License is not available

Hello

im using ELK 8.11 version, only one node and under
tail -f /var/log/syslog | grep license

i can see this so many problems with licence (im using basic):

Dec 15 12:37:03 SPTWS-ELK-NODE01 metricbeat[607]: {"log.level":"warn","@timestamp":"2023-12-15T12:37:03.146+0100","log.logger":"elasticsearch.ccr","log.origin":{"file.name":"ccr/ccr.go","file.line":78},"message":"the CCR feature is available with a platinum or enterprise Elasticsearch license. You currently have a basic license. Either upgrade your license or remove the ccr metricset from your Elasticsearch module configuration.","service.name":"metricbeat","ecs.version":"1.6.0"}

Dec 15 12:37:14 SPTWS-ELK-NODE01 logstash[216395]: [2023-12-15T11:37:14,263][ERROR][logstash.licensechecker.licensereader] Unable to retrieve license information from license server {:message=>"Got response code '429' contacting Elasticsearch at URL 'https://logger.azure.sodexhopass.cz:9200/_xpack'"}

Dec 15 12:37:20 SPTWS-ELK-NODE01 metricbeat[607]: {"log.level":"error","@timestamp":"2023-12-15T12:37:20.482+0100","log.origin":{"file.name":"module/wrapper.go","file.line":256},"message":"Error fetching data for metricset elasticsearch.cluster_stats: failed to get license from Elasticsearch: HTTP error 429 in : 429 Too Many Requests","service.name":"metricbeat","ecs.version":"1.6.0"}
Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.430+01:00][INFO ][plugins.searchprofiler] You cannot use searchprofiler because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.430+01:00][INFO ][plugins.painlessLab] You cannot use painlessLab because license information is not available at this time.
Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.432+01:00][INFO ][plugins.snapshotRestore] You cannot use snapshot_restore because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.432+01:00][INFO ][plugins.rollup] You cannot use rollup because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.432+01:00][INFO ][plugins.remoteClusters] You cannot use Remote Clusters because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.432+01:00][INFO ][plugins.indexLifecycleManagement] You cannot use index_lifecycle_management because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.445+01:00][INFO ][plugins.transform] You cannot use transform because license information is not available at this time.

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.448+01:00][WARN ][plugins.fleet] Unable to verify agent policies in line with license change: failed to fetch agent policies: missing authentication credentials for REST request [/.kibana_ingest_8.11.1/_search?rest_total_hits_as_int=true]: security_exception

Dec 15 12:37:21 SPTWS-ELK-NODE01 kibana[4094333]: [2023-12-15T12:37:21.449+01:00][WARN ][plugins.securitySolution] Unable to verify endpoint policies in line with license change: failed to fetch package policies: missing authentication credentials for REST request [/.kibana_ingest_8.11.1/_search?rest_total_hits_as_int=true]: security_exception

also i cannot login to kibana web interface because of this below. Is there any solution for it please?

image

Thanks

sometimes i can log to kibana againa and sometimes im getting

after a while i can reach it again

but
image

Your Elasticsearch node seems to be responding with 429, which means that it is receiving more requests thant it can deal, in this case some requests won't be answered which can lead to the issue you described.

What are the specs of your node? You will probably need to increase it.

Also, is your node exposed on the public internet?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.