# Kibana Unable to connect to Elasticsearch **URL:** \ **Category:** Search Guard\ **Created:** [June 15, 2018, 3:54pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957 "2018-06-15T15:54:27Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 15, 2018, 3:54pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/1 "2018-06-15T15:54:27Z")
When asking questions, please provide the following information: - Search Guard and Elasticsearch version searchguard v6 ES and KI v6.2.1 - Installed and used enterprise modules, if any - JVM version and operating system version Ubuntu 16.04 (Docker) - Search Guard configuration files I just installed SearchGuard with the demo configuration (and since I’m on a exploratory development, i didn’t change any default configuration) but, Kibana is not accesing to ES for some reason… Elasticsearch logs: [2018-06-15T15:39:00,341][DEBUG][c.f.s.a.BackendRegistry] Try to extract auth creds from basic http authenticator 15481 [2018-06-15T15:39:00,406][INFO][o.e.c.m.MetaDataMappingService] [elastic-node-1] [sg6-auditlog-2018.06.15/7aHWZJ22QI28EOaBHvepPg] update\_mapping [auditlog] 15482 [2018-06-15T15:39:03,984][DEBUG][c.f.s.a.BackendRegistry] Try to extract auth creds from basic http authenticator 15483 [2018-06-15T15:39:03,997][DEBUG][c.f.s.a.BackendRegistry] admin not cached, return from internal backend directly 15484 [2018-06-15T15:39:04,400][DEBUG][c.f.s.a.BackendRegistry] User ‘User [name=admin, roles=[admin], requestedTenant=null]’ is authenticated 15485 [2018-06-15T15:39:04,400][DEBUG][c.f.s.a.BackendRegistry] sgtenant ‘null’ 15486 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] ### evaluate permissions for User [name=admin, roles=[admin], requestedTenant=null] on elastic-node-1 15487 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] requested cluster:monitor/main from 92.154.26.177:56688 15488 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] class org.elasticsearch.action.main.MainRequest is not an IndicesRequest 15489 [2018-06-15T15:39:04,404][DEBUG][c.f.s.c.PrivilegesEvaluator] requested resolved indextypes: [IndexType [index=\_all, type=\*]] 15490 [2018-06-15T15:39:04,404][DEBUG][c.f.s.c.PrivilegesEvaluator] mapped roles for admin: [sg\_all\_access, sg\_own\_index] 15491 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesInterceptorImpl] raw requestedTenant: ‘null’ 15492 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesEvaluator] Result from privileges interceptor: null 15493 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesEvaluator] ---------- evaluate sg\_role: sg\_all\_access 15494 [2018-06-15T15:39:04,409][DEBUG][c.f.s.c.PrivilegesEvaluator] resolved cluster actions:[\*] 15495 [2018-06-15T15:39:04,410][DEBUG][c.f.s.c.PrivilegesEvaluator] found a match for ‘sg\_all\_access’ and cluster:monitor/main, skip other roles also when i connect to Es through my browser , it shows me this warning. Is this normal?[![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/4/4597b3ac30e00915abbfc91e61165ae60dd58baf.png)](https://forum.search-guard.com/uploads/short-url/9VDXQ6qnM8hDfQ1BjZLaIJ3JO7d.png) Error in Kibana: [![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/1/169a8b0aba250fe189aa9144621d91d6a5741091.png)](https://forum.search-guard.com/uploads/short-url/3dXBUxM281VdWQAyy97HcdO0bL3.png) ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [June 15, 2018, 5:38pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/2 "2018-06-15T17:38:22Z")
The browser warning is normal since the certificates that come with the demo installer are self-signed. Regarding Kibana: Did you change your kibana.yml according to the docs? > **[Installing the Plugin](https://docs.search-guard.com/latest/kibana-plugin-installation)** > > How to install the Search Guard Kibana plugin which adds authentication, multi-tenancy and the configuration UI. If yes, please post the kibana.yml here. I suspect someting is misconfigured, e.g. the kibana server user. Or you try to connect via http instead of https to Elasticsearch. > **···** > > On Friday, June 15, 2018 at 5:54:27 PM UTC+2, Yabir Canario wrote: > > > When asking questions, please provide the following information: > > > - Search Guard and Elasticsearch version > > > searchguard v6 > > > ES and KI v6.2.1 > > > - Installed and used enterprise modules, if any > > > - JVM version and operating system version > > > Ubuntu 16.04 (Docker) > > > - Search Guard configuration files > > > > > > > > > > > > > > > > > > I just installed