# Nothing showing on Kibana after enabling security features

**URL:** https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234
**Category:** Kibana
**Created:** [January 8, 2020, 12:35pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234 "2020-01-08T12:35:14Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Booooooo](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Booooooo](https://discuss.elastic.co/u/Booooooo)
#### Post date: [January 8, 2020, 12:35pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/1 "2020-01-08T12:35:14Z")

</div>

Hi,

I just followed this [tutorial](https://www.elastic.co/guide/en/elasticsearch/reference/7.1/get-started-enable-security.html) on how to enable security features on the Elastic Stack. After restarting Elasticsearch and Kibana, add the password configured, I am logged in but there is nothing showing appart from an option to select your space and nothing else:

![Xpack](https://us1.discourse-cdn.com/elastic/original/3X/6/3/6301b5416082bfee32811a5ea2263415bc892020.jpeg)

How can I fix this?

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [January 9, 2020, 8:09pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/2 "2020-01-09T20:09:04Z")

</div>

Hey @Booooooo,

A couple of questions for you:

What version of Kibana/ES are you using?

Can you make the following _Elasticsearch_ API calls using the same username and password you used to login to Kibana, and paste the results here? Redact any sensitive information if you have names/emails in the output:

Replace [http://localhost:9200](http://localhost:9200) in the examples below with your actual Elasticsearch URL

- [http://localhost:9200/\_security/\_authenticate](http://localhost:9200/_security/_authenticate)
- [http://localhost:9200/\_security/user/\_privileges](http://localhost:9200/_security/user/_privileges)

---

<div class="post-metadata">

### Author: ![Booooooo](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Booooooo](https://discuss.elastic.co/u/Booooooo)
#### Post date: [January 10, 2020, 9:01am UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/3 "2020-01-10T09:01:17Z")

</div>

Hi @Larry_Gregory,

Thanks for the reply.

I am running the Stack on 7.5.0.

**[http://localhost:9200/\_security/\_authenticate](http://localhost:9200/_security/_authenticate)**

`{"username":"kibana","roles":["kibana_system"],"full_name":null,"email":null,"metadata":{"_reserved":true},"enabled":true,"authentication_realm":{"name":"reserved","type":"reserved"},"lookup_realm":{"name":"reserved","type":"reserved"}}`

**[http://localhost:9200/\_security/user/\_privileges](http://localhost:9200/_security/user/_privileges)**

`{"cluster":["cluster:admin/xpack/monitoring/bulk","cluster:admin/xpack/security/privilege/builtin/get","delegate_pki","manage_index_templates","manage_oidc","manage_saml","manage_token","monitor"],"global":[{"application":{"manage":{"applications":["kibana-*"]}}}],"indices":[{"names":[".management-beats"],"privileges":["create_index","read","write"],"allow_restricted_indices":false},{"names":[".monitoring-*"],"privileges":["read","read_cross_cluster"],"allow_restricted_indices":false},{"names":[".code-*",".code_internal-*"],"privileges":["all"],"allow_restricted_indices":false},{"names":[".apm-agent-configuration"],"privileges":["all"],"allow_restricted_indices":false},{"names":[".kibana*",".reporting-*"],"privileges":["all"],"allow_restricted_indices":false}],"applications":[],"run_as":[]}`

I have followed the tutorial up to [this page](https://www.elastic.co/guide/en/elasticsearch/reference/7.1/get-started-kibana-user.html) part, and then I stopped not to mess things up even further. 🙂

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [January 10, 2020, 1:19pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/4 "2020-01-10T13:19:40Z")

</div>

> [@Booooooo](#):
>
> I have tried to run the calls you've suggested **(with my URL)** but I get an error that the site cannot be reached.

Well that's interesting...

Ok, one more idea for you to try:

Can you set `logging.verbose: true` in your `kibana.yml`, restart Kibana, and login again?  
If you could then provide the log file, we can try to diagnose this further.

---

<div class="post-metadata">

### Author: ![Booooooo](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Booooooo](https://discuss.elastic.co/u/Booooooo)
#### Post date: [January 10, 2020, 1:55pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/5 "2020-01-10T13:55:13Z")

</div>

Hi @Larry_Gregory,

Sorry, I have mofified my post as I made a silly mistake. I have used curl this time and was able to retrieve the information I've posted now.

Any ideas?

---

<div class="post-metadata">

### Author: ![Booooooo](https://avatars.discourse-cdn.com/v4/letter/b/ecccb3/32.png) [@Booooooo](https://discuss.elastic.co/u/Booooooo)
#### Post date: [January 10, 2020, 2:00pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/6 "2020-01-10T14:00:18Z")

</div>

I think the most likely thing here is that the **kibana** user does not have the appropriate priviledges. But I am not sure how or where to modify that on the stack. Am I on the right track here?

---

<div class="post-metadata">

### Author: ![Larry\_Gregory](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/larry_gregory/32/34969_2.png) [@Larry\_Gregory](https://discuss.elastic.co/u/Larry_Gregory)
#### Post date: [January 10, 2020, 2:05pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/7 "2020-01-10T14:05:12Z")

</div>

ah ha! You've run into a common "gotcha". The `kibana` user is intentionally not authorized to access Kibana itself. This user is one one you set in your `kibana.yml` for `elasticsearch.username`:

```auto
elasticsearch.username: kibana
elasticsearch.password: changeme

```

This account is what we call the "kibana system" user. We have an open issue to change this to make it clearer: [https://github.com/elastic/kibana/issues/25879](https://github.com/elastic/kibana/issues/25879)

To actually login to kibana, you need to use an account with the appropriate privileges. Since you're just getting started, I'd recommend logging in with the built-in `elastic` superuser. Can you give that a try and let me know how you make out?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 7, 2020, 2:05pm UTC](https://discuss.elastic.co/t/nothing-showing-on-kibana-after-enabling-security-features/214234/8 "2020-02-07T14:05:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
