We can’t establish a connection to Enterprise Search at the host URL: https://myip:3002

Elastic Search
1

hello, I have a problem my Kibana and my enterprise search can't establish connection but in the log enterprise search said he is successfully connected to Kibana.

I can connect to https://myip:3002, https://myip:5601 and https://myip:9200
but in Kibana when I want to go to workplace I have this screen

Screenshot 2022-03-25 at 15.07.12
Screenshot 2022-03-25 at 15.07.12554×661 58.6 KB

here is my docker-compose

version: '3.8'
services:
  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:7.17.1
    # volumes:
    #   - ~/volumes/jhipster/jtest/elasticsearch/:/usr/share/elasticsearch/data/
    # If you want to expose these ports outside your dev PC,
    # remove the "127.0.0.1:" prefix
    ports:
      - 9200:9200
      - 9300:9300
    volumes:
      - /home/lenaic/jhispter2/src/main/resources/config/tls:/usr/share/elasticsearch/config/certificates
    environment:
      - 'node.name=node1'
      - 'cluster.name=elasticsearch'
      - 'network.host:192.168....
      - 'xpack.security.enabled=true'
      - 'xpack.security.authc.api_key.enabled=true'
      - 'discovery.type=single-node'
      - 'bootstrap.memory_lock=true'
      - 'ES_JAVA_OPTS=-Xms2g -Xmx2g'
      - 'xpack.security.transport.ssl.enabled=true'
      - 'xpack.security.http.ssl.client_authentication=optional'
      - 'xpack.security.transport.ssl.verification_mode=certificate'
      - 'xpack.security.transport.ssl.client_authentication=optional'
      - 'xpack.security.transport.ssl.keystore.path=/usr/share/elasticsearch/config/certificates/keystore.p12'
      - 'xpack.security.transport.ssl.truststore.path=/usr/share/elasticsearch/config/certificates/keystore.p12'
      - 'xpack.security.transport.ssl.keystore.password=mypswd'
      - 'xpack.security.transport.ssl.truststore.password=mypswd'
      - 'xpack.security.http.ssl.enabled=true'
      - 'xpack.security.http.ssl.keystore.path=/usr/share/elasticsearch/config/certificates/keystore.p12'
      - 'xpack.security.http.ssl.truststore.path=/usr/share/elasticsearch/config/certificates/keystore.p12'
      - 'xpack.security.http.ssl.keystore.password= mypswd'
      - 'xpack.security.http.ssl.truststore.password= mypswd'
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 262144
        hard: 262144
    cap_add:
      - IPC_LOCK

  ent-search:
    image: docker.elastic.co/enterprise-search/enterprise-search:7.17.1
    restart: unless-stopped
    depends_on:
      - "kibana"
      - "elasticsearch"
    environment:
      - "JAVA_OPTS=-Xms2g -Xmx2g"
      - "ENT_SEARCH_DEFAULT_PASSWORD= mypswd"
      - "elasticsearch.username= myusername"
      - "elasticsearch.password= mypswd"
      - "elasticsearch.host=https://myip:9200"
      - "allow_es_settings_modification=true"
      - "secret_management.encryption_keys=[mysecret]"
      - "elasticsearch.startup_retry.interval=15"
      - "ent_search.external_url=https://myip:3002"
      - "kibana.host=https://myip:5601"
      - "kibana.external_url=https://myip:5601"
      - "elasticsearch.ssl.enabled:true"
      - "elasticsearch.ssl.certificate:/usr/share/elasticsearch/config/certificates/fullchain.pem"
      - "elasticsearch.ssl.key:/usr/share/elasticsearch/config/certificates/privkey.pem"
      - "ent_search.ssl.enabled=true"
      - "ent_search.ssl.keystore.path=/usr/share/enterprise-search/config/certificates/keystore.p12"
      - "ent_search.ssl.keystore.password= mypswd"
      - "ent_search.ssl.keystore.key_password= mypswd"
    ports:
      - 3002:3002
    volumes:
      - /home/lenaic/jhispter2/src/main/resources/config/tls:/usr/share/enterprise-search/config/certificates

