# Restoring Kibana related indices and users in 7.17?

**URL:** <https://discuss.elastic.co/t/restoring-kibana-related-indices-and-users-in-7-17/316433>\
**Category:** Kibana\
**Created:** [October 12, 2022, 11:57am UTC](https://discuss.elastic.co/t/restoring-kibana-related-indices-and-users-in-7-17/316433 "2022-10-12T11:57:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![NetwarSystem](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/netwarsystem/32/50862_2.png) [@NetwarSystem](https://discuss.elastic.co/u/NetwarSystem)\
**Post date:** [October 12, 2022, 11:57am UTC](https://discuss.elastic.co/t/restoring-kibana-related-indices-and-users-in-7-17/316433/1 "2022-10-12T11:57:47Z")

</div>

I have a system running Elasticsearch and Kibana 7.17.6. This is a single host with roughly 600 million items in 300 indices. The host OS is Ubuntu 22.04.

Earlier today a clumsy rsync command on my part stepped on some of the indices at a low level, including taking out some of the system indices, which blocked Kibana access. I tried moving forward to 8.4, found I have some very old 6.5.4 indices that need attention to do that, so I reinstalled 7.17.6. This system is a "hobby horse" for me, trying to return to the most recent backup would be ... agonizing, at best.

Elasticsearch came back, but no users. I used elasticsearch-user to make a superuser and I think Elasticsearch is doing what it should be, but there is only that one user and Kibana is eternally stuck in "Kibana server is not yet ready".

These are the system indices that are left after this misstep:

.monitoring-es-7-2022.10.12  
.monitoring-kibana-7-2022.10.12  
.apm-custom-link  
.tasks  
.fleet-policies-7  
.geoip\_databases  
.security-7  
.kibana\_task\_manager\_7.17.6\_001  
.kibana\_7.17.6\_001  
.apm-agent-configuration

There doesn't seem to be a way to change the password for the kibana\_system account, so I changed /etc/kibana/kibana.yml to use the superuser account and password. This lets Kibana come up, lets me log in using that same name and password, but it then stops at the "Welcome to Elastic" login splash screen.

I encountered a problem like this with some users once before and the solution was just zapping them and making new ones. Now, with just one account on the system, I don't have a path to doing that. Is there a method to reset the Kibana portion of the install back to some sort of default so I can get in and rebuild the other things?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 9, 2022, 11:58am UTC](https://discuss.elastic.co/t/restoring-kibana-related-indices-and-users-in-7-17/316433/2 "2022-11-09T11:58:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.