SearchGuard with the demo configuration (and since I’m on a exploratory development, i didn’t change any default configuration) but, Kibana is not accesing to ES for some reason… > > > > > > Elasticsearch logs: > > > > > > [2018-06-15T15:39:00,341][DEBUG][c.f.s.a.BackendRegistry] Try to extract auth creds from basic http authenticator > > > 15481 [2018-06-15T15:39:00,406][INFO][o.e.c.m.MetaDataMappingService] [elastic-node-1] [sg6-auditlog-2018.06.15/7aHWZJ22QI28EOaBHvepPg] update\_mapping [auditlog] > > > 15482 [2018-06-15T15:39:03,984][DEBUG][c.f.s.a.BackendRegistry] Try to extract auth creds from basic http authenticator > > > 15483 [2018-06-15T15:39:03,997][DEBUG][c.f.s.a.BackendRegistry] admin not cached, return from internal backend directly > > > 15484 [2018-06-15T15:39:04,400][DEBUG][c.f.s.a.BackendRegistry] User ‘User [name=admin, roles=[admin], requestedTenant=null]’ is authenticated > > > 15485 [2018-06-15T15:39:04,400][DEBUG][c.f.s.a.BackendRegistry] sgtenant ‘null’ > > > 15486 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] ### evaluate permissions for User [name=admin, roles=[admin], requestedTenant=null] on elastic-node-1 > > > 15487 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] requested cluster:monitor/main from [92.154.26.177:56688](http://92.154.26.177:56688) > > > 15488 [2018-06-15T15:39:04,403][DEBUG][c.f.s.c.PrivilegesEvaluator] class org.elasticsearch.action.main.MainRequest is not an IndicesRequest > > > 15489 [2018-06-15T15:39:04,404][DEBUG][c.f.s.c.PrivilegesEvaluator] requested resolved indextypes: [IndexType [index=\_all, type=\*]] > > > 15490 [2018-06-15T15:39:04,404][DEBUG][c.f.s.c.PrivilegesEvaluator] mapped roles for admin: [sg\_all\_access, sg\_own\_index] > > > 15491 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesInterceptorImpl] raw requestedTenant: ‘null’ > > > 15492 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesEvaluator] Result from privileges interceptor: null > > > 15493 [2018-06-15T15:39:04,405][DEBUG][c.f.s.c.PrivilegesEvaluator] ---------- evaluate sg\_role: sg\_all\_access > > > 15494 [2018-06-15T15:39:04,409][DEBUG][c.f.s.c.PrivilegesEvaluator] resolved cluster actions:[\*] > > > 15495 [2018-06-15T15:39:04,410][DEBUG][c.f.s.c.PrivilegesEvaluator] found a match for ‘sg\_all\_access’ and cluster:monitor/main, skip other roles > > > also when i connect to Es through my browser , it shows me this warning. Is this normal?[![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/4/4597b3ac30e00915abbfc91e61165ae60dd58baf.png)](https://forum.search-guard.com/uploads/short-url/9VDXQ6qnM8hDfQ1BjZLaIJ3JO7d.png) > > > > > > > > > Error in Kibana: > > > > > > [![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/1/169a8b0aba250fe189aa9144621d91d6a5741091.png)](https://forum.search-guard.com/uploads/short-url/3dXBUxM281VdWQAyy97HcdO0bL3.png) > > > ---
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 18, 2018, 8:34am UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/3 "2018-06-18T08:34:53Z")
> > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: # Default Kibana configuration from kibana-docker. server.name: kibana server.host: “0” elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” elasticsearch.requestTimeout: 120000 elasticsearch.username: “kibanaserver” elasticsearch.password: “kibanaserver” #Logging configuration logging.dest: config/logkibana.txt logging.useUTC: false searchguard.basicauth.enabled: true elasticsearch.ssl.verificationMode: none #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] #searchguard.cookie.password: “qwertyuiop” #searchguard.cookie.secure: false `` ---
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 18, 2018, 12:17pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/4 "2018-06-18T12:17:38Z")
self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > **···** > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > # Default Kibana configuration from kibana-docker. > > > > server.name: kibana > > server.host: “0” > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > elasticsearch.requestTimeout: 120000 > > elasticsearch.username: “kibanaserver” > > elasticsearch.password: “kibanaserver” > > > > #Logging configuration > > logging.dest: config/logkibana.txt > > logging.useUTC: false > > > > searchguard.basicauth.enabled: true > > > > elasticsearch.ssl.verificationMode: none > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > #searchguard.cookie.password: “qwertyuiop” > > #searchguard.cookie.secure: false > > > `` > > > ---
