# Kibana will not connect to elasticsearch

**URL:** <https://discuss.elastic.co/t/kibana-will-not-connect-to-elasticsearch/350773>\
**Category:** Kibana\
**Created:** [January 10, 2024, 3:53pm UTC](https://discuss.elastic.co/t/kibana-will-not-connect-to-elasticsearch/350773 "2024-01-10T15:53:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Scott\_Barker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/scott_barker/32/53683_2.png) [@Scott\_Barker](https://discuss.elastic.co/u/Scott_Barker)\
**Post date:** [January 10, 2024, 3:53pm UTC](https://discuss.elastic.co/t/kibana-will-not-connect-to-elasticsearch/350773/1 "2024-01-10T15:53:08Z")

</div>

When I connect via a web browser I get the error ‘Kibana server is not ready’ I’ve configured elastic with Windows certificates, I can connect to the elk cluster OK that looks OK.

[https://elkcluster9200/\_cluster/health](https://elkcluster9200/_cluster/health)

{"cluster\_name":"elkprod","status":"green","timed\_out":false,"number\_of\_nodes":3,"number\_of\_data\_nodes":3,"active\_primary\_shards":1,"active\_shards":2,"relocating\_shards":0,"initializing\_shards":0,"unassigned\_shards":0,"delayed\_unassigned\_shards":0,"number\_of\_pending\_tasks":0,"number\_of\_in\_flight\_fetch":0,"task\_max\_waiting\_in\_queue\_millis":0,"active\_shards\_percent\_as\_number":100.0}

I'm using 8.11 kibana and elasticsearch running on RHEL 8

```auto
##Elasticsearch yml

cluster.name: elkprod
node.name: elkservernamenode1
path.data: /data/elasticsearch
path.logs: /app/logs/elasticsearch

network.host: 0.0.0.0
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
xpack.security.http.ssl.enabled: true

xpack.security.http.ssl.certificate: "certs/elkprod.cer"
xpack.security.http.ssl.key: "certs/elkprod.key"

xpack.security.transport.ssl:
enabled: true
verification_mode: "certificate"
certificate: "certs/elkprod.cer"
key: "certs/elkprod.key"

certificate_authorities: ["certs/CA_Cluster.cer", "certs/Root_CA.cer"]

xpack.security.http.ssl.certificate_authorities: ["certs/CA_Cluster.cer", "certs/Root_CA.cer"]

http.host: 0.0.0.0
transport.host: 0.0.0.0

discovery.seed_hosts: ["IP.216","IP.218","IP.219"]
cluster.initial_master_nodes: ["elkservernamenode1","elkservernamenode2","elkservernamenode3"]

```

```auto
## Kibana.yml

server.host: "10.108.208.216"
elasticsearch.hosts: ["IP.216:9200","IP.218:9200","IP.219:9200"]
server.ssl.enabled: true
server.ssl.certificate: "/etc/kibana/config/certs/elkprod.cer"
server.ssl.key: "/etc/kibana/config/certs/elkprod.key"

xpack.security.encryptionKey: "XpZmOPWdAKVhvtvjsNPWtHvHHRjhTORV"
xpack.reporting.encryptionKey: "iiz36Zz7OqqZ8f7kM2yIrjEMgJifDTzW"
xpack.encryptedSavedObjects.encryptionKey: "vQECNynvftcYAx5z9AeQ3aNtZoiujplE"
elasticsearch.ssl.verificationMode: none
elasticsearch.serviceAccountToken: 32Token
elasticsearch.ssl.certificate: "/etc/kibana/config/certs/elkprod.cer"

elasticsearch.ssl.key: "/etc/kibana/config/certs/elkprod.key"

```

Both these commands seem to work:

```auto
curl -k -H "Authorization: Bearer AAEAAWVsYXN0aWMva2liYW5hL2tpYmFuYV90b2tlbi0xOk51WGNnUUxnUlVHckhYNTRlc2RXQlE" https://10.211.55.7:9200/_cluster/health
curl -H "Authorization: Bearer AAEAAWVsYXN0aWMva2liYW5hL2tpYmFuYV90b2tlbi0xOk51WGNnUUxnUlVHckhYNTRlc2RXQlE" https://10.211.55.7:9200/_cluster/health

