Not able to login with default password in OpenSearch Dashboard2.3

ashokfredrick · October 25, 2022, 4:56am

Hi,

I have installed rpm - opensearch and opensearch dashboard in single node - RHEL VM. But not able to login with default username & password.I’m getting the below error message while login to the dashboard.

Error Message : Invalid user name or password / Error Code :404 : Unauthorized / authentication required.

FYI, I’m not using any SSL,certs, pems etc…just trying with basic default authentication.

Version : Opensearch 2.3 / OSD 2.3

pablo · October 25, 2022, 4:23pm

@ashokfredrick Did you follow these procedures during the OpenSearch and OpenSearch Dashboards installation?

ashokfredrick · October 27, 2022, 12:43pm

Failed authentication: Error: no handler found for uri [/_plugins/_security/authinfo]

encountering the above error while trying to login to dashboard with default creds admin:admin

pablo · October 27, 2022, 5:36pm

@ashokfredrick Try the below command against your OpenSearch node.

curl --insecure -u admin:admin https://localhost:9200/_plugins/_security/authinfo?pretty

Could you also share your opensearch.yml and opensearch_dashboards.yml files?

ashokfredrick · October 28, 2022, 2:05am

Hi @pablo ,

Tried with your command, please find the details below.

curl --insecure -u admin:xxxx https://localhost:9200/_plugins/_security/authinfo?pretty
curl: (35) error:1408F10B:SSL routines:ssl3_get_record:wrong version number

curl --insecure -u admin:xxxx http://localhost:9200/_plugins/_security/authinfo?pretty
{
“error” : “no handler found for uri [/_plugins/_security/authinfo] and method [GET]”
}

Kindly help.

pablo · October 28, 2022, 11:50am

@ashokfredrick Could you share your opensearch.yml and opensearch_dashboards.yml files?

Do you get any response to the below command?

curl -u admin:xxxx http://localhost:9200

Please share the output of the below command.

/usr/share/opensearch/bin/opensearch-plugin list

Also, please respond to my previous question. Did you follow the RPM installation described in the OpenSearch documentation step by step?

ashokfredrick · October 28, 2022, 12:41pm

Hi @pablo ,

Good Day!

Please find the details below and kindly help.

Did you follow the RPM installation described in the OpenSearch documentation step by step?
Yes, i have followed the same

opensearch.yml

======================== OpenSearch Configuration =========================

NOTE: OpenSearch comes with reasonable defaults for most settings.

Before you set out to tweak and tune the configuration, make sure you

understand what are you trying to accomplish and the consequences.

The primary way of configuring a node is via this file. This template lists

the most important settings you may want to configure for a production cluster.

Please consult the documentation for further information on configuration options:

https://www.opensearch.org

---------------------------------- Cluster -----------------------------------

Use a descriptive name for your cluster:

#cluster.name: my-application

------------------------------------ Node ------------------------------------

Use a descriptive name for the node:

#node.name: node-1

Add custom attributes to the node:

#node.attr.rack: r1

----------------------------------- Paths ------------------------------------

Path to directory where to store the data (separate multiple locations by comma):

path.data: /var/lib/opensearch

Path to log files:

path.logs: /var/log/opensearch

----------------------------------- Memory -----------------------------------

Lock the memory on startup:

#bootstrap.memory_lock: true

Make sure that the heap size is set to about half the memory available

on the system and that the owner of the process is allowed to use this

limit.

OpenSearch performs poorly when the system is swapping the memory.

---------------------------------- Network -----------------------------------

Set the bind address to a specific IP (IPv4 or IPv6):

network.host: 0.0.0.0

Set a custom port for HTTP:

#http.port: 9200

For more information, consult the network module documentation.

--------------------------------- Discovery ----------------------------------

Pass an initial list of hosts to perform discovery when this node is started:

The default list of hosts is [“127.0.0.1”, “[::1]”]

#discovery.seed_hosts: [“host1”, “host2”]

Bootstrap the cluster using an initial set of cluster-manager-eligible nodes:

#cluster.initial_cluster_manager_nodes: [“node-1”, “node-2”]

For more information, consult the discovery and cluster formation module documentation.

---------------------------------- Gateway -----------------------------------

Block initial recovery after a full cluster restart until N nodes are started:

#gateway.recover_after_nodes: 3

For more information, consult the gateway module documentation.

---------------------------------- Various -----------------------------------

Require explicit names when deleting indices:

#action.destructive_requires_name: true
plugins.security.disabled: true
discovery.type: single-node

plugins.security.ssl.transport.pemcert_filepath: /fs/Opensearch/ssl/server.pem
plugins.security.ssl.transport.pemkey_filepath: /fs/Opensearch/ssl/server.key
plugins.security.ssl.transport.pemtrustedcas_filepath: /fs/Opensearch/ssl/root-ca.pem
plugins.security.ssl.transport.enforce_hostname_verification: false
plugins.security.ssl.http.enabled: true
plugins.security.ssl.http.pemcert_filepath: /fs/Opensearch/ssl/server.pem
plugins.security.ssl.http.pemkey_filepath: /fs/Opensearch/ssl/server.key
plugins.security.ssl.http.pemtrustedcas_filepath: /fs/Opensearch/ssl/root-ca.pem
plugins.security.allow_default_init_securityindex: true
plugins.security.authcz.admin_dn:
#Change it according to your configuration

