Kibana server is not ready.

120 views
Skip to first unread message

Salman Kazmi

unread,
Mar 8, 2021, 5:08:18 AM3/8/21
to Wazuh mailing list
Through documentation of wazuh I reset my dashboard password. After I successfully reset it I checked all the services which includes  Wazuh-manager, kibana, filebeat and elasticsearch are all Active(Running) but the server is not ready. Restarted the service multiple times but still unable to access the dashboard.

Please help if anyone can.

carlos...@wazuh.com

unread,
Mar 8, 2021, 5:37:25 AM3/8/21
to Wazuh mailing list
Hi, 

I'll try to help you with this issue but first I need more information about the steps you followed to reset the password. Did you change user roles through the web app or modifying the related file? Could you please share with me the link to the documentation you used to reset the password? Just to make sure there is nothing wrong with it.

Additionally, try to check out the kibana logs to see if there is any error or warning message. Please run the following commands and share with us the output if possible:
journalctl -r -xu kibana
systemctl status kibana -l
systemctl status elasticsearch -l.

With this information I may be able to help you further.

Salman Kazmi

unread,
Mar 8, 2021, 11:23:57 PM3/8/21
to Wazuh mailing list
I modified it through related file.
Below is the link.

https://documentation.wazuh.com/4.0/user-manual/elasticsearch/elastic_tuning.html
journalctl -r -xu kibana.PNG
systemctl status elasticsearch -l.PNG
systemctl status kibana -l.PNG

carlos...@wazuh.com

unread,
Mar 9, 2021, 2:37:26 AM3/9/21
to Wazuh mailing list
Everything seems to be fine in your screenshots. Did you update the password also in the /etc/filebeat/filebeat.yml and /etc/kibana/kibana.yml files as the documentation indicates?

If that does not solves your issue, please let me know your Wazuh, Kibana and elastic versions and if you are using docker. In case you were trying to perform this in a Docker then you should follow this other instructions instead.

Finally, I recommend you to check how is your elasticsearch health, if possible, by running the following command:
curl -u your_elastic_user:your_password -k https://your_elastic_IP:9200/_cluster/health

Salman Kazmi

unread,
Mar 9, 2021, 7:42:36 AM3/9/21
to Wazuh mailing list
Thanks carlos for your time. the issue was I not updating  kibana server's hash that's why I was unable to access my dashboard.
I have another issue regarding backup of my entire machine. Please guide me on that. 

carlos...@wazuh.com

unread,
Mar 9, 2021, 9:46:55 AM3/9/21
to Wazuh mailing list
I'm glad it is now working fine. Thanks for sharing the cause of this issue and for contributing to our community.

Regarding your backup issue, I suggest you create another thread (here or in our slack community) to address it, so each independent issue will have their own thread and the rest of the community can benefit from it. Our team will be pleased to help you.

Regards!
Reply all
Reply to author
Forward
0 new messages