# Start of Kibana fails

**URL:** <https://discuss.elastic.co/t/start-of-kibana-fails/345627>\
**Category:** Kibana\
**Created:** [October 24, 2023, 10:00am UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627 "2023-10-24T10:00:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![JohannesKjellberg](https://avatars.discourse-cdn.com/v4/letter/j/ea5d25/32.png) [@JohannesKjellberg](https://discuss.elastic.co/u/JohannesKjellberg)\
**Post date:** [October 24, 2023, 10:00am UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/1 "2023-10-24T10:00:50Z")

</div>

Hello! I have installed Kibana 8.8.1 on Windows Server 2012 from the downloaded .zip file. I want to access Kibana via a reverse-proxy site in IIS. Therefore, I have created a scheduled task that runs kibana.bat.  
That task is run with a so-called service account. This service account is the owner of the directory where Kibana is installed, and also has full control in that directory. But starting Kibana this way, with this task, fails. In the Kibana log, the following error message appears:  
"A system error occurred: uv\_uptime returned EPERM (operation not permitted)".

However, when I run the task with my own account, it works, and even when I run kibana.bat myself from the command prompt .It feels like it has something to do with rights. But what rights are required, if so?

Any help is appreciated. Thanks in advance!

Rgds  
Johannes

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [October 24, 2023, 10:09am UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/2 "2023-10-24T10:09:40Z")

</div>

Hi @JohannesKjellberg,

That error suggests that the service account doesn't have sufficient permissions. Have you compared the permissions between yours and the service account, or tried running Kibana with admin?

---

<div class="post-metadata">

**Author:** ![JohannesKjellberg](https://avatars.discourse-cdn.com/v4/letter/j/ea5d25/32.png) [@JohannesKjellberg](https://discuss.elastic.co/u/JohannesKjellberg)\
**Post date:** [October 25, 2023, 8:11am UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/3 "2023-10-25T08:11:10Z")

</div>

Hi,  
Thanks for your quick answer. The service account is a domain account and is not a member of any other special group as far as I can see.  
Yes, I have tried running as admin, ie. to add this service account to the local administrators group, and it works. But it is not the right way to go according to the policy at this company.  
But I'm wondering if you look at the full error message with the stack-trace it looks like Kibana is trying to execute some java script. What could be the function that Kibana wants to use that it lacks rights to run?

A system error occurred: uv\_uptime returned EPERM (operation not permitted)\n at OsMetricsCollector.collect (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\core-metrics-collectors-server-internal \src\os.js:46:37)\n at OpsMetricsCollector.collect (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\core-metrics-server-internal\ src\ops\_metrics\_collector.js:30:116)\n at MetricsService.refreshMetrics (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\core-metrics-server-internal\src\ \metrics\_service.js:61:49)\n at MetricsService.setup (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\core-metrics-server-internal\src\metrics\_service .js:43:16)\n at processTicksAndRejections (node:internal/process/task\_queues:96:5)\n at Server.setup (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn \core-root-server-internal\src\server.js:253:26)\n at Root.setup (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\ core-root-server-internal\src\root\index.js:55:14)\n at bootstrap (C:\Elasticsearch\kibana-8.8.1\node\_modules\@kbn\core -root-server-internal\src\bootstrap.js:129:5)\n at Command. (C:\Elasticsearch\kibana-8.8.1\src\cli\serve\ \serve.js:276:5)"},"log":{"level":"FATAL","logger":"root"},"process":{"pid":4440},"trace": {"id":"89affc122ddd1e407df00f6cac0a6691"},"transaction":{"id":"8043df9b46a85587"}}

/Johannes

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [October 25, 2023, 9:37am UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/4 "2023-10-25T09:37:43Z")

</div>

Thanks for sharing the full trace. I think you're correct that Kibana lacks the rights under that user to access the necessary Javascript. Can you check the permissions under the Kibana install folders? This [old thread](https://discuss.elastic.co/t/kibana-npm-permission-error-at-start/89719) suggests that might help.

---

<div class="post-metadata">

**Author:** ![JohannesKjellberg](https://avatars.discourse-cdn.com/v4/letter/j/ea5d25/32.png) [@JohannesKjellberg](https://discuss.elastic.co/u/JohannesKjellberg)\
**Post date:** [October 25, 2023, 12:55pm UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/5 "2023-10-25T12:55:22Z")

</div>

According to the old thread, the solution was a combination of changing permissions and not being able to write to a file. This permissions thing is interesting: is it possible to find out exactly what permissions a service account like this on Windows should have to work? As I wrote before: this service account has full control and is the owner of the entire directory, and all subdirectories, where Kibana is installed.

/Johannes

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2023, 12:56pm UTC](https://discuss.elastic.co/t/start-of-kibana-fails/345627/6 "2023-11-22T12:56:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
