Lab-mysql server: getting access errors

Elastic Community and Ecosystem Elastic Training
1

listing contents of the file,
I get the following error:
2021-02-04T00:42:43.872991Z 0 [Note] mysqld: ready for connections.
Version: '5.7.31' socket: '/var/lib/mysql/mysql.sock' port: 3306 MySQL Community Server (GPL)
2021-02-04T00:43:47.614242Z 13 [Note] Got an error reading communication packets
2021-02-04T00:49:56.236728Z 222 [Note] Access denied for user 'admin'@'114.33.143.92' (using password: YES)
2021-02-04T00:49:57.833302Z 223 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)
2021-02-04T00:49:59.466615Z 224 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)
2021-02-04T00:50:01.131314Z 225 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)
2021-02-04T00:50:02.851547Z 226 [Note] Access denied for user 'cloudera'@'114.33.143.92' (using password: YES)
2021-02-04T00:50:04.541418Z 227 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)
2021-02-04T00:50:06.266694Z 228 [Note] Access denied for user 'dbuser'@'114.33.143.92' (using password: YES)
2021-02-04T00:50:07.920652Z 229 [Note] Access denied for user 'root'@'114.33.143.92' (using password: YES)

How do I fix this.

2

Which course is this?

3

Hi Pablo,
Not sure which Lab course in the Elastic Observability Engineer course. Probably moved ahead with the Labs now.

Anyway, is there a way I can use/access sudo in the labs so to allow access to the file or change permissions?

Kind regards,

Patrick

4

If this is the metricbeat modules lab (Lab 2.2) where you set up monitoring of the mysql instance, re-check step 11? That's where you have to set a password for metricbeat to access mysql. A mistype, and metricbeat may try to fall back on other logins it's programmed to attempt. Otherwise, if that IP address isn't the address of your Strigo environment, it may simply be an outside attacker (hence why I'm not pasting mysql's root password here in a public forum). The "cloudera" attempt sort of makes it seem like some bot found your instance. Don't worry, though, it's protected.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.