# Missing authentication credentials for REST request when using sniffing

**URL:** <https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114>\
**Category:** Kibana\
**Created:** [January 22, 2020, 5:43pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114 "2020-01-22T17:43:50Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![o1o1o11o1](https://avatars.discourse-cdn.com/v4/letter/o/74df32/32.png) [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Post date:** [January 22, 2020, 5:43pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114/1 "2020-01-22T17:43:50Z")

</div>

I just upgraded ELK from 7.1.0 to 7.5.0 and Kibana fails to start with

```
{"type":"log","@timestamp":"2020-01-22T17:27:54Z","tags":["error","elasticsearch","data"],"pid":23107,"message":"Request error, retrying\nGET http://localhost:9200/_xpack => socket hang up"}
{"type":"log","@timestamp":"2020-01-22T17:27:55Z","tags":["info","plugins-system"],"pid":23107,"message":"Starting [8] plugins: [security,licensing,code,timelion,features,spaces,translations,data]"}
{"type":"log","@timestamp":"2020-01-22T17:27:55Z","tags":["warning","plugins","licensing"],"pid":23107,"message":"License information could not be obtained from Elasticsearch for the [data] cluster. [security_exception] missing authentication credentials for REST request [/_xpack], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } } :: {\"path\":\"/_xpack\",\"statusCode\":401,\"response\":\"{\\\"error\\\":{\\\"root_cause\\\":[{\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}}],\\\"type\\\":\\\"security_exception\\\",\\\"reason\\\":\\\"missing authentication credentials for REST request [/_xpack]\\\",\\\"header\\\":{\\\"WWW-Authenticate\\\":\\\"Basic realm=\\\\\\\"security\\\\\\\" charset=\\\\\\\"UTF-8\\\\\\\"\\\"}},\\\"status\\\":401}\",\"wwwAuthenticateDirective\":\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\"}"}

```

when having the following two options enabled:

```
elasticsearch.sniffOnStart: true
elasticsearch.sniffOnConnectionFault: true

```

Any idea what I am doing wrong ?

The complete Kibana config follows:

```
server.port: 5601
server.host: 0.0.0.0
server.name: kibana

kibana.index: ".kibana"
kibana.defaultAppId: "discover"

elasticsearch.hosts: ["http://node1.test.com:9200", "http://node2.test.com:9200", "http://node3.test.com:9200", "http://node4.test.com:9200", "http://node5.test.com:9200"]
elasticsearch.pingTimeout: 1500
elasticsearch.requestTimeout: 30000
elasticsearch.logQueries: true
elasticsearch.sniffOnStart: true
elasticsearch.sniffOnConnectionFault: true
elasticsearch.username: "kibana"
elasticsearch.password: "XXX"

logging.dest: /var/log/kibana.log
logging.verbose: false

xpack.security.enabled: true
xpack.monitoring.enabled: true
xpack.monitoring.ui.enabled: true
xpack.security.encryptionKey: "XXX"

```

If I remove` elasticsearch.sniffOnStart: true` then all works fine.

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [January 28, 2020, 4:47pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114/2 "2020-01-28T16:47:31Z")

</div>

There is an open issue regarding this in the Kibana repo: [https://github.com/elastic/kibana/issues/42224](https://github.com/elastic/kibana/issues/42224)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 25, 2020, 4:47pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request-when-using-sniffing/216114/3 "2020-02-25T16:47:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.