 kibana:
    image: docker.elastic.co/kibana/kibana:7.17.1
    restart: unless-stopped
    depends_on:
      - "elasticsearch"
    ports:
      - 5601:5601
    environment:
      ELASTICSEARCH_HOSTS: https://myip:9200
      ELASTICSEARCH_USERNAME: mypusername
      ELASTICSEARCH_PASSWORD: mypswd
      server.ssl.enable: "true"
      server.ssl.certificate: /usr/share/kibana/config/certificates/kibana.crt
      server.ssl.key: /usr/share/kibana/config/certificates/kibana.key
      elasticsearch.ssl.certificateAuthorities: /usr/share/kibana/config/certificates/elastic-stak-ca.pem
      enterpriseSearch.host: https://myip:3002
    volumes:
      - /home/lenaic/jhispter2/src/main/resources/config/tls:/usr/share/kibana/config/certificates
2

hi @bibilena !

I think the problem is that the external URL is being used in order to perform the communication between the Docker containers. I would recommend using the internal Docker URL for inter-Docker communication.

Depending on your operating system, you can use:

  • Linux: 172.17.0.1
  • Mac / Windows: host.docker.internal

An example docker-compose file for Mac would look like:

ent-search:
    image: docker.elastic.co/enterprise-search/enterprise-search:7.17.1
    restart: unless-stopped
    depends_on:
      - "kibana"
      - "elasticsearch"
    environment:
      - "JAVA_OPTS=-Xms2g -Xmx2g"
      - "ENT_SEARCH_DEFAULT_PASSWORD= mypswd"
      - "elasticsearch.username= myusername"
      - "elasticsearch.password= mypswd"
      - "elasticsearch.host=https://myip:9200"
      - "allow_es_settings_modification=true"
      - "secret_management.encryption_keys=[mysecret]"
      - "elasticsearch.startup_retry.interval=15"
      - "ent_search.external_url=https://myip:3002"
      - "kibana.host=https://host.docker.internal:5601"
      - "kibana.external_url=https://myip:5601"
      - "elasticsearch.ssl.enabled:true"
      - "elasticsearch.ssl.certificate:/usr/share/elasticsearch/config/certificates/fullchain.pem"
      - "elasticsearch.ssl.key:/usr/share/elasticsearch/config/certificates/privkey.pem"
      - "ent_search.ssl.enabled=true"
      - "ent_search.ssl.keystore.path=/usr/share/enterprise-search/config/certificates/keystore.p12"
      - "ent_search.ssl.keystore.password= mypswd"
      - "ent_search.ssl.keystore.key_password= mypswd"
    ports:
      - 3002:3002
    volumes:
      - /home/lenaic/jhispter2/src/main/resources/config/tls:/usr/share/enterprise-search/config/certificates

 kibana:
    image: docker.elastic.co/kibana/kibana:7.17.1
    restart: unless-stopped
    depends_on:
      - "elasticsearch"
    ports:
      - 5601:5601
    environment:
      ELASTICSEARCH_HOSTS: https://host.docker.internal:9200
      ELASTICSEARCH_USERNAME: mypusername
      ELASTICSEARCH_PASSWORD: mypswd
      server.ssl.enable: "true"
      server.ssl.certificate: /usr/share/kibana/config/certificates/kibana.crt
      server.ssl.key: /usr/share/kibana/config/certificates/kibana.key
      elasticsearch.ssl.certificateAuthorities: /usr/share/kibana/config/certificates/elastic-stak-ca.pem
      enterpriseSearch.host: https://host.docker.internal:3002

Can you please try using the internal Docker URL and share your results?

Thanks!

3

Hello @Carlos_D, sorry for the delay I was on another thing.