**Author:** ![Oumeyma\_JELLALI](https://avatars.discourse-cdn.com/v4/letter/o/ee7513/32.png) [@Oumeyma\_JELLALI](https://forum.search-guard.com/u/Oumeyma_JELLALI)\ **Post date:** [June 18, 2018, 1:44pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/5 "2018-06-18T13:44:03Z")
i have a problem who can help me ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/cfd1cf35454def185e58a5e0248b2df3e6a140c2.png) > **···** > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanariodelamota@gmail.com](mailto:yabircanariodelamota@gmail.com) wrote: > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > server.name: kibana > > > server.host: “0” > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > elasticsearch.requestTimeout: 120000 > > > elasticsearch.username: “kibanaserver” > > > elasticsearch.password: “kibanaserver” > > > > > > #Logging configuration > > > logging.dest: config/logkibana.txt > > > logging.useUTC: false > > > > > > searchguard.basicauth.enabled: true > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > #searchguard.cookie.secure: false > > > > `` > > > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 18, 2018, 2:08pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/6 "2018-06-18T14:08:34Z")
Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > **···** > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > i have a problem who can help me > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/4/4b4efd8d8c5ed226765fc6fc45f15607f2dbd2bc.png) > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > server.name: kibana > > > > server.host: “0” > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > elasticsearch.requestTimeout: 120000 > > > > elasticsearch.username: “kibanaserver” > > > > elasticsearch.password: “kibanaserver” > > > > > > > > #Logging configuration > > > > logging.dest: config/logkibana.txt > > > > logging.useUTC: false > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > #searchguard.cookie.secure: false > > > > > `` > > > > > > > > > – > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > ---
**Author:** ![Oumeyma\_JELLALI](https://avatars.discourse-cdn.com/v4/letter/o/ee7513/32.png) [@Oumeyma\_JELLALI](https://forum.search-guard.com/u/Oumeyma_JELLALI)\ **Post date:** [June 18, 2018, 3:11pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/7 "2018-06-18T15:11:46Z")
hi in this file notepad elasticsearch0yml and kibana.yml and in aaa logs thanks [new 10.txt](https://forum.search-guard.com/uploads/short-url/hoiaBIv1gSd2dLCbha5wF5WOd2a.txt) (4.28 KB) [aaaaa.txt](https://forum.search-guard.com/uploads/short-url/jeVTOBtK4PX1sLt6PDF6Cruamm5.txt) (1.47 KB) > **···** > > On Mon, Jun 18, 2018 at 3:08 PM, Yabir Canario [yabircanariodelamota@gmail.com](mailto:yabircanariodelamota@gmail.com) wrote: > > > Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > > > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > > > i have a problem who can help me > > > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/b/b779ee630d1a2096976c237a29e41d24b1ce78c1.png) > > > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > > > server.name: kibana > > > > > server.host: “0” > > > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > > elasticsearch.requestTimeout: 120000 > > > > > elasticsearch.username: “kibanaserver” > > > > > elasticsearch.password: “kibanaserver” > > > > > > > > > > #Logging configuration > > > > > logging.dest: config/logkibana.txt > > > > > logging.useUTC: false > > > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > > #searchguard.cookie.secure: false > > > > > > `` > > > > > > > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > – > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 18, 2018, 3:20pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/8 "2018-06-18T15:20:08Z")
