Failed to start Kibana

Elastic Stack Kibana
1

Hi all,

I'm new using ELK and i'm working in a project to deploy ELK for collect logs from differents inputs (logstash, syslog, etc..) to generate different alerts for trigger emails to my customer depending on the severity of the detected event.

I have installed Kibana and Elasticsearch in the same server (Centos 7.9) . I setup minimal security for Elasticsearch following next KB: Set up minimal security for Elasticsearch | Elasticsearch Guide [7.17] | Elastic

I don't know where I make an error but case is that after that I cannot open the kibana dashboard, it shows next error in the browser:

kibana
kibana1025×695 51.3 KB

Here is the configuration of Elasticsearch.yml and kibana.yml:

kibana.yml


server.port: 5601
server.host: "172.21.22.3"
server.name: "prootsielk"
elasticsearch.hosts: ["http://localhost:9200"]
elasticsearch.username: "kibana_system"
elasticsearch.password: "password"
xpack.encryptedSavedObjects.encryptionKey: "passwordkey"
xpack.security.encryptionKey: ""passwordkey"

Elasticsearch.yml

node.name: node-1
path.logs: /var/log/elasticsearch
network.host: 0.0.0.0
network.bind_host: 0.0.0.0
network.publish_host: 0.0.0.0
discovery.seed_hosts: ["0.0.0.0", "[::0]"]
http.port: 9200
discovery.type: single-node
xpack.security.enabled: true

logs results after reboot the kibana service:

