After upgrade some curl commands does not work

1

HI all,

i upgraded our elastic/kibana system from 9.1.7-ror-1.68.0 to 9.4.1-ror-1.70.1, and after we run below commands

curl --insecure -u admin:xxxx-XGET ‘https ://collector-kibana/api/stats’
curl --insecure -u admin:xxxx-XGET ‘https ://collector-kibana/api/status’

getting output:

HTTP/1.1 302 Found. Redirecting to /logout?nextUrl=%2Fapi%2Fstats

in previous version it worked and we got info from system. Our analysts cannot use api now.

in kibana debug readonlyrest logs i found after run above commands:

[2026-08-25T11:20:53.609+00:00][debug][plugins][ReadonlyREST][authenticationFacade][x-ror-correlation-id=211374b4-f1e1-4c3b-a3a6-9ff68b6cee26] All request headers from /api/stats: { connection: ‘close’, host: ‘host.docker.internal:5602’, authorization: ‘’, ‘user-agent’: ‘curl/8.5.0’, accept: ‘/’ }
[2026-08-25T11:20:53.636+00:00][debug][plugins][ReadonlyREST][rorRequest][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] User request identity not available for last session activity date
[2026-08-25T11:20:53.644+00:00][debug][plugins][ReadonlyREST][indexCreator][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] isMigrationNeeded “/alias” endpoint data { ‘.kibana_9.1.7_001’: { aliases: { ‘.kibana’: { is_hidden: true }, ‘.kibana_9.4.1’: { is_hidden: true } } } }
[2026-08-25T11:20:53.644+00:00][debug][plugins][ReadonlyREST][indexCreator][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] isMigrationNeeded kibanaIndexVersion: 9.1.7
[2026-08-25T11:20:53.644+00:00][debug][plugins][ReadonlyREST][indexCreator][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] isMigrationNeeded kibanaBaseVersion: 9.4.1
[2026-08-25T11:20:53.644+00:00][debug][plugins][ReadonlyREST][indexCreator][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] isMigrationNeeded indexBaseVersion 9.1.7
[2026-08-25T11:20:53.684+00:00][debug][plugins][ReadonlyREST][rorRequest][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] getTenancyId called with undefined SID
[2026-08-25T11:20:53.849+00:00][warning][plugins][ReadonlyREST][indexBasedSessionManager][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] Failed to decode session for SID 3ef47e67-5836-48bd-97c0-5e8a5495cf18: Session not found in index
[2026-08-25T11:20:53.849+00:00][debug][plugins][ReadonlyREST][indexBasedSessionManager][x-ror-correlation-id=061aaf53-3de2-44b4-8488-ebb6146b9701] SID 3ef47e67-5836-48bd-97c0-5e8a5495cf18 not found in in-index session storage either: giving up.

Did someone meet with this kind of issue ? Thank you for any help.

3

Hello @frantisek.kavecky

Have you server.basePath configured it in your kibana.yml? If yes, could you update your CURL URL and add it like https ://collector-kibana/<BASE_PATH>/api/stats?

4

We do not have server.basePath definied, but we have

server.publicBaseUrl: “https://collector-kibana”

5

Could you provide your full kibana.yml file? I will try to reproduce the problem locally.