# 403 in Discover View

**URL:** <https://discuss.elastic.co/t/403-in-discover-view/336981>\
**Category:** Kibana\
**Created:** [June 27, 2023, 11:19am UTC](https://discuss.elastic.co/t/403-in-discover-view/336981 "2023-06-27T11:19:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lenn\_rt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lenn_rt/32/122763_2.png) [@lenn\_rt](https://discuss.elastic.co/u/lenn_rt)\
**Post date:** [June 27, 2023, 11:19am UTC](https://discuss.elastic.co/t/403-in-discover-view/336981/1 "2023-06-27T11:19:40Z")

</div>

Hey, we trying to implement the ELK Stack (8.7.1) in an AKS via Helm Charts. We are using an NGINX controller to reverse proxy our request and are loadbalancing the requests with an application gateway.  
We are able to receive our logs in the devConsole, so we are pretty sure, that filebeat, logstash and elasticsearch is setup up correctly.  
Our problem is that we are not able to use the discover page. There we are getting a 403 error in an popup.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/c/0c9d92288de5714e9cb523a30d8317a92a395fc3.png)

The error seems to occur when `/internal/bsearch` is called.  
Also strange is, when we copy the profile in the inspect panel and use it in the SearchProfiler, the request also fails. when we reduce the `"fragment_size": 2147483647` by 1 the request goes through.

Further we get an `cookie-session-storage error` in the logs but google didn't provide anything useful regarding this error so far.

```auto
[2023-06-27T09:43:15.770+00:00][DEBUG][http.server.Kibana.cookie-session-storage] Error: Unauthorized
[2023-06-27T09:43:15.771+00:00][DEBUG][plugins.security.basic.basic] Trying to authenticate user request to /
[2023-06-27T09:43:15.773+00:00][DEBUG][plugins.security.basic.basic] Redirecting request to Login page.
[2023-06-27T09:43:15.784+00:00][DEBUG][http.server.response] GET / 302 25ms 
[2023-06-27T09:43:15.788+00:00][DEBUG][http.server.Kibana.cookie-session-storage] Error: Unauthorized
[2023-06-27T09:43:15.788+00:00][DEBUG][plugins.security.basic.basic] Trying to authenticate user request to /login?next=%2Fkibana%2F.
[2023-06-27T09:43:15.789+00:00][DEBUG][plugins.security.http] Trying to authenticate user request to /login?next=%2Fkibana%2F.
[2023-06-27T09:43:15.789+00:00][DEBUG][plugins.security.http] Authorization header is not presented.
[2023-06-27T09:43:15.790+00:00][DEBUG][plugins.security.authentication] Could not handle authentication attempt
[2023-06-27T09:43:15.824+00:00][DEBUG][http.server.response] GET /login?next=%2Fkibana%2F 200 38ms - 90.0KB
[2023-06-27T09:43:16.228+00:00][DEBUG][elasticsearch.query.data] 200 - 228.0B 

```

Do you have any idea what we can do about it?

---

<div class="post-metadata">

**Author:** ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)\
**Post date:** [July 10, 2023, 5:35pm UTC](https://discuss.elastic.co/t/403-in-discover-view/336981/2 "2023-07-10T17:35:14Z")

</div>

Are you able to visit the /status page of your Kibana server?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2023, 5:35pm UTC](https://discuss.elastic.co/t/403-in-discover-view/336981/3 "2023-08-07T17:35:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
