Kibana does not load in brower

Elastic Stack Kibana
1

Hello

I upgraded Kibana 8 to 9 (obviously everything else) but it does not load in my browser.

I see this in the logs:

tail -f /data/kibana/logs/kibana.log | jq



{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:19.310+01:00",
"message": "Registered task successfully [Task: cloud_security_posture-stats_task]",
"log": {
"level": "INFO",
"logger": "plugins.cloudSecurityPosture"
},
"process": {
"pid": 18043,
"uptime": 21.908523315
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:20.880+01:00",
"message": "{"message":"Creating dashboard index pattern adapter","name":".kibana-siem-dashboard-migrations-migrations","fieldMap":{"name":{"type":"keyword","required":true},"created_at":{"type":"date","required":true},"created_by":{"type":"keyword","required":true}}}",
"log": {
"level": "WARN",
"logger": "plugins.securitySolution.siemDashboardMigrations"
},
"process": {
"pid": 18043,
"uptime": 21.908784443
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:20.880+01:00",
"message": "{"message":"Creating dashboard index pattern adapter","name":".kibana-siem-dashboard-migrations-dashboards","fieldMap":{"@timestamp":{"type":"date","required":false},"migration_id":{"type":"keyword","required":true},"created_by":{"type":"keyword","required":true},"status":{"type":"keyword","required":true},"translation_result":{"type":"keyword","required":true},"updated_at":{"type":"date","required":true},"updated_by":{"type":"keyword","required":true},"original_dashboard":{"type":"object","required":true},"original_dashboard.id":{"type":"keyword","required":true},"original_dashboard.title":{"type":"text","required":true,"fields":{"keyword":{"type":"keyword"}}},"original_dashboard.data":{"type":"text","required":true},"original_dashboard.description":{"type":"text","required":false},"original_dashboard.format":{"type":"keyword","required":true},"original_dashboard.vendor":{"type":"keyword","required":true},"original_dashboard.last_updated":{"type":"date","required":true},"original_dashboard.splunk_properties":{"type":"object","required":true},"original_dashboard.splunk_properties.app":{"type":"keyword","required":true},"original_dashboard.splunk_properties.sharing":{"type":"keyword","required":true},"original_dashboard.splunk_properties.owner":{"type":"keyword","required":true},"elastic_dashboard":{"type":"object","required":false},"elastic_dashboard.id":{"type":"keyword","required":false},"elastic_dashboard.title":{"type":"text","required":true,"fields":{"keyword":{"type":"keyword"}}},"elastic_dashboard.description":{"type":"text","required":false},"elastic_dashboard.data":{"type":"text","required":false},"comments":{"type":"object","array":true,"required":false},"comments.message":{"type":"keyword","required":true},"comments.created_at":{"type":"date","required":true},"comments.created_by":{"type":"keyword","required":true}}}",
"log": {
"level": "WARN",
"logger": "plugins.securitySolution.siemDashboardMigrations"
},
"process": {
"pid": 18043,
"uptime": 21.909081459
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:20.880+01:00",
"message": "{"message":"Creating dashboard index pattern adapter","name":".kibana-siem-dashboard-migrations-resources","fieldMap":{"migration_id":{"type":"keyword","required":true},"type":{"type":"keyword","required":true},"name":{"type":"keyword","required":true},"content":{"type":"text","required":false},"metadata":{"type":"object","required":false},"updated_at":{"type":"date","required":false},"updated_by":{"type":"keyword","required":false}}}",
"log": {
"level": "WARN",
"logger": "plugins.securitySolution.siemDashboardMigrations"
},
"process": {
"pid": 18043,
"uptime": 21.909354801
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:20.983+01:00",
"message": "Registering endpoint:user-artifact-packager task with timeout of [20m], interval of [60s] and policy update batch size of [25]",
"log": {
"level": "INFO",
"logger": "plugins.securitySolution.endpoint:user-artifact-packager:1.0.0"
},
"process": {
"pid": 18043,
"uptime": 21.909647146
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:20.983+01:00",
"message": "Registering task [endpoint:complete-external-response-actions] with timeout of [5m] and run interval of [60s]",
"log": {
"level": "INFO",
"logger": "plugins.securitySolution.endpoint:complete-external-response-actions"
},
"process": {
"pid": 18043,
"uptime": 21.909864354
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}
{
"event": {
"action": "kibana_started.elasticsearch.waitTime",
"category": "database",
"duration": 0,
"type": "connection"
},
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:22.365+01:00",
"message": "Successfully connected to Elasticsearch after waiting for 0 milliseconds",
"log": {
"level": "INFO",
"logger": "elasticsearch-service"
},
"process": {
"pid": 18043,
"uptime": 21.910215823
},
"trace": {
"id": "04c4fcf18ba51bc98b7578b931c4eb86"
},
"transaction": {
"id": "e4130e79a39368c5"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:22.450+01:00",
"message": "Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...",
"log": {
"level": "INFO",
"logger": "savedobjects-service"
},
"process": {
"pid": 18043,
"uptime": 21.976142493
},
"span": {
"id": "344f537f73365840"
},
"trace": {
"id": "04c4fcf18ba51bc98b7578b931c4eb86"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:22.451+01:00",
"message": "Starting saved objects migrations",
"log": {
"level": "INFO",
"logger": "savedobjects-service"
},
"process": {
"pid": 18043,
"uptime": 21.976770881
},
"span": {
"id": "344f537f73365840"
},
"trace": {
"id": "04c4fcf18ba51bc98b7578b931c4eb86"
}
}
{
"service": {
"node": {
"roles": [
"background_tasks",
"ui"
]
}
},
"ecs": {
"version": "9.0.0"
},
"@timestamp": "2026-03-20T12:44:23.361+01:00",
"message": "Browser executable: /usr/share/kibana/node_modules/@kbn/screenshotting-plugin/chromium/headless_shell-linux_x64/headless_shell",
"log": {
"level": "INFO",
"logger": "plugins.screenshotting.chromium"
},
"process": {
"pid": 18043,
"uptime": 22.886738854
},
"trace": {
"id": "cfcd44b6c2ba5f6bb2a2ff591a1dad80"
},
"transaction": {
"id": "31825adcd2c4ea68"
}
}

