# Problem with monitoring x-pack **URL:** \ **Category:** Elasticsearch\ **Created:** [June 28, 2017, 2:00pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112 "2017-06-28T14:00:49Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 2:00pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/1 "2017-06-28T14:00:49Z")
hello! i actually have a problem with monitoring, i can't access it, i have the following message : ![](https://us1.discourse-cdn.com/elastic/original/3X/a/3/a39fe635e823a5d5422285340c5a0ae9ca3e6242.png) here is what the logs says, i don't understand at all: Bad Request :: {"path":"\_xpack/security/user/\_has\_privileges","body":"{"index":[{"names":[".monitoring-_-2-_"],"privileges":["read"]}]}","statusCode":400,"response":"No handler found for uri [\_xpack/security/user/\_has\_privileges] and method [POST]"} at respond (/usr/share/kibana/node\_modules/elasticsearch/src/lib/transport.js:295:15) at checkRespForFailure (/usr/share/kibana/node\_modules/elasticsearch/src/lib/transport.js:254:7) at HttpConnector. (/usr/share/kibana/node\_modules/elasticsearch/src/lib/connectors/http.js:159:7) at IncomingMessage.bound (/usr/share/kibana/node\_modules/elasticsearch/node\_modules/lodash/dist/lodash.js:729:21) at emitNone (events.js:91:20) at IncomingMessage.emit (events.js:185:7) at endReadableNT (\_stream\_readable.js:974:12) at \_combinedTickCallback (internal/process/next\_tick.js:80:11) at process.\_tickDomainCallback (internal/process/next\_tick.js:128:9) if you have an idea it would be really helpfull!!!! thank you! ---
**Author:** ![ld\_pvl](https://avatars.discourse-cdn.com/v4/letter/l/cdc98d/32.png) [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Post date:** [June 28, 2017, 2:35pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/2 "2017-06-28T14:35:58Z")
Hi again, I believe you asked a similar question [Elasticsearch doesn't work after installing xpack](https://discuss.elastic.co/t/elasticsearch-doesnt-work-after-installing-xpack/90606/3) By default when you install x-pack, it expects you already set up your security "layers" between the components. If you haven't set up the security between the components then they won't be able to communicate with each other because they will simply reject each others' request communicate. So in this case, try disabling the security in your cluster. ---
**Author:** ![colings86](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/colings86/32/44960_2.png) [@colings86](https://discuss.elastic.co/u/colings86)\ **Post date:** [June 28, 2017, 2:46pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/3 "2017-06-28T14:46:00Z")
Did you install X-Pack on both Elasticsearch and Kibana? From this error it looks like X-Pack was installed for Kibana but not for Elasticsearch ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 2:59pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/4 "2017-06-28T14:59:13Z")
yes x-pack is install on elasticsearch and i have already set up the security to false : ![](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a761ab9826bbdfdf3630f7cb9b810f1c45eff4d9.png) mayber i forgot Something, but i don't know what ---
**Author:** ![colings86](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/colings86/32/44960_2.png) [@colings86](https://discuss.elastic.co/u/colings86)\ **Post date:** [June 28, 2017, 3:00pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/5 "2017-06-28T15:00:58Z")
Did you set security to false in both Elasticsearch and also in Kibana? If you disable security in `elasticsearch.yml` you need to also disable it in Kibana's `kibana.yml` file ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 3:02pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/6 "2017-06-28T15:02:18Z")
yes i also set security to false in kibana.yml ---
**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\ **Post date:** [June 28, 2017, 3:05pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/7 "2017-06-28T15:05:52Z")
Hi @Benjamin_Peere, Can you share your settings from your `kibana.yml` (feel free to obfuscate any secret values)? Can you do the same with your elasticsearcy.yml? Thanks ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 3:09pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/8 "2017-06-28T15:09:36Z")
hi, no problem, here is the kibana.yml ```auto server.port: 5602 server.host: "my-host" xpack.security.enabled: false xpack.monitoring.enabled: true ``` ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 3:09pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/9 "2017-06-28T15:09:59Z")
and here is my elasticsearch.yml : ```auto cluster.name: elastic node.name: elasticsearch network.host: 0.0.0.0 http.port: 9200 xpack.security.enabled: false xpack.monitoring.enabled: true xpack.notification.email.account: gmail_account: profile: gmail smtp: auth: true starttls.enable: true host: smtp.gmail.com port: 587 user: ******** @gmail.com password: ********* ``` thanks for your reply! ---
**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\ **Post date:** [June 28, 2017, 3:22pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/10 "2017-06-28T15:22:16Z")
Hi @Benjamin_Peere, Nothing seems very weird in either configuration. As a side note, Kibana will dynamically determine if it needs to use security by talking to Elasticsearch., but it shouldn't matte if you are explicit. Which version of Kibana / Elasticsearch are you running? Also, which license level are you using? Thanks, Chris ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 28, 2017, 3:25pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/11 "2017-06-28T15:25:22Z")
i'm actually using kibana and elasticsearch version 6.0.0, and i'm using a free license, thanks ---
