Error writing to defaul space .kibana {}

When I start kibana I often see that it will migrate the kibana index from “.kibana_N” to “.kibana_N+1” after I installed ROR Enterprice. I also see the following warning from the kibana-plugin:

 [warning][readonlyrest_kbn:ensureIndexExists] error writing default space to .kibana {}

How can this be resolved?

Here is the entire startup log:

  log   [06:58:37.833] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.850] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting
for Elasticsearch
  log   [06:58:37.857] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for
 Elasticsearch
  log   [06:58:37.881] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.886] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for Ela
sticsearch
  log   [06:58:37.897] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting
 for Elasticsearch
  log   [06:58:37.904] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for El
asticsearch
  log   [06:58:37.909] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting f
or Elasticsearch
  log   [06:58:37.914] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.917] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for E
lasticsearch
  log   [06:58:37.927] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiti
ng for Elasticsearch
  log   [06:58:37.950] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.970] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.974] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.979] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.983] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:37.988] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for Elast
icsearch
  log   [06:58:37.997] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.013] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.020] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Read
y
  log   [06:58:38.023] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.026] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiti
ng for Elasticsearch
  log   [06:58:38.044] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.048] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Read
y
  log   [06:58:38.052] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.055] [info][status][plugin:[email protected]] Status changed from uninitialized to yell
ow - Waiting for Elasticsearch
  log   [06:58:38.071] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.113] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.118] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiting for Ela
sticsearch
  log   [06:58:38.131] [info][siem] Plugin initializing
  log   [06:58:38.167] [info][siem] Plugin done initializing
  log   [06:58:38.170] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.174] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waitin
g for Elasticsearch
  log   [06:58:38.184] [info][status][plugin:[email protected]] Status changed from uninitialized to yello
w - Waiting for Elasticsearch
  log   [06:58:38.197] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.216] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.235] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.240] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:38.245] [warning][encrypted_saved_objects] Generating a random key for xpack.encrypted_saved_objects.encr
yptionKey. To be able to decrypt encrypted saved objects attributes after restart, please set xpack.encrypted_saved_obje
cts.encryptionKey in kibana.yml
  log   [06:58:38.247] [info][status][plugin:[email protected]] Status changed from uninitialized to green -
 Ready
  log   [06:58:38.258] [info][status][plugin:[email protected]] Status changed from uninitialized to yellow - Waiti
ng for Elasticsearch
ROR log level:  info
  log   [06:58:38.291] [info][status][plugin:[email protected]] Status changed from uninitialized to green -
 Ready
  log   [06:58:38.296] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:39.073] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:39.080] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:41.122] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.170] [info][license][xpack] Imported license information from Elasticsearch for the [data] cluster: mo
de: basic | status: active
  log   [06:58:41.178] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.185] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.186] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.188] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.190] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.192] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.194] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.196] [info][status][plugin:[email protected]] Status changed from yellow to green - Rea
dy
  log   [06:58:41.201] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.203] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.205] [info][status][plugin:[email protected]] Status changed from yellow to green - Read
y
  log   [06:58:41.208] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:41.210] [info][kibana-monitoring][monitoring] Starting monitoring stats collection
  log   [06:58:41.221] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:58:42.753] [warning][reporting] Generating a random key for xpack.reporting.encryptionKey. To prevent pendin
g reports from failing on restart, please set xpack.reporting.encryptionKey in kibana.yml
  log   [06:58:42.763] [info][status][plugin:[email protected]] Status changed from uninitialized to green - Ready
  log   [06:58:43.153] [info][migrations] Creating index .kibana_7.
  log   [06:58:43.338] [info][migrations] Migrating .kibana_6 saved objects to .kibana_7
  log   [06:58:44.558] [info][migrations] Pointing alias .kibana to .kibana_7.
  log   [06:58:44.834] [info][migrations] Finished in 1684ms.
  log   [06:58:44.838] [info][listening] Server running at http://139.113.87.153:5602
  log   [06:58:44.848] [info][status][plugin:[email protected]] Status changed from yellow to green - Ready
  log   [06:59:11.856] [warning][readonlyrest_kbn:ensureIndexExists] error writing default space to .kibana {}

OS: Windows Server 2016
ELK version: 7.2.0
ROR Elasticsearch: readonlyrest-1.18.4_es7.2.0
ROR Kibana: readonlyrest_kbn_enterprise-1.18.5-pre13_es7.2.0

I actually see that it happens every time kibana starts. So I get a new .kibana_N+1 every single time I start kibana.

Added this to the task list, will have a look soon.

1 Like