Kibana server is not ready yet as soon as i install wazuh app

Elastic Stack Kibana
1

After setting up everything, I tried to install the kibana plugin for wazuh

Wazuh Version: 3.11.4
Kibana Version: 7.6.0

So I tried the following command

sudo -u kibana /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.11.4_7.6.0.zip

The message said that it was successfully installed.

So I tried to restart the kibana

sudo systemctl restart kibana

The kibana was restarted successfully,

When I accessed by kibana web UI, it is saying "Kibana server is not ready yet".

So I tried to reboot the system (read on some forum), but still, I am getting the same issue

PS: I have tried with https://packages.wazuh.com/wazuhapp/wazuhapp-3.11.2_7.5.2.zip this plugin app, the issue isn't solved yet

2

Hey, you always remember that, all of plugin must have same version with kibana.
So you need install Wazuhapp version 7.6.0 (same with your kibana version)

Can you show kibana startup log ?

3

These logs are generated while restarting kibana just after installing wazuh plugin

-- Subject: Unit kibana.service has begun shutting down
-- Unit kibana.service has begun shutting down.
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins-system"],"pid":28795,"message":"Stopping all plugins."}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","data"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","translations"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","spaces"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","features"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","timelion"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","code"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","licensing"],"pid":28795,"message":"Stopping plugin"}
Mar 01 22:34:12 soc kibana[28795]: {"type":"log","@timestamp":"2020-03-01T17:04:12Z","tags":["info","plugins","security"],"pid":28795,"message":"Stopping plugin"}
-- Subject: Unit kibana.service has finished shutting down
-- Unit kibana.service has finished shutting down.
Mar 01 22:52:51 soc sudo[29245]:     root : TTY=pts/0 ; PWD=/root ; USER=kibana ; COMMAND=/usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-3.11.2_7.5.2.zip
Mar 01 22:52:51 soc sudo[29245]: pam_unix(sudo:session): session opened for user kibana by root(uid=0)
Mar 01 22:53:02 soc sudo[29245]: pam_unix(sudo:session): session closed for user kibana
-- Subject: Unit kibana.service has finished start-up
-- Unit kibana.service has finished starting up.
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins-system"],"pid":29262,"message":"Setting up [15] plugins: [security,licensing,code,timelion,features,spaces,translations,uiActions,newsfeed,inspector,embeddable,advancedUiActions,expressions,eui_utils,data]"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","security"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["warning","plugins","security","config"],"pid":29262,"message":"Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in kibana.yml"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["warning","plugins","security","config"],"pid":29262,"message":"Session cookies will be transmitted over insecure connections. This is not recommended."}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","licensing"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","code"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","timelion"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","features"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","spaces"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","translations"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:53:59 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:23:59Z","tags":["info","plugins","data"],"pid":29262,"message":"Setting up plugin"}
Mar 01 22:54:01 soc sudo[29286]:     root : TTY=pts/0 ; PWD=/root ; USER=kibana ; COMMAND=/usr/share/kibana/bin/kibana
Mar 01 22:54:01 soc sudo[29286]: pam_unix(sudo:session): session opened for user kibana by root(uid=0)
Mar 01 22:54:02 soc sudo[29286]: pam_unix(sudo:session): session closed for user kibana
Mar 01 22:54:09 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:24:09Z","tags":["warning","legacy-plugins"],"pid":29262,"path":"/usr/share/kibana/src/legacy/core_plugins/visualizations","message":"Skipping non-plugin directory at /usr/share/kibana/src/legacy/core_plugins/visualizations"}
Mar 01 22:54:10 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:24:10Z","tags":["info","plugins","licensing"],"pid":29262,"message":"Imported changed license information from Elasticsearch for the [data] cluster: type: basic | status: active"}
Mar 01 22:54:10 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:24:10Z","tags":["info","plugins-system"],"pid":29262,"message":"Starting [8] plugins: [security,licensing,code,timelion,features,spaces,translations,data]"}
Mar 01 22:54:12 soc kibana[29262]: {"type":"log","@timestamp":"2020-03-01T17:24:12Z","tags":["info","optimize"],"pid":29262,"message":"Optimizing and caching bundles for core, graph, monitoring, space_selector, login, overwritten_session, logout, logged_out, ml, dashboardViewer, apm, maps, canvas, infra, siem, uptime, lens, wazuh, kibana, stateSessionStorageRedirect, status_page and timelion. This may take a few minutes"}
4

Could you upload log in this file, your above log isn't enought

/var/log/kibana/kibana.log

5 
cat: /var/log/kibana/kibana.log: No such file or directory
6

What operating system are you using? version OS.
You can find kibana log location in kibana config file, or paste kibana.yml content to here.

/etc/kibana/kibana.yml

7

Ubuntu 18.04 LTS

@tatdat luckily it started working now. I don't now why and how, earlier it wasn't working.

Then i restarted the kibana. for few minutes it was saying Kibana Server is not ready yet, after that it started working.

8

For more information, when you install new plugin into kibana. Kibana will rebuild some component. It's take time 1-3 min :slight_smile:

9

Oh thnx i was worried :smile:

10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.