[SUPPORT|kbn_ent]Kibana+SSL

Enterprise Support
1

ROR Version: Enterprise 1.56.0_es7.15.1 :unicorn:

Kibana Version: 7.15.1

Elasticsearch Version: 7.15.1

Steps to reproduce the issue
Use https kibana from ROR

server.ssl.enabled: true
server.ssl.keystore.path: "/etc/kibana-1/cert.p12"
server.ssl.keystore.password: ""
server.ssl.supportedProtocols: ["TLSv1.2", "TLSv1.3"]

Expected result:
Kibana works stably on HTTPS

Actual Result:
Kibana sometimes stops starting. Restarting Kibana or Elasticsearch does not solve the problem.
Using a different cluster elasticsearch also does not solve the problem.
This server has multiple kibana running on different ports.
Currently one is not running, but the other two kibanas are running.
They only have a different connection port to Elasticsearch.
The problem is also reproduced on servers with a single kibana process.
If you remove the SSL parameters. Then kibana starts but SSL does not work.
If you return the parameters after a successful launch of kibana, the problem will remain.

launch log

{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"telemetry\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"telemetryManagementSection\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [telemetry]"}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"canvas\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"graph\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"metricsEntities\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"ml\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"monitoring\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"osquery\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [security]"}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"security\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:46+00:00","tags":["info","plugins-service"],"pid":989830,"message":"Plugin \"uptime\" is disabled."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["info","http","server","Preboot"],"pid":989830,"message":"http server running at undefined"}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one. For more details, see https://github.com/elastic/kibana/blob/master/src/core/server/logging/README.mdx"}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Setting [elasticsearch.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"\"migrations.enableV2\" is deprecated and will be removed in an upcoming release without any further notice."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Setting [monitoring.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"\"xpack.reporting.index\" is deprecated. Multitenancy by changing \"kibana.index\" will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy for more details"}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"\"xpack.reporting.roles\" is deprecated. Granting reporting privilege through a \"reporting_user\" role will not be supported starting in 8.0. Please set \"xpack.reporting.roles.enabled\" to \"false\" and grant reporting privileges to users using Kibana application privileges **Management > Security > Roles**."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Disabling the security plugin (`xpack.security.enabled`) will not be supported in the next major version (8.0). To turn off security features, disable them in Elasticsearch instead."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Session idle timeout (\"xpack.security.session.idleTimeout\") will be set to 1 hour by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-09-24T17:23:52+00:00","tags":["warning","config","deprecation"],"pid":989830,"message":"Session lifespan (\"xpack.security.session.lifespan\") will be set to 30 days by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["warning","environment"],"pid":989830,"message":"Detected an unhandled Promise rejection.\nError: LicenseService is not initialised yet: empty ActivationKey"}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["info","plugins-system","standard"],"pid":989830,"message":"Setting up [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySo
lution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":989830,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["info","plugins","taskManager"],"pid":989830,"message":"TaskManager is identified by the Kibana UUID: 746af7e8-4448-4195-a38d-262b332b9b19"}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["info","plugins","readonlyrestkbn"],"pid":989830,"message":"Setting up ReadonlyREST plugin - build info: {\"versionString\":\"1.56.0_es7.15.1\",\"kibanaVersion\":\"7.15.1\",\"rorVersion\":\"1.56.0\",\"isProduction\":true,\"isBuildExpired\":false}"}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["warning","plugins","reporting","config"],"pid":989830,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux Red Hat Linux 9.2 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["warning","plugins","actions"],"pid":989830,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["warning","plugins","alerting"],"pid":989830,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-09-24T17:24:02+00:00","tags":["info","plugins","ruleRegistry"],"pid":989830,"message":"Write is disabled; not installing common resources shared between all indices"}
{"type":"log","@timestamp":"2024-09-24T17:24:03+00:00","tags":["info","plugins","ruleRegistry"],"pid":989830,"message":"Write is disabled; not installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2024-09-24T17:24:03+00:00","tags":["info","plugins","ruleRegistry"],"pid":989830,"message":"Write is disabled; not installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2024-09-24T17:24:03+00:00","tags":["info","plugins","ruleRegistry"],"pid":989830,"message":"Write is disabled; not installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2024-09-24T17:24:03+00:00","tags":["info","savedobjects-service"],"pid":989830,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2024-09-24T17:24:03+00:00","tags":["error","savedobjects-service"],"pid":989830,"message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 127.0.0.1:38087"}

Minimum config to reproduce the problem:

server.port: 5601
server.host: "0.0.0.0"

elasticsearch.hosts: ["https://localhost:9201"]
elasticsearch.username: login
elasticsearch.password: pass
migrations.enableV2: false
monitoring.enabled: false
console.enabled: true

server.ssl.enabled: true
server.ssl.keystore.path: "/etc/kibana-1/cert.p12"
server.ssl.keystore.password: ""
server.ssl.supportedProtocols: ["TLSv1.2", "TLSv1.3"]
elasticsearch.ssl.alwaysPresentCertificate: true
elasticsearch.ssl.verificationMode: none
readonlyrest_kbn.cookiePass: "cookiepass"
readonlyrest_kbn.cookieName: "cookiename"

To be precise, the kibana process is hanging, but it doesn’t open in the browser and doesn’t create indexes in Elasticsearch.

{“customer_id”: “6c4a385b-2ae8-4f02-a9cd-ef24addfb5b3”, “subscription_id”: “32d4073f-dc2f-4056-a868-842727c637cd”}

2

Hi @driveirk

Thanks for the reproduction steps, I will check what’s going on based on your config and let you know. Could you provide also ROR Kibana plugin logs?

