Using kibana behind a load balancer

I currently have a cluster of 3 boxes running ELK, and they work fine if hit individually.
However, when I group them behind the a load balancer I'm getting:
Courier Fetch Error: unhandled error Error: Bad Request
at respond (http://elk.xxxx.com/bundles/kibana.bundle.js:76160:16)
at checkRespForFailure (http://elk.xxx.com/bundles/kibana.bundle.js:76123:8)
at http://elk.xxx.com/bundles/kibana.bundle.js:74741:8
at processQueue (http://elk.xxx.com/bundles/commons.bundle.js:42339:29)
at http://elk.xxx.com/bundles/commons.bundle.js:42355:28
at Scope.$eval (http://elk.xxx.com/bundles/commons.bundle.js:43583:29)
at Scope.$digest (http://elk.xxx.com/bundles/commons.bundle.js:43394:32)
at Scope.$apply (http://elk.xxx.com/bundles/commons.bundle.js:43691:25)
at done (http://elk.xxx.com/bundles/commons.bundle.js:38140:48)
at completeRequest (http://elk.xxx.com/bundles/commons.bundle.js:38338:8)
Error: unhandled error Error: Bad Request
at respond (http://elk.xxx.com/bundles/kibana.bundle.js:76160:16)
at checkRespForFailure (http://elk.xxx.com/bundles/kibana.bundle.js:76123:8)
at http://elk.xxx.com/bundles/kibana.bundle.js:74741:8
at processQueue (http://elk.xxx.com/bundles/commons.bundle.js:42339:29)
at http://elk.xxx.com/bundles/commons.bundle.js:42355:28
at Scope.$eval (http://elk.xxx.com/bundles/commons.bundle.js:43583:29)
at Scope.$digest (http://elk.xxx.com/bundles/commons.bundle.js:43394:32)
at Scope.$apply (http://elk.xxx.com/bundles/commons.bundle.js:43691:25)
at done (http://elk.xxx.com/bundles/commons.bundle.js:38140:48)
at completeRequest (http://elk.xxx.com/bundles/commons.bundle.js:38338:8)
at handleError (http://elk.xxx.com/bundles/kibana.bundle.js:78622:23)
at DocRequest.AbstractReqProvider.AbstractReq.handleFailure (http://elk.xxx.com/bundles/kibana.bundle.js:78542:15)
at http://elk.xxx.com/bundles/kibana.bundle.js:78436:18
at Array.forEach (native)
at http://elk.xxx.com/bundles/kibana.bundle.js:78434:19
at processQueue (http://elk.xxx.com/bundles/commons.bundle.js:42339:29)
at http://elk.xxx.com/bundles/commons.bundle.js:42355:28
at Scope.$eval (http://elk.xxx.com/bundles/commons.bundle.js:43583:29)
at Scope.$digest (http://elk.xxx.com/bundles/commons.bundle.js:43394:32)
at Scope.$apply (http://elk.xxx.com/bundles/commons.bundle.js:43691:25)

Is there any special setup required on the load balancer to make kibana work ?
Thanks,
Francisco

1 Like

Sounds like the client/Kibana is getting a 400 response. I'm not entirely sure why it would though, you'll have to trace the request and see what's returning that 400, the load balancer or Elasticsearch. It's possible that the request isn't even getting through.

As for things to try, I'm not really sure. You could try hitting the load balancer directly and seeing if the request comes back correctly.

The only other thing I can think to ask is, are you forwarding all the request headers correctly?

1 Like