Is this returning a json? : [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) ??? > **···** > > Le lundi 18 juin 2018 17:11:48 UTC+2, Oumeyma JELLALI a écrit : > > > hi > > in this file notepad elasticsearch0yml and kibana.yml > > > and in aaa logs > > > thanks > > > On Mon, Jun 18, 2018 at 3:08 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > > > > > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > > > > > i have a problem who can help me > > > > > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/b/b779ee630d1a2096976c237a29e41d24b1ce78c1.png) > > > > > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > > > > > server.name: kibana > > > > > > server.host: “0” > > > > > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > > > elasticsearch.requestTimeout: 120000 > > > > > > elasticsearch.username: “kibanaserver” > > > > > > elasticsearch.password: “kibanaserver” > > > > > > > > > > > > #Logging configuration > > > > > > logging.dest: config/logkibana.txt > > > > > > logging.useUTC: false > > > > > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > > > #searchguard.cookie.secure: false > > > > > > > `` > > > > > > > > > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > > – > > > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > – > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > ---
**Author:** ![Oumeyma\_JELLALI](https://avatars.discourse-cdn.com/v4/letter/o/ee7513/32.png) [@Oumeyma\_JELLALI](https://forum.search-guard.com/u/Oumeyma_JELLALI)\ **Post date:** [June 18, 2018, 8:29pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/9 "2018-06-18T20:29:40Z")
[https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) not wor > **···** > > On Mon, Jun 18, 2018 at 4:20 PM, Yabir Canario [yabircanariodelamota@gmail.com](mailto:yabircanariodelamota@gmail.com) wrote: > > > Is this returning a json? : [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) ??? > > > > Le lundi 18 juin 2018 17:11:48 UTC+2, Oumeyma JELLALI a écrit : > > > > > hi > > > in this file notepad elasticsearch0yml and kibana.yml > > > > and in aaa logs > > > > thanks > > > > On Mon, Jun 18, 2018 at 3:08 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > > > > > > > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > > > > > > > i have a problem who can help me > > > > > > > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/b/b779ee630d1a2096976c237a29e41d24b1ce78c1.png) > > > > > > > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > > > > > > > server.name: kibana > > > > > > > server.host: “0” > > > > > > > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > > > > elasticsearch.requestTimeout: 120000 > > > > > > > elasticsearch.username: “kibanaserver” > > > > > > > elasticsearch.password: “kibanaserver” > > > > > > > > > > > > > > #Logging configuration > > > > > > > logging.dest: config/logkibana.txt > > > > > > > logging.useUTC: false > > > > > > > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > > > > #searchguard.cookie.secure: false > > > > > > > > `` > > > > > > > > > > > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > > > – > > > > > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > > – > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Oumeyma\_JELLALI](https://avatars.discourse-cdn.com/v4/letter/o/ee7513/32.png) [@Oumeyma\_JELLALI](https://forum.search-guard.com/u/Oumeyma_JELLALI)\ **Post date:** [June 19, 2018, 9:33am UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/10 "2018-06-19T09:33:00Z")
Good morning the response of [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) is ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/1X/69a5ed4b93e9692b40c8705b845897a658b77d35.png) > **···** > > On Mon, Jun 18, 2018 at 4:20 PM, Yabir Canario [yabircanariodelamota@gmail.com](mailto:yabircanariodelamota@gmail.com) wrote: > > > Is this returning a json? : [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) ??? > > > > Le lundi 18 juin 2018 17:11:48 UTC+2, Oumeyma JELLALI a écrit : > > > > > hi > > > in this file notepad elasticsearch0yml and kibana.yml > > > > and in aaa logs > > > > thanks > > > > On Mon, Jun 18, 2018 at 3:08 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > > > > > > > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > > > > > > > i have a problem who can help me > > > > > > > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/b/b779ee630d1a2096976c237a29e41d24b1ce78c1.png) > > > > > > > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > > > > > > > server.name: kibana > > > > > > > server.host: “0” > > > > > > > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > > > > elasticsearch.requestTimeout: 120000 > > > > > > > elasticsearch.username: “kibanaserver” > > > > > > > elasticsearch.password: “kibanaserver” > > > > > > > > > > > > > > #Logging configuration > > > > > > > logging.dest: config/logkibana.txt > > > > > > > logging.useUTC: false > > > > > > > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > > > > #searchguard.cookie.secure: false > > > > > > > > `` > > > > > > > > > > > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit : > > > > > > > – > > > > > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > > > – > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard+unsubscribe@googlegroups.com](mailto:search-guard+unsubscribe@googlegroups.com). > > > > To post to this group, send email to [search-guard@googlegroups.com](mailto:search-guard@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Yabir\_Canario](https://avatars.discourse-cdn.com/v4/letter/y/3ab097/32.png) [@Yabir\_Canario](https://forum.search-guard.com/u/Yabir_Canario)\ **Post date:** [June 19, 2018, 2:22pm UTC](https://forum.search-guard.com/t/kibana-unable-to-connect-to-elasticsearch/957/11 "2018-06-19T14:22:31Z")