[abast@PROOTSIELK ~]$ sudo systemctl restart kibana
[abast@PROOTSIELK ~]$ sudo tail -f /var/log/kibana/kibana.log
{"type":"response","@timestamp":"2022-02-09T16:15:14+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/translations/en.json","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"*/*","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\""},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":5,"contentLength":29},"message":"GET /translations/en.json 304 5ms - 29.0B"}
{"type":"response","@timestamp":"2022-02-09T16:15:52+01:00","tags":[],"pid":3474,"method":"get","statusCode":200,"req":{"url":"/login?next=%2F","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","cache-control":"max-age=0","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9"},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36"},"res":{"statusCode":200,"responseTime":38,"contentLength":144871},"message":"GET /login?next=%2F 200 38ms - 141.5KB"}
{"type":"response","@timestamp":"2022-02-09T16:15:52+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/node_modules/@kbn/ui-framework/dist/kui_light.css","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"text/css,*/*;q=0.1","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"47af9b8f6e4640c400d5d0b64bd8c8095c9bbcf5-gzip\"","if-modified-since":"Thu, 06 Jan 2022 23:42:50 GMT"},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":5,"contentLength":205},"message":"GET /node_modules/@kbn/ui-framework/dist/kui_light.css 304 5ms - 205.0B"}
{"type":"response","@timestamp":"2022-02-09T16:15:52+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/ui/legacy_light_theme.css","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"text/css,*/*;q=0.1","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"4345f9a3b9a243edd0b81b913ba1901bce549a2b-gzip\"","if-modified-since":"Thu, 06 Jan 2022 23:42:52 GMT"},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":5,"contentLength":206},"message":"GET /ui/legacy_light_theme.css 304 5ms - 206.0B"}
{"type":"response","@timestamp":"2022-02-09T16:15:52+01:00","tags":["api"],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/bootstrap.js","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"*/*","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"56a514f5cff57e66ad0ad45dd304d4bc0b27a589-gzip\""},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":6,"contentLength":18652},"message":"GET /bootstrap.js 304 6ms - 18.2KB"}
{"type":"response","@timestamp":"2022-02-09T16:15:52+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/ui/favicons/favicon.svg","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"c2ae8872d6be83d97704438ba39271e9af1a65d0\"","if-modified-since":"Thu, 06 Jan 2022 23:42:54 GMT"},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":3,"contentLength":204},"message":"GET /ui/favicons/favicon.svg 304 3ms - 204.0B"}
{"type":"response","@timestamp":"2022-02-09T16:15:53+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/translations/en.json","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"*/*","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\""},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":4,"contentLength":29},"message":"GET /translations/en.json 304 4ms - 29.0B"}
{"type":"response","@timestamp":"2022-02-09T16:15:53+01:00","tags":[],"pid":3474,"method":"get","statusCode":304,"req":{"url":"/ui/favicons/favicon.png","method":"get","headers":{"host":"172.21.22.3:5601","connection":"keep-alive","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","accept":"image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8","referer":"http://172.21.22.3:5601/login?next=%2F","accept-encoding":"gzip, deflate","accept-language":"es-ES,es;q=0.9","if-none-match":"\"c6e634ff7e673515f2288ed37a4ea053751a104e\"","if-modified-since":"Thu, 06 Jan 2022 23:42:54 GMT"},"remoteAddress":"192.168.3.2","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36","referer":"http://172.21.22.3:5601/login?next=%2F"},"res":{"statusCode":304,"responseTime":10,"contentLength":204},"message":"GET /ui/favicons/favicon.png 304 10ms - 204.0B"}
{"type":"log","@timestamp":"2022-02-09T16:16:03+01:00","tags":["info","plugins-system","standard"],"pid":3474,"message":"Stopping all plugins."}
{"type":"log","@timestamp":"2022-02-09T16:16:03+01:00","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":3474,"message":"Monitoring stats collection is stopped"}
 {"type":"log","@timestamp":"2022-02-09T16:16:15+01:00","tags":["info","plugins-service"],"pid":3514,"message":"Plugin \"metricsEntities\" is disabled."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["info","http","server","Preboot"],"pid":3514,"message":"http server running at http://172.21.22.3:5601"}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"Starting in 8.0, the Kibana logging format will be changing. This may affect you if you are doing any special handling of your Kibana logs, such as ingesting logs into Elasticsearch for further analysis. If you are using the new logging configuration, you are already receiving logs in both old and new formats, and the old format will simply be going away. If you are not yet using the new logging configuration, the log format will change upon upgrade to 8.0. Beginning in 8.0, the format of JSON logs will be ECS-compatible JSON, and the default pattern log format will be configurable with our new logging system. Please refer to the documentation for more information about the new logging format."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"Kibana is configured to authenticate to Elasticsearch with the \"elastic\" user. Use a service account token instead."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"Use Kibana application privileges to grant reporting privileges. Using  \"xpack.reporting.roles.allow\" to grant reporting privileges is deprecated. The \"xpack.reporting.roles.enabled\" setting will default to false in a future release."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"User sessions will automatically time out after 8 hours of inactivity starting in 8.0. Override this value to change the timeout."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","config","deprecation"],"pid":3514,"message":"Users are automatically required to log in again after 30 days starting in 8.0. Override this value to change the timeout."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["info","plugins-system","standard"],"pid":3514,"message":"Setting up [113] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,licenseApiGuard,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced,screenshotMode,banners,telemetry,newsfeed,mapsEms,mapsLegacy,kibanaLegacy,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,canvas,lists,ingestPipelines,fileUpload,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,visualizations,visTypeXy,visTypeVislib,visTypeVega,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,expressionTagcloud,expressionMetricVis,console,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboard,maps,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,indexPatternFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,savedObjectsManagement,indexPatternManagement]"}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["info","plugins","taskManager"],"pid":3514,"message":"TaskManager is identified by the Kibana UUID: 2749b20a-ad4d-41bb-91f7-2990348ffe05"}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","security","config"],"pid":3514,"message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","security","config"],"pid":3514,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","security","config"],"pid":3514,"message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","security","config"],"pid":3514,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","reporting","config"],"pid":3514,"message":"Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":3514,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","actions"],"pid":3514,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["warning","plugins","alerting"],"pid":3514,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2022-02-09T16:16:16+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installing common resources shared between all indices"}
{"type":"log","@timestamp":"2022-02-09T16:16:17+01:00","tags":["warning","plugins","reporting","config"],"pid":3514,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux CentOS 7.9.2009 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2022-02-09T16:16:18+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2022-02-09T16:16:18+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 241ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] INIT -> OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT. took: 240ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 137ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_OPEN_PIT -> OUTDATED_DOCUMENTS_SEARCH_READ. took: 137ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 70ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_READ -> OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT. took: 71ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 75ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:19+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] OUTDATED_DOCUMENTS_SEARCH_CLOSE_PIT -> UPDATE_TARGET_MAPPINGS. took: 81ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 366ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS -> UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK. took: 368ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 61ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana_task_manager] Migration completed after 959ms"}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] UPDATE_TARGET_MAPPINGS_WAIT_FOR_TASK -> DONE. took: 308ms."}
{"type":"log","@timestamp":"2022-02-09T16:16:20+01:00","tags":["info","savedobjects-service"],"pid":3514,"message":"[.kibana] Migration completed after 1198ms"}
{"type":"log","@timestamp":"2022-02-09T16:16:21+01:00","tags":["info","plugins-system","standard"],"pid":3514,"message":"Starting [113] plugins: [translations,licensing,globalSearch,globalSearchProviders,features,licenseApiGuard,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,share,embeddable,uiActionsEnhanced,screenshotMode,banners,telemetry,newsfeed,mapsEms,mapsLegacy,kibanaLegacy,fieldFormats,expressions,dataViews,charts,esUiShared,bfetch,data,savedObjects,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,customIntegrations,home,searchprofiler,painlessLab,grokdebugger,management,watcher,licenseManagement,advancedSettings,spaces,security,savedObjectsTagging,reporting,canvas,lists,ingestPipelines,fileUpload,encryptedSavedObjects,dataEnhanced,cloud,snapshotRestore,eventLog,actions,alerting,triggersActionsUi,transform,stackAlerts,ruleRegistry,visualizations,visTypeXy,visTypeVislib,visTypeVega,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,expressionTagcloud,expressionMetricVis,console,graph,fleet,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dashboard,maps,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,indexPatternFieldEditor,lens,cases,timelines,discover,osquery,observability,discoverEnhanced,dataVisualizer,ml,uptime,securitySolution,infra,upgradeAssistant,monitoring,logstash,enterpriseSearch,apm,savedObjectsManagement,indexPatternManagement]"}
{"type":"log","@timestamp":"2022-02-09T16:16:21+01:00","tags":["info","plugins","monitoring","monitoring"],"pid":3514,"message":"config sourced from: production cluster"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","http","server","Kibana"],"pid":3514,"message":"http server running at http://172.21.22.3:5601"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","monitoring","monitoring","kibana-monitoring"],"pid":3514,"message":"Starting monitoring stats collection"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installed common resources shared between all indices"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installing resources for index .alerts-observability.uptime.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:23+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","elasticsearch","deprecation"],"pid":3514,"message":"Elasticsearch deprecation: 299 Elasticsearch-7.16.3-4e6e4eab2297e949ec994e688dad46290d018022 \"this request accesses aliases with names reserved for system indices: [.security], but in a future major version, direct access to system indices and their aliases will not be allowed\"\nOrigin:kibana\nQuery:\n200\nGET /.kibana-event-log-*/_alias"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installed resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installed resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installed resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","ruleRegistry"],"pid":3514,"message":"Installed resources for index .alerts-observability.uptime.alerts"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","securitySolution"],"pid":3514,"message":"Dependent plugin setup complete - Starting ManifestTask"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","status"],"pid":3514,"message":"Kibana is now degraded"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["info","plugins","reporting","chromium"],"pid":3514,"message":"Browser executable: /usr/share/kibana/x-pack/plugins/reporting/chromium/headless_shell-linux_x64/headless_shell"}
{"type":"log","@timestamp":"2022-02-09T16:16:24+01:00","tags":["warning","plugins","reporting","chromium"],"pid":3514,"message":"Enabling the Chromium sandbox provides an additional layer of protection."}
{"type":"log","@timestamp":"2022-02-09T16:16:27+01:00","tags":["info","status"],"pid":3514,"message":"Kibana is now available (was degraded)"}