It just gets stuck there.

Besides that:

root@server :/# journalctl -u elasticsearch -f
Mar 20 12:05:37 server systemd[1]: Starting elasticsearch.service - Elasticsearch...
Mar 20 12:05:58 server systemd-entrypoint[686]: WARNING: Unknown module: jdk.internal.vm.ci specified to --add-exports
Mar 20 12:05:58 server systemd-entrypoint[686]: WARNING: Unknown module: org.elasticsearch.entitlement.instrumentationjava.logging specified to --add-exports
Mar 20 12:07:13 server systemd[1]: Started elasticsearch.service - Elasticsearch.

Nothing else seems to be worth noting…

root@server:/# curl -u "elastic:hiddenpassword!" -k ``https://localhost:9200
{
"name" : "server",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "zv7Cp9B3RAWyGHEcDVj1QQ",
"version" : {
"number" : "9.3.1",
"build_flavor" : "default",
"build_type" : "deb",
"build_hash" : "0dd66e52ba3aa076cf498264e46339dbb71f0269",
"build_date" : "2026-02-23T23:37:38.684779921Z",
"build_snapshot" : false,
"lucene_version" : "10.3.2",
"minimum_wire_compatibility_version" : "8.19.0",
"minimum_index_compatibility_version" : "8.0.0"
},
"tagline" : "You Know, for Search"
}
root@server:/#

2

Hello @riahc3

As per the logs it is getting stuck at :

"message": "Starting saved objects migrations",

Could you please check :

curl -u "elastic:hiddenpassword!" -k "https://localhost:9200/_cat/indices/.kibana*?v&h=index,health,status,docs.count"

Reference documentation :

Thanks!!

1 Like
3

How did you ugrade ES KI, from which exact ES version 8.what to what? I.e. 8.2 directly to 9.3.1 or 8.2 to the latest 8.something compatible, then move to 9.3.

Is this a cluster with a single node?

Kibana cannot be up without stable ES. You have to make sure that ES is working, as Tortoise suggested queries, then make sure Kibana has correct settings in kibana.yml and no errors in kibana.log.

1 Like
4

Latest version of 8.x ; From there, to 9.x

5

The elastic server got stuck on booting so I had to restore from backup. Im gonna upgrade AGAIN….That being said, due to audit reasons, the server cannot be down hours and hours so I need to solve this ASAP….

6

That being said, I think this is what you asked for:

image
image759Ă—434 9.73 KB

I could careless about these indexes (they arent log related to anything we care about so)

7

I tried deleting all the red ones but stopping elastic and kibana produces them again so…

8

Ive had to restore from backup because we just cannot be without incoming logs….

9

Credit to you that you made backups, not everyone on here does !!

If this closes the thread for you, that's OK.

But if you still want to upgrade, to 9.3.1 or some other version, you will need to share some more information about what you were trying to do, specifically with the elasticsearch (rather than kibana) v8 --> v9 upgrade.

e.g. Did you check the Upgrade Assistant in v8 Kibana before doing the upgrade? which versions are you using?