an in-depth context :
request;
ActionListener.wrap(applicationPrivilegeDescriptors -> threadPool.generic().execute(() -> {
for (Map.Entry profileUidToSubject : profileSubjectsAndFailures.results()) {
// return the partial response if the "has privilege" task got cancelled in the meantime
if (((CancellableTask) task).isCancelled()) {
listener.onFailure(new TaskCancelledException("has privilege task cancelled"));
return;
}
final String profileUid = profileUidToSubject.getKey();
final Subject subject = profileUidToSubject.getValue();
authorizationService.checkPrivileges(