> I’m a noob on this too but, the solution that worked for me was set the parameters server.host: “0.0.0.0” in kibana.yml and network.host: 0.0.0.0 in elasticsearch.yml > Good morning > > the response of > [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) > is > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/d/d4442d6033b893fa60a071ed8ac80f1767e1ae89.png) > > > > Is this returning a json? : [https://localhost:9200/\_searchguard/authinfo](https://localhost:9200/_searchguard/authinfo) ??? > > > > > hi > > > in this file notepad elasticsearch0yml and kibana.yml > > > and in aaa logs > > > thanks > > > > > > > Can you upload your configurations files: kibana.yml, elasticsearch.yml ? logs? > > > > > > > > > i have a problem who can help me > > > > > > > > > > ![](https://us1.discourse-cdn.com/flex019/uploads/search_guard/original/2X/b/b779ee630d1a2096976c237a29e41d24b1ce78c1.png) > > > > > > > > > > > > > > Yes, I think I changed it according to the documentation. I replaced http by https in the elasticsearch.url and I added the username, password and ssl.verificationMode: none. I’m I missing something?. Here’s my kibana configuration: > > > > > > > > > > > > > > # Default Kibana configuration from kibana-docker. > > > > > > > > > > > > > > server.name: kibana > > > > > > > server.host: “0” > > > > > > > > > > > > > > elasticsearch.url: “[https://XXXX.com:9200](https://XXXX.com:9200)” > > > > > > > elasticsearch.requestTimeout: 120000 > > > > > > > elasticsearch.username: “kibanaserver” > > > > > > > elasticsearch.password: “kibanaserver” > > > > > > > > > > > > > > #Logging configuration > > > > > > > logging.dest: config/logkibana.txt > > > > > > > logging.useUTC: false > > > > > > > > > > > > > > searchguard.basicauth.enabled: true > > > > > > > > > > > > > > elasticsearch.ssl.verificationMode: none > > > > > > > > > > > > > > #elasticsearch.requestHeadersWhitelist: [“Authorization”, “sgtenant”] > > > > > > > > > > > > > > #searchguard.cookie.password: “qwertyuiop” > > > > > > > #searchguard.cookie.secure: false > > > > > > > `` > > > > > > > > > > > > > self resolved. The sever.host has to be the same as the network.host setted in the elasticsearch.yml. > > > > > > – > > > > > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > > > > > > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/5c973208-f873-4780-8fcb-c9caad369669%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > > > > > – > > > > > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/9b92dd1b-9728-482c-9863-c84d2836b149%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > > – > > > > You received this message because you are subscribed to the Google Groups “Search Guard Community Forum” group. > > > > To unsubscribe from this group and stop receiving emails from it, send an email to [search-guard...@googlegroups.com](mailto:search-guard...@googlegroups.com). > > > > To post to this group, send email to [search...@googlegroups.com](mailto:search...@googlegroups.com). > > > > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com](https://groups.google.com/d/msgid/search-guard/8ac76d30-3291-408b-ab74-991f7a2925bc%40googlegroups.com?utm_medium=email&utm_source=footer). > > > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > **···** > > Le mardi 19 juin 2018 11:33:03 UTC+2, Oumeyma JELLALI a écrit : > > > On Mon, Jun 18, 2018 at 4:20 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > Le lundi 18 juin 2018 17:11:48 UTC+2, Oumeyma JELLALI a écrit : > > > > > > > On Mon, Jun 18, 2018 at 3:08 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > Le lundi 18 juin 2018 15:44:09 UTC+2, Oumeyma JELLALI a écrit : > > > > > > > > > > > On Mon, Jun 18, 2018 at 1:17 PM, Yabir Canario [yabircanar...@gmail.com](mailto:yabircanar...@gmail.com) wrote: > > > > > > > > > > > > > Le lundi 18 juin 2018 10:34:53 UTC+2, Yabir Canario a écrit :