-
Search Guard and Elasticsearch version: 6.2.2
-
Installed and used enterprise modules, if any: DLSFLS, REST_MANAGEMENT_API, AUDITLOG, and MULTITENANCY
Hi
When trying to access Kibana, login states there are 0 days left on the trial license when there are remaining days or enterprise is disabled. I’m able to use all enterprise functionality on ES end (REST API, etc), just cant login to Kibana.
Here are my yml files:
elasticsearch.yml
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 0.0.0.0
searchguard.ssl.transport.pemcert_filepath: website.crt
searchguard.ssl.transport.pemkey_filepath: website.key
searchguard.ssl.transport.pemtrustedcas_filepath: gdroot-g2.crt
searchguard.ssl.transport.enforce_hostname_verification: true
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: website.crt
searchguard.ssl.http.pemkey_filepath: website.key
searchguard.ssl.http.pemtrustedcas_filepath: gdroot-g2.crt
searchguard.allow_default_init_sgindex: true
searchguard.authcz.admin_dn:
- CN=elementdata,OU=client,O=client,L=test, C=de
searchguard.audit.type: internal_elasticsearch
searchguard.enable_snapshot_restore_privilege: true
searchguard.check_snapshot_restore_write_privileges: true
searchguard.restapi.roles_enabled: [“sg_all_access”]
discovery.zen.minimum_master_nodes: 1
node.max_local_storage_nodes: 3
#searchguard.enterprise_modules_enabled: false
`
`
kibana.yml
server.port: 5601
server.host: 0.0.0.0
elasticsearch.url: https://website:8398
elasticsearch.username: kibanaserver
elasticsearch.password: kibanaserver
server.ssl.enabled: true
server.ssl.certificate: /etc/elasticsearch/website.crt
server.ssl.key: /etc/elasticsearch/website.key
elasticsearch.ssl.certificate: /etc/elasticsearch/website.crt
elasticsearch.ssl.key: /etc/elasticsearch/website.key
elasticsearch.ssl.certificateAuthorities: [ /etc/elasticsearch/gdroot-g2.crt ]
elasticsearch.ssl.verificationMode: full
######## End Search Guard Configuration ########
`
`
Note- We are passing requests to elasticsearch through a proxy, website:8398 because our certificates are associated with our domain on another instance.
Logging in to kibana
License details:
