Kibana Failing After Upgrade

[Clint Davis]

I recently upgraded from 3.x to 4.x, and I'm unable to connect to Kibana:

# curl -XGET "http://localhost:5601/"
curl: (7) Failed connect to localhost:5601; Connection refused

When I try to run Kibana manually, I get an error:

# /usr/share/kibana/bin/kibana --allow-root

fs.js:114

    throw err;

    ^

Error: ENOENT: no such file or directory, open '/usr/share/kibana/config/kibana.yml'

    at Object.openSync (fs.js:443:3)

    at Object.readFileSync (fs.js:343:35)

    at readYaml (/usr/share/kibana/node_modules/@kbn/apm-config-loader/target/utils/read_config.js:27:52)

    at Object.exports.getConfigFromFiles (/usr/share/kibana/node_modules/@kbn/apm-config-loader/target/utils/read_config.js:52:22)

    at exports.loadConfiguration (/usr/share/kibana/node_modules/@kbn/apm-config-loader/target/config_loader.js:33:38)

    at module.exports (/usr/share/kibana/src/apm.js:47:15)

    at Object.<anonymous> (/usr/share/kibana/src/cli/dist.js:21:18)

    at Module._compile (internal/modules/cjs/loader.js:778:30)

    at Object.Module._extensions..js (internal/modules/cjs/loader.js:789:10)

    at Module.load (internal/modules/cjs/loader.js:653:32)

What am I doing wrong here? Do I need to point Kibana to the correct config file somehow?

FWIW, ElasticSearch is responding:

# curl -XGET "http://localhost:9200/?pretty"

{

  "name" : "wazuh.mydomain.com",

  "cluster_name" : "wazuh-cluster",

  "cluster_uuid" : "gJKX7kK7R-StzzcfmMNNug",

  "version" : {

    "number" : "7.10.2",

    "build_flavor" : "default",

    "build_type" : "rpm",

    "build_hash" : "747e1cc71def077253878a59143c1f785afa92b9",

    "build_date" : "2021-01-13T00:42:12.435326Z",

    "build_snapshot" : false,

    "lucene_version" : "8.7.0",

    "minimum_wire_compatibility_version" : "6.8.0",

    "minimum_index_compatibility_version" : "6.0.0-beta1"

  },

  "tagline" : "You Know, for Search"

}

[Alejandro Ruiz Gonzalez]

Hello,

What version of Kibana app are you using?

It seems like Kibana doesn’t find kibana.yml

You can try to start kibana with additional parameter -c which points the path to the configuration file:

/usr/share/kibana/bin/kibana -c /etc/kibana/kibana.yml

Then, restart Kibana and everything should be okay.

systemctl daemon-reload
systemctl restart kibana

If this don’t work send the logs from kibana
cat /usr/share/kibana/data/wazuh/logs/wazuhapp.log | grep -i -E "error|warn

Let me know if you have further questions.