here is my new config, I change some things

version: '3.8'
services:
  elasticsearch:
    image: elastic_keystore_ok:latest
    container_name: elastic2.mirahi.cloud
    # volumes:
    #   - ~/volumes/jhipster/jhipster/elasticsearch/:/usr/share/elasticsearch/data/
    # If you want to expose these ports outside your dev PC,
    # remove the "127.0.0.1:" prefix
    ports:
      - 9200:9200
      - 9300:9300
    volumes:
      - /home/lenaic/jhipster/src/main/resources/config/tls/elastic:/usr/share/elasticsearch/config/certificates
      - /home/lenaic/elastic-data:/usr/share/elasticsearch/data
    environment:
      node.name: node1
      cluster.name: elasticsearch
      network.host: 0.0.0.0
      http.port: 9200
      xpack.security.enabled: "true"
      discovery.type: single-node
      bootstrap.memory_lock: "true"
      ES_JAVA_OPTS: -Xms2g -Xmx2g
      xpack.security.transport.ssl.enabled: "true"
      xpack.security.transport.ssl.verification_mode: certificate
      xpack.security.transport.ssl.keystore.path: /usr/share/elasticsearch/config/certificates/keystore.p12
      xpack.security.transport.ssl.truststore.path: /usr/share/elasticsearch/config/certificates/keystore.p12
      xpack.security.transport.ssl.keystore.password: mypswd
      xpack.security.http.ssl.enabled: "true"
      xpack.security.http.ssl.keystore.path: /usr/share/elasticsearch/config/certificates/keystore.p12
      xpack.security.http.ssl.keystore.password: mypswd
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65536
        hard: 65536
    cap_add:
      - IPC_LOCK

  ent-search:
    image: docker.elastic.co/enterprise-search/enterprise-search:7.17.1
    container_name: ent-search.mirahi.cloud
    ports:
      - 3002:3002
    depends_on:
      - "elasticsearch"
      - "kibana"
    environment:
      - "JAVA_OPTS=-Xms2g -Xmx2g"
      - "ENT_SEARCH_DEFAULT_PASSWORD=mypswd"
      - "elasticsearch.username=lenaic"
      - "elasticsearch.password=mypswd"
      - "elasticsearch.host=https://elastic2.mirahi.cloud:9200"
      - "allow_es_settings_modification=true"
        #- "secret_management.encryption_keys=[4a2cd3f81d39bf28738c10db0ca782095ffac07279561809eecc722e0c20eb09]"
      - "secret_management.encryption_keys=[a241194340f50d0fdc214dc9bfd493c69d252d70b9bebc69440acb254f787737]"
      - "secret_session_key:73f9b0f291ac7a12634bbfaeab33f8ca88ae9335797428128fabec25e54dcc54f6c487610aa601c7125453412d010b2ba602b916d2f30fbc4f4be5ee56225d9b"
      - "elasticsearch.startup_retry.interval=15"
      - "kibana.external_url=https://kibana.mirahi.cloud:5601"
      - "ent_search.external_url=https://ent-search.mirahi.cloud:3002"
      - "ent_search.ssl.enabled=true"
      - "ent_search.ssl.keystore.path=/usr/share/ent-search/config/certificates/keystore.p12"
      - "ent_search.ssl.keystore.password=mypswd"
    volumes:
      - /home/lenaic/jhipster/src/main/resources/config/tls/ent-search:/usr/share/ent-search/config/certificates
        #- /home/lenaic/ent-data:/usr/share/enterprise-search/config


 kibana:
    image: docker.elastic.co/kibana/kibana:7.17.1
    restart: unless-stopped
    container_name: kibana.mirahi.cloud
    depends_on:
      - "elasticsearch"
        #- "ent-search"  
    ports:
      - 5601:5601
    environment:
      - 'ELASTICSEARCH_HOSTS=https://elastic2.mirahi.cloud:9200'
        #- 'ELASTICSEARCH_SSL_KEYSTORE_PATH=/usr/share/kibana/config/certificates/keystore.p12'
        #- 'ELASTICSEARCH_SSL_TRUSTSTORE_PATH=/usr/share/kibana/config/certificates/keystore.p12'
        # - 'ELASTICSEARCH_SSL_TRUSTSTORE_PASSWORD=mypaswd'
        #- 'ELASTICSEARCH_SSL_KEYSTORE_PASSWORD=mypaswd'  
        #- 'ELASTICSEARCH_SSL_CERTIFICATEAUTHORITIES=/usr/share/kibana/config/certificates/keystore.p12'
      - 'ELASTICSEARCH_USERNAME=lenaic'
      - 'ELASTICSEARCH_PASSWORD=mypaswd'
      - 'SERVER_SSL_ENABLED=true'
      - 'SERVER_SSL_CERTIFICATE=/usr/share/kibana/config/certificates/cert.crt'
      - 'SERVER_SSL_KEY=/usr/share/kibana/config/certificates/key.key'
      - 'SERVER_SSL_CERTIFICATEAUTHORITIES=/usr/share/kibana/config/certificates/ca.crt'
      - 'SERVER_HOST=0.0.0.0'
      - 'SERVER_NAME=kibana.mirahi.cloud'
      - 'ENTERPRISESEARCH_HOST=https://ent-search.mirahi.cloud:3002'
        # - 'enterpriseSearch.ssl.certificateAuthorities=/usr/share/elasticsearch/config/certificates/keystore.p12'
    volumes:
            - /home/lenaic/jhipster/src/main/resources/config/tls/kibana:/usr/share/kibana/config/certificates
            - /home/lenaic/kibana-data:/usr/share/kibana/data

