# Can't activate reporting functions

**URL:** <https://forum.opensearch.org/t/cant-activate-reporting-functions/27872>\
**Category:** Reporting Plugin\
**Created:** [February 24, 2026, 5:01pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872 "2026-02-24T17:01:30Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![djeannerod](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@djeannerod](https://forum.opensearch.org/u/djeannerod)\
**Post date:** [February 24, 2026, 5:01pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/1 "2026-02-24T17:01:30Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser): 3.5

**Describe the issue** : I just can’t see the reporting menus in opensearch dashboard

I have a working opensearch cluster, version 3.5, with the standard docker images, and created an admin user with all roles (all cluster roles and indices permissions)

The reporting plugin is installed:

```auto
$ ./opensearch-dashboards-plugin list
alertingDashboards@3.5.0.0
anomalyDetectionDashboards@3.5.0.0
assistantDashboards@3.5.0.0
customImportMapDashboards@3.5.0.0
flowFrameworkDashboards@3.5.0.0
indexManagementDashboards@3.5.0.0
investigationDashboards@3.5.0.0
mlCommonsDashboards@3.5.0.0
notificationsDashboards@3.5.0.0
observabilityDashboards@3.5.0.0
queryInsightsDashboards@3.5.0.0
queryWorkbenchDashboards@3.5.0.0
reportsDashboards@3.5.0.0
searchRelevanceDashboards@3.5.0.0
securityAnalyticsDashboards@3.5.0.0
securityDashboards@3.5.0.0

```

I don’t see the reporting menus in Dashboards

I can of course provide more information on my configuration.

Do i miss something obvious ?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [March 2, 2026, 1:54pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/2 "2026-03-02T13:54:22Z")

</div>

@djeannerod Did you use demo admin user or created a custom one? Does the admin user have write access to the tenant?

If the admin user is custom, please share the role and role mapping definitions.

---

<div class="post-metadata">

**Author:** ![djeannerod](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@djeannerod](https://forum.opensearch.org/u/djeannerod)\
**Post date:** [March 2, 2026, 3:20pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/3 "2026-03-02T15:20:00Z")

</div>

Thanks a lot for your answer !

Yes, the admin user was created with a yaml file and securityadmin.

It should have all rights in the cluster, for all indices and all tenants.

I notice that I have the permissions “kibana\_all\_write” on the tenants: could it be the cause of my problem, not seeing the reporting menus ?

Here is an extract of my conf:

admin user: mapped to the backend role “admin”

```auto
{
  "admin": {
    "hash": "",
    "reserved": true,
    "hidden": false,
    "backend_roles": [
      "admin"
    ],
    "attributes": {},
    "description": "Demo admin user",
    "opendistro_security_roles": [],
    "static": false
  }
}

```

all\_access role:

```auto
  "all_access": {
    "reserved": true,
    "hidden": false,
    "description": "Allow full access to all indices and all cluster APIs",
    "cluster_permissions": [
      "*"
    ],
    "index_permissions": [
      {
        "index_patterns": [
          "*"
        ],
        "fls": [],
        "masked_fields": [],
        "allowed_actions": [
          "*"
        ]
      }
    ],
    "tenant_permissions": [
      {
        "tenant_patterns": [
          "*"
        ],
        "allowed_actions": [
          "kibana_all_write"
        ]
      }
    ],
    "static": true
  },

```

Role mapping:

```auto
{
  "all_access": {
    "hosts": [],
    "users": [],
    "reserved": false,
    "hidden": false,
    "backend_roles": [
      "admin"
    ],
    "and_backend_roles": [],
    "description": "Maps admin to all_access"
  }
}

```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [March 5, 2026, 12:31pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/4 "2026-03-05T12:31:14Z")

</div>

@djeannerod

user, role and role mapping are correct

I have the same settings, and I can use Reporting in Dashboards

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/4/4077d8b3d4b6f0a1bdce33e4e5a60315652065e6.png)

Could you share the contents of your opensearch.yml and opensearch\_dashboards.yml files?

Please also run the following command and share the output.

```auto
curl --insecure -u admin:<password> https://<OpenSearch_node_IP_or_FQDN>:9200/_plugins/_security/authinfo?pretty

```

---

<div class="post-metadata">

**Author:** ![djeannerod](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@djeannerod](https://forum.opensearch.org/u/djeannerod)\
**Post date:** [March 11, 2026, 9:38am UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/5 "2026-03-11T09:38:23Z")

</div>

> [@pablo](#):
>
> pensearch.yml and opensearch\_dashboards.yml files?

