# Setup mode is not available You do not have the necessary permissions to do this

**URL:** <https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring\
**Created:** [August 19, 2020, 3:25pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635 "2020-08-19T15:25:25Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 19, 2020, 3:25pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/1 "2020-08-19T15:25:26Z")

</div>

i have installed a Elasticsearch cluster of 3 master and 2 data nodes and a single node Elasticsearch monitoring cluster. i am sending the metrics of Elasticsearch using metricbeat. i can see the metrics when i check the index of metricbeat . but i cant see my cluster in stack monitoring section . when i try to setup it throws an error

"Setup mode is not available You do not have the necessary permissions to do this."

i have disabled the xpack security but i have no luck with stack monitoring. any steps to debug the issue? i dont see anything in logs except warning that i have to enabel xpack secutiry

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 19, 2020, 6:31pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/2 "2020-08-19T18:31:50Z")

</div>

Hi @Yogesh_Kumar1,

What version of the stack are you using?

For your user, can you share the results of:

`GET _security/user/elastic`

Then, based on the response above, can you share each role definition associated with that user?

For example:

`GET _security/role/superuser`

Thanks!

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 20, 2020, 7:42am UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/3 "2020-08-20T07:42:41Z")

</div>

i am not using authentication anywhere. Elasticsearch, kibana and metricbeat version 7.8.1

## Elasticseach cluster (master ) node config: Elasticsearch

cluster.name: es78-cluster  
node.name: es-78-master-2  
node.data: false  
node.master: true  
node.ingest: true  
bootstrap.memory\_lock: true  
bootstrap.system\_call\_filter: false  
network.host: X.X.X.X2  
http.port: 9200  
transport.profiles.default.port: 9300  
discovery.seed\_hosts: ["X.X.X.X1", "X.X.X.X2", "X.X.X.X3"]  
cluster.initial\_master\_nodes: ["1X.X.X.X1:9300", "X.X.X.X2:9300"]  
action.auto\_create\_index: .security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*  
indices.breaker.fielddata.limit: 60%  
thread\_pool:  
write:  
queue\_size: 200  
xpack.monitoring.collection.enabled: true

## Metricbeat config on same node

$ cat /etc/metricbeat/metricbeat.yml

metricbeat.config.modules:  
path: ${path.config}/modules.d/\*.yml  
reload.enabled: false  
setup.template.settings:  
index.number\_of\_shards: 1  
index.codec: best\_compression  
output.elasticsearch:  
hosts: ["[http://Y.Y.Y.Y:9200](http://Y.Y.Y.Y:9200)"]  
processors:

- add\_host\_metadata: ~
- add\_cloud\_metadata: ~
- add\_docker\_metadata: ~
- add\_kubernetes\_metadata: ~

$ cat /etc/metricbeat/modules.d/elasticsearch-xpack.yml

- module: elasticsearch  
xpack.enabled: true  
period: 10s  
hosts: ["[http://X.X.X.X2:9200](http://X.X.X.X2:9200)"]  
metricsets:  
- ccr  
- cluster\_stats  
- index  
- index\_recovery  
- index\_summary  
- ml\_job  
- node\_stats  
- shard  
- enrich  
- pending\_tasks

## Configuration of monitoring node

$ cat /etc/elasticsearch/elasticsearch.yml  
node.name: es7-monitering-node  
node.data: true  
node.master: true  
node.ingest: true  
bootstrap.memory\_lock: true  
bootstrap.system\_call\_filter: false  
network.host: Y.Y.Y.Y  
http.port: 9200  
transport.profiles.default.port: 9300  
cluster.initial\_master\_nodes: ["es7-monitering-node"]  
indices.breaker.fielddata.limit: 60%  
thread\_pool:  
write:  
queue\_size: 200  
xpack.security.enabled: false  
xpack.monitoring.collection.enabled: false

$ cat /etc/kibana/kibana.yml  
server.port: 5601  
server.host: "0.0.0.0"  
elasticsearch.hosts: ["[http://Y.Y.Y.Y:9200](http://Y.Y.Y.Y:9200)"]  
kibana.index: ".kibana"  
xpack.monitoring.kibana.collection.enabled: false

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 20, 2020, 1:34pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/4 "2020-08-20T13:34:52Z")

</div>

Thanks @Yogesh_Kumar1

It sounds like this bug to me: [https://github.com/elastic/kibana/issues/73740](https://github.com/elastic/kibana/issues/73740)

Are you able to try and upgrade to 7.9 to see if it resolves your issue?