3

There are no logs in the access logs. That is, no connections to Elasticsearch occur.

4

By default Kibana logs are destined to the console, if you run Kibana and Kibana plugin, there must be any logs related to it at least about starting. Could you set in the kibana.yml

logging.dest: /var/log/kibana/kibana.log

Thanks to it, all Kibana and Kibana plugin logs, will be saved to the file

5

Hi @driveirk

Did you have a chance to set the logging destination to file and receive logs?

6

The problem has not been reproduced yet. As soon as it appears again I will do so.
The problem appears approximately once a month.

7

Hi
The problem has reproduced again.
I added
logging.dest: /var/log/kibana/kibana.log

Here is the log:

{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"telemetry\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"telemetryManagementSection\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [telemetry]"}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"canvas\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"graph\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"metricsEntities\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"ml\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"monitoring\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"osquery\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [security]"}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"security\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:07+00:00","tags":["info","plugins-service"],"pid":1918340,"message":"Plugin \"uptime\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["info","http","server","Preboot"],"pid":1918340,"message":"http server running at undefined"}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one. For more details, see https://github.com/elastic/kibana/blob/master/src/core/server/logging/README.mdx"}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Setting [elasticsearch.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Setting [monitoring.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"\"xpack.reporting.index\" is deprecated. Multitenancy by changing \"kibana.index\" will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy for more details"}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"\"xpack.reporting.roles\" is deprecated. Granting reporting privilege through a \"reporting_user\" role will not be supported starting in 8.0. Please set \"xpack.reporting.roles.enabled\" to \"false\" and grant reporting privileges to users using Kibana application privileges **Management > Security > Roles**."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Disabling the security plugin (`xpack.security.enabled`) will not be supported in the next major version (8.0). To turn off security features, disable them in Elasticsearch instead."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Session idle timeout (\"xpack.security.session.idleTimeout\") will be set to 1 hour by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-10-11T08:17:12+00:00","tags":["warning","config","deprecation"],"pid":1918340,"message":"Session lifespan (\"xpack.security.session.lifespan\") will be set to 30 days by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins-system","standard"],"pid":1918340,"message":"Setting up [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySolution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":1918340,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","taskManager"],"pid":1918340,"message":"TaskManager is identified by the Kibana UUID: ef2d5d60-5797-400c-ab60-9c311da58628"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","readonlyrestkbn"],"pid":1918340,"message":"Setting up ReadonlyREST plugin - build info: {\"versionString\":\"1.56.0_es7.15.1\",\"kibanaVersion\":\"7.15.1\",\"rorVersion\":\"1.56.0\",\"isProduction\":true,\"isBuildExpired\":false}"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["warning","plugins","reporting","config"],"pid":1918340,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux Red Hat Linux 9.2 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["warning","plugins","actions"],"pid":1918340,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["warning","plugins","alerting"],"pid":1918340,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","ruleRegistry"],"pid":1918340,"message":"Write is disabled; not installing common resources shared between all indices"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","ruleRegistry"],"pid":1918340,"message":"Write is disabled; not installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","ruleRegistry"],"pid":1918340,"message":"Write is disabled; not installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","plugins","ruleRegistry"],"pid":1918340,"message":"Write is disabled; not installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2024-10-11T08:17:22+00:00","tags":["info","savedobjects-service"],"pid":1918340,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2024-10-11T08:17:23+00:00","tags":["error","savedobjects-service"],"pid":1918340,"message":"Unable to retrieve version information from Elasticsearch nodes. connect ECONNREFUSED 127.0.0.1:26219"}

This may be important. When restarting kibana with an error, it stops for a very long time.

8

Run kibana without parameters:

   #server.ssl.enabled: true
   #server.ssl.keystore.path: "/etc/kibana-3/cert.p12"
   #server.ssl.keystore.password: ""
   #server.ssl.supportedProtocols: ["TLSv1.2", "TLSv1.3"]

log:

