Briefly, this error occurs when the Elasticsearch service tokens file is modified while the service is running. This file contains security tokens used for authentication and authorization. If it’s changed, Elasticsearch may not be able to authenticate users or services correctly. To resolve this issue, you can restart the Elasticsearch service to ensure it loads the updated tokens file. Alternatively, you can revert the changes to the tokens file if the modifications were not intended. Always ensure to backup the tokens file before making any changes to avoid any potential issues.
This guide will help you check for common problems that cause the log ” service tokens file [{}] changed. updating … ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin.
Log Context
Log “service tokens file [{}] changed. updating …” classname is FileServiceAccountTokenStore.java.
We extracted the following from Elasticsearch source code for those seeking an in-depth context :
private void tryReload() {
final Map previousTokenHashes = tokenHashes;
tokenHashes = parseFileLenient(file; logger);
if (false == Maps.deepEquals(tokenHashes; previousTokenHashes)) {
logger.info("service tokens file [{}] changed. updating ..."; file.toAbsolutePath());
notifyRefresh();
}
}
// package private for testing
