elasticsearh: fix audit warning