# After install x-pack plugin elasticsearch can't work

**URL:** <https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852>\
**Category:** Elasticsearch\
**Created:** [October 31, 2017, 9:08am UTC](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852 "2017-10-31T09:08:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![f26227279](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/f26227279/32/21296_2.png) [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Post date:** [October 31, 2017, 9:08am UTC](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852/1 "2017-10-31T09:08:06Z")

</div>

As title.  
ES and Kibana version are all 5.6.2  
and this is log

(omit)  
.  
.  
.

[2017-10-31T16:36:41,363][INFO][o.e.c.s.ClusterService] [Ku2xA7C] new\_master {Ku2xA7C}{Ku2xA7CoTzec-5hieGRJgg}{YWdKj7-dTxykKc12EQdVwA}{127.0.0.1}{127.0.0.1:9300}{ml.max\_open\_jobs=10, ml.enabled=true}, reason: zen-disco-elected-as-master ([0] nodes joined)  
[2017-10-31T16:36:41,910][INFO][o.e.x.s.t.n.SecurityNetty4HttpServerTransport] [Ku2xA7C] publish\_address {127.0.0.1:9200}, bound\_addresses {127.0.0.1:9200}, {[::1]:9200}  
[2017-10-31T16:36:41,910][INFO][o.e.n.Node] [Ku2xA7C] started  
[2017-10-31T16:36:41,988][INFO][o.e.l.LicenseService] [Ku2xA7C] license [10d24801-b10e-4534-8dfa-b2d895accba0] mode [trial] - valid  
[2017-10-31T16:36:41,988][INFO][o.e.g.GatewayService] [Ku2xA7C] recovered [8] indices into cluster\_state  
[2017-10-31T16:36:43,956][INFO][o.e.c.r.a.AllocationService] [Ku2xA7C] Cluster health status changed from [RED] to [YELLOW] (reason: [shards started [[ntopng-2017.10.31][0], [ntopng-2017.10.31][4]] ...]).  
[2017-10-31T16:48:19,679][INFO][o.e.c.m.MetaDataCreateIndexService] [Ku2xA7C] [.security] creating index, cause [auto(update api)], templates [security-index-template], shards [1]/[0], mappings [role, reserved-user, doc, user]  
[2017-10-31T16:48:26,100][WARN][o.e.x.s.a.AuthenticationService] [Ku2xA7C] An error occurred while attempting to authenticate [elastic] against realm [reserved] - ElasticsearchSecurityException[failed to authenticate user [elastic]]  
[2017-10-31T16:48:26,105][WARN][o.e.x.m.e.h.HttpExportBulkResponseListener] bulk request failed unexpectedly  
org.elasticsearch.client.ResponseException: POST [http://localhost:9200/\_bulk?pipeline=xpack\_monitoring\_6&filter\_path=errors%2Citems](http://localhost:9200/_bulk?pipeline=xpack_monitoring_6&filter_path=errors%2Citems)._.error: HTTP/1.1 401 Unauthorized  
{"error":{"root\_cause":[{"type":"security\_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm="security" charset="UTF-8""}}],"type":"security\_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm="security" charset="UTF-8""}},"status":401}  
at org.elasticsearch.client.RestClient$1.completed(RestClient.java:354) [elasticsearch-rest-client-5.6.2.jar:5.6.2]  
at org.elasticsearch.client.RestClient$1.completed(RestClient.java:343) [elasticsearch-rest-client-5.6.2.jar:5.6.2]  
at org.apache.http.concurrent.BasicFuture.completed(BasicFuture.java:119) [httpcore-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.client.DefaultClientExchangeHandlerImpl.responseCompleted(DefaultClientExchangeHandlerImpl.java:177) [httpasyncclient-4.1.2.jar:4.1.2]  
at org.apache.http.nio.protocol.HttpAsyncRequestExecutor.processResponse(HttpAsyncRequestExecutor.java:436) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.nio.protocol.HttpAsyncRequestExecutor.inputReady(HttpAsyncRequestExecutor.java:326) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.DefaultNHttpClientConnection.consumeInput(DefaultNHttpClientConnection.java:265) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.client.InternalIODispatch.onInputReady(InternalIODispatch.java:81) [httpasyncclient-4.1.2.jar:4.1.2]  
at org.apache.http.impl.nio.client.InternalIODispatch.onInputReady(InternalIODispatch.java:39) [httpasyncclient-4.1.2.jar:4.1.2]  
at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:114) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104) [httpcore-nio-4.4.5.jar:4.4.5]  
at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:588) [httpcore-nio-4.4.5.jar:4.4.5]  
at java.lang.Thread.run(Thread.java:844) [?:?]  
[2017-10-31T16:48:28,472][WARN][o.e.x.s.a.AuthenticationService] [Ku2xA7C] An error occurred while attempting to authenticate [elastic] against realm [reserved] - ElasticsearchSecurityException[failed to authenticate user [elastic]]  
[2017-10-31T16:48:28,473][WARN][o.e.x.m.e.h.HttpExportBulkResponseListener] bulk request failed unexpectedly  
org.elasticsearch.client.ResponseException: POST [http://localhost:9200/\_bulk?pipeline=xpack\_monitoring\_6&filter\_path=errors%2Citems](http://localhost:9200/_bulk?pipeline=xpack_monitoring_6&filter_path=errors%2Citems)._.error: HTTP/1.1 401 Unauthorized

thank you in advance.

---

<div class="post-metadata">

**Author:** ![f26227279](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/f26227279/32/21296_2.png) [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Post date:** [October 31, 2017, 9:28am UTC](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852/2 "2017-10-31T09:28:16Z")

</div>

I solved it after changing my password

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 28, 2017, 9:28am UTC](https://discuss.elastic.co/t/after-install-x-pack-plugin-elasticsearch-cant-work/105852/3 "2017-11-28T09:28:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