{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-service"],"pid":1930768,"message":"Plugin \"ml\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-service"],"pid":1930768,"message":"Plugin \"monitoring\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-service"],"pid":1930768,"message":"Plugin \"osquery\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [security]"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-service"],"pid":1930768,"message":"Plugin \"security\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-service"],"pid":1930768,"message":"Plugin \"uptime\" is disabled."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","http","server","Preboot"],"pid":1930768,"message":"http server running at undefined"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one. For more details, see https://github.com/elastic/kibana/blob/master/src/core/server/logging/README.mdx"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Setting [elasticsearch.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"\"migrations.enableV2\" is deprecated and will be removed in an upcoming release without any further notice."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Setting [monitoring.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"\"xpack.reporting.index\" is deprecated. Multitenancy by changing \"kibana.index\" will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy for more details"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"\"xpack.reporting.roles\" is deprecated. Granting reporting privilege through a \"reporting_user\" role will not be supported starting in 8.0. Please set \"xpack.reporting.roles.enabled\" to \"false\" and grant reporting privileges to users using Kibana application privileges **Management > Security > Roles**."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Disabling the security plugin (`xpack.security.enabled`) will not be supported in the next major version (8.0). To turn off security features, disable them in Elasticsearch instead."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Session idle timeout (\"xpack.security.session.idleTimeout\") will be set to 1 hour by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","config","deprecation"],"pid":1930768,"message":"Session lifespan (\"xpack.security.session.lifespan\") will be set to 30 days by default in the next major version (8.0)."}
[09:03:45:634] [info][plugins][ReadonlyREST][ConfigurationCompliance] ConfigurationCompliance: isFree=false, isEnterprise=true
[09:03:45:650] [info][plugins][ReadonlyREST][preElasticsearchProxy] Pre-Elasticsearch-proxy will listen on 127.0.0.1:22704
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins-system","standard"],"pid":1930768,"message":"Setting up [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySolution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":1930768,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins","taskManager"],"pid":1930768,"message":"TaskManager is identified by the Kibana UUID: ef2d5d60-5797-400c-ab60-9c311da58628"}
{"type":"log","@timestamp":"2024-10-11T09:03:45+00:00","tags":["info","plugins","readonlyrestkbn"],"pid":1930768,"message":"Setting up ReadonlyREST plugin - build info: {\"versionString\":\"1.56.0_es7.15.1\",\"kibanaVersion\":\"7.15.1\",\"rorVersion\":\"1.56.0\",\"isProduction\":true,\"isBuildExpired\":false}"}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["warning","plugins","reporting","config"],"pid":1930768,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux Red Hat Linux 9.2 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["warning","plugins","actions"],"pid":1930768,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["warning","plugins","alerting"],"pid":1930768,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","plugins","ruleRegistry"],"pid":1930768,"message":"Write is disabled; not installing common resources shared between all indices"}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","plugins","ruleRegistry"],"pid":1930768,"message":"Write is disabled; not installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","plugins","ruleRegistry"],"pid":1930768,"message":"Write is disabled; not installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","plugins","ruleRegistry"],"pid":1930768,"message":"Write is disabled; not installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","savedobjects-service"],"pid":1930768,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2024-10-11T09:03:46+00:00","tags":["info","savedobjects-service"],"pid":1930768,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2024-10-11T09:03:47+00:00","tags":["info","plugins-system","standard"],"pid":1930768,"message":"Starting [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySolution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-10-11T09:03:47+00:00","tags":["warning","plugins","fleet"],"pid":1930768,"message":"Fleet requires the security plugin to be enabled."}
{"type":"log","@timestamp":"2024-10-11T09:03:48+00:00","tags":["info","http","server","Kibana"],"pid":1930768,"message":"http server running at http://0.0.0.0:5603"}
[09:03:49:054] [info][plugins][ReadonlyREST][SessionCleanupTaskManager] Task already registered:, {"retryAt":null,"runAt":"2024-10-12T09:01:23.845Z","startedAt":null,"params":{},"ownerId":null,"schedule":{"interval":"1d"},"taskType":"ror_session_cleanup","scope":[],"traceparent":"00-246355e33f600ba00d573d471abebf08-6dd55c4f22b4c871-01","state":{},"scheduledAt":"2024-10-11T09:01:02.507Z","attempts":1,"status":"idle","id":"ror_session_cleanup","version":"WzEyNjA1MDEsMl0="}
{"type":"log","@timestamp":"2024-10-11T09:03:49+00:00","tags":["info","plugins","securitySolution"],"pid":1930768,"message":"Dependent plugin setup complete - Starting ManifestTask"}
{"type":"log","@timestamp":"2024-10-11T09:03:49+00:00","tags":["info","status"],"pid":1930768,"message":"Kibana is now degraded"}
{"type":"log","@timestamp":"2024-10-11T09:03:50+00:00","tags":["info","plugins","reporting"],"pid":1930768,"message":"Browser executable: /usr/share/kibana/x-pack/plugins/reporting/chromium/headless_shell-linux_x64/headless_shell"}
{"type":"log","@timestamp":"2024-10-11T09:03:50+00:00","tags":["warning","plugins","reporting"],"pid":1930768,"message":"Enabling the Chromium sandbox provides an additional layer of protection."}
{"type":"log","@timestamp":"2024-10-11T09:03:52+00:00","tags":["info","status"],"pid":1930768,"message":"Kibana is now available (was degraded)"}
9

Hello @driveirk
I sent you a private message with the pre-release build.

10

Okay, I’ll fix it. I’ll let you know when the problem occurs again.
thanks

11

The problem reproduced on the old plugin.
I stopped Kibana, installed the new version, set the loglevel.
Here is the log:

