Api_key “Unexpected exception indices:data/write/index”

Security
1

HI All,

New user here. I grabbed the docker-compose file (Docker - Open Distro Documentation) and started up a cluster. Now I am trying to create an api key so I can try winlogbeat instead of using username/password.

When I login as admin and run
POST /_security/api_key
{
“name”: “filebeat_host001”,
“role_descriptors”: {
“filebeat_writer”: {
“cluster”: [“monitor”, “read_ilm”],
“index”: [
{
“names”: [“filebeat-*”],
“privileges”: [“view_index_metadata”, “create_doc”]}]}}}

or even if i try it via curl securely
curl --insecure -XPOST -u admin:admin --header ‘Content-Type: application/json’ https://192.168.1.45:9200/_security/api_key -d ‘{
“name”: “filebeat_host001”
}’

I get
{
“error” : {
“root_cause” : [
{
“type” : “security_exception”,
“reason” : “Unexpected exception indices:data/write/index”
}
],
“type” : “security_exception”,
“reason” : “Unexpected exception indices:data/write/index”
},
“status” : 500
}

That looks a bit strange. I also don’t see a place to view or create api keys in kibana?
I don’t see any mention of api keys in the documentation. Any hint to what I am missing here?

Thank you

2

POST _security/api_key is part of X-Pack.
See the reference to X-Pack here:

And X-Pack is not part of OpenDistro:
https://stackoverflow.com/questions/53201190/is-security-free-in-elastic-search-stack-features

3

Thank you very much. I had a feeling but I wasn’t sure how to validate it. I get it now.

Thank you for taking the time. Much appreciated.