# Dont see logs in OpenSearch Dashboard on Discover

**URL:** <https://forum.opensearch.org/t/dont-see-logs-in-opensearch-dashboard-on-discover/21629>\
**Category:** OpenSearch Dashboards\
**Created:** [September 25, 2024, 12:27pm UTC](https://forum.opensearch.org/t/dont-see-logs-in-opensearch-dashboard-on-discover/21629 "2024-09-25T12:27:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![roger](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@roger](https://forum.opensearch.org/u/roger)\
**Post date:** [September 25, 2024, 12:27pm UTC](https://forum.opensearch.org/t/dont-see-logs-in-opensearch-dashboard-on-discover/21629/1 "2024-09-25T12:27:08Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):  
OpenSearch Helm Chart 2.25.0 appVersion 2.17.0  
OpenSearch Dashboards Helm Chart 2.23.0 appVersion 2.17.0

**Describe the issue** :  
when i select in Opensearch Dasboards Discover an index  
i can see everything but no logs?  
they are complete red?

**Configuration** :

RKE2 with Rancher UI Kubernetes version 1.27.14 Longhorn for storage

**Relevant Logs or Screenshots** :

 ![opensearch_problem](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/f/f0036716a6661d6605e961084f78f572deb614fd.png)

can anyone tell me what the reason for this might be?

---

<div class="post-metadata">

**Author:** ![roger](https://avatars.discourse-cdn.com/v4/letter/r/c0e974/32.png) [@roger](https://forum.opensearch.org/u/roger)\
**Post date:** [September 25, 2024, 1:55pm UTC](https://forum.opensearch.org/t/dont-see-logs-in-opensearch-dashboard-on-discover/21629/2 "2024-09-25T13:55:09Z")

</div>

ok it looks like this happens only on chrome Browser:

The Content Security Policy (CSP) prevents cross-site scripting attacks by blocking inline execution of scripts and style sheets.

To solve this, move all inline scripts (e.g. `onclick=[JS code]`) and styles into external files.

⚠ Allowing inline execution comes at the risk of script injection via injection of HTML script elements. If you absolutely must, you can allow inline script and styles by:

- adding `unsafe-inline` as a source to the CSP header
- adding the hash or nonce of the inline script to your CSP header.

on Firefox and Microsoft Edge all logs are shown