Filebeat index pattern is created in ES. but cant be mapped by kibana

Elastic Stack Beats
1

my file index pattern is created on elasticsearch.
but wen i m trying to create a new index pattern in kibana.this is the output:
Unable to fetch mapping. Do you have indices matching the pattern?
i performed a search query on filebeat index using kibana console which gave this output.
Query:
GET /filebeat-6.0.0-2017.11.25/_search
{
"query" : {
"match_all" : {}
}

}
output:
{
"error": {
"root_cause": [
{
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [kibana]"
}
],
"type": "security_exception",
"reason": "action [indices:data/read/search] is unauthorized for user [kibana]"
},
"status": 403
}

plzz help me with this.

2

Hi Ree,

Are you using Elasticsearch and X-Pack version 6.0.0?

What roles do you have set for the kibana user? See Management -> Security -> Users and Roles.

3

hi adrisr
Yes
This is the message in User and roles:

You do not have permission to manage users.
Please contact your administrator.

4

Finally I understand whats going on. You're logging into Kibana as the kibana user. This is an internal user that is not meant to be used. Please log out of Kibana and use the elastic user. The default password is changeme if you're using the docker environment.

5

Thank you it worked

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.