</html>nter>nginx</center>tity Too Large</h1></center>d>bana response: invalid character '<' looking for beginning of value. Response: <html>

Seeing this error when running filebeat -e setup. Any hints on how to troubleshoot this?

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
2021-06-21T13:19:14.860Z	INFO	kibana/client.go:119	Kibana url: https://kibana-xxxx:443
2021-06-21T13:19:16.764Z	INFO	kibana/client.go:119	Kibana url: https://kibana-xxxx:443
 </html>nter>nginx</center>tity Too Large</h1></center>d>989	Exiting: 1 error: error loading index pattern: parsing kibana response: invalid character '<' looking for beginning of value. Response: <html>
 </html>nter>nginx</center>tity Too Large</h1></center>d>bana response: invalid character '<' looking for beginning of value. Response: <html>

Full output

filebeat -e setup
2021-06-21T14:58:58.141Z	INFO	instance/beat.go:665	Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
2021-06-21T14:58:58.141Z	INFO	instance/beat.go:673	Beat ID: 6119bff3-f798-4546-8d25-eaea0097468d
2021-06-21T14:58:58.145Z	INFO	[beat]	instance/beat.go:1014	Beat info	{"system_info": {"beat": {"path": {"config": "/etc/filebeat", "data": "/var/lib/filebeat", "home": "/usr/share/filebeat", "logs": "/var/log/filebeat"}, "type": "filebeat", "uuid": "6119bff3-f798-4546-8d25-eaea0097468d"}}}
2021-06-21T14:58:58.145Z	INFO	[beat]	instance/beat.go:1023	Build info	{"system_info": {"build": {"commit": "686ba416a74193f2e69dcfa2eb142f4364a79307", "libbeat": "7.13.2", "time": "2021-06-10T21:04:13.000Z", "version": "7.13.2"}}}
2021-06-21T14:58:58.145Z	INFO	[beat]	instance/beat.go:1026	Go runtime info	{"system_info": {"go": {"os":"linux","arch":"amd64","max_procs":48,"version":"go1.15.13"}}}
2021-06-21T14:58:58.146Z	INFO	[beat]	instance/beat.go:1030	Host info	{"system_info": {"host": {"architecture":"x86_64","boot_time":"2020-08-20T18:17:05Z","containerized":false,"name":"node-2","ip":["127.0.0.1/8","10.20.8.2/24"],"kernel_version":"4.14.35-1902.304.6.3.el7uek.x86_64","mac":["00:00:17:01:2c:a3"],"os":{"type":"linux","family":"","platform":"ol","name":"Oracle Linux Server","version":"7.9","major":7,"minor":9,"patch":0},"timezone":"GMT","timezone_offset_sec":0,"id":"9819c10e0a8c4dc7a34ab30abef64520"}}}
2021-06-21T14:58:58.147Z	INFO	[beat]	instance/beat.go:1059	Process info	{"system_info": {"process": {"capabilities": {"inheritable":null,"permitted":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"effective":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"bounding":["chown","dac_override","dac_read_search","fowner","fsetid","kill","setgid","setuid","setpcap","linux_immutable","net_bind_service","net_broadcast","net_admin","net_raw","ipc_lock","ipc_owner","sys_module","sys_rawio","sys_chroot","sys_ptrace","sys_pacct","sys_admin","sys_boot","sys_nice","sys_resource","sys_time","sys_tty_config","mknod","lease","audit_write","audit_control","setfcap","mac_override","mac_admin","syslog","wake_alarm","block_suspend","audit_read"],"ambient":null}, "cwd": "/var/log/cdaas-snapshots", "exe": "/usr/share/filebeat/bin/filebeat", "name": "filebeat", "pid": 42516, "ppid": 39118, "seccomp": {"mode":"disabled","no_new_privs":false}, "start_time": "2021-06-21T14:58:57.650Z"}}}
2021-06-21T14:58:58.147Z	INFO	instance/beat.go:309	Setup Beat: filebeat; Version: 7.13.2
2021-06-21T14:58:58.147Z	INFO	[index-management]	idxmgmt/std.go:184	Set output.elasticsearch.index to 'filebeat' as ILM is enabled.
2021-06-21T14:58:58.147Z	INFO	eslegclient/connection.go:99	elasticsearch url: https://elasticsearch:443
2021-06-21T14:58:58.147Z	INFO	[publisher]	pipeline/module.go:113	Beat name: node-2
2021-06-21T14:58:58.149Z	INFO	[add_cloud_metadata]	add_cloud_metadata/add_cloud_metadata.go:101	add_cloud_metadata: hosting provider type not detected.
2021-06-21T14:58:58.169Z	INFO	eslegclient/connection.go:99	elasticsearch url: https://elasticsearch:443
2021-06-21T14:58:58.219Z	INFO	[esclientleg]	eslegclient/connection.go:314	Attempting to connect to Elasticsearch version 7.13.2
2021-06-21T14:58:58.246Z	INFO	[index-management]	idxmgmt/std.go:261	Auto ILM enable success.
2021-06-21T14:58:58.309Z	INFO	[index-management.ilm]	ilm/std.go:170	ILM policy filebeat successfully created.
2021-06-21T14:58:58.310Z	INFO	[index-management]	idxmgmt/std.go:401	Set setup.template.name to '{filebeat {now/d}-000001}' as ILM is enabled.
2021-06-21T14:58:58.310Z	INFO	[index-management]	idxmgmt/std.go:406	Set setup.template.pattern to 'filebeat-*' as ILM is enabled.
2021-06-21T14:58:58.310Z	INFO	[index-management]	idxmgmt/std.go:440	Set settings.index.lifecycle.rollover_alias in template to {filebeat {now/d}-000001} as ILM is enabled.
2021-06-21T14:58:58.310Z	INFO	[index-management]	idxmgmt/std.go:444	Set settings.index.lifecycle.name in template to {filebeat {"policy":{"phases":{"hot":{"actions":{"rollover":{"max_age":"30d","max_size":"50gb"}}}}}}} as ILM is enabled.
2021-06-21T14:58:58.318Z	INFO	template/load.go:228	Existing template will be overwritten, as overwrite is enabled.
2021-06-21T14:58:59.817Z	INFO	template/load.go:131	Try loading template filebeat to Elasticsearch
2021-06-21T14:58:59.990Z	INFO	template/load.go:123	template with name 'filebeat' loaded.
2021-06-21T14:58:59.990Z	INFO	[index-management]	idxmgmt/std.go:297	Loaded index template.
2021-06-21T14:59:00.087Z	INFO	[index-management.ilm]	ilm/std.go:131	Index Alias filebeat exists already.
Index setup finished.
Loading dashboards (Kibana must be running and reachable)
2021-06-21T14:59:00.087Z	INFO	kibana/client.go:119	Kibana url: https://kibana:443
2021-06-21T14:59:02.041Z	INFO	kibana/client.go:119	Kibana url: https://kibana:443
 </html>nter>nginx</center>tity Too Large</h1></center>d>989	Exiting: 1 error: error loading index pattern: parsing kibana response: invalid character '<' looking for beginning of value. Response: <html>
 </html>nter>nginx</center>tity Too Large</h1></center>d>bana response: invalid character '<' looking for beginning of value. Response: <html>

Welcome to our community! :smiley:

That looks like an nginx problem, not a Kibana one. I'd start by looking in the logs for that.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.