Thanks

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 20, 2020, 1:37pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/5 "2020-08-20T13:37:57Z")

</div>

let me try

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 21, 2020, 1:14pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/7 "2020-08-21T13:14:38Z")

</div>

i upgraded the ES and Kibana of monitoring cluster to 7.9 while data ES are still 7.8.1. now after upgrade the error is gone but stack monitoring is trying to fetch data from monitoring cluster instead of production cluster. is there anything that i am missing

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 21, 2020, 3:03pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/8 "2020-08-21T15:03:02Z")

</div>

Can you share your `kibana.yml`?

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 5:29am UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/9 "2020-08-24T05:29:29Z")

</div>

cat /etc/kibana/kibana.yml  
server.port: 5601  
server.host: "0.0.0.0"  
elasticsearch.hosts: ["[http://Y.Y.Y.Y:9200](http://Y.Y.Y.Y:9200)"]  
kibana.index: ".kibana"

Here the elasticsearch mentioneed is of monitoring cluster

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 7:24am UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/10 "2020-08-24T07:24:03Z")

</div>

this issue is also reported by another user too. but no resolution on this

> [@Kibana not displaying monitoring data](https://discuss.elastic.co/t/kibana-not-displaying-monitoring-data/237124/5):
>
> @defalt, I can see the data in discover using the metricbeat-\* pattern. But the problem is stack monitoring page is not showing any monitoring data. I am getting the page as below As per my understanding, it should show the production cluster's node monitoring details.

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 24, 2020, 1:11pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/11 "2020-08-24T13:11:41Z")

</div>

On `http://Y.Y.Y.Y:9200`, are you seeing `.monitoring-*` indices? When using the stack monitoring metricbeat modules with `xpack.enabled: true`, metricbeat will not index into `metricbeat-*`, but rather into `.monitoring-*` indices.

> [@Yogesh\_Kumar1](#):
>
> server.port: 5601  
> server.host: "0.0.0.0"  
> elasticsearch.hosts: ["[http://Y.Y.Y.Y:9200](http://Y.Y.Y.Y:9200)"]  
> kibana.index: ".kibana"
> 
> Here the elasticsearch mentioneed is of monitoring cluster

This config looks right in that you are pointing Kibana to the `Y.Y.Y.Y` cluster, which is where Metricbeat is outputting:

> [@Yogesh\_Kumar1](#):
>
> output.elasticsearch:  
> hosts: ["[http://Y.Y.Y.Y:9200](http://Y.Y.Y.Y:9200)"]

> [@Yogesh\_Kumar1](#):
>
> stack monitoring is trying to fetch data from monitoring cluster instead of production cluster

What gives you this impression?

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 1:26pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/12 "2020-08-24T13:26:24Z")

</div>

yup i can see the .montoring\_\* in monitoring as well as data cluster

$ curl -XGET [http://Y.Y.Y.Y:9200/\_cat/indices](http://Y.Y.Y.Y:9200/_cat/indices)  
green open .kibana-event-log-7.8.0-000001 QB4omqsFQoq9pqzB0KAuxw 1 0 2 0 10.4kb 10.4kb  
green open .apm-custom-link uzd1aWEzSI23nsXfeo2rEA 1 0 0 0 208b 208b  
green open .kibana\_task\_manager\_1 bz9-bPwnQ2CUwvcljtUsNA 1 0 5 0 20.1kb 20.1kb  
green open .apm-agent-configuration 3wQJnZPvSFat8AzEroCEeA 1 0 0 0 208b 208b  
yellow open metricbeat-7.8.1-2020.08.24-000001 1jnSIRDOTkeF-fN6XSi0Sg 1 1 15522 0 4.2mb 4.2mb  
green open .kibana\_1 LGXM0Y1hSZSyt2d2R84vIg 1 0 20 2 230.7kb 230.7kb  
green open .monitoring-es-7-mb-2020.08.24 \_jvZTgr7QHaiDmqlekOALw 1 0 252 0 470.4kb 470.4kb

> [@chrisronline](#):
>
> What gives you this impression?

in logs i saw the cluster id of monitoring cluster instead of data cluster whenever i try to setup monitoring in stack monitoring.

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 24, 2020, 1:50pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/13 "2020-08-24T13:50:10Z")

</div>

Okay, let's verify that really quick.

