# Cant access ES data in Kibana generated by Rally benchmarks **URL:** \ **Category:** Kibana\ **Created:** [May 1, 2017, 12:18pm UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148 "2017-05-01T12:18:29Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![russmac](https://avatars.discourse-cdn.com/v4/letter/r/f08c70/32.png) [@russmac](https://discuss.elastic.co/u/russmac)\ **Post date:** [May 1, 2017, 12:18pm UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/1 "2017-05-01T12:18:29Z")
So heres my indices: curl --user elastic:secret -XGET 'localhost:9200/\_cat/indices' yellow open .kibana 0gfdsSymSVWU-5wnzqosXw 1 1 1 0 3.1kb 3.1kb yellow open rally-2017 z\_YMhaElSMu0wlWJoE2vQg 5 1 323411 0 34.3mb 34.3mb .Kibana works. rally-2017 does not work, I get: "Unable to fetch mapping. Do you have indices matching the pattern" Logs show: {"type":"response","@timestamp":"2017-05-01T12:15:10Z","tags":[],"pid":1481,"method":"get","statusCode":403,"req":{"url":"/elasticsearch/rally-2017/_mapping/field/\*?_=1493640910751&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true","method":"get","headers":{"host":"x.x.x.x:5601","connection":"keep-alive","accept":"application/json, text/plain, _/_","kbn-version":"5.3.2","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36","dnt":"1","referer":"[http://52.43.9.171:5601/app/kibana","accept-encoding":"gzip](http://52.43.9.171:5601/app/kibana%22,%22accept-encoding%22:%22gzip), deflate, sdch","accept-language":"en-GB,en-US;q=0.8,en;q=0.6"},"remoteAddress":"x.x.x.x","userAgent":"x.x.x.x","referer":"[http://x.x.x.x:5601/app/kibana"},"res":{"statusCode":403,"responseTime":6,"contentLength":9},"message":"GET](http://x.x.x.x:5601/app/kibana%22%7D,%22res%22:%7B%22statusCode%22:403,%22responseTime%22:6,%22contentLength%22:9%7D,%22message%22:%22GET) /elasticsearch/rally-2017/_mapping/field/\*?_=1493640910751&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true 403 6ms - 9.0B"} But when I query ES for it: curl --user elastic:secret -XGET 'localhost:9200/rally-2017' {"rally-2017":{"aliases":{},"mappings":{"races":{"\_all":{"enabled":false},"dynamic\_templates":[{"strings":{"match":"_","match\_mapping\_type":"string","mapping":{"doc\_values":true,"index":"not\_analyzed","type":"string"}}}],"properties":{"@timestamp":{"type":"date","format":"epoch\_millis"},"car":{"type":"keyword"},"challenge":{"type":"keyword"},"distribution-version":{"type":"keyword"},"environment":{"type":"keyword"},"lap":{"type":"integer"},"laps":{"type":"long"},"name":{"type":"keyword"},"operation":{"type":"keyword"},"operation-type":{"type":"keyword"},"pipeline":{"type":"keyword"},"relative-time":{"type":"long"},"revision":{"type":"keyword"},"sample-type":{"type":"keyword"},"selected-challenge":{"type":"nested","properties":{"name":{"type":"keyword"},"operations":{"type":"keyword"}}},"target-hosts":{"type":"keyword"},"track":{"type":"keyword"},"trial-timestamp":{"type":"date","fields":{"raw":{"type":"keyword"}},"format":"basic\_date\_time\_no\_millis"},"unit":{"type":"keyword"},"user-tag":{"type":"keyword"},"value":{"type":"float"}}},"metrics":{"\_all":{"enabled":false},"dynamic\_templates":[{"strings":{"match":"_","match\_mapping\_type":"string","mapping":{"doc\_values":true,"index":"not\_analyzed","type":"string"}}}],"properties":{"@timestamp":{"type":"date","format":"epoch\_millis"},"car":{"type":"keyword"},"challenge":{"type":"keyword"},"environment":{"type":"keyword"},"lap":{"type":"integer"},"meta":{"properties":{"bulk-size":{"type":"long"},"cpu\_logical\_cores":{"type":"long"},"distribution\_version":{"type":"keyword"},"error-count":{"type":"long"},"host\_name":{"type":"keyword"},"jvm\_vendor":{"type":"keyword"},"jvm\_version":{"type":"keyword"},"node\_name":{"type":"keyword"},"os\_name":{"type":"keyword"},"os\_version":{"type":"keyword"},"source\_revision":{"type":"keyword"},"success":{"type":"boolean"},"success-count":{"type":"long"}}},"name":{"type":"keyword"},"operation":{"type":"keyword"},"operation-type":{"type":"keyword"},"relative-time":{"type":"long"},"sample-type":{"type":"keyword"},"selected-challenge":{"type":"nested"},"track":{"type":"keyword"},"trial-timestamp":{