Elasticsearch - Missing _opendistro index

Open Source Elasticsearch and Kibana
1

Hi all,

I am encountering some issues with my Kibana.

I cannot log into Kibana and I get some errors in the logs:

févr. 05 14:53:00 debian kibana[12760]: {"type":"log","@timestamp":"2022-02-05T13:53:00Z","tags":["error","plugins","opendistroSecurityKibana"],"pid":12760,"message":"Failed authentication: Error: [index_not_found_exception] no such index [_opendistro], with { resource.type=\"index_expression\" & resource.id=\"_opendistro\" & index_uuid=\"_na_\" & index=\"_opendistro\" }"}

I tried to reach my _opendistro index on elasticsearch with no success.

curl -XGET http://localhost:9200/_opendistro/_ism/explain/logs-000001?pretty
{
  "error" : {
    "root_cause" : [
      {
        "type" : "index_not_found_exception",
        "reason" : "no such index [logs-000001]",
        "resource.type" : "index_or_alias",
        "resource.id" : "logs-000001",
        "index_uuid" : "_na_",
        "index" : "logs-000001"
      }
    ],
    "type" : "index_not_found_exception",
    "reason" : "no such index [logs-000001]",
    "resource.type" : "index_or_alias",
    "resource.id" : "logs-000001",
    "index_uuid" : "_na_",
    "index" : "logs-000001"
  },
  "status" : 404
}

Does anyone knows how to solve this issue ?

2

in logs it says Failed authentication.
few clarifications

  1. Which version of OD or OS you are using ?
  2. Did you enable security sometime and disabled it later?

Also , To use the ISM plugin, your user role needs to be mapped to the all_access role that gives you full access to the cluster. To learn more, see Users and roles.