Kibana Error
569 views
Skip to first unread message
Lucas
Nov 23, 2022, 1:39:21 AM11/23/22
to Wazuh mailing list
Hi
I'm installing Wazuh today.
I was installing it well while looking at the link below.
(https://documentation.wazuh.com/current/deployment-options/elastic-stack/distributed-deployment/index.html)
By the way, an error is occurring after installing and running kibana.
--------------------------------------------------------------
I was installing it well while looking at the link below.
(https://documentation.wazuh.com/current/deployment-options/elastic-stack/distributed-deployment/index.html)
By the way, an error is occurring after installing and running kibana.
--------------------------------------------------------------
Nov 23 05:30:09 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:18 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:18 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:31 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:31 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 2.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:44 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:44 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 3.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:18 ip-xx-xx-xx-xx kibana[17123]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:18 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:18 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:22 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:31 ip-xx-xx-xx-xx kibana[17142]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:31 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:31 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 2.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:34 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: FATAL Error: [config validation of [elasticsearch].hosts]: types that failed validation:
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: - [config validation of [elasticsearch].hosts.0]: expected value of type [string] but got [Array].
Nov 23 05:30:44 ip-xx-xx-xx-xx kibana[17158]: - [config validation of [elasticsearch].hosts.1.0]: expected URI with scheme [http|https].
Nov 23 05:30:44 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=78/CONFIG
Nov 23 05:30:44 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 3.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 05:30:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
--------------------------------------------------------------
I don't know what the problem is.
I don't know what the problem is.
help
Lucas
Nov 23, 2022, 1:54:54 AM11/23/22
to Wazuh mailing list
Error has been changed now.
Help me.
Nov 23 06:50:54 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:50:57 ip-xx-xx-xx-xx kibana[19723]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:50:57 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:50:57 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:51:03 ip-xx-xx-xx-xx kibana[19743]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:51:03 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:51:03 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 2.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:51:09 ip-xx-xx-xx-xx kibana[19764]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:51:09 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:51:09 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 3.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: Failed to start Kibana.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: Failed to start Kibana.
Nov 23 06:52:18 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:52:21 ip-xx-xx-xx-xx kibana[19808]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:52:21 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:52:21 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:50:57 ip-xx-xx-xx-xx kibana[19723]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:50:57 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:50:57 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:00 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:51:03 ip-xx-xx-xx-xx kibana[19743]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:51:03 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:51:03 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 2.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:06 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:51:09 ip-xx-xx-xx-xx kibana[19764]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:51:09 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:51:09 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 3.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:12 ip-xx-xx-xx-xx systemd[1]: Failed to start Kibana.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Start request repeated too quickly.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:51:47 ip-xx-xx-xx-xx systemd[1]: Failed to start Kibana.
Nov 23 06:52:18 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
Nov 23 06:52:21 ip-xx-xx-xx-xx kibana[19808]: FATAL Error: Plugin with id "wazuh" is already registered!
Nov 23 06:52:21 ip-xx-xx-xx-xx systemd[1]: kibana.service: Main process exited, code=exited, status=1/FAILURE
Nov 23 06:52:21 ip-xx-xx-xx-xx systemd[1]: kibana.service: Failed with result 'exit-code'.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: kibana.service: Scheduled restart job, restart counter is at 1.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: Stopped Kibana.
Nov 23 06:52:24 ip-xx-xx-xx-xx systemd[1]: Started Kibana.