{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"telemetry\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"telemetryManagementSection\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [telemetry]"}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"canvas\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"graph\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"metricsEntities\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"ml\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"monitoring\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"osquery\" has been disabled since the following direct or transitive dependencies are missing, disabled, or have incompatible types: [security]"}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"security\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:27+00:00","tags":["info","plugins-service"],"pid":686547,"message":"Plugin \"uptime\" is disabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["info","http","server","Preboot"],"pid":686547,"message":"http server running at undefined"}
[07:48:33:267] [info][plugins][ReadonlyREST][esClient] Elasticsearch is available with status: green
[07:48:33:268] [debug][plugins][ReadonlyREST][indexBasedSessionManager] IndexBasedSessionManager initialized
[07:48:33:268] [debug][plugins][ReadonlyREST][inMemorySessionManager] InMemorySessionManager initialized
[07:48:33:275] [debug][plugins][ReadonlyREST][inMemorySessionManager] Number of deleted stale In-memory sessions: 0
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"\"logging.dest\" has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the \"console\" appender in your logging configuration or define a custom one. For more details, see https://github.com/elastic/kibana/blob/master/src/core/server/logging/README.mdx"}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Setting [elasticsearch.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"plugins.scanDirs is deprecated and is no longer used"}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"\"migrations.enableV2\" is deprecated and will be removed in an upcoming release without any further notice."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Config key [monitoring.cluster_alerts.email_notifications.email_address] will be required for email notifications to work in 8.0.\""}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Setting [monitoring.username] to \"kibana\" is deprecated. You should use the \"kibana_system\" user instead."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"\"xpack.reporting.index\" is deprecated. Multitenancy by changing \"kibana.index\" will not be supported starting in 8.0. See https://ela.st/kbn-remove-legacy-multitenancy for more details"}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"\"xpack.reporting.roles\" is deprecated. Granting reporting privilege through a \"reporting_user\" role will not be supported starting in 8.0. Please set \"xpack.reporting.roles.enabled\" to \"false\" and grant reporting privileges to users using Kibana application privileges **Management > Security > Roles**."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Disabling the security plugin (`xpack.security.enabled`) will not be supported in the next major version (8.0). To turn off security features, disable them in Elasticsearch instead."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Session idle timeout (\"xpack.security.session.idleTimeout\") will be set to 1 hour by default in the next major version (8.0)."}
{"type":"log","@timestamp":"2024-10-23T07:48:33+00:00","tags":["warning","config","deprecation"],"pid":686547,"message":"Session lifespan (\"xpack.security.session.lifespan\") will be set to 30 days by default in the next major version (8.0)."}
[07:48:44:061] [debug][plugins][ReadonlyREST][esIndexClient] The index .readonlyrest_kibana_tribe_sessions was created.
[07:48:44:089] [debug][plugins][ReadonlyREST][serverCreator] Disallow TLSv1.1
[07:48:44:089] [info][plugins][ReadonlyREST][serverCreator] ROR PKP SSL server will accept protocols: TLSv1.2,TLSv1.3 (bitmask: 67108864)
[07:48:44:088] [info][plugins][ReadonlyREST][ConfigurationCompliance] ConfigurationCompliance: isFree=false, isEnterprise=true
[07:48:44:091] [trace][plugins][ReadonlyREST][legacyRenderer] Injecting custom user js: true. Injecting custom user js for the login page: false. Injecting custom user js file content: false
[07:48:44:131] [trace][plugins][ReadonlyREST][preKibanaProxy] Pre-kibana-proxy will listen on http://0.0.0.0:5601
[07:48:44:134] [debug][plugins][ReadonlyREST][serverCreator] Creating TLS server on https://0.0.0.0:5601 with options: , {"secureOptions":67108864,"honorCipherOrder":true,"pfx":{"type":"Buffer","data":[48,130,13,111,2,1,3,48,130,13,40,6,9,42,134,72,134,247,13,1,7,1,160,130,13,25,4,130,13,21,48,130,13,17,48,130,5,101,6,9,42,134,72,134,247,13,1,7,1,160,130,5,86,4,130,5,82,48,130,5,78,48,130,5,74,6,11,42,134,72,134,247,13,1,12,10,1,2,160,130,4,251,48,130,4,247,48,41,6,10,42,134,72,134,247,13,1,12,1,3,48,27,4,20,71,93,201,119,153,85,184,65,200,119,206,134,49,129,52,245,15,43,123,109,2,3,0,195,80,4,130,4,200,43,212,219,251,79,184,248,18,74,17,213,185,229,43,149,186,136,31,38,13,77,72,54,153,151,161,7,27,163,228,0,199,254,137,32,32,2,191,226,81,103,112,4,152,223,250,15,32,73,157,158,141,96,217,90,238,213,104,108,183,41,239,176,57,60,84,11,22,35,230,46,55,218,40,209,83,181,53,254,18,138,20,3,153,95,68,147,130,158,249,53,217,243,113,70,106,208,193,39,150,128,201,211,140,203,194,157,75,28,12,113,70,119,161,148,181,244,210,232,54,82,179,171,213,70,135,64,200,241,33,101,189,255,146,19,158,202,221,79,118,195,124,142,18,10,220,147,134,7,139,104,206,186,144,18,239,93,93,161,221,230,101,85,221,234,212,155,85,83,175,175,112,126,196,169,23,182,65,43,242,43,75,176,19,185,224,236,239,243,64,140,48,225,18,109,182,228,206,34,165,147,190,34,114,208,166,104,27,71,166,245,8,232,141,33,121,214,48,86,115,60,111,89,132,53,81,7,144,92,86,0,42,43,5,92,29,87,93,190,17,200,206,85,5,72,55,55,134,199,26,1,124,96,116,196,101,64,197,184,39,99,223,88,215,66,206,214,239,124,104,174,127,251,232,66,40,228,5,204,152,52,77,21,32,160,236,66,174,195,42,6,208,148,234,61,89,14,31,175,92,219,53,205,165,209,248,176,87,128,222,42,94,158,173,197,34,98,168,47,57,134,77,197,245,243,98,24,216,180,198,38,228,3,106,20,45,199,184,166,253,4,174,87,118,128,21,171,228,223,33,84,189,205,44,68,97,8,16,198,55,96,186,24,88,169,76,170,0,219,151,214,161,217,108,167,97,95,194,76,182,179,135,27,6,105,148,205,24,46,24,118,101,140,154,174,70,173,7,203,12,72,20,182,136,240,113,207,148,116,5,203,127,9,211,244,243,228,164,205,47,88,94,59,151,80,5,252,77,129,246,124,201,181,133,236,217,82,2,84,254,26,144,67,17,242,128,29,197,100,136,44,15,189,25,213,95,52,247,23,221,139,158,32,34,126,151,185,102,41,79,198,168,197,232,105,16,160,236,162,130,223,100,173,29,197,177,28,224,144,90,133,37,6,13,126,81,215,206,92,60,11,74,225,132,133,99,198,25,188,99,155,122,195,11,82,84,158,91,95,138,163,73,4,75,216,224,244,118,122,164,18,157,230,157,36,102,25,125,13,185,30,5,111,222,42,14,31,176,68,232,244,247,5,194,169,93,238,142,82,200,61,148,93,187,88,90,54,247,106,254,192,150,81,8,174,28,102,94,217,25,61,23,116,50,50,120,232,87,81,11,237,65,147,209,32,119,30,17,179,241,49,241,147,117,88,237,63,90,46,3,237,83,17,185,166,135,177,42,127,52,93,244,220,196,164,78,187,219,67,208,147,173,179,173,224,46,172,129,252,159,120,117,198,10,252,28,216,112,107,251,117,187,16,94,180,60,43,114,39,101,255,18,229,192,119,219,228,251,209,101,224,91,44,130,158,132,204,3,0,119,188,34,217,10,17,123,69,186,163,0,205,197,1,70,173,169,96,122,183,190,37,243,28,228,81,120,36,104,71,169,5,238,123,112,159,219,60,73,109,67,61,8,34,97,148,8,156,246,154,37,130,207,31,6,83,95,50,80,123,209,115,78,111,100,150,244,70,94,151,232,133,50,237,165,100,34,28,168,195,232,40,208,62,121,86,211,192,202,160,71,186,226,163,230,122,16,198,30,151,72,48,98,112,62,25,61,251,179,208,213,160,140,22,204,78,75,132,64,216,136,26,165,89,235,23,27,41,150,202,166,61,161,185,190,58,211,36,47,8,38,227,45,49,246,163,98,136,216,108,69,231,217,138,161,189,155,23,39,105,213,121,247,178,75,56,9,247,114,80,245,112,254,119,157,168,217,75,148,244,249,122,59,229,31,115,39,236,9,249,103,204,98,119,121,57,108,61,30,128,147,136,3,60,98,247,66,17,175,106,15,16,97,175,16,222,42,116,31,194,179,59,192,130,240,141,99,77,9,219,235,46,79,2,80,13,46,246,35,69,133,68,213,178,102,213,207,79,206,225,59,233,23,38,244,50,81,5,116,42,236,197,232,90,72,218,175,171,13,117,243,189,216,197,30,101,172,153,77,63,204,196,126,173,214,208,63,203,103,249,221,119,124,7,237,118,248,176,189,141,102,219,86,236,246,224,173,129,27,189,75,105,195,182,71,18,254,123,248,226,80,169,5,47,80,235,63,175,248,91,54,169,87,170,86,56,119,125,233,126,118,136,89,52,13,3,118,246,232,114,99,236,169,131,92,255,26,82,241,235,223,2,142,193,185,132,100,80,213,195,226,231,182,159,65,88,15,146,110,255,226,84,17,165,251,102,242,234,9,25,26,222,182,97,146,123,248,23,221,15,17,83,157,178,0,80,133,181,136,57,62,140,18,94,225,233,65,12,173,19,209,41,138,67,247,88,64,131,220,159,85,226,1,204,86,194,38,242,123,231,215,242,141,223,92,39,229,21,6,188,117,158,91,28,224,209,16,83,17,209,203,112,50,62,64,62,56,135,202,166,185,255,45,155,21,67,30,205,171,33,110,195,20,208,94,113,138,91,36,180,89,232,0,61,208,190,108,18,49,111,56,42,15,238,206,18,111,135,249,112,131,145,10,100,145,247,37,78,239,203,226,118,210,191,129,55,157,71,87,175,73,177,192,118,149,1,146,16,101,211,55,151,165,117,217,49,60,48,23,6,9,42,134,72,134,247,13,1,9,20,49,10,30,8,0,104,0,116,0,116,0,112,48,33,6,9,42,134,72,134,247,13,1,9,21,49,20,4,18,84,105,109,101,32,49,54,56,51,54,51,55,54,49,50,55,50,55,48,130,7,164,6,9,42,134,72,134,247,13,1,7,6,160,130,7,149,48,130,7,145,2,1,0,48,130,7,138,6,9,42,134,72,134,247,13,1,7,1,48,41,6,10,42,134,72,134,247,13,1,12,1,6,48,27,4,20,49,151,209,156,47,198,245,147,189,55,16,67,16,32,5,60,134,75,137,22,2,3,0,195,80,128,130,7,80,149,154,166,235,62,7,79,117,25,55,225,144,128,230,211,95,169,42,182,244,235,52,176,131,12,121,23,3,250,38,219,58,157,0,164,103,5,113,23,112,155,90,36,175,236,47,179,79,189,78,216,8,111,30,141,215,21,196,230,38,246,167