elasticsearch needrestart

[teadur]

I have problem that needrestart reports elasticsearch as needing to be restart, but that isnt actualy the case.

[main] eval /etc/needrestart/needrestart.conf
[main] needrestart v2.11
[main] running in root mode
[Core] Using UI 'NeedRestart::UI::stdio'...
[main] detected systemd
[main] #2065 uses deleted /tmp/elasticsearch.LCwwd2Uu/jna--1985354563/jna7872475812272732759.tmp
[main] #2065 is not a child
[main] #2065 exe => /usr/lib/jvm/java-8-openjdk-amd64/jre/bin/java
[Core] #2065 is a NeedRestart::Interp::Java
[Core] #2065 source is UNKNOWN
[main] #2065 is elasticsearch.service

The deleted file chnages with every restart so it seems like part of elasticsearch normal startup process.

Is it possible to fix/hide it somehow from needrestart side with configuration?

[liske]

It should be sufficient to add it to the blacklist_mappings setting somewhere in /etc/needrestart/conf.d:

push @{ $nrconf{blacklist_mappings} }, qr(^/tmp/elasticsearch\.);