Can somebody help me? I'm really confused and I'm not detecting any error message in the logs.

2

I'm not sure if you already figured this out, but you have a typo in your kibana.yml on this line (extra double-quote). If you already fixed that and still have a problem let us know.

Regards,
Lee

3

Hi LeeDr,

I have currently reinstalled Elasticsearch and Kibana with basic configuration but still showing the same error, I haven't configured any kind of security in the .yml files of both products. Here's the .yml configuration:

Elasticsearch.yml

node.name: node-1
cluster.initial_master_nodes:
  - node-1
path.logs: /var/log/elasticsearch
network.host: 0.0.0.0
network.bind_host: 0.0.0.0
network.publish_host: 0.0.0.0
discovery.seed_hosts: ["0.0.0.0", "[::0]"]
http.port: 9200

kibana.yml



server.port: 5601
server.host: "172.21.22.3"
server.name: "prootsielk"
elasticsearch.hosts: ["http://localhost:9200"]
4

Let's check if your Elasticsearch is coming up OK and if it's good then we'll check Kibana.

In your browser, try http://localhost:9200

Are you prompted for a username and password?
The browser should show you something like this;

  "name" : "node-01",
  "cluster_name" : "es-test-cluster",
  "cluster_uuid" : "0Q0GeJDYR267bTcXDl83yg",
  "version" : {
    "number" : "8.2.0-SNAPSHOT",
    "build_flavor" : "default",
    "build_type" : "tar",
    "build_hash" : "3823fac67ffd72ba98c2767b8cdbe75a406716f2",
    "build_date" : "2022-02-24T15:05:30.554563956Z",
    "build_snapshot" : true,
    "lucene_version" : "9.1.0",
    "minimum_wire_compatibility_version" : "7.17.0",
    "minimum_index_compatibility_version" : "7.0.0"
  },
  "tagline" : "You Know, for Search"
}

Based on your Elasticsearch.yml file, it should also work if you enter your machine IP address like http://172.21.22.3:9200

And you can also try localhost:9200/_cat/health. The important part of this response is the green status;

1645802682 15:24:42 es-test-cluster green 1 1 14 14 0 0 0 0 - 100.0%

_cat/indices is another handy endpoint to use, but you may not have any data to show there yet.

If all of that is good, and you didn't have to enter a username/password for any of it, then we should look at the Kibana log when it starts up to make sure it connects to Elasticsearch and doesn't have any errors.

If it prompted you for a username/password and you can't log in, you may have to reset the elastic user password elasticsearch-reset-password | Elasticsearch Guide [8.0] | Elastic

If you get to this point and still have the same error in Kibana in your browser, my next guess is that you have a bad download of the kibana rpm file. I haven't seen the error you show in your Kibana page before and didn't find any open or closed issues on it.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.