I tried with the 172.17.0.1, also with the docker enterprise ip 172.18.0.4 and also with a container name but all of them did the same error "enable to connect".

When I go to https://ent-search.mirahi.cloud:3002/welcom I have this screen

Screenshot 2022-04-04 at 10.26.13
Screenshot 2022-04-04 at 10.26.13800×274 14.6 KB

4

Could you check the Kibana logs for more details on the connection error?

An option would be disabling HTTPS support for Enterprise Search, and use HTTP as communication protocol to rule out other networking issues. Can you do a quick test for that?

5

here is the Kibana logs when I try to reach https://kibana.mirahi.cloud:5601/app/enterprise_search/overview

kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:33+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/app/enterprise_search/overview","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br","connection":"keep-alive"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15"},"res":{"statusCode":200,"responseTime":487,"contentLength":145299},"message":"GET /app/enterprise_search/overview 200 487ms - 141.9KB"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:34+00:00","tags":["api"],"pid":7,"method":"get","statusCode":304,"req":{"url":"/bootstrap.js","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","connection":"keep-alive","if-none-match":"\"d55e38a3de6defa40e1a2d3d92ca90a4eb0c4210-gzip\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","accept-language":"en-GB,en;q=0.9","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":304,"responseTime":111,"contentLength":18652},"message":"GET /bootstrap.js 304 111ms - 18.2KB"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:35+00:00","tags":[],"pid":7,"method":"get","statusCode":304,"req":{"url":"/translations/en.json","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","connection":"keep-alive","if-none-match":"\"37992637719f97813c3068cfbf877b2d3bb43b97\"","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","accept-language":"en-GB,en;q=0.9","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":304,"responseTime":13,"contentLength":29},"message":"GET /translations/en.json 304 13ms - 29.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:35+00:00","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/core/capabilities","method":"post","headers":{"host":"kibana.mirahi.cloud:5601","accept":"*/*","kbn-version":"7.17.1","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en;q=0.9","content-type":"application/json","origin":"https://kibana.mirahi.cloud:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","connection":"keep-alive","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","content-length":"589"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":2555,"contentLength":4774},"message":"POST /api/core/capabilities 200 2555ms - 4.7KB"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:38+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/licensing/info","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","accept-encoding":"gzip, deflate, br","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","kbn-system-request":"true","accept-language":"en-GB,en;q=0.9"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":657},"message":"GET /api/licensing/info 200 657ms"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:38+00:00","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/internal/licensing/feature_usage/register","method":"post","headers":{"host":"kibana.mirahi.cloud:5601","accept":"*/*","kbn-version":"7.17.1","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en;q=0.9","content-type":"application/json","origin":"https://kibana.mirahi.cloud:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","connection":"keep-alive","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","content-length":"280"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1603,"contentLength":16},"message":"POST /internal/licensing/feature_usage/register 200 1603ms - 16.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:38+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/security_checkup/state","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1486,"contentLength":22},"message":"GET /internal/security/security_checkup/state 200 1486ms - 22.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:39+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/me","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","accept-encoding":"gzip, deflate, br","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","kbn-system-request":"true","accept-language":"en-GB,en;q=0.9"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1451,"contentLength":304},"message":"GET /internal/security/me 200 1451ms - 304.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:38+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/banners/info","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1861,"contentLength":118},"message":"GET /api/banners/info 200 1861ms - 118.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:38+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/api/saved_objects_tagging/tags","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","accept-encoding":"gzip, deflate, br","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","kbn-system-request":"true","accept-language":"en-GB,en;q=0.9"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1888,"contentLength":11},"message":"GET /api/saved_objects_tagging/tags 200 1888ms - 11.