Authentication using apikey failed - unable to find apikey with id

Elastic Stack Elasticsearch
1

Hello,

We are running Elasticsearch 7.17.8 and have many error entries like this on in the elastic logs:
[WARN ][o.e.x.s.a.ApiKeyAuthenticator] [NODENAMEE] Authentication using apikey failed - unable to find apikey with id TH6xaoMBpxRmcd35O5Wv

Probable root cause : Our security index got deleted somehow. So we recreated the API keys from scratch but still we are getting this in our logs.

When we try to invalidate/delete the API keys,we couldnt find it in the index.
GET /_security/api_key --> doesnt give the API keys which shows in logs.

We need help in disable this warnings from logs. Can you guide us how to do it?
Regards,
Vimal

2

That looks to me like a client is trying to authenticate using an old / invalid key... did you check that?

3

We dont have any external client accessing our cluster using API keys. Do we have anyway we can find the source IP of this request?

4

see here, not easy

Also Found This

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.