# Kibana 7.10.0. licensing error

**URL:** https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019
**Category:** Kibana
**Tags:** elastic-stack-security, docker
**Created:** [November 19, 2020, 4:48pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019 "2020-11-19T16:48:05Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![ans\_x](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ans_x/32/77295_2.png) [@ans\_x](https://discuss.elastic.co/u/ans_x)
#### Post date: [November 19, 2020, 4:48pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/1 "2020-11-19T16:48:06Z")

</div>

After upgrading the stack from version **7.8.0** to **7.10.0** , a license error appeared in Kibana.

[Full kibana.log](https://gist.github.com/ansalon282/75c55cb63fd00950d51b6b780a24687c)

 ![Снимок экрана 2020-11-17 в 17.18.59](https://us1.discourse-cdn.com/elastic/original/3X/d/9/d98456ec499f0875356cb54ce5ea3dc1bd49e4bb.png)

xpack settings were included. After the update, the config did not change, only deleted the Kibana system indexes.  
parameter: **xpack.security.enabled: true**  
however, an error pops up in Kibana:

 ![Снимок экрана 2020-11-17 в 17.18.34](https://us1.discourse-cdn.com/elastic/original/3X/9/1/918d95d55e8f8af5b32ebaedd81232fad7df02e4.png)

```auto
GET _license

       {
      "license" : {
        "status" : "active",
        "uid" : "520gdz41-489d-4353-a347-c3152f6af699",
        "type" : "basic",
        "issue_date" : "2019-07-22T12:29:06.971Z",
        "issue_date_in_millis" : 1563798546971,
        "max_nodes" : 1000,
        "issued_to" : "preprodlogs",
        "issuer" : "elasticsearch",
        "start_date_in_millis" : -1
      }
    }

```

Please tell me what could be the problem.

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [November 19, 2020, 8:36pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/2 "2020-11-19T20:36:16Z")

</div>

Hi @ans_x,

Looking at your logs, I'm seeing the following:

> {"type":"log","@timestamp":"2020-11-19T16:20:40Z","tags":["warning","plugins","licensing"],"pid":7,"message":"License information could not be obtained from Elasticsearch due to [security\_exception] missing authentication credentials for REST request [/\_xpack], with { header={ WWW-Authenticate="Basic realm=\"security\" charset=\"UTF-8\"" } } :: {"path":"/\_xpack","statusCode":401,"response":"{\"error\":{\"root\_cause\":[{\"type\":\"security\_exception\",\"reason\":\"missing authentication credentials for REST request [/\_xpack]\",\"header\":{\"WWW-Authenticate\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}}],\"type\":\"security\_exception\",\"reason\":\"missing authentication credentials for REST request [/\_xpack]\",\"header\":{\"WWW-Authenticate\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}},\"status\":401}","wwwAuthenticateDirective":"Basic realm=\"security\" charset=\"UTF-8\""} error"}

This tells me that you might not have Kibana's credentials configured properly, so Kibana can't talk to Elasticsearch. Have you set both `elasticsearch.username` and `elasticsearch.password` within your `kibana.yml`?

---

<div class="post-metadata">

### Author: ![ans\_x](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ans_x/32/77295_2.png) [@ans\_x](https://discuss.elastic.co/u/ans_x)
#### Post date: [November 19, 2020, 8:44pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/3 "2020-11-19T20:44:20Z")

</div>

> [@Larry\_Gregory](#):
>
> This tells me that you might not have Kibana's credentials configured properly, so Kibana can't talk to Elasticsearch. Have you set both `elasticsearch.username` and `elasticsearch.password` within your `kibana.yml` ?

Yes, these two parameters are written in the config. It is strange that when the kibana restarts, it works for a while without errors and sees ES, but later the connection disappears.

kibana.yaml

```auto
server.port: 5601
server.host: "0"
server.maxPayloadBytes: 1048576
elasticsearch.requestTimeout: 60000
elasticsearch.shardTimeout: 60000
#elasticsearch.startupTimeout: 20000
#elasticsearch.sniffOnStart: true
#elasticsearch.sniffInterval: 60000
elasticsearch.sniffOnConnectionFault: true
elasticsearch.hosts:
  - http://XXX:9200
  - http://XXX:9200
  - http://XXX:9200
elasticsearch.username: "elastic"
elasticsearch.password: "XXX"
xpack.reporting.encryptionKey: "something_32_least_at_characters"
xpack.security.enabled: true
xpack.security.encryptionKey: "something_at_least_32_characters"
kibana.index: ".kibana"
logging.dest: /usr/share/kibana/kibana.log

```

Could this be a kibana bug in 7.10.0?

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [November 19, 2020, 8:54pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/4 "2020-11-19T20:54:37Z")

</div>

> [@ans\_x](#):
>
> It is strange that when the kibana restarts, it works for a while without errors and sees ES, but later the connection disappears.

This is pretty strange. Can you try to reduce `elasticsearch.hosts` to a single entry, and see if the problem still persists? I want to try to eliminate possibilities.

Also, to confirm: are you running a single Kibana instance, or multiple Kibana instances?

Based on the logs, it looks like Kibana ran fine for ~6 minutes before it lost the connection. Does that sound about right to you? Is it consistently lasting about that long, or is the timing sporadic?

Once you lose the connection, does it ever come back on its own, or do you have to restart to reconnect?

---

<div class="post-metadata">

### Author: ![ans\_x](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ans_x/32/77295_2.png) [@ans\_x](https://discuss.elastic.co/u/ans_x)
#### Post date: [November 19, 2020, 9:03pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/5 "2020-11-19T21:03:32Z")

</div>

A kibana instance is one. The error time is floating, usually a couple of hours can work normally.

No recovery was observed. This is a test environment and it is rare.

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [November 19, 2020, 9:12pm UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/6 "2020-11-19T21:12:00Z")

</div>

If we can't isolate the problem to any one Elasticsearch node, then we'll probably need debug logs to triage this further, so that we can observe what's happening before and after these errors start appearing.

```auto
# kibana.yml
logging.verbose: true

```

---

<div class="post-metadata">

### Author: ![ans\_x](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ans_x/32/77295_2.png) [@ans\_x](https://discuss.elastic.co/u/ans_x)
#### Post date: [November 23, 2020, 6:53am UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/7 "2020-11-23T06:53:03Z")

</div>

I will attach a complete log from the start of the service with debug enabled with a link to Google Drive.  
Presumably the problem started on 2020-11-20T18: 00

[Full log by link in Google Drive](https://drive.google.com/file/d/1O6OitIxf86ZNlmXqsmcJq04vWoM7TqDX/view?usp=sharing)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 21, 2020, 6:53am UTC](https://discuss.elastic.co/t/kibana-7-10-0-licensing-error/256019/8 "2020-12-21T06:53:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