Yes, of course, thanks again for your help !

opensearch.yml:

```auto
cluster.name: opensearch-cluster
#logger.org.opensearch.security: debug
#logger.securityjwt.level: debug

# Bind to all interfaces because we don't know what IP address Docker will assign to us.
network.host: 0.0.0.0

# Setting network.host to a non-loopback address enables the annoying bootstrap checks. "Single-node" mode disables them again.
# Implicitly done if ".singleNode" is set to "true".
# discovery.type: single-node

# Start OpenSearch Security Demo Configuration
# WARNING: revise all the lines below before you go into production
plugins:
  security:
    ssl:
      transport:
        enabled: true
        pemcert_filepath: certs/tls.crt
        pemkey_filepath: certs/tls.key
        pemtrustedcas_filepath: certs/ca.crt
        enforce_hostname_verification: false
      http:
        enabled: true
        pemcert_filepath: certs/tls.crt
        pemkey_filepath: certs/tls.key
        pemtrustedcas_filepath: certs/ca.crt
    restapi:
      roles_enabled: ["all_access", "security_rest_api_access"]
    nodes_dn:
      - "CN=opensearch-cluster-master"
      - "CN=opensearch-cluster-master.os-sso"
      - "CN=opensearch-cluster-master.os-sso.svc"
      - "CN=opensearch-cluster-master.os-sso.svc.cluster.local"
    allow_default_init_securityindex: true
    authcz:
      admin_dn:
        - CN=Dom,OU=ITOps,O=Inasoft,L=Lyon,ST=Rhone-Alpes,C=FR
    system_indices:
      enabled: true
      indices:
        [
          ".opendistro-alerting-config",
          ".opendistro-alerting-alert*",
          ".opendistro-anomaly-results*",
          ".opendistro-anomaly-detector*",
          ".opendistro-anomaly-checkpoints",
          ".opendistro-anomaly-detection-state",
          ".opendistro-reports-*",
          ".opendistro-notifications-*",
          ".opendistro-notebooks",
          ".opendistro-asynchronous-search-response*",
        ]

```

opensearch\_dashboards.yml

```auto
server:
  name: dashboards
  host: "0.0.0.0"
opensearch.hosts: ["https://opensearch-cluster-master.os-sso.svc.cluster.local:9200"]
server.ssl.enabled: true
# opensearch.ssl.verificationMode: full
opensearch.ssl.certificateAuthorities: ["/usr/share/opensearch-dashboards/config/certs/ca.crt"]  
server.ssl.key: /usr/share/opensearch-dashboards/config/certs/tls.key
server.ssl.certificate: /usr/share/opensearch-dashboards/config/certs/tls.crt
opensearch.username: "admin"
opensearch.password: "XXXXXXXXX" 
workspace.enabled: false
uiSettings:
  overrides:
    "home:useNewHomePage": true
application_config.enabled: false
datasetManagement.enabled: true
data_source.enabled: false
explore.enabled: true
#savedObjects.permission.enabled: true
# opensearch_reporting.enabled: true

opensearch_security.auth.type: ["basicauth","openid"]
opensearch_security.openid.connect_url: "https://<Our Keycloak DNS name>/realms/Inasoft/.well-known/openid-configuration"
opensearch_security.openid.client_id: "XXXXXXXXXXXXXXXXXX"
opensearch_security.openid.client_secret: "XXXXXXXXXXXXXXXXXXX"
opensearch.requestHeadersWhitelist: [authorization, securitytenant, osd-xsrf]
# opensearch.requestHeadersAllowlist: [authorization, securitytenant]
opensearch.ssl.verificationMode: none
opensearch_security.openid.scope: "openid profile email address phone"
opensearch_security.openid.base_redirect_url: "https://<opensearch dashboards DNS name>"
opensearch_security.auth.multiple_auth_enabled: true
# Multitenancy:
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: false
opensearch_security.multitenancy.tenants.enable_private: true
opensearch_security.multitenancy.tenants.preferred: ["Private"]
opensearch_security.multitenancy.enable_filter: false

```

```auto
$ curl --insecure -u admin:admin https://localhost:9200/_plugins/_security/authinfo?pretty
{
“user” : “User [name=admin, backend_roles=[admin], requestedTenant=null]”,
“user_name” : “admin”,
“user_requested_tenant” : null,
“remote_address” : “[::1]:60494”,
“backend_roles” : [
“admin”
],
“custom_attribute_names” : 
,
“roles” : [
“own_index”,
“all_access”
],
“tenants” : {
“global_tenant” : true,
“Test” : true,
“admin_tenant” : true,
“admin” : true
},
“principal” : null,
“peer_certificates” : “0”,
“sso_logout_url” : null
}

```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [March 11, 2026, 7:51pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/6 "2026-03-11T19:51:39Z")

</div>

@djeannerod I wasn’t aware that you’re using OpenSearch Dashboards Workspaces.  
As per the comment in this GitHub issue, Reporting has been disabled in the Workspaces.