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:39+00:00","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/saved_objects/_bulk_get","method":"post","headers":{"host":"kibana.mirahi.cloud:5601","accept":"*/*","kbn-version":"7.17.1","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en;q=0.9","content-type":"application/json","origin":"https://kibana.mirahi.cloud:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","connection":"keep-alive","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","content-length":"39"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1820,"contentLength":278},"message":"POST /api/saved_objects/_bulk_get 200 1820ms - 278.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:40+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/me","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","accept-encoding":"gzip, deflate, br","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","kbn-system-request":"true","accept-language":"en-GB,en;q=0.9"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":649,"contentLength":304},"message":"GET /internal/security/me 200 649ms - 304.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:40+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/spaces/_active_space","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1502,"contentLength":134},"message":"GET /internal/spaces/_active_space 200 1502ms - 134.0B"}
kibana.mirahi.cloud | {"type":"log","@timestamp":"2022-04-04T09:14:42+00:00","tags":["warning","plugins","enterpriseSearch"],"pid":7,"message":"Enterprise Search access check took over 300ms. Please ensure your Enterprise Search server is responding normally and not adversely impacting Kibana load speeds."}
kibana.mirahi.cloud | {"type":"log","@timestamp":"2022-04-04T09:14:42+00:00","tags":["error","plugins","enterpriseSearch"],"pid":7,"message":"Could not perform access check to Enterprise Search: FetchError: request to https://172.17.0.1:3002/api/ent/v2/internal/client_config failed, reason: unable to get local issuer certificate"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:40+00:00","tags":[],"pid":7,"method":"get","statusCode":200,"req":{"url":"/internal/security/session","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","accept-encoding":"gzip, deflate, br","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","kbn-system-request":"true","accept-language":"en-GB,en;q=0.9"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1810,"contentLength":85},"message":"GET /internal/security/session 200 1810ms - 85.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:40+00:00","tags":[],"pid":7,"method":"get","statusCode":502,"req":{"url":"/internal/enterprise_search/config_data","method":"get","headers":{"host":"kibana.mirahi.cloud:5601","content-type":"application/json","connection":"keep-alive","kbn-version":"7.17.1","accept":"*/*","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":502,"responseTime":1991,"contentLength":95},"message":"GET /internal/enterprise_search/config_data 502 1991ms - 95.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:41+00:00","tags":[],"pid":7,"method":"post","statusCode":200,"req":{"url":"/api/ui_counters/_report","method":"post","headers":{"host":"kibana.mirahi.cloud:5601","accept":"*/*","kbn-version":"7.17.1","accept-language":"en-GB,en;q=0.9","accept-encoding":"gzip, deflate, br","content-type":"application/json","origin":"https://kibana.mirahi.cloud:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","content-length":"398","connection":"keep-alive","kbn-system-request":"true"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":1254,"contentLength":15},"message":"POST /api/ui_counters/_report 200 1254ms - 15.0B"}
kibana.mirahi.cloud | {"type":"response","@timestamp":"2022-04-04T09:14:42+00:00","tags":[],"pid":7,"method":"put","statusCode":200,"req":{"url":"/internal/enterprise_search/stats","method":"put","headers":{"host":"kibana.mirahi.cloud:5601","accept":"application/json","kbn-version":"7.17.1","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en;q=0.9","content-type":"application/json","origin":"https://kibana.mirahi.cloud:5601","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","connection":"keep-alive","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview","content-length":"74"},"remoteAddress":"172.20.30.38","userAgent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15","referer":"https://kibana.mirahi.cloud:5601/app/enterprise_search/overview"},"res":{"statusCode":200,"responseTime":211,"contentLength":16},"message":"PUT /internal/enterprise_search/stats 200 211ms - 16.0B"}

I tried with Enterprise Search in http and it seems to work, I would have preferred with https but I'll settle for that. thanks a lot for your help! :smiley:

6

I'm glad you got it working! Configuring SSL can be tricky; I'd always recommend testing it first without SSL and then activate it to ensure no other networking issues are at work :wink:

I think this is the issue with SSL. Probably self-signed certificates are being used, and Kibana is checking that.

See Configure SSL/TLS | Enterprise Search documentation [8.11] | Elastic for additional instructions; you should set enterpriseSearch.ssl.verificationMode: none if using self-signed certificates.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.