Filebeat index pattern is created in ES. but cant be mapped by kibana

(Manasi Gawali) #1

my file index pattern is created on elasticsearch.
but wen i m trying to create a new index pattern in kibana.this is the output:
Unable to fetch mapping. Do you have indices matching the pattern?
i performed a search query on filebeat index using kibana console which gave this output.
GET /filebeat-6.0.0-2017.11.25/_search
"query" : {
"match_all" : {}

"error": {
"root_cause": [
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [kibana]"
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [kibana]"
"status": 403

plzz help me with this.

(Adrian Serrano) #2

Hi Ree,

Are you using Elasticsearch and X-Pack version 6.0.0?

What roles do you have set for the kibana user? See Management -> Security -> Users and Roles.

(Manasi Gawali) #3

hi adrisr
This is the message in User and roles:

You do not have permission to manage users.
Please contact your administrator.

(Adrian Serrano) #4

Finally I understand whats going on. You're logging into Kibana as the kibana user. This is an internal user that is not meant to be used. Please log out of Kibana and use the elastic user. The default password is changeme if you're using the docker environment.

(Manasi Gawali) #5

Thank you it worked

(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.