# Monitoring cluster logstash error

**URL:** <https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795>\
**Category:** Logstash\
**Created:** [June 26, 2020, 6:31am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795 "2020-06-26T06:31:31Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![bevano](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bevano](https://discuss.elastic.co/u/bevano)\
**Post date:** [June 26, 2020, 6:31am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/1 "2020-06-26T06:31:31Z")

</div>

Hi all,

I currently have a ELK stack in product and have metricbeat setup on every node logstash instances pushing metric and monitoring data to a separate monitoring cluster.

Everything was working in 7.7.1, but since updating to 7.8 when i try and open the information tab on a specific logstash node, i receive a {"statusCode":404,"error":"Not Found","message":"Not Found"}

The information tab on a specific logstash node is that tab where you can see the persistent queue and jvm heap performance. Metricbeat is working as expected, i can see the systems CPU/Memory usage, and also the Events Ingested counter works.

Not sure whether this is a bug, or if I can fix it.

This is the logstash overview page that is working

 ![2020-06-26 16_29_37-Stack Monitoring - Logstash - Nodes - Elastic](https://us1.discourse-cdn.com/elastic/original/3X/3/5/356bca7ae7eeade71df6fe30980a6805f3b147f5.png)

---

<div class="post-metadata">

**Author:** ![bevano](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bevano](https://discuss.elastic.co/u/bevano)\
**Post date:** [June 26, 2020, 7:09am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/2 "2020-06-26T07:09:17Z")

</div>

This is from the system logs

`Jun 26 17:05:08 ELKMONITOR kibana[959]: {"type":"response","@timestamp":"2020-06-26T07:05:07Z","tags":[],"pid":959,"method":"get","statusCode":404,"req":{"url":"/logstash/node/abb48d76-112a-4fde-9f12-6d1cc08dedf6?_g=%28cluster_uuid%3AmVxn9bzlQACfBH1ExjHAPA%2CrefreshInterval%3A%28pause%3A%21f%2Cvalue%3A10000%29%2Ctime%3A%28from%3Anow-10m%2Cto%3Anow%29%29","method":"get","headers":{"host":"192.168.0.XXX:5601","connection":"keep-alive","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9","accept-encoding":"gzip, deflate","accept-language":"en-GB,en-US;q=0.9,en;q=0.8"},"remoteAddress":"10.210.0.77","userAgent":"10.210.0.77"},"res":{"statusCode":404,"responseTime":120,"contentLength":9},"message":"GET /logstash/node/abb48d76-112a-4fde-9f12-6d1cc08dedf6?_g=%28cluster_uuid%3AmVxn9bzlQACfBH1ExjHAPA%2CrefreshInterval%3A%28pause%3A%21f%2Cvalue%3A10000%29%2Ctime%3A%28from%3Anow-10m%2Cto%3Anow%29%29 404 120ms - 9.0B"}`

---

<div class="post-metadata">

**Author:** ![christian.kordein](https://avatars.discourse-cdn.com/v4/letter/c/b782af/32.png) [@christian.kordein](https://discuss.elastic.co/u/christian.kordein)\
**Post date:** [June 26, 2020, 1:11pm UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/3 "2020-06-26T13:11:00Z")

</div>

Facing the same error after Upgrading and the Information Tab from the pipelines is also not showing here (Same 404 Message).

One thing i found was in Kibana Logs:

```
{"type":"log","@timestamp":"2020-06-26T13:04:48Z","tags":["debug","http","server","Kibana","cookie-session-storage"],"pid":21851,"message":"Error: Unauthorized"}
{"type":"log","@timestamp":"2020-06-26T13:04:48Z","tags":["debug","plugins","security","basic","basic"],"pid":21851,"message":"Trying to authenticate user request to /api/status."}
{"type":"log","@timestamp":"2020-06-26T13:04:48Z","tags":["debug","plugins","security","basic","basic"],"pid":21851,"message":"Cannot authenticate requests with `Authorization` header."}

```

Hopefully someone can support.

---

<div class="post-metadata">

**Author:** ![Wolfram\_Haussig](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wolfram_haussig/32/70528_2.png) [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\
**Post date:** [June 29, 2020, 11:42am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/4 "2020-06-29T11:42:35Z")

</div>

I have compared the urls from the working pipeline overview and the not working pipeline details:  
[https://host:5601/app/monitoring#/logstash/pipelines?\_g=(cluster\_uuid:VTDsWXH0TUqC4YO7H8Zhkw,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)](https://host:5601/app/monitoring#/logstash/pipelines?_g=(cluster_uuid:VTDsWXH0TUqC4YO7H8Zhkw,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)))  
[https://host:5601/logstash/pipelines/central-syslog?\_g=(cluster\_uuid:VTDsWXH0TUqC4YO7H8Zhkw,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)](https://host:5601/logstash/pipelines/central-syslog?_g=(cluster_uuid:VTDsWXH0TUqC4YO7H8Zhkw,refreshInterval:(pause:!f,value:10000),time:(from:now-1h,to:now)))

The problem is that the part "/app/monitoring#" is missing in the lower url. adding this part produces the correct url

Update: Problem will be fixed with 7.8.1 [https://github.com/elastic/kibana/pull/69861](https://github.com/elastic/kibana/pull/69861)

---

<div class="post-metadata">

**Author:** ![bevano](https://avatars.discourse-cdn.com/v4/letter/b/6bbea6/32.png) [@bevano](https://discuss.elastic.co/u/bevano)\
**Post date:** [June 30, 2020, 12:53am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/5 "2020-06-30T00:53:18Z")

</div>

Great, thanks for the update.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2020, 12:53am UTC](https://discuss.elastic.co/t/monitoring-cluster-logstash-error/238795/6 "2020-07-28T00:53:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
