authentification finally failed for kibanaserver from "127.0.0.1:56740"

[markham extra]

Hi 

in wazuh-cluster.log i have this error

authentification finally failed for kibanaserver from "127.0.0.1:56740"

authentification finally failed for kibanaserver from "127.0.0.1:47562"

how to fix that ?

[Leandro David Sayanes]

Hi markham extra

I will try to help you!!!
The error message you are seeing in the wazuh-cluster.log file indicates an authentication failure for the Kibana server from the IP addresses "127.0.0.1:56740" and "127.0.0.1:47562". Here are some possible solutions to fix this issue:

1. Check Wazuh server and Wazuh Kibana plugin versions: This error can occur if there is a mismatch between the Wazuh server and the Wazuh Kibana plugin versions. 

2. Make sure that both the Wazuh server and the Wazuh Kibana plugin are running the same major and minor versions.
Update credentials and configuration: It may be necessary to change the credentials and configuration in the wazuh.yml file. Update the credentials with the correct username and password in the configuration file.

3. Restart Kibana and Elasticsearch: Try restarting both Kibana and Elasticsearch to see if it resolves the authentication issue.

Here more informations about Kibana plugin troubleshooting: https://documentation.wazuh.com/current/user-manual/elasticsearch/troubleshooting.html

[Amrit Swaroop Sinha]

what is the correct username and password? Where do I find it?