2022년 11월 23일 수요일 오후 3시 39분 21초 UTC+9에 Lucas님이 작성:
Lucas
Nov 23, 2022, 2:01:42 AM11/23/22
to Wazuh mailing list
I tried to uninstall the plug-in and reinstall it, but it didn't remove it.
root@ip-xx-xx-xx-xx:/usr/share/kibana# systemctl stop kibana
root@ip-xx-xx-xx-xx:/usr/share/kibana# /usr/share/kibana/bin/kibana-plugin list
wa...@4.3.10-4311
root@ip-xx-xx-xx-xx:/usr/share/kibana# /usr/share/kibana/bin/kibana-plugin remove wa...@4.3.10-4311
Unable to remove plugin because of error: "Plugin [wa...@4.3.10-4311] is not installed"
root@ip-xx-xx-xx-xx:/usr/share/kibana# /usr/share/kibana/bin/kibana-plugin list
wa...@4.3.10-4311
root@ip-xx-xx-xx-xx:/usr/share/kibana# /usr/share/kibana/bin/kibana-plugin remove wa...@4.3.10-4311
Unable to remove plugin because of error: "Plugin [wa...@4.3.10-4311] is not installed"
2022년 11월 23일 수요일 오후 3시 54분 54초 UTC+9에 Lucas님이 작성:
Antonio David Gutiérrez
Nov 23, 2022, 3:01:11 AM11/23/22
to Wazuh mailing list
Hi Lucas,
thank you for using Wazuh!
I see you are getting a problem removing the Wazuh plugin from the Kibana.
Could you review the folders under the /usr/share/kibana/plugins directory?
ls /usr/share/kibana/plugins
If you have a folder called wazuh and you want to reinstall the plugin, then:
1. Remove the wazuh plugin:
- Via the kibana-plugin:
cd /usr/share/kibana
bin/kibana-plugin remove wazuh
- If the previous step doesn't work. Try to remove the directory of the wazuh plugin
rm -rf /usr/share/kibana/plugins/wazuh
After, you could review the plugin was removed:
cd /usr/share/kibana
bin/kibana-plugin list
2. Install the Wazuh plugin.
The plugin to install depends on your Wazuh version and Kibana version. You can check the compatibility matrix Wazuh app-Kibana https://github.com/wazuh/wazuh-kibana-app/wiki/Compatibility#compatibility-matrix.
2.1 Install the Wazuh plugin:
cd /usr/share/kibana
bin/kibana-plugin install <plugin_url>
where:
- <plugin_url> is the URL of the Wazuh plugin where it is hosted, you can get this URL from the compatibility matrix https://github.com/wazuh/wazuh-kibana-app/wiki/Compatibility#compatibility-matrix.
2.2. Restart the Kibana service.
Depending on your service manager:
- systemctl
systemctl restart kibana
- sysV init
service kibana restart
If you continue getting the error FATAL Error: Plugin with id "wazuh" is already registered! try to restart the machine.
thank you for using Wazuh!
I see you are getting a problem removing the Wazuh plugin from the Kibana.
Could you review the folders under the /usr/share/kibana/plugins directory?
ls /usr/share/kibana/plugins
If you have a folder called wazuh and you want to reinstall the plugin, then:
1. Remove the wazuh plugin:
- Via the kibana-plugin:
cd /usr/share/kibana
bin/kibana-plugin remove wazuh
- If the previous step doesn't work. Try to remove the directory of the wazuh plugin
rm -rf /usr/share/kibana/plugins/wazuh
After, you could review the plugin was removed:
cd /usr/share/kibana
bin/kibana-plugin list
2. Install the Wazuh plugin.
The plugin to install depends on your Wazuh version and Kibana version. You can check the compatibility matrix Wazuh app-Kibana https://github.com/wazuh/wazuh-kibana-app/wiki/Compatibility#compatibility-matrix.
2.1 Install the Wazuh plugin:
cd /usr/share/kibana
bin/kibana-plugin install <plugin_url>
where:
- <plugin_url> is the URL of the Wazuh plugin where it is hosted, you can get this URL from the compatibility matrix https://github.com/wazuh/wazuh-kibana-app/wiki/Compatibility#compatibility-matrix.
2.2. Restart the Kibana service.
Depending on your service manager:
- systemctl
systemctl restart kibana
- sysV init
service kibana restart
If you continue getting the error FATAL Error: Plugin with id "wazuh" is already registered! try to restart the machine.
Reply all
Reply to author
Forward
0 new messages