**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\ **Post date:** [June 28, 2017, 3:41pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/12 "2017-06-28T15:41:28Z")
> i'm actually using kibana and elasticsearch version 6.0.0, and i'm using a free license, Ah! I missed it in the screenshot. Sorry. Ugh, so I have bad but also good news. You caught a bug in alpha2! The Monitoring UI is not checking that API only when security is in used. This is already fixed, but it obviously doesn't save you here. Fortunately there is a workaround: you can leave Security enabled in Elasticsearch, but turn on anonymous access via a superuser role. ```auto xpack.security.authc.anonymous.roles: superuser ``` Naturally this would not be a solution for a production setup, but you should never be running an alpha build in a production scenario. Hope that helps, Chris ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 29, 2017, 7:02am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/13 "2017-06-29T07:02:16Z")
thank you i will try this! i didn't paid attention that i was in a beta version, do you know how i can do to downgrade my version without loosing my data? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 29, 2017, 7:15am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/14 "2017-06-29T07:15:04Z")
You can not downgrade existing indices, so you will need to reindex the data. ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 29, 2017, 7:16am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/15 "2017-06-29T07:16:48Z")
ok, it's not a problem, is there a way to downgrade easily or do i have absolutely uninstal kibana/elasticsearch and reinstal it? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [June 29, 2017, 7:21am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/16 "2017-06-29T07:21:27Z")
You will need to reinstall completely as Elasticsearch 6.0 uses a newer version of Lucene for storage that Elasticsearch 5.x can not read. If you want to reindex your data from Elasticsearch 6.0, you should be able to install a separate instance of Elasticsearch side by side and use [the reindex from remote API](https://www.elastic.co/guide/en/elasticsearch/reference/5.4/docs-reindex.html#reindex-from-remote). ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 29, 2017, 9:47am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/17 "2017-06-29T09:47:49Z")
Thank you for all your answer, i have reinstall elasticsearch and kibana and reindex everything. and i have another problem, always with monitoring, i have the following message : ![](https://us1.discourse-cdn.com/elastic/original/3X/6/7/67189da6d64e155a48a9d1241647fd71b39d837b.png) the thing is that i don't have text fields in my index : ![](https://us1.discourse-cdn.com/elastic/original/3X/e/b/eb67ab13552b3d3a68a551f00224057e6609d52e.png) if you have an idea of what is the problem that would be awesome! thanks! ---
**Author:** ![pickypg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pickypg/32/62409_2.png) [@pickypg](https://discuss.elastic.co/u/pickypg)\ **Post date:** [June 29, 2017, 4:54pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/18 "2017-06-29T16:54:47Z")
@Benjamin_Peere It's complaining about a field named `cluster_uuid`. This is most likely coming from X-Pack monitoring indices and it most commonly happens because the templates were deleted / overwritten. It's hard to say what version you are seeing this issue under now, but the easiest thing to do is to open up Dev Tools within Kibana and then Console. In there, run this command: ```auto DELETE /.monitoring-* ``` Alternatively you can do this from cURL (or your favorite command line tool): ```auto curl -XDELETE localhost:9200/.monitoring-* ``` This will delete any X-Pack monitoring-generated indices. They will be recreated, but there should be no funny business with their templates being deleted in the middle. If you reindexed your data from the 6.0 cluster and simply brought over indices from that cluster, then it's _critical_ to always pre-create mappings before creating indices. If you ended up copying over `.monitoring-*` indices, it's safe to just delete them and to allow it to start fresh. * * * As a completely unrelated suggestion, you should look into time-based indices for your own data so that they are easier to curate. We have a few places that discuss it, including the new "rollover" feature: - [https://www.elastic.co/guide/en/elasticsearch/guide/current/time-based.html](https://www.elastic.co/guide/en/elasticsearch/guide/current/time-based.html) - [https://www.elastic.co/blog/managing-time-based-indices-efficiently](https://www.elastic.co/blog/managing-time-based-indices-efficiently) ---
**Author:** ![Benjamin\_Peere](https://avatars.discourse-cdn.com/v4/letter/b/f04885/32.png) [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Post date:** [June 30, 2017, 9:21am UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/19 "2017-06-30T09:21:20Z")
hi! thanks for your answer, when i moved from 6.0 to 5.4.3 i had delete all my indices and recreated them. i tried : DELETE /.monitoring-\* when i do this, it work for maybe 30 seconds and it does the samething after, i also tried to delete my index and recreate it, and it doesn't work. ---
**Author:** ![jyelle](https://avatars.discourse-cdn.com/v4/letter/j/e495f1/32.png) [@jyelle](https://discuss.elastic.co/u/jyelle)\ **Post date:** [July 25, 2017, 5:12pm UTC](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112/20 "2017-07-25T17:12:47Z")
@pickypg -- Does there happen to be a release date for the next XPack build or can I get a copy of the build [6.0.0-alpha2] with the bug fix? I am running [xpack.security.enabled: false] because I don't want to go through the headache of configuring all of the TLS and User permissions stuff on my test cluster every time I delete/start over with stress testing. If there's a way to override the boostrap security checks for a test cluster (not single node) I'm all ears, and then I can use the workaround you mentioned. Thanks for your help! ~Jer [Next page](https://discuss.elastic.co/t/problem-with-monitoring-x-pack/91112.md?page=2)