Kibana server is not ready yet after change password

[Park Waldo]

dear sir,

i'm install to all-in-one type for wazuh server on CentOS7 (https://documentation.wazuh.com/current/installation-guide/open-distro/all-in-one-deployment/all-in-one.html)

I change password to admin account with wazuh-passwords-tool.sh after finish install.

And then reboot the system, can't open webpage with kibana server is not ready.

please help me to solve the issue.

please check below log.

[root@WAZUH ~]# curl http://127.0.0.1:9200/_cat/indices

curl: (52) Empty reply from server

curl -k -u myaccount:mypassword@ https://localhost:9200/_cat/indices?s=index
green  open .kibana_1                         20 6  65.8kb  65.8kb
green  open .opendistro_security         9 2  47.4kb  47.4kb
yellow open security-auditlog-2022.03.18  22658 0   7.3mb   7.3mb
green  open wazuh-alerts-4.x-2022.03.18   154751 0 290.7mb 290.7mb
green  open wazuh-monitoring-2022.11w    144 0 211.8kb 211.8kb
green  open wazuh-statistics-2022.11w       26 0   234kb   234kb

thanks,

best & regards.

[Park Waldo]

i checked journalctl -u kibana | egrep -i "error",  can see below logs.

Mar 18 16:25:37 WAZUH kibana[13687]: { Error: Authorization Exception
Mar 18 16:25:40 WAZUH kibana[13701]: {"type":"log","@timestamp":"2022-03-18T07:25:40Z","tags":["error","plugins","opendistroSecurityKibana"],"pid":13701,"message":"{ Error: Authorization Exception\n    at respond (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)\n    at checkRespForFailure (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)\n    at HttpConnector.<anonymous> (/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)\n    at IncomingMessage.wrapper (/usr/share/kibana/node_modules/lodash/lodash.js:4949:19)\n    at IncomingMessage.emit (events.js:203:15)\n    at endReadableNT (_stream_readable.js:1145:12)\n    at process._tickCallback (internal/process/next_tick.js:63:19)\n  status: 403,\n  displayName: 'AuthorizationException',\n  message: 'Authorization Exception',\n  path: '/_opendistro/_security/tenantinfo',\n  query: {},\n  body: undefined,\n  statusCode: 403,\n  response: '',\n  toString: [Function],\n  toJSON: [Function] }"}
Mar 18 16:25:40 WAZUH kibana[13701]: { Error: Authorization Exception
Mar 18 16:25:43 WAZUH kibana[13717]: {"type":"log","@timestamp":"2022-03-18T07:25:43Z","tags":["error","plugins","opendistroSecurityKibana"],"pid":13717,"message":"{ Error: Authorization Exception\n    at respond (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:349:15)\n    at checkRespForFailure (/usr/share/kibana/node_modules/elasticsearch/src/lib/transport.js:306:7)\n    at HttpConnector.<anonymous> (/usr/share/kibana/node_modules/elasticsearch/src/lib/connectors/http.js:173:7)\n    at IncomingMessage.wrapper (/usr/share/kibana/node_modules/lodash/lodash.js:4949:19)\n    at IncomingMessage.emit (events.js:203:15)\n    at endReadableNT (_stream_readable.js:1145:12)\n    at process._tickCallback (internal/process/next_tick.js:63:19)\n  status: 403,\n  displayName: 'AuthorizationException',\n  message: 'Authorization Exception',\n  path: '/_opendistro/_security/tenantinfo',\n  query: {},\n  body: undefined,\n  statusCode: 403,\n  response: '',\n  toString: [Function],\n  toJSON: [Function] }"}
Mar 18 16:25:43 WAZUH kibana[13717]: { Error: Authorization Exception

2022년 3월 18일 금요일 오후 4시 4분 56초 UTC+9에 Park Waldo님이 작성:

[Bin Do Tuan Anh]

Hi, 

Please let me know if you have updated your password in the files:  /etc/filebeat/filebeat.yml and /etc/kibana/kibana.yml.

You will need to change the password there as well, setting the new one.  After changing the configuration files, remember to restart the corresponding services.

Please let me know if the issue persists after applied changes or if you have any questions. 

Best regards,

Bin.

[Park Waldo]

Thanks,

Resolved issue.

2022년 3월 18일 금요일 오후 8시 44분 36초 UTC+9에 do....@wazuh.com님이 작성: