[RESOLVED] SearchGuard: ElasticSearch "failed to execute multi_get for [config]/[5.5.2]" error

I am getting some error if I try to run Kibana 5.5.2 against ES secured by SearchGuard.
I've deleted my .kibana index .. Recreated it. Please let me know if you need more information.
Below you can find my log from ES:

[2018-02-05T17:12:31,947][DEBUG][o.e.a.g.TransportShardMultiGetAction] [PdXSfci] [.kibana-test][0] failed to execute multi_get for [config]/[5.5.2]
org.elasticsearch.ElasticsearchParseException: Failed to derive xcontent
at org.elasticsearch.common.xcontent.XContentFactory.xContent(XContentFactory.java:182) ~[elasticsearch-5.5.2.jar:5.5.2]
_ at com.floragunn.searchguard.configuration.DlsQueryParser.parse(DlsQueryParser.java:47) ~[?:?]_
_ at com.floragunn.searchguard.configuration.SearchGuardFlsDlsIndexSearcherWrapper.dlsFlsWrap(SearchGuardFlsDlsIndexSearcherWrapper.java:85) ~[?:?]_
_ at com.floragunn.searchguard.configuration.SearchGuardIndexSearcherWrapper.wrap(SearchGuardIndexSearcherWrapper.java:55) ~[?:?]_
_ at org.elasticsearch.index.shard.IndexSearcherWrapper.wrap(IndexSearcherWrapper.java:75) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.shard.IndexShard.acquireSearcher(IndexShard.java:902) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.engine.Engine.getFromSearcher(Engine.java:425) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.engine.InternalEngine.get(InternalEngine.java:371) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.shard.IndexShard.get(IndexShard.java:615) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.get.ShardGetService.innerGet(ShardGetService.java:154) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.index.get.ShardGetService.get(ShardGetService.java:82) ~[elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.action.get.TransportShardMultiGetAction.shardOperation(TransportShardMultiGetAction.java:91) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.action.get.TransportShardMultiGetAction.shardOperation(TransportShardMultiGetAction.java:42) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.action.support.single.shard.TransportSingleShardAction$ShardTransportHandler.messageReceived(TransportSingleShardAction.java:294) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.action.support.single.shard.TransportSingleShardAction$ShardTransportHandler.messageReceived(TransportSingleShardAction.java:287) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.transport.TransportRequestHandler.messageReceived(TransportRequestHandler.java:33) [elasticsearch-5.5.2.jar:5.5.2]_
_ at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceivedDecorate(SearchGuardSSLRequestHandler.java:178) [search-guard-ssl-5.5.2-23.jar:5.5.2-23]_
_ at com.floragunn.searchguard.transport.SearchGuardRequestHandler.messageReceivedDecorate(SearchGuardRequestHandler.java:101) [search-guard-5-5.5.2-16.jar:?]_
_ at com.floragunn.searchguard.ssl.transport.SearchGuardSSLRequestHandler.messageReceived(SearchGuardSSLRequestHandler.java:92) [search-guard-ssl-5.5.2-23.jar:5.5.2-23]_
_ at com.floragunn.searchguard.SearchGuardPlugin$3$1.messageReceived(SearchGuardPlugin.java:380) [search-guard-5-5.5.2-16.jar:?]_
_ at org.elasticsearch.transport.RequestHandlerRegistry.processMessageReceived(RequestHandlerRegistry.java:69) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.transport.TransportService$7.doRun(TransportService.java:644) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:638) [elasticsearch-5.5.2.jar:5.5.2]_
_ at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-5.5.2.jar:5.5.2]_
_ at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_144]_
_ at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_144]_
_ at java.lang.Thread.run(Thread.java:748) [?:1.8.0_144]_

There was an issue with my searchguard index

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.