"type":"date","fields":{"raw":{"type":"keyword"}},"format":"basic\_date\_time\_no\_millis"},"unit":{"type":"keyword"},"value":{"type":"float"}}},"_default_":{"\_all":{"enabled":false},"dynamic\_templates":[{"strings":{"match":"\*","match\_mapping\_type":"string","mapping":{"doc\_values":true,"index":"not\_analyzed","type":"string"}}}],"properties":{"@timestamp":{"type":"date","format":"epoch\_millis"},"car":{"type":"keyword"},"challenge":{"type":"keyword"},"environment":{"type":"keyword"},"lap":{"type":"integer"},"name":{"type":"keyword"},"operation":{"type":"keyword"},"operation-type":{"type":"keyword"},"relative-time":{"type":"long"},"sample-type":{"type":"keyword"},"selected-challenge":{"type":"nested"},"track":{"type":"keyword"},"trial-timestamp":{"type":"date","fields":{"raw":{"type":"keyword"}},"format":"basic\_date\_time\_no\_millis"},"unit":{"type":"keyword"},"value":{"type":"float"}}}},"settings":{"index":{"refresh\_interval":"5s","number\_of\_shards":"5","provided\_name":"rally-2017","creation\_date":"1493458838319","number\_of\_replicas":"1","uuid":"z\_YMhaElSMu0wlWJoE2vQg","version":{"created":"5030299"}}}}} ---
**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\ **Post date:** [May 1, 2017, 10:31pm UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/2 "2017-05-01T22:31:18Z")
Does the account you're logged in have access to the rally-2017 index/what are you using for auth? In Kibana if the authenticated user doesn't have access it'll show up as not existing. ---
**Author:** ![russmac](https://avatars.discourse-cdn.com/v4/letter/r/f08c70/32.png) [@russmac](https://discuss.elastic.co/u/russmac)\ **Post date:** [May 1, 2017, 10:57pm UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/3 "2017-05-01T22:57:33Z")
Hey, I was using the elastic superuser but tried creating a specific user with explicit access: curl --user elastic -XPOST 'localhost:9200/\_xpack/security/user/rally\_user?pretty' -H 'Content-Type: application/json' -d' { "password" : "haggis", "roles" : ["rally", "superuser"], "full\_name" : "Elasticband", "email" : "xxxxxxxxxxxxxxx" }' curl -XPOST -u elastic 'localhost:9200/\_xpack/security/role/rally' -H "Content-Type: application/json" -d '{ "indices": [{ "names": "rally-2017", "privileges": ["all"] }]}' Kibana still shows (tried rally-2017 and rally-\*): {"type":"response","@timestamp":"2017-05-01T22:55:54Z","tags":[],"pid":2267,"method":"get","statusCode":404,"req":{"url":"/elasticsearch/rally-_/\_mapping/field/_?_=1493679355502&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true","method":"get","headers":{"host":"x.x.x.x:5601","user-agent":"Mozilla/5.0 (X11; Linux x86\_64; rv:45.0) Gecko/20100101 Firefox/45.0","accept":"application/json, text/plain, /","accept-language":"en-US,en;q=0.5","accept-encoding":"gzip, deflate","dnt":"1","kbn-version":"5.3.2","referer":"[http://x.x.x.x:5601/app/kibana","connection":"keep-alive"},"remoteAddress":"x.x.x.x","userAgent":"x.x.x.x","referer":"http://x.x.x.x:5601/app/kibana"},"res":{"statusCode":404,"responseTime":10,"contentLength":9},"message":"GET](http://x.x.x.x:5601/app/kibana%22,%22connection%22:%22keep-alive%22%7D,%22remoteAddress%22:%22x.x.x.x%22,%22userAgent%22:%22x.x.x.x%22,%22referer%22:%22http://x.x.x.x:5601/app/kibana%22%7D,%22res%22:%7B%22statusCode%22:404,%22responseTime%22:10,%22contentLength%22:9%7D,%22message%22:%22GET) /elasticsearch/rally-/\_mapping/field/?_=1493679355502&ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true 404 10ms - 9.0B"} Heres the config file: elasticsearch.username: "rally\_user" elasticsearch.password: "haggis" \< this is a simple word definitely correct. ---
