This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
« Use serial collector check OnError and OnOutOfMemoryError checks »
Elastic Docs ›Elasticsearch Guide [master] ›Set up Elasticsearch ›Bootstrap Checks

System call filter check

edit

System call filter check

edit

Elasticsearch installs system call filters of various flavors depending on the operating system (e.g., seccomp on Linux). These system call filters are installed to prevent the ability to execute system calls related to forking as a defense mechanism against arbitrary code execution attacks on Elasticsearch. The system call filter check ensures that if system call filters are enabled, then they were successfully installed. To pass the system call filter check you must fix any configuration errors on your system that prevented system call filters from installing (check your logs).

« Use serial collector check OnError and OnOutOfMemoryError checks »