# Metricbeat 6.4.1 - config test gives false ok

**URL:** <https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033>\
**Category:** Beats\
**Tags:** metricbeat\
**Created:** [October 18, 2018, 3:25pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033 "2018-10-18T15:25:31Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ariemenschneider](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ariemenschneider/32/33564_2.png) [@ariemenschneider](https://discuss.elastic.co/u/ariemenschneider)\
**Post date:** [October 18, 2018, 3:25pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033/1 "2018-10-18T15:25:32Z")

</div>

Hi,

I'm trying to set up Metricbeat dashboards in our Kibana, but I'm getting authorization failures:

```
metricbeat setup --dashboards
Loading dashboards (Kibana must be running and reachable)
Exiting: Error importing Kibana dashboards: fail to create the Kibana loader: Error creating Kibana client: Error creating Kibana client: fail to get the Kibana version: HTTP GET request to /api/status fails: <nil>. Response: {"statusCode":401,"error":"Unauthorized","message":"[security_exception] unable to authenticate user [] for REST request [/_xpack/security/_authenticate], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}

```

My Metricbeat config is:

```
[root@xalnplvapxx metricbeat]# metricbeat export config
fields:
  env: production
logging:
  level: info
metricbeat:
  config:
    modules:
      path: /etc/metricbeat/modules.d/*.yml
      reload:
        enabled: false
output:
  logstash:
    hosts:
    - '[2a00:e400:xx::xx]:10104'
path:
  config: /etc/metricbeat
  data: /var/lib/metricbeat
  home: /usr/share/metricbeat
  logs: /var/log/metricbeat
setup:
  kibana:
    host: https://xalzplvapxx.xxx.net:5601
    password: xxxx
    setup:
      dashboards:
        index: os-xxx-metricbeat-*
    ssl:
      certificate_authorities:
      - /etc/kibana/certs/xxx.net-wildcard.ca.crt
    user: xxxx
  template:
    settings:
      _source:
        enabled: false
      index:
        codec: best_compression
        number_of_shards: 1
tags:
- ELK
- kibana

```

Checking with curl, I don't get authentication errors:

```
[root@xalnplvapxx metricbeat]# curl -k -u xxxx -p https://xalzplvapxx.xxx.net:5601/api/status
Enter host password for user 'xxxx':
{"name":"kibana.xxx.net","uuid":"21e470b6-439d-4a1d-a78b-4edb1657d500","version":{"number":"6.3.1","build_hash":"cb8398243cee7be0dddd118cd657d1f17be4e4be","build_number":17276,"build_snapshot":false},"status":{"overall":{"state":"green","title":"Green","nickname":"Looking good","icon":"success","since":"2018-10-16T10:00:03.451Z"},"statuses":[{"id":"plugin:kibana@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.451Z"},{"id":"plugin:elasticsearch@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.213Z"},{"id":"plugin:xpack_main@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:searchprofiler@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:tilemap@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:watcher@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:license_management@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.505Z"},{"id":"plugin:index_management@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:timelion@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.610Z"},{"id":"plugin:graph@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:monitoring@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.614Z"},{"id":"plugin:security@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:grokdebugger@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:dashboard_mode@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.644Z"},{"id":"plugin:logstash@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"},{"id":"plugin:console@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.653Z"},{"id":"plugin:console_extensions@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.662Z"},{"id":"plugin:metrics@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:03.664Z"},{"id":"plugin:reporting@6.3.1","state":"green","icon":"success","message":"Ready","since":"2018-10-16T10:00:04.267Z"}]},"metrics":{"last_updated":"2018-10-18T15:10:28.585Z","collection_interval_in_millis":5000,"uptime_in_millis":191433466,"process":{"mem":{"heap_max_in_bytes":138051584,"heap_used_in_bytes":119806920}},"os":{"cpu":{"load_average":{"1m":0.1767578125,"5m":0.08447265625,"15m":0.06103515625}},"cgroup":{"cpuacct":{"control_group":"/","usage_nanos":119891068365322},"cpu":{"control_group":"/","cfs_period_micros":100000,"cfs_quota_micros":-1,"stat":{"number_of_elapsed_periods":0,"number_of_times_throttled":0,"time_throttled_nanos":0}}}},"response_times":{"avg_in_millis":null,"max_in_millis":0},"requests":{"total":0,"disconnects":0,"status_codes":{}},"concurrent_connections":0}}

