# ELK behind ELB

**URL:** https://discuss.elastic.co/t/elk-behind-elb/35143
**Category:** Kibana
**Created:** [November 20, 2015, 12:35pm UTC](https://discuss.elastic.co/t/elk-behind-elb/35143 "2015-11-20T12:35:25Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![jkumar\_99](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jkumar_99/32/4139_2.png) [@jkumar\_99](https://discuss.elastic.co/u/jkumar_99)
#### Post date: [November 20, 2015, 12:35pm UTC](https://discuss.elastic.co/t/elk-behind-elb/35143/1 "2015-11-20T12:35:25Z")

</div>

HI,

## I just upgraded my ELK stack to use ES 2.0 and KIbana 4.2.1. Now I am getting blank page while accessing Kibana . When Kibana is working on one node, I can see everything, but when I start Kibana on more than one node, it works(as a process) but Dashboard is blank and I get:

## {"statusCode":403,"error":"Forbidden","message":"Missing XSRF token"}

Is there anything I need in kibana config which I can tweak to fix this? Obviously I have no control over AWS ELB

---

<div class="post-metadata">

### Author: ![liug](https://avatars.discourse-cdn.com/v4/letter/l/e9a140/32.png) [@liug](https://discuss.elastic.co/u/liug)
#### Post date: [November 24, 2015, 4:39am UTC](https://discuss.elastic.co/t/elk-behind-elb/35143/2 "2015-11-24T04:39:31Z")

</div>

Seems Kibana 4.2.1 may have issues. I had to downgrade to 4.2.0 to get rid of "Forbidden" error.

---

<div class="post-metadata">

### Author: ![jkumar\_99](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jkumar_99/32/4139_2.png) [@jkumar\_99](https://discuss.elastic.co/u/jkumar_99)
#### Post date: [November 24, 2015, 5:53am UTC](https://discuss.elastic.co/t/elk-behind-elb/35143/3 "2015-11-24T05:53:01Z")

</div>

## Seems related to:

## 4.2.1 Fixes and enhancements Fixed a possible CSRF issue. CVE-2015-8131

Yes, Kibana 4.2.0 works fine

---

<div class="post-metadata">

### Author: ![GregMeadows](https://avatars.discourse-cdn.com/v4/letter/g/b5e925/32.png) [@GregMeadows](https://discuss.elastic.co/u/GregMeadows)
#### Post date: [December 3, 2015, 6:15pm UTC](https://discuss.elastic.co/t/elk-behind-elb/35143/4 "2015-12-03T18:15:47Z")

</div>

I have the same issue however my cluster is hosted by Elastic Found and there is no option to downgrade to 4.2.0. Missing XSFR (see screen shot)

My Kibana hostname is different than the hostname on the main page. see screenshot.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/c/c9122cb3e35c12b4f7cd0ff1c60589e1f806f943.png)

I am trying to use the Google Spreadsheet to Elasticsearch plugin. If I use the default hostname the index never appears. could someone help?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:07pm UTC](https://discuss.elastic.co/t/elk-behind-elb/35143/5 "2017-07-06T14:07:32Z")

</div>