[ERROR][o.o.s.l.BuiltinLogTypeLoader] Failed loading builtin log types from disk! java.nio.file.FileSystemNotFoundException: null

OpenSearch
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): 2.17.1.0

Describe the issue
I have locally built the opensearch distro in my mac


curl -k -XGET -u admin:admin "https://localhost:9200/_cat/plugins?v"

name                     component                     version

 opensearch-alerting           2.17.1.0-SNAPSHOT

 opensearch-index-management   2.17.1.0

 opensearch-job-scheduler      2.17.1.0

 opensearch-notifications      2.17.1.0-SNAPSHOT

 opensearch-notifications-core 2.17.1.0-SNAPSHOT

 opensearch-security           2.17.1.0

 opensearch-security-analytics 2.17.1.0-SNAPSHOT

security % curl -k -XGET -u admin:admin "https://localhost:9200"             

{

  "name" : "pro.local",

  "cluster_name" : "opensearch",

  "cluster_uuid" : "GPZwQ7N9QBKnU_TOwq4ZGg",

  "version" : {

    "distribution" : "opensearch",

    "number" : "2.17.1-SNAPSHOT",

    "build_type" : "tar",

    "build_hash" : "1893d20797e30110e5877170e44d42275ce5951e",

    "build_date" : "2025-11-11T02:51:58.469001Z",

    "build_snapshot" : true,

    "lucene_version" : "9.11.1",

    "minimum_wire_compatibility_version" : "7.10.0",

    "minimum_index_compatibility_version" : "7.0.0"

  },

  "tagline" : "The OpenSearch Project: https://opensearch.org/"

}

On starting opensearch, I am seeing the following error,

[2025-11-11T09:24:55,164][WARN ][o.o.g.DanglingIndicesState]  gateway.auto_import_dangling_indices is disabled, dangling indices will not be automatically detected or imported and must be managed manually
[2025-11-11T09:24:55,674][INFO ][o.o.n.Node               ]  initialized
[2025-11-11T09:24:55,674][INFO ][o.o.n.Node               ]  starting ...
[2025-11-11T09:24:55,681][ERROR][o.o.s.l.BuiltinLogTypeLoader]  Failed loading builtin log types from disk!
java.nio.file.FileSystemNotFoundException: null
	at jdk.zipfs@21.0.4/jdk.nio.zipfs.ZipFileSystemProvider.getFileSystem(ZipFileSystemProvider.java:156) ~[?:?]
	at jdk.zipfs@21.0.4/jdk.nio.zipfs.ZipFileSystemProvider.getPath(ZipFileSystemProvider.java:142) ~[?:?]
	at java.base/java.nio.file.Path.of(Path.java:209) ~[?:?]
	at java.base/java.nio.file.Paths.get(Paths.java:98) ~[?:?]
	at org.opensearch.securityanalytics.logtype.BuiltinLogTypeLoader.loadBuiltinLogTypes(BuiltinLogTypeLoader.java:73) ~[opensearch-security-analytics-2.17.1.0-SNAPSHOT.jar:2.17.1.0-SNAPSHOT]
	at org.opensearch.securityanalytics.logtype.BuiltinLogTypeLoader.ensureLogTypesLoaded(BuiltinLogTypeLoader.java:62) [opensearch-security-analytics-2.17.1.0-SNAPSHOT.jar:2.17.1.0-SNAPSHOT]
	at org.opensearch.securityanalytics.logtype.BuiltinLogTypeLoader.doStart(BuiltinLogTypeLoader.java:146) [opensearch-security-analytics-2.17.1.0-SNAPSHOT.jar:2.17.1.0-SNAPSHOT]
	at org.opensearch.common.lifecycle.AbstractLifecycleComponent.start(AbstractLifecycleComponent.java:77) [opensearch-common-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1596) [?:?]
	at java.base/java.util.Collections$UnmodifiableCollection.forEach(Collections.java:1116) [?:?]
	at org.opensearch.node.Node.start(Node.java:1564) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.Bootstrap.start(Bootstrap.java:339) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.Bootstrap.init(Bootstrap.java:413) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.OpenSearch.init(OpenSearch.java:181) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.OpenSearch.execute(OpenSearch.java:172) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:104) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.cli.Command.mainWithoutErrorHandling(Command.java:138) [opensearch-cli-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.cli.Command.main(Command.java:101) [opensearch-cli-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:138) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
	at org.opensearch.bootstrap.OpenSearch.main(OpenSearch.java:104) [opensearch-2.17.1-SNAPSHOT.jar:2.17.1-SNAPSHOT]
[2025-11-11T09:24:55,822][INFO ][o.o.t.TransportService   ]  publish_address {127.0.0.1:9300}, bound_addresses {[::1]:9300}, {127.0.0.1:9300}
[2025-11-11T09:24:55,823][INFO ][o.o.t.TransportService   ]  Remote clusters initialized successfully.

Configuration:

Relevant Logs or Screenshots:

2

Hey @Andya ,

Could you share the configuration and steps used that resulted in this error.

Leeroy.

3

git clone -b 2.17.1 ``https://github.com/opensearch-project/OpenSearch.git
./gradlew localDistro
Install the security and security-analytics plugin

https://repo1.maven.org/maven2/org/opensearch/plugin/opensearch-security-analytics/2.17.1.0/opensearch-security-analytics-2.17.1.0.zip

./bin/opensearch

I see error in logs. No changes in config file

Note: I am deploying the opensearch inside my mac

4

@Leeroy I see the same error if I build and start opensearch inside the container

5

@Andya I’ve tested your scenario, and I’ve got the same error during the startup in 2.17.1.
This has already been reported on GitHub.

I’ve checked in version 2.18.0 and 2.19.1. The error is no longer there, however plugin is still communicating an issue with loading log types.

[2025-11-24T19:15:28,534][WARN ][o.o.s.SecurityAnalyticsPlugin] [MacBook-Pro.local] Failed to initialize LogType config index and builtin log types

I’ve checked indices in 2.17.1, 2.18.0 and 2.19.1, and all of them had an index with SAP log types.

curl --insecure -u admin:Eliatra123 'https://localhost:9200/_cat/indices?expand_wildcards=all'              

green open .opensearch-sap-log-types-config KOm-7AmlS2S9X4Lnw4zEUQ 1 0 452 46 128.4kb 128.4kb
green open .opendistro_security             tGXqNg0GRk6D_uSjvlgYQQ 1 0  10  0  79.9kb  79.9kb

Did you notice any issues with the SAP plugin?