[solved] Marvel + shield: issue with action.auto_create_index

security

(Sebastien) #1

Hi!

I'm trying to configure shield on an existing deployment (elasticsearch, marvel, shield; version 2.3.3).
As written in the documentation, I've in my config auto_create_index configured:

But when I try to launch elasticsearch I've this error:

[2016-06-02 13:20:57,437][INFO ][node ] [Needle] version[2.3.3], pid[1382], build[218bdf1/2016-05-17T15:40:04Z] [2016-06-02 13:20:57,437][INFO ][node ] [Needle] initializing ... [2016-06-02 13:20:57,895][ERROR][bootstrap ] Exception ElasticsearchException[Failed to load plugin class [org.elasticsearch.shield.ShieldPlugin]]; nested: InvocationTargetException; nested: IllegalArgumentException[the [action.auto_create_index] setting value [.marvel-es-*] is too restrictive. disable [action.auto_create_index] or set it to [.security]]; at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:483) at org.elasticsearch.plugins.PluginsService.loadBundles(PluginsService.java:432) at org.elasticsearch.plugins.PluginsService.<init>(PluginsService.java:129) at org.elasticsearch.node.Node.<init>(Node.java:158) at org.elasticsearch.node.Node.<init>(Node.java:140) at org.elasticsearch.node.NodeBuilder.build(NodeBuilder.java:143) at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:178) at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:270) at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:35) Caused by: java.lang.reflect.InvocationTargetException at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62) at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:472) ... 8 more Caused by: java.lang.IllegalArgumentException: the [action.auto_create_index] setting value [.marvel-es-*] is too restrictive. disable [action.auto_create_index] or set it to [.security] at org.elasticsearch.shield.ShieldPlugin.validateAutoCreateIndex(ShieldPlugin.java:459) at org.elasticsearch.shield.ShieldPlugin.<init>(ShieldPlugin.java:126) ... 13 more

How I can configure .security template?

Linked in security-index-template,
curl http://admin:passw0rd@localhost:9200/_template/security-index-template?pretty
but seems empty
curl http://admin:passw0rd@localhost:9200/_template/.security?pretty { }

Thanks in advance!


(Mark Walkom) #2

I think it should actually be action.auto_create_index: +.marvel-*.


(Sebastien) #3

Thanks @warkolm for the reply, but nope :-/

Exception in thread "main" ElasticsearchException[Failed to load plugin class [org.elasticsearch.shield.ShieldPlugin]]; nested: InvocationTargetException; nested: IllegalArgumentException[the [action.auto_create_index] setting value [+.marvel-*] is too restrictive. disable [action.auto_create_index] or set it to [.security]];


(Jay Modi) #4

Can you set it to action.auto_create_index: .marvel-*,.security


(Sebastien) #5

Yes, it's works, I went completely beside it…
Thanks @jaymode!!

Just submitted and issue on the doc about this https://github.com/elastic/docs/issues/93


(system) #6