Defective token when using SPNEGO in Kibana

Do your keytabs contain a service principal for the kibana hostname ? (Assuming kibana is on a different host or using a different hostname )