> <https://github.com/opensearch-project/dashboards-reporting/issues/546#issuecomment-3407797728>
>
> \*\*What is the bug?\*\*
> 
> Unable to create a Report Definition, when using Workspace…. journalctl shows this error:
> 
> \`2025-03-11T04:11:12.091012+00:00 dashboard1 opensearch-dashboards\[8806\]: {"type":"log","@timestamp":"2025-03-11T04:11:12Z","tags":\["error","plugins","reportsDashboards"\],"pid":8806,"message":"Failed input validation for create report definition ValidationError: \[report\_params.core\_params.base\_url\]: invalid relative url: /w/KWw3YS/app/discover#/view/50fe70c0-d86a-11ef-bdb9-6739248260c8"}\`
> 
> \*\*How can one reproduce the bug?\*\*
> Steps to reproduce the behavior:
> 1. Enter a workspace.
> 2. Click on Reporting
> 3. Click on Create
> 4. Enter details. I think the details don't matter, but I've been using a SavedSearch to CSV.
> 5. Generic Error shows up in the front end, and the backend shows the "Failed input validation" error shown above.
> 
> \*\*What is the expected behavior?\*\*
> 
> Report should be created
> 
> \*\*What is your host/environment?\*\*
> - OS: Ubuntu 24.04.1
> - Version: 2.19.1
> - Plugins: dashboards
> 
> \*\*Do you have any screenshots?\*\*
> 
> 
> \*\*Do you have any additional context?\*\*
> 
> I have fixed it locally, by modifying this line, to accommodate \`/w/KWw3YS\`. I'm not sure if this is the best way of fixing it:
> 
> \`// export const regexRelativeUrl = /^\\/(\_plugin\\/kibana\\/|\_dashboards\\/)?app\\/(dashboards|visualize|discover|discoverLegacy|data-explorer\\/discover\\/?|observability-dashboards|observability-notebooks|notebooks-dashboards\\?view=output\_only(&security\_tenant=.+)?)(\\?security\_tenant=.+)?#\\/(notebooks\\/|view\\/|edit\\/)?\[^\\/\]+$/;
> \`
> 
> \`export const regexRelativeUrl = /^\\/(\_plugin\\/kibana\\/|\_dashboards\\/|w\\/\\w+\\/)?app\\/(dashboards|visualize|discover|discoverLegacy|data-explorer\\/discover\\/?|observability-dashboards|observability-notebooks|notebooks-dashboards\\?view=output\_only(&security\_tenant=.+)?)(\\?security\_tenant=.+)?#\\/(notebooks\\/|view\\/|edit\\/)?\[^\\/\]+$/;
> \`

---

<div class="post-metadata">

**Author:** ![djeannerod](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@djeannerod](https://forum.opensearch.org/u/djeannerod)\
**Post date:** [March 12, 2026, 8:18am UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/7 "2026-03-12T08:18:16Z")

</div>

Hi @pablo I’m not using Workspaces, only multitenant withtout workspaces.

I have “workspace.enabled: false” in my conf

Is reporting supported with multitenant without workspaces ?

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [March 12, 2026, 12:03pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/8 "2026-03-12T12:03:40Z")

</div>

@djeannerod With these settings, you’re enabling a new view with general workspace.

> [@djeannerod](#):
>
> ```auto
> workspace.enabled: false
> uiSettings:
> overrides:
> "home:useNewHomePage": true
> application_config.enabled: false
> datasetManagement.enabled: true
> data_source.enabled: false
> explore.enabled: true
> 
> ```

You need to comment this section out to get classic view and enable Reporting in Dashboards.

---

<div class="post-metadata">

**Author:** ![djeannerod](https://avatars.discourse-cdn.com/v4/letter/d/e9bcb4/32.png) [@djeannerod](https://forum.opensearch.org/u/djeannerod)\
**Post date:** [March 12, 2026, 6:38pm UTC](https://forum.opensearch.org/t/cant-activate-reporting-functions/27872/9 "2026-03-12T18:38:36Z")

</div>

Thanks a lot for your help, @pablo , it works on classic view !