,95,172,222,61,98,235,146,128,80,52,108,61,67,215,25,246,127,16,247,195,226,127,189,4,246,157,207,2,44,208,175,140,58,44,218,245,187,46,35,152,199,157,196,81,87,162,159,24,228,188,220,254,35,74,87,209,119,7,134,180,207,61,227,136,238,160,122,196,68,104,175,56,106,107,235,125,228,246,228,25,216,183,46,63,99,230,158,51,249,97,219,141,3,106,78,59,18,0,164,133,186,198,138,119,70,70,5,91,99,118,59,96,75,42,7,154,192,48,55,69,29,67,151,245,100,191,168,88,129,152,76,146,45,100,7,107,184,249,39,191,67,249,130,18,11,45,124,215,79,163,118,157,60,211,49,223,118,80,50,4,127,56,132,47,6,134,130,25,227,68,73,189,38,220,120,5,132,169,135,12,1,180,215,231,149,196,54,196,185,21,180,116,167,9,215,9,148,255,160,185,168,1,103,52,252,228,227,76,72,236,126,247,217,118,222,42,146,127,176,58,141,123,235,155,159,239,132,7,66,228,7,194,25,151,148,64,1,139,200,83,75,135,31,90,83,84,254,198,22,176,11,137,245,25,149,99,75,210,182,234,92,189,6,110,148,37,136,125,232,35,104,185,38,84,128,4,92,17,150,158,169,255,153,174,68,84,11,58,101,105,99,28,25,177,203,92,60,196,96,0,191,186,219,148,121,105,31,115,114,216,60,53,190,134,77,109,38,58,248,208,135,25,147,37,51,251,29,44,148,219,159,181,245,102,231,190,22,9,66,163,68,60,112,36,116,182,186,154,5,236,56,219,143,3,66,67,233,194,151,212,194,251,148,152,138,200,182,190,126,116,206,200,19,4,46,39,127,149,183,154,234,186,83,246,121,108,62,139,13,111,91,237,200,187,142,255,107,219,189,253,103,145,101,194,223,14,235,172,173,251,208,252,142,119,141,91,198,137,242,143,65,13,194,144,15,199,22,137,153,173,133,124,108,90,145,54,158,203,163,38,60,166,81,246,86,173,50,74,233,87,10,226,65,155,215,143,117,51,181,37,221,53,66,204,221,127,95,206,179,214,85,35,43,213,219,245,67,39,243,217,65,63,180,55,219,220,198,14,192,227,111,167,75,100,85,150,215,192,99,244,17,47,211,187,92,73,109,135,151,126,1,76,38,166,241,218,57,235,159,186,109,34,18,209,112,14,233,40,13,12,134,170,255,90,231,100,223,64,126,60,72,186,57,189,217,191,100,199,79,232,248,75,177,106,246,242,123,221,180,53,42,89,91,112,181,150,108,133,118,43,251,32,92,215,195,118,134,2,180,39,215,150,95,215,153,107,25,171,37,69,166,110,37,39,191,177,165,100,6,45,217,109,89,36,57,31,130,82,220,169,135,214,54,16,254,14,68,75,234,43,80,144,107,47,16,2,221,131,221,43,221,45,58,35,104,101,155,111,24,67,109,164,196,123,217,26,162,157,76,4,248,116,76,100,193,167,108,119,193,147,158,223,49,240,39,83,72,236,188,124,37,227,166,215,88,188,231,187,25,210,143,223,198,167,125,230,131,5,173,44,204,124,186,250,31,216,232,208,10,66,77,169,3,154,154,227,83,26,137,224,247,190,154,197,61,214,173,95,62,251,181,191,212,198,194,77,27,242,183,62,214,88,227,193,180,208,52,32,161,162,57,107,216,74,2,95,86,167,190,101,102,150,214,45,112,232,4,238,239,17,151,142,154,142,105,253,84,121,220,213,237,0,166,95,191,70,38,169,23,18,31,65,211,14,243,69,165,65,0,9,233,45,93,194,188,7,38,253,38,165,54,4,175,42,176,3,35,162,175,104,238,112,1,243,251,217,21,209,230,86,184,31,185,206,145,172,48,0,110,44,60,161,119,151,199,134,216,230,124,8,167,12,241,16,23,158,251,199,32,4,82,5,50,195,182,99,71,86,70,238,234,86,110,235,23,31,60,144,59,128,191,179,119,107,168,61,17,64,243,220,1,83,29,235,214,195,184,184,244,82,149,246,234,189,38,203,16,53,229,49,246,244,170,185,128,236,231,89,63,171,77,139,111,74,100,80,188,156,211,221,217,201,53,24,83,76,153,79,149,126,178,187,181,34,201,139,241,248,71,90,27,169,62,119,54,191,206,36,10,200,209,120,206,116,105,18,64,63,217,112,244,203,28,70,54,185,208,169,108,117,53,209,26,255,183,131,26,97,200,41,176,221,210,12,49,58,52,102,249,156,72,96,75,224,191,108,32,78,149,144,87,229,47,23,240,96,91,40,224,199,90,216,80,171,235,181,14,131,252,224,222,11,52,148,120,163,244,163,115,180,53,30,41,231,126,251,88,92,50,251,6,156,66,76,113,97,88,125,108,220,133,193,229,217,131,30,140,254,241,221,153,23,189,151,35,242,23,96,139,255,85,128,252,194,51,81,241,183,191,142,8,115,252,193,14,179,223,68,134,68,62,7,77,42,146,182,204,194,213,93,122,99,73,232,198,51,70,111,16,12,235,146,172,34,0,112,126,46,232,88,96,142,239,200,134,140,11,59,31,89,93,215,6,135,132,172,125,32,195,197,13,82,218,30,158,105,95,68,56,171,32,236,119,134,243,222,177,183,183,98,65,63,142,156,48,186,122,116,24,77,221,33,227,101,148,148,152,171,27,89,235,147,159,3,23,18,151,231,175,250,226,248,207,62,149,140,179,243,69,71,233,152,110,241,18,200,14,144,71,131,78,216,169,129,135,14,52,44,225,7,116,52,76,112,181,196,87,216,102,138,204,91,161,193,1,128,60,147,68,200,28,215,112,75,74,57,21,241,230,108,74,204,71,166,49,48,72,251,229,88,143,68,57,138,208,163,175,225,74,253,248,160,228,192,56,19,59,197,151,232,116,20,81,161,224,161,248,181,53,16,207,243,75,116,72,47,126,166,239,244,157,169,3,153,216,245,223,40,166,34,245,118,202,90,192,193,160,14,136,67,29,78,47,99,227,10,53,173,230,199,50,232,227,16,29,151,152,2,138,33,115,253,245,128,245,119,200,187,84,177,81,221,236,66,84,126,107,67,5,207,9,231,98,240,252,162,190,187,18,145,120,216,35,187,58,151,16,32,99,221,142,64,71,5,48,96,74,70,17,38,193,245,244,15,30,182,6,218,88,148,210,180,255,215,224,46,140,184,73,189,168,31,141,218,125,107,130,17,225,53,77,99,87,186,217,132