Unknown error connecting with elasticsearch when using ipv6

Elastic Stack Kibana
1

Hi, I'm using kibana 6.0 version. I'm using kibana with reverse proxy to convert ipv6 queries to ipv4. Hence kibana and elasticsearch are in localhost (127.0.0.1) but clients can reach kibana using IPv6 queries.

I've tried to remove the reverse proxy and use purely ipv6 but I still have issues.

It seems that kibana is able to display the dashboards (hence it can display the data for the .kibana elasticsearch index) but when I tried to get data from any other index, it displays "Error: unknown error" messages.

When I try to query kibana using IPv4 only, I can get all info fine.

Can somebody suggest something here? Thanks in advance.

I'll provide a picture of the errors and the kibana logs for it in the following posts.

2

kibana_error
kibana_error.png1182×754 233 KB

This is the kibana error:

3

and this is the logs I get from kibana:

{"type":"response","@timestamp":"2019-03-07T23:54:33Z","tags":[],"pid":37,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects/?type=dashboard&per_page=1000&page=1&search_fields=title%5E3&search_fields=description","method":"get","headers":{"host":"localhost:5601","accept-language":"en-us","accept-encoding":"br, gzip, deflate","kbn-version":"6.0.0","accept":"application/json, text/plain, */*","user-agent":"Mozilla/5.0","referer":"https://[20<valid_ip_address_here>0]:5601/app/kibana","dnt":"1","x-forwarded-for":"20<valid_ip_address_here>e","x-forwarded-host":"[20<valid_ip_address_here>0]:5601","x-forwarded-server":"elk-host","connection":"Keep-Alive"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1","referer":"https://[20<valid_ip_address_here>0]:5601/app/kibana"},"res":{"statusCode":200,"responseTime":9,"contentLength":9},"message":"GET /api/saved_objects/?type=dashboard&per_page=1000&page=1&search_fields=title%5E3&search_fields=description 200 9ms - 9.0B"}

{"type":"response","@timestamp":"2019-03-07T23:54:35Z","tags":,"pid":37,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/bulk_get","method":"post","headers":{"host":"localhost:5601","accept":"application/json, text/plain, /","kbn-version":"6.0.0","accept-language":"en-us","accept-encoding":"br, gzip, deflate","content-type":"application/json;charset=UTF-8","origin":"https://[2<valid_ip_address_here>0]:5601","user-agent":"Mozilla/5.0","referer":"https://[20<valid_ip_address_here>0]:5601/app/kibana","dnt":"1","x-forwarded-for":"20<valid_ip_address_here>e","x-forwarded-host":"[20<valid_ip_address_here>0]:5601","x-forwarded-server":"elk-host","connection":"Keep-Alive","content-length":"66"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1","referer":"https://[20<valid_ip_address_here>0]:5601/app/kibana"},"res":{"statusCode":200,"responseTime":8,"contentLength":9},"message":"POST /api/saved_objects/bulk_get 200 8ms - 9.0B"}

No error is displayed in elasticsearch.

4

@dover or @tylersmalley - can you please shed some light here?

5

do you have any suggestion on this?

6

Can you please show us more verbose logs from Kibana ? And also share your config ?

Thanks
Rashmi

7

Hi Rashmi,

thanks for your response. I don't have a kibana 6.x anymore. If it's useful, I found out that the issue was when kibana communicates the IPv6 to elasticsearch. My suspiction is something to do with the [ ] to the IPv6 address on the url that elasticsearch received.

Since that time I noticed that this issue is fixed with 7.0.0. Not sure if you can point out what fixed this issue but it's gone with latest release.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.