On the monitoring cluster, can you run these two queres and return the results?

```auto
POST .monitoring-es-*/_search
{
  "size": 0,
  "aggs": {
    "types": {
      "terms": {
        "field": "cluster_uuid",
        "size": 10
      },
      "aggs": {
        "types": {
          "terms": {
            "field": "type",
            "size": 20
          }
        }
      }
    }
  }
}

```

and

```auto
POST .monitoring-es-*/_search
{
  "size": 5,
  "query": {
    "term": {
      "type": {
        "value": "cluster_stats"
      }
    }
  }, 
  "collapse": {
    "field": "cluster_uuid"
  }
}

```

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 2:36pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/14 "2020-08-24T14:36:47Z")

</div>

> [@chrisronline](#):
>
> ```auto
> POST .monitoring-es-*/_search
> {
> "size": 0,
> "aggs": {
> "types": {
> "terms": {
> "field": "cluster_uuid",
> "size": 10
> },
> "aggs": {
> "types": {
> "terms": {
> "field": "type",
> "size": 20
> }
> }
> }
> }
> }
> }
> 
> ```

curl -XPOST [http://Y.Y.Y.Y:9200/.monitoring-es-\*/\_search?pretty](http://Y.Y.Y.Y:9200/.monitoring-es-*/_search?pretty) -H 'Content-Type: application/json' -d'

> {  
> "size": 0,  
> "aggs": {  
> "types": {  
> "terms": {  
> "field": "cluster\_uuid",  
> "size": 10  
> },  
> "aggs": {  
> "types": {  
> "terms": {  
> "field": "type",  
> "size": 20  
> }  
> }  
> }  
> }  
> }  
> }'  
> {  
> "took" : 680,  
> "timed\_out" : false,  
> "\_shards" : {  
> "total" : 1,  
> "successful" : 1,  
> "skipped" : 0,  
> "failed" : 0  
> },  
> "hits" : {  
> "total" : {  
> "value" : 120,  
> "relation" : "eq"  
> },  
> "max\_score" : null,  
> "hits" :   
> },  
> "aggregations" : {  
> "types" : {  
> "doc\_count\_error\_upper\_bound" : 0,  
> "sum\_other\_doc\_count" : 0,  
> "buckets" : [  
> {  
> "key" : "jNLcalI1SdSRpFJws2PqEw",  
> "doc\_count" : 120,  
> "types" : {  
> "doc\_count\_error\_upper\_bound" : 0,  
> "sum\_other\_doc\_count" : 0,  
> "buckets" : [  
> {  
> "key" : "node\_stats",  
> "doc\_count" : 120  
> }  
> ]  
> }  
> }  
> ]  
> }  
> }  
> }

curl -XPOST [http://Y.Y.Y.Y:9200/.monitoring-es-\*/\_search?pretty](http://Y.Y.Y.Y:9200/.monitoring-es-*/_search?pretty) -H 'Content-Type: application/json' -d'

> {  
> "size": 5,  
> "query": {  
> "term": {  
> "type": {  
> "value": "cluster\_stats"  
> }  
> }  
> },  
> "collapse": {  
> "field": "cluster\_uuid"  
> }  
> }'  
> {  
> "took" : 385,  
> "timed\_out" : false,  
> "\_shards" : {  
> "total" : 1,  
> "successful" : 1,  
> "skipped" : 0,  
> "failed" : 0  
> },  
> "hits" : {  
> "total" : {  
> "value" : 0,  
> "relation" : "eq"  
> },  
> "max\_score" : null,  
> "hits" :   
> }  
> }

data cluster UUID : jNLcalI1SdSRpFJws2PqEw  
monitoring cluster UUID : pQ4V93CZR2ar6-qyk6fJyQ

here are logs too:

Aug 24 19:44:24 perf-es7-monitering-node kibana: {"type":"response","@timestamp":"2020-08-24T14:14:24Z","tags":,"pid":21543,"method":"post","statusCode":404,"req":{"url":"/api/monitoring/v1/clusters/pQ4V93CZR2ar6-qyk6fJyQ/elasticsearch/nodes","method":"post","headers":{"host":"Y.Y.Y.Y:5601","connection":"keep-alive","content-length":"158","accept":"application/json, text/plain, _/_","dnt":"1","kbn-version":"7.9.0","user-agent":"Mozilla/5.0 (X11; Linux x86\_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36","content-type":"application/json;charset=UTF-8","origin":"[http://Y.Y.Y.Y:5601](http://Y.Y.Y.Y:5601)","referer":"[http://Y.Y.Y.Y](http://Y.Y.Y.Y)::5601/app/monitoring","accept-encoding":"gzip, deflate","accept-language":"en-GB,en;q=0.9,ru-RU;q=0.8,ru;q=0.7,en-US;q=0.6"},"remoteAddress":"10.143.1.72","userAgent":"10.143.1.72","referer":"[http://Y.Y.Y.Y](http://Y.Y.Y.Y)::5601/app/monitoring"},"res":{"statusCode":404,"responseTime":53,"contentLength":9},"message":"POST /api/monitoring/v1/clusters/pQ4V93CZR2ar6-qyk6fJyQ/elasticsearch/nodes 404 53ms - 9.0B"}