**Author:** ![russmac](https://avatars.discourse-cdn.com/v4/letter/r/f08c70/32.png) [@russmac](https://discuss.elastic.co/u/russmac)\ **Post date:** [May 1, 2017, 11:06pm UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/4 "2017-05-01T23:06:12Z")
I packetsniffed what Kibana does: curl -XGET -u rally\_user 'localhost:9200/rally-2017/\_mapping/field/\*?ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true' And got this response, Which appears to be the data Kibana cant find.: { "rally-2017": { "mappings": { "races": { "\_ttl": { "full\_name": "\_ttl", "mapping": { "\_ttl": { "enabled": false, "default": -1 } } }, "\_index": { "full\_name": "\_index", "mapping": {} }, "laps": { "full\_name": "laps", "mapping": { "laps": { "type": "long", "boost": 1.0, "index": true, "store": false, "doc\_values": true, "term\_vector": "no", "norms": false, "index\_options": "positions", "eager\_global\_ordinals": false, "similarity": "BM25", "ignore\_malformed": false, "coerce": true, "null\_value": null, "include\_in\_all": false } } }, "target-hosts": { "full\_name": "target-hosts", "mapping": { "target-hosts": { "type": "keyword", "boost": 1.0, "index": true, "store": false, "doc\_values": true, "term\_vector": "no", "norms": false, "index\_options": "docs", "eager\_global\_ordinals": false, "similarity": "BM25", "null\_value": null, "include\_in\_all": true, "ignore\_above": 2147483647, "normalizer": null } } }, "\_all": { "full\_name": "\_all", "mapping": { "\_all": { "enabled": false, "store": false, "store\_term\_vectors": false, "store\_term\_vector\_offsets": false, "store\_term\_vector\_positions": false, "store\_term\_vector\_payloads": false, "norms": true, "analyzer": "default", "search\_analyzer": "default", "search\_quote\_analyzer": "default", "similarity": "BM25" } } }, "[selected-challenge.name](http://selected-challenge.name)": { "full\_name": "[selected-challenge.name](http://selected-challenge.name)", "mapping": { "name": { "type": "keyword", "boost": 1.0, "index": true, "store": false, "doc\_values": true, "term\_vector": "no", "norms": false, "index\_options": "docs", "eager\_global\_ordinals": false, "similarity": "BM25", "null\_value": null, "include\_in\_all": true, "ignore\_above": 2147483647, "normalizer": null } } }, "\_parent": { "full\_name": "\_parent", "mapping": {} }, "user-tag": { "full\_name": "user-tag", "mapping": { "user-tag": { "type": "keyword", "boost": 1.0, "index": true, "store": false, "doc\_values": true, "term\_vector": "no", "norms": false, "index\_options": "docs", "eager\_global\_ordinals": false, "similarity": "BM25", "null\_value": null, "include\_in\_all": true, "ignore\_above": 2147483647, "normalizer": null } } }, "car": { "full\_name": "car", "mapping": { "car": { "type": "keyword", "boost": 1.0, "index": true, "store": false, "doc\_values": true, "term\_vector": "no", "norms": false, "index\_options": "docs", "eager\_global\_ordinals": false, "similarity": "BM25", "null\_value": null, "include\_in\_all": true, "ignore\_above": 2147483647, "normalizer": null } } }, "lap": { "full\_name": "lap", "mapping": { "lap": { "type": "integer", "boost": 1.0, .... # Ive cut it off here for brevity. ---
**Author:** ![russmac](https://avatars.discourse-cdn.com/v4/letter/r/f08c70/32.png) [@russmac](https://discuss.elastic.co/u/russmac)\ **Post date:** [May 2, 2017, 12:32am UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/5 "2017-05-02T00:32:14Z")
I think I figured this out, Looks like a bug? Heres the 403'ing request: GET /rally-2017/\_mapping/field/\*?ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true HTTP/1.1 authorization: Basic a2liYW5hOmNoYW5nZW1l x-forwarded-for: x.x.x.x x-forwarded-port: 59429 x-forwarded-proto: http Host: localhost:9200 Connection: close When I base64 decode that user pass, Its the Kibana UI user/password. Not the one configured in Kibana.yml... So Kibana is ignoring the configured user/pass and using the UI user pass it seems. It uses the same for the working .kibana index.. GET /.kibana/\_mapping/field/\*?ignore\_unavailable=false&allow\_no\_indices=false&include\_defaults=true HTTP/1.1 authorization: Basic a2liYW5hOmNoYW5nZW1l And there is a kibana user which is how its accessing .kibana. "kibana" : { "username" : "kibana", "roles" : [ "kibana\_system" ], "full\_name" : null, "email" : null, "metadata" : { "\_reserved" : true }, "enabled" : true }, > ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 30, 2017, 12:35am UTC](https://discuss.elastic.co/t/cant-access-es-data-in-kibana-generated-by-rally-benchmarks/84148/6 "2017-05-30T00:35:04Z")
Closed on May 30, 2017, 12:35am UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.