,195,174,192,203,44,46,175,35,159,171,156,162,143,5,238,77,247,188,123,155,40,207,144,247,241,0,129,150,38,204,0,108,1,10,160,88,239,253,127,165,50,70,105,135,204,10,168,77,191,208,206,8,30,209,64,138,68,49,64,135,63,17,248,105,79,132,92,41,126,84,223,43,149,79,250,225,73,24,90,74,190,39,191,67,95,122,215,109,53,115,222,18,33,250,42,176,89,186,145,131,105,52,156,127,247,206,49,102,31,81,64,30,239,97,236,104,21,195,156,18,249,184,184,139,23,61,198,232,73,100,242,64,39,204,175,138,202,126,55,206,195,5,75,50,222,24,150,78,226,209,72,99,188,198,155,40,75,86,39,138,204,162,12,243,205,189,99,230,89,97,81,18,186,45,156,140,118,42,20,120,242,179,47,255,107,29,229,250,86,61,31,250,37,133,34,148,108,197,81,75,149,109,190,32,238,129,200,254,80,131,34,46,193,97,120,181,189,213,235,25,184,77,244,88,187,57,227,129,85,78,91,57,200,120,6,114,138,185,104,117,191,191,187,175,159,87,154,47,26,226,76,73,233,127,179,30,234,100,155,43,28,38,61,76,251,188,53,185,175,176,191,19,77,75,32,231,241,85,33,60,93,43,158,53,172,156,111,35,36,231,8,163,217,32,137,23,125,172,185,104,79,88,156,65,163,183,74,142,180,130,29,178,227,181,7,58,86,150,104,21,223,74,56,43,224,161,180,250,101,71,63,188,106,207,217,141,136,36,169,168,228,161,169,220,51,82,150,3,68,12,40,249,73,120,189,80,123,144,122,77,163,246,192,178,59,127,203,108,176,134,32,115,56,2,191,142,152,121,5,193,37,215,160,54,48,62,48,33,48,9,6,5,43,14,3,2,26,5,0,4,20,101,18,229,213,110,67,2,63,116,36,195,44,228,99,152,29,107,45,215,107,4,20,6,138,112,195,241,26,61,49,217,25,25,106,130,210,125,240,79,97,16,83,2,3,1,134,160]},"passphrase":""}
[07:48:44:215] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["info","plugins-system","standard"],"pid":686547,"message":"Setting up [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySolution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["warning","plugins","encryptedSavedObjects"],"pid":686547,"message":"Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["info","plugins","taskManager"],"pid":686547,"message":"TaskManager is identified by the Kibana UUID: 398ad54c-b9fe-4885-ba6f-a89c515a844e"}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["info","plugins","readonlyrestkbn"],"pid":686547,"message":"Setting up ReadonlyREST plugin - build info: {\"versionString\":\"universal-1.60.0_es7.15.1\",\"kibanaVersion\":\"7.15.1\",\"rorVersion\":\"1.60.0\",\"isProduction\":true,\"isBuildExpired\":false}"}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["warning","plugins","reporting","config"],"pid":686547,"message":"Chromium sandbox provides an additional layer of protection, but is not supported for Linux Red Hat Linux 9.2 OS. Automatically setting 'xpack.reporting.capture.browser.chromium.disableSandbox: true'."}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["warning","plugins","actions"],"pid":686547,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["warning","plugins","alerting"],"pid":686547,"message":"APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command."}
{"type":"log","@timestamp":"2024-10-23T07:48:44+00:00","tags":["info","plugins","ruleRegistry"],"pid":686547,"message":"Write is disabled; not installing common resources shared between all indices"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","plugins","ruleRegistry"],"pid":686547,"message":"Write is disabled; not installing resources for index .alerts-observability.logs.alerts"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","plugins","ruleRegistry"],"pid":686547,"message":"Write is disabled; not installing resources for index .alerts-observability.metrics.alerts"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","plugins","ruleRegistry"],"pid":686547,"message":"Write is disabled; not installing resources for index .alerts-observability.apm.alerts"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","savedobjects-service"],"pid":686547,"message":"Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..."}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","savedobjects-service"],"pid":686547,"message":"Starting saved objects migrations"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["info","plugins-system","standard"],"pid":686547,"message":"Starting [106] plugins: [translations,licensing,globalSearch,globalSearchProviders,banners,licenseApiGuard,encryptedSavedObjects,code,usageCollection,xpackLegacy,taskManager,telemetryCollectionManager,telemetryCollectionXpack,kibanaUsageCollection,securityOss,share,screenshotMode,newsfeed,mapsEms,mapsLegacy,legacyExport,kibanaLegacy,embeddable,uiActionsEnhanced,fieldFormats,expressions,charts,esUiShared,bfetch,data,fileUpload,savedObjects,visualizations,visTypeXy,visTypeVislib,visTypeTimelion,features,visTypeTagcloud,visTypeTable,visTypePie,visTypeMetric,visTypeMarkdown,tileMap,regionMap,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,timelion,readonlyrestkbn,indexPatternFieldEditor,home,searchprofiler,painlessLab,grokdebugger,cloud,fleet,visTypeVega,management,watcher,transform,snapshotRestore,savedObjectsTagging,logstash,licenseManagement,ingestPipelines,indexManagement,remoteClusters,crossClusterReplication,indexLifecycleManagement,dataEnhanced,indexPatternManagement,advancedSettings,discover,discoverEnhanced,dashboard,maps,lens,dataVisualizer,dashboardMode,dashboardEnhanced,visualize,visTypeTimeseries,rollup,savedObjectsManagement,spaces,reporting,lists,eventLog,actions,alerting,triggersActionsUi,stackAlerts,ruleRegistry,cases,timelines,securitySolution,observability,infra,upgradeAssistant,enterpriseSearch,console,apmOss,apm]"}