```

## Kibana log

```auto
Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.233+00:00][DEBUG][elasticsearch.query.data] 401 - 511.0B Jan 10 15:38:39 elkservernamenode1 kibana[703628]: GET /_cluster/settings?include_defaults=true&flat_settings=true [security_exception]: failed to authenticate service account [elas> Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.233+00:00][INFO][root] Kibana is shutting down Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.236+00:00][FATAL][root] Reason: security_exception

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: Root causes:

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: security_exception: failed to authenticate service account [elastic/kibana] with token name [elkprod]

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: ResponseError: security_exception

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: Root causes:

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: security_exception: failed to authenticate service account [elastic/kibana] with token name [elkprod]

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at KibanaTransport.request ([/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:479:27](mailto:/usr/share/kibana/node_modules/@elastic/transport/lib/Transport.js:479:27))

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at processTicksAndRejections (node:internal/process/task_queues:95:5)

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at KibanaTransport.request (/usr/share/kibana/node_modules/@kbn/core-elasticsearch-client-server-internal/src/create_transport>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at Cluster.getSettings ([/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/cluster.js:157:16](mailto:/usr/share/kibana/node_modules/@elastic/elasticsearch/lib/api/api/cluster.js:157:16))

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at isInlineScriptingEnabled ([/usr/share/kibana/node_modules/@kbn/core-elasticsearch-server-internal/src/is_scripting_enabled.j](mailto:/usr/share/kibana/node_modules/@kbn/core-elasticsearch-server-internal/src/is_scripting_enabled.j)>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at ElasticsearchService.start (/usr/share/kibana/node_modules/@kbn/core-elasticsearch-server-internal/src/elasticsearch_servic>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at Server.start ([/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/server.js:342:32](mailto:/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/server.js:342:32))

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at Root.start ([/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/root/index.js:65:14](mailto:/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/root/index.js:65:14))

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at bootstrap ([/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/bootstrap.js:115:5](mailto:/usr/share/kibana/node_modules/@kbn/core-root-server-internal/src/bootstrap.js:115:5))

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at Command.<anonymous> (/usr/share/kibana/src/cli/serve/serve.js:211:5)

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.236+00:00][DEBUG][server] stopping server Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.237+00:00][DEBUG][http.server.Preboot] stopping http server

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.261+00:00][DEBUG][plugins.eventLog] Initialization failed, not indexing 1 documents Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.261+00:00][ERROR][plugins.ruleRegistry] Error: Server is stopping; must stop all async operations

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at [/usr/share/kibana/node_modules/@kbn/alerting-plugin/server/alerts_service/lib/install_with_timeout.js:40:18](mailto:/usr/share/kibana/node_modules/@kbn/alerting-plugin/server/alerts_service/lib/install_with_timeout.js:40:18)

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at processTicksAndRejections (node:internal/process/task_queues:95:5)

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.262+00:00][ERROR][plugins.ruleRegistry] Error: Failure during installation of common resources shared between>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at installWithTimeout ([/usr/share/kibana/node_modules/@kbn/alerting-plugin/server/alerts_service/lib/install_with_timeout.js:4](mailto:/usr/share/kibana/node_modules/@kbn/alerting-plugin/server/alerts_service/lib/install_with_timeout.js:4)>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at processTicksAndRejections (node:internal/process/task_queues:95:5)

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: at ResourceInstaller.installCommonResources (/usr/share/kibana/node_modules/@kbn/rule-registry-plugin/server/rule_data_plugin_>

Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.262+00:00][DEBUG][plugins.eventLog] shutdown: finished Jan 10 15:38:39 elkservernamenode1 kibana[703628]: [2024-01-10T15:38:39.263+00:00][DEBUG][plugins-system.standard] Stopping plugin "spaces"...

```

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [January 11, 2024, 11:34am UTC](https://discuss.elastic.co/t/kibana-will-not-connect-to-elasticsearch/350773/2 "2024-01-11T11:34:14Z")

</div>

Hi @Scott_Barker,

Looking at the Kibana log looks like you have a potential authentication issue:

> [@Scott\_Barker](#):
>
> Jan 10 15:38:39 elkservernamenode1 kibana[703628]: security\_exception: failed to authenticate service account [elastic/kibana] with token name [elkprod]

How did you generate your tokens? There is a similar thread [here](https://discuss.elastic.co/t/kibana-service-account-not-working-for-v8-upgrade-deprecation-note/296125) including some additional things to check that may help you.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2024, 11:34am UTC](https://discuss.elastic.co/t/kibana-will-not-connect-to-elasticsearch/350773/3 "2024-02-08T11:34:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.