Aug 24 19:44:37 perf-es7-monitering-node kibana: {"type":"log","@timestamp":"2020-08-24T14:14:37Z","tags":["error","plugins","monitoring","monitoring"],"pid":21543,"message":"{ Error: Unable to find the cluster in the selected time range. UUID: pQ4V93CZR2ar6-qyk6fJyQ\n at then.clusters (/usr/share/kibana/x-pack/plugins/monitoring/server/lib/cluster/get\_cluster\_stats.js:32:13)\n at process.\_tickCallback (internal/process/next\_tick.js:68:7)\n data: null,\n isBoom: true,\n isServer: false,\n output:\n { statusCode: 404,\n payload:\n { statusCode: 404,\n error: 'Not Found',\n message:\n 'Unable to find the cluster in the selected time range. UUID: pQ4V93CZR2ar6-qyk6fJyQ' },\n headers: {} },\n reformat: [Function],\n typeof: [Function: notFound] }"}

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 2:53pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/15 "2020-08-24T14:53:44Z")

</div>

Problem that i am not able to understand is that if there is some issue then it should either work or doesnt work. But here i can see the Index and metrics of the data nodes but i cannot see the same in stack monitoring and also no error

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 24, 2020, 2:54pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/16 "2020-08-24T14:54:26Z")

</div>

Okay so it seems there is only type of monitoring document (for Elasticsearch monitoring) when there should be more.

Let's take a look at the Metricbeat output.

Are you able to see a message in the logs like:

```auto
INFO	[monitoring]	log/log.go:145	Non-zero metrics in the last 30s	{"monitoring":

```

If so, post the last version of this log and we can verify Metricbeat isn't trying to send the other metricsets.

if not, try running in debug mode (`-d "*"`) and seeing if you see the message

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 2:59pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/17 "2020-08-24T14:59:35Z")

</div>

Aug 24 20:27:14 perf-es-78-data-2-65-98 metricbeat: 2020-08-24T20:27:14.397+0530#011INFO#011[monitoring]#011log/log.go:145#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1190450,"time":{"ms":1279}},"total":{"ticks":2538890,"time":{"ms":2722},"value":2538890},"user":{"ticks":1348440,"time":{"ms":1443}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":18},"info":{"ephemeral\_id":"7dbab0bc-b324-4519-bab6-d13322f069a1","uptime":{"ms":28470118}},"memstats":{"gc\_next":28905952,"memory\_alloc":23222680,"memory\_total":168711029672,"rss":81920},"runtime":{"goroutines":115}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":67,"batches":6,"total":67}},"pipeline":{"clients":19,"events":{"active":0,"published":67,"total":67},"queue":{"acked":67}}},"metricbeat":{"elasticsearch":{"node\_stats":{"events":3,"success":3}},"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":4,"success":4},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":21,"success":21},"process":{"events":23,"success":23},"process\_summary":{"events":3,"success":3},"socket\_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.02,"norm":{"1":0,"15":0.0008,"5":0.0003}}}}}}  
Aug 24 20:27:44 perf-es-78-data-2-65-98 metricbeat: 2020-08-24T20:27:44.399+0530#011INFO#011[monitoring]#011log/log.go:145#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":1191730,"time":{"ms":1288}},"total":{"ticks":2541620,"time":{"ms":2759},"value":2541620},"user":{"ticks":1349890,"time":{"ms":1471}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":18},"info":{"ephemeral\_id":"7dbab0bc-b324-4519-bab6-d13322f069a1","uptime":{"ms":28500122}},"memstats":{"gc\_next":26511680,"memory\_alloc":22524136,"memory\_total":168889949424},"runtime":{"goroutines":115}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":61,"batches":6,"total":61}},"pipeline":{"clients":19,"events":{"active":0,"published":61,"total":61},"queue":{"acked":61}}},"metricbeat":{"elasticsearch":{"node\_stats":{"events":3,"success":3}},"system":{"cpu":{"events":3,"success":3},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":21,"success":21},"process":{"events":22,"success":22},"process\_summary":{"events":3,"success":3},"socket\_summary":{"events":3,"success":3}}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0008,"5":0.0002}}}}}}

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 24, 2020, 3:06pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/18 "2020-08-24T15:06:27Z")

</div>

What is the output of `metricbeat modules list`?