{"type":"log","@timestamp":"2024-10-23T07:48:45+00:00","tags":["warning","plugins","fleet"],"pid":686547,"message":"Fleet requires the security plugin to be enabled."}
{"type":"log","@timestamp":"2024-10-23T07:48:57+00:00","tags":["info","http","server","Kibana"],"pid":686547,"message":"http server running at https://0.0.0.0:5601"}
{"type":"log","@timestamp":"2024-10-23T07:48:57+00:00","tags":["warning","environment"],"pid":686547,"message":"Detected an unhandled Promise rejection.\nConnectionError: read ECONNRESET - Local: unknown:unknown, Remote: unknown:unknown"}
[07:48:57:533] [error][plugins][ReadonlyREST][SessionCleanupTaskManager] Task manager scheduling error, ConnectionError: read ECONNRESET - Local: unknown:unknown, Remote: unknown:unknown
[07:48:57:632] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
{"type":"log","@timestamp":"2024-10-23T07:48:57+00:00","tags":["info","plugins","securitySolution"],"pid":686547,"message":"Dependent plugin setup complete - Starting ManifestTask"}
[07:48:57:796] [trace][plugins][ReadonlyREST][preElasticsearchProxy] No auth headers found: attaching tech user creds for "search in indexes" request: POST /.kibana/_search
{"type":"log","@timestamp":"2024-10-23T07:48:58+00:00","tags":["info","status"],"pid":686547,"message":"Kibana is now degraded"}
{"type":"response","@timestamp":"2024-10-23T07:48:57+00:00","tags":["api"],"pid":686547,"method":"get","statusCode":200,"req":{"url":"/api/status","method":"get","headers":{"host":"127.0.0.1:5601","user-agent":"python-requests/2.25.1","accept-encoding":"gzip, deflate","accept":"*/*","connection":"close","x-ror-pkp-kibana-token":"44a0iuxps11ge33ybuyhu6c9v4mdr6","content-length":"0","accept-charset":"utf-8"},"remoteAddress":"127.0.0.1","userAgent":"python-requests/2.25.1"},"res":{"statusCode":200,"responseTime":854,"contentLength":23251},"message":"GET /api/status 200 854ms - 22.7KB"}
{"type":"log","@timestamp":"2024-10-23T07:48:58+00:00","tags":["info","plugins","reporting"],"pid":686547,"message":"Browser executable: /usr/share/kibana/x-pack/plugins/reporting/chromium/headless_shell-linux_x64/headless_shell"}
{"type":"log","@timestamp":"2024-10-23T07:48:58+00:00","tags":["warning","plugins","reporting"],"pid":686547,"message":"Enabling the Chromium sandbox provides an additional layer of protection."}
[07:48:59:643] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
{"type":"response","@timestamp":"2024-10-23T07:49:00+00:00","tags":["api"],"pid":686547,"method":"get","statusCode":200,"req":{"url":"/api/status","method":"get","headers":{"host":"127.0.0.1:5601","user-agent":"python-requests/2.25.1","accept-encoding":"gzip, deflate","accept":"*/*","connection":"close","x-ror-pkp-kibana-token":"44a0iuxps11ge33ybuyhu6c9v4mdr6","content-length":"0","accept-charset":"utf-8"},"remoteAddress":"127.0.0.1","userAgent":"python-requests/2.25.1"},"res":{"statusCode":200,"responseTime":12,"contentLength":23251},"message":"GET /api/status 200 12ms - 22.7KB"}
[07:49:01:655] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:03:683] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
{"type":"log","@timestamp":"2024-10-23T07:49:04+00:00","tags":["info","status"],"pid":686547,"message":"Kibana is now available (was degraded)"}
[07:49:05:732] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:07:758] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:09:774] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
{"type":"response","@timestamp":"2024-10-23T07:49:10+00:00","tags":["api"],"pid":686547,"method":"get","statusCode":200,"req":{"url":"/api/status","method":"get","headers":{"host":"127.0.0.1:5601","user-agent":"python-requests/2.25.1","accept-encoding":"gzip, deflate","accept":"*/*","connection":"close","x-ror-pkp-kibana-token":"44a0iuxps11ge33ybuyhu6c9v4mdr6","content-length":"0","accept-charset":"utf-8"},"remoteAddress":"127.0.0.1","userAgent":"python-requests/2.25.1"},"res":{"statusCode":200,"responseTime":8,"contentLength":22495},"message":"GET /api/status 200 8ms - 22.0KB"}
[07:49:11:786] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:13:802] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:15:820] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:17:838] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
[07:49:19:848] [debug][plugins][ReadonlyREST][esIndexClient] Fetched all sessions from index, found: 5
12

After a second reboot of Kibana, it became available.
The logs are identical to a successful launch.
Which is strange. I’ll keep an eye on it some more.

13

@driveirk please try to test the new ROR version (1.61.0)

1 Like