ELK 8.1: loading std. dashboards failing w/error 403

On a PoC v.8.1 single elastic node + kibana + grafana, I'm trying to load std. metricbeat dashboards etc. into kibana like below only it returns an 403 error:

$ metricbeat setup dashboards -c /etc/metricbeat/metricbeat.yml  -E setup.kibana.host=https://<redacted> -E setup.kibana.username=<redacted> -E setup.kibana.password=<redacted> -E setup.kibana.space=perf-demo -E setup.dashboards.index="metricbeat-*" -E setup.ilm.enabled=false -E setup.template.enabled=false -E setup.kibana.ssl.enabled=true -E setup.kibana.ssl.certificate=/etc/kibana/certs/cert.pem -E setup.kibana.ssl.key=/etc/kibana/certs/key.pem  -E setup.dashboards.enabled=true -E setup.dashboards.directory=/usr/share/metricbeat/kibana
ILM policy loading not enabled.
Template loading not enabled.

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: 1 error: error loading index pattern: returned 403 to import file: Unable to bulk_create index-pattern: <nil>. Response: {"statusCode":403,"error":"Forbidden","message":"Unable to bulk_create index-pattern"}

kibana log says:

{"ecs":{"version":"8.0.0"},"@timestamp":"2022-03-19T02:16:10.256+01:00","message":"Executing Rule default:monitoring_alert_nodes_changed:1f884570-a4ab-11ec-8ea5-df4b502cd06a has resulted in Error: Cannot read properties of undefined (reading '_source')","log":{"level":"ERROR","logger":"plugins.alerting"},"process":{"pid":65843},"trace":{"id":"c0d5582434adcc9a4a3f67944a30dd45"},"transaction":{"id":"d8a43eef4443a7a0"}}

Any hints appreciated, TIA!

Missing privileges, swapped to elastic w/Superuser role and it worked :wink:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.