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 3:07pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/19 "2020-08-24T15:07:07Z")

</div>

> [@chrisronline](#):
>
> metricbeat modules list

metricbeat modules list  
Enabled:  
elasticsearch-xpack  
system

Disabled:  
activemq  
aerospike  
apache  
appsearch  
aws  
azure  
beat  
beat-xpack  
ceph  
ceph-mgr  
cloudfoundry  
cockroachdb  
consul  
coredns  
couchbase  
couchdb  
docker  
dropwizard  
elasticsearch  
envoyproxy  
etcd  
golang  
googlecloud  
graphite  
haproxy  
http  
ibmmq  
iis  
istio  
jolokia  
kafka  
kibana  
kibana-xpack  
kubernetes  
kvm  
linux  
logstash  
logstash-xpack  
memcached  
mongodb  
mssql  
munin  
mysql  
nats  
nginx  
openmetrics  
oracle  
php\_fpm  
postgresql  
prometheus  
rabbitmq  
redis  
redisenterprise  
sql  
stan  
statsd  
tomcat  
traefik  
uwsgi  
vsphere  
windows  
zookeeper

---

<div class="post-metadata">

**Author:** ![chrisronline](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisronline/32/28230_2.png) [@chrisronline](https://discuss.elastic.co/u/chrisronline)\
**Post date:** [August 24, 2020, 3:17pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/20 "2020-08-24T15:17:23Z")

</div>

[https://github.com/elastic/beats/pull/17609](https://github.com/elastic/beats/pull/17609) has been available since 7.8.0 so it means you shouldn't need to explicitly define the metricsets for the `elasticsearch-xpack` module, when `xpack.enabled: true`.

Let's try removing all the defined metricsets in your `elasticsearch-xpack.yml` so it will look like:

```auto
- module: elasticsearch
  xpack.enabled: true
  period: 10s
  hosts: ["http://X.X.X.X2:9200"]

```

---

<div class="post-metadata">

**Author:** ![Yogesh\_Kumar1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yogesh_kumar1/32/74178_2.png) [@Yogesh\_Kumar1](https://discuss.elastic.co/u/Yogesh_Kumar1)\
**Post date:** [August 24, 2020, 3:47pm UTC](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635/21 "2020-08-24T15:47:09Z")

</div>

ok i disabled the metricsets but the issue still there.

Aug 24 21:07:15 perf-es-78-data-2-65-98 metricbeat: 2020-08-24T21:07:15.037+0530#011INFO#011[monitoring]#011log/log.go:145#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":41250,"time":{"ms":1265}},"total":{"ticks":83350,"time":{"ms":2612},"value":83350},"user":{"ticks":42100,"time":{"ms":1347}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":18},"info":{"ephemeral\_id":"3a4b1826-eda8-4374-ab45-51c150ff7b08","uptime":{"ms":930117}},"memstats":{"gc\_next":22875120,"memory\_alloc":17646552,"memory\_total":5592516072,"rss":585728},"runtime":{"goroutines":115}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"acked":69,"batches":6,"total":69}},"pipeline":{"clients":19,"events":{"active":0,"published":69,"total":69},"queue":{"acked":69}}},"metricbeat":{"elasticsearch":{"node\_stats":{"events":3,"success":3}},"system":{"cpu":{"events":3,"success":3},"filesystem":{"events":4,"success":4},"fsstat":{"events":1,"success":1},"load":{"events":3,"success":3},"memory":{"events":3,"success":3},"network":{"events":21,"success":21},"process":{"events":24,"success":24},"process\_summary":{"events":3,"success":3},"socket\_summary":{"events":3,"success":3},"uptime":{"events":1,"success":1}}},"system":{"load":{"1":0,"15":0.06,"5":0.03,"norm":{"1":0,"15":0.0009,"5":0.0005}}}}}}

I can see the stats like total index, heap usage with this :  
curl -XGET '[http://Y.Y.Y.Y:9200/.monitoring-es-\*/\_search?pretty](http://Y.Y.Y.Y:9200/.monitoring-es-*/_search?pretty)'

system metrics are there in metricbeat index :  
curl -XGET '[http://Y.Y.Y.Y:9200/metricbeat\*/\_search?pretty](http://Y.Y.Y.Y:9200/metricbeat*/_search?pretty)'

[Next page](https://discuss.elastic.co/t/setup-mode-is-not-available-you-do-not-have-the-necessary-permissions-to-do-this/245635.md?page=2)