An HTTP GET request to the Elasticsearch /_nodes endpoint. This primitive represents node-level enumeration where a client attempts to retrieve information about cluster nodes, including roles, versions, plugins, transport details, and network exposure. Automated scanners and attackers commonly use this request to fingerprint the Elasticsearch deployment, identify vulnerable versions, and map the internal structure of the cluster prior to further probing or exploitation.