Users with any role (except superuser) cannot view events in kibana

[mkain (Manish)]

Hi,

I have managed to install x-pack plugin on ELK 5.4.1. When I have created a user "guest" with "kibana_user" role. But after getting into kibana no events are visible to the user. 

I can see same behavior with other roles except superuser. I have tried to collect to elasticsearch via curl using these users/passwords and I do get response.

What else I have to tune ? any file system level permissions have to be changed ?

curl -u guest:xxxxx http://localhost:9200
{
"name" : "Q2FAvfq",
"cluster_name" : "elas-541",
"cluster_uuid" : "7MtPg0oQSaWdlw4OKHojCg",
"version" : {
"number" : "5.4.1",
"build_hash" : "2cfe0df",
"build_date" : "2017-05-29T16:05:51.443Z",
"build_snapshot" : false,
"lucene_version" : "6.5.1"
},
"tagline" : "You Know, for Search"
}

Regards,
-Manish

[Christian_Dahlqvist]

Have you assigned these users the kibana_user role?

[mkain (Manish)]

Have you assigned these users the kibana_user role?

Yes off course I had. But today I spotted another error in logstash. I suspect x-pack may be the cause "Index 404 error in logstash" but even after removing x-pack I continue to get 404 error during indexing in logstash.

Regards,
-Manish