I using ELK stack of version 7.11.0. I have Basic License enabled. I am using RUM agentsfrom React to send telemetry. But while coming to Kibana getting unauthorized error.
Hi there,
By default APM data is written to apm* indices. Can you verify that the user has access to these indices?
Can you try running this in Kibana Dev Tools:
GET apm*/_search?terminate_after=1000
{
"size": 0,
"aggs": {
"events": {
"terms": {
"field": "processor.event",
"size": 10
}
}
}
}
How to enable privilages. it is the superuser.
Could it be the proxy in the middle that's blocking the response?
Can you try calling ES directly?
curl -X GET "localhost:9200/apm*/_search?pretty"
You probably need to supply credentials
curl -X GET "localhost:9200/apm*/_search?pretty" -u elastic:changeme
I tried from Kibana host above command .. it giving me results. Replaced localhost with my ES and credentials
curl -X GET "localhost:9200/apm*/_search?pretty" -u
{
"took" : 1,
"timed_out" : false,
"_shards" : {
"total" : 7,
"successful" : 7,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 2,
"relation" : "eq"
},
"max_score" : 1.0,
"hits" : [
{
"_index" : "apm-7.11.1-onboarding-2021.07.22",
"_type" : "_doc",
"_id" : "",
"_score" : 1.0,
"_source" : {
"observer" : {
"listening" : "[::]:8200",
"hostname" : "",
"id" : "",
"ephemeral_id" : "",
"type" : "apm-server",
"version" : "7.11.1",
"version_major" : 7
},
"@timestamp" : "2021-07-22T20:24:30.191Z",
"ecs" : {
"version" : "1.6.0"
},
"event" : {
"ingested" : "2021-07-22T20:24:34.843887025Z"
},
"processor" : {
"name" : "onboarding",
"event" : "onboarding"
}
}
},
{
"_index" : "apm-7.11.1-onboarding-2021.07.26",
"_type" : "_doc",
"_id" : "",
"_score" : 1.0,
"_source" : {
"observer" : {
"listening" : "[::]:8200",
"hostname" : "-0",
"id" : "",
"type" : "apm-server",
"ephemeral_id" : "",
"version" : "7.11.1",
"version_major" : 7
},
"@timestamp" : "2021-07-26T18:08:31.966Z",
"ecs" : {
"version" : "1.6.0"
},
"event" : {
"ingested" : ""
},
"processor" : {
"name" : "onboarding",
"event" : "onboarding"
}
}
}
]
}
}
I don't know, it was working fine but suddenly it got stopped.
Do you have access to the Kibana logs? They might tell us exactly what is causing the unauthorized error.
sorry for late reply.. I do have the access to kibana logs but I am seeing everything ok. Please find the same logs.
From the log file I am finding only, whether it 200 or other than 200 not the cause. Can you please suggest anything.
Can you view APM data in Discover?
When I am trying index pattern with apm-* giving me forbidden. But when I am trying with individual index of apm, I am able to create index pattern in Discover.
any update please?
Your problem is not isolated to APM but seems to be a problem with permissions on general.
I suggest you close this and create a new thread.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.