```

I'm using Metricbeat 6.4.2, although the Elastic Stack is still at version 6.3.1.  
In the Elasticsearch Log I see a Active Directory authentication error, even if I use the elastic user in the metricbeat config:

`[2018-10-18T16:47:46,702][WARN][o.e.x.s.a.AuthenticationService] [xalzplvdbxx.xxx.de] Authentication to realm active_directory failed - authenticate failed (Caused by LDAPException(resultCode=49 (invalid credentials), errorMessage='80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580', diagnosticMessage='80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580'))`

This is puzzling to me, as the Native Realm has order 0 and the AD Realm order 5.  
Apart from that, everything is working as expected. Can somebody point me in the right direction?

---

<div class="post-metadata">

**Author:** ![ariemenschneider](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ariemenschneider/32/33564_2.png) [@ariemenschneider](https://discuss.elastic.co/u/ariemenschneider)\
**Post date:** [October 19, 2018, 9:28am UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033/2 "2018-10-19T09:28:20Z")

</div>

I've found the error in my config. I have used

```
setup.kibana.user

```

instead of

```
setup.kibana.username

```

Unfortunately, a

```
metricbeat test config

```

told me that this config would be ok.

---

<div class="post-metadata">

**Author:** ![Mario\_Castro](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mario_castro/32/35107_2.png) [@Mario\_Castro](https://discuss.elastic.co/u/Mario_Castro)\
**Post date:** [October 20, 2018, 6:12pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033/3 "2018-10-20T18:12:23Z")

</div>

Hi @ariemenschneider 🙂

I'm glad that you found the solution. Do you mind to file us an issue reproducing the problem with `test config` command, please?

Best regards

---

<div class="post-metadata">

**Author:** ![ariemenschneider](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ariemenschneider/32/33564_2.png) [@ariemenschneider](https://discuss.elastic.co/u/ariemenschneider)\
**Post date:** [October 22, 2018, 12:20pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033/4 "2018-10-22T12:20:46Z")

</div>

Hi Mario,

thanks for looking into this. To reproduce:

```
[root@xalnplvapxx metricbeat]# grep setup metricbeat.yml 
setup.template.settings:
# options here, or by using the `-setup` CLI flag or the `setup` command.
#setup.dashboards.enabled: false
#setup.dashboards.url:
setup.kibana:
setup.dashboards.index: "os-xxx-metricbeat-*"
setup.dashboards.always_kibana: true
setup.kibana.username: "ariemenschneider"
setup.kibana.password: "${ariemenschneider_password}"
setup.kibana.ssl.enabled: true
# `setup.kibana.host` options.
[root@xalnplvapxx metricbeat]# metricbeat test config path.config=/etc/metricbeat
Config OK                                                                                                                                                                                                                                    
[root@xalnplvapxx metricbeat]#

```

This is a working config and everything is fine...

```
[root@xalnplvapxx metricbeat]# grep setup metricbeat.yml                                                                                                                                                             
setup.template.settings:
# options here, or by using the `-setup` CLI flag or the `setup` command.
#setup.dashboards.enabled: false
#setup.dashboards.url:
setup.kibana:
setup.dashboards.index: "os-xxx-metricbeat-*"
setup.dashboards.always_kibana: true
setup.kibana.user: "ariemenschneider"
setup.kibana.password: "${ariemenschneider_password}"
setup.kibana.ssl.enabled: true
# `setup.kibana.host` options.
[root@xalnplvapxx metricbeat]# metricbeat test config path.config=/etc/metricbeat                                                                                                                                                     
Config OK                                                                                                                                                                                                                                    
[root@xalnplvapxx metricbeat]#

```

This is a non-working config and should be caught by metricbeat test config. Note the **setup.kibana.user:** instead of **setup.kibana.username:**

```
[root@xalnplvapxx metricbeat]# metricbeat version
metricbeat version 6.4.1 (amd64), libbeat 6.4.1 [37b5f2d2a20f2734b2373a454b4b4cbb2627e841 built 2018-09-13 21:29:53 +0000 UTC]

```

System is RHEL7.5 and installation method was by RPM from the Elastic Repository.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 19, 2018, 12:21pm UTC](https://discuss.elastic.co/t/metricbeat-6-4-1-config-test-gives-false-ok/153033/5 "2018-11-19T12:21:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
