Authentication using apikey failed - unable to find apikey with id

[stephenb (Stephen Brown)]

see here, not easy

Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]

Hi @aaronlbk Something does not make sense you have an empty elasticsearch.yml yet you have authentication enabled ... that is not normal / highly unusual (basically not sure how that is even possible) Are you sure that is the elasticsearch.yml that is being used? How did you install elasticsearch? is this an upgrade from 7.x? Normally you would turn on Audit logging but that requires a License. Something is definitely attempting to authenticate... You might be able to see which process…

Also Found This

[ Creating new rule ]: ERROR Authentication using apikey failed - api key has been invalidated

In the current 7.10.x series when a long running rule is still running and you go to update the rule while it is currently running, the API key which represents the rule is invalidated immediately which can result in that rule execution immediately showing an error within that current rule run. The next rule run interval should clear out the error and you should see it run correctly. If on the second rule run it does not clear out and you are consistently seeing this error appear again and agai…