‘CN=node1.com,OU=XXX,O=XXX,L=Infra,ST=SG,C=SG’
plugins.security.nodes_dn:
#Change it according to your configuration
‘CN=node1.com,OU=xxx,O=xxx,L=Infra,ST=SG,C=SG’
plugins.security.audit.type: internal_opensearch
plugins.security.enable_snapshot_restore_privilege: true
plugins.security.check_snapshot_restore_write_privileges: true
plugins.security.restapi.roles_enabled: [“all_access”, “security_rest_api_access”]

==========================================

opensearch-dashboards.yml

Copyright OpenSearch Contributors

SPDX-License-Identifier: Apache-2.0

Description:

Default configuration for OpenSearch Dashboards

OpenSearch Dashboards is served by a back end server. This setting specifies the port to use.

server.port: 5601

Specifies the address to which the OpenSearch Dashboards server will bind. IP addresses and host names are both valid values.

The default is ‘localhost’, which usually means remote machines will not be able to connect.

To allow connections from remote users, set this parameter to a non-loopback address.

server.host: “0.0.0.0”

Enables you to specify a path to mount OpenSearch Dashboards at if you are running behind a proxy.

Use the `server.rewriteBasePath` setting to tell OpenSearch Dashboards if it should remove the basePath

from requests it receives, and to prevent a deprecation warning at startup.

This setting cannot end in a slash.

server.basePath: “”

Specifies whether OpenSearch Dashboards should rewrite requests that are prefixed with

`server.basePath` or require that they are rewritten by your reverse proxy.

server.rewriteBasePath: false

The maximum payload size in bytes for incoming server requests.

server.maxPayloadBytes: 1048576

The OpenSearch Dashboards server’s name. This is used for display purposes.

server.name: “your-hostname”

The URLs of the OpenSearch instances to use for all your queries.

opensearch.hosts: [“http://localhost:9200”]

OpenSearch Dashboards uses an index in OpenSearch to store saved searches, visualizations and

dashboards. OpenSearch Dashboards creates a new index if the index doesn’t already exist.

opensearchDashboards.index: “.opensearch_dashboards”

The default application to load.

opensearchDashboards.defaultAppId: “home”

Setting for an optimized healthcheck that only uses the local OpenSearch node to do Dashboards healthcheck.

This settings should be used for large clusters or for clusters with ingest heavy nodes.

It allows Dashboards to only healthcheck using the local OpenSearch node rather than fan out requests across all nodes.

It requires the user to create an OpenSearch node attribute with the same name as the value used in the setting

This node attribute should assign all nodes of the same cluster an integer value that increments with each new cluster that is spun up

e.g. in opensearch.yml file you would set the value to a setting using node.attr.cluster_id:

Should only be enabled if there is a corresponding node attribute created in your OpenSearch config that matches the value here

opensearch.optimizedHealthcheckId: “cluster_id”

If your OpenSearch is protected with basic authentication, these settings provide

the username and password that the OpenSearch Dashboards server uses to perform maintenance on the OpenSearch Dashboards

index at startup. Your OpenSearch Dashboards users still need to authenticate with OpenSearch, which

is proxied through the OpenSearch Dashboards server.

opensearch.username: “opensearch_dashboards_system”

opensearch.password: “pass”

Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.

These settings enable SSL for outgoing requests from the OpenSearch Dashboards server to the browser.

server.ssl.enabled: false

server.ssl.certificate: /path/to/your/server.crt

server.ssl.key: /path/to/your/server.key

Optional settings that provide the paths to the PEM-format SSL certificate and key files.

These files are used to verify the identity of OpenSearch Dashboards to OpenSearch and are required when

xpack.security.http.ssl.client_authentication in OpenSearch is set to required.

opensearch.ssl.certificate: /path/to/your/client.crt

opensearch.ssl.key: /path/to/your/client.key

Optional setting that enables you to specify a path to the PEM file for the certificate

authority for your OpenSearch instance.

opensearch.ssl.certificateAuthorities: [ “/path/to/your/CA.pem” ]

To disregard the validity of SSL certificates, change this setting’s value to ‘none’.

opensearch.ssl.verificationMode: full

Time in milliseconds to wait for OpenSearch to respond to pings. Defaults to the value of

the opensearch.requestTimeout setting.

opensearch.pingTimeout: 1500

Time in milliseconds to wait for responses from the back end or OpenSearch. This value

must be a positive integer.

opensearch.requestTimeout: 30000

List of OpenSearch Dashboards client-side headers to send to OpenSearch. To send no client-side

headers, set this value to (an empty list).

opensearch.requestHeadersWhitelist: [ authorization ]

Header names and values that are sent to OpenSearch. Any custom headers cannot be overwritten

by client-side headers, regardless of the opensearch.requestHeadersWhitelist configuration.

opensearch.customHeaders: {}

Time in milliseconds for OpenSearch to wait for responses from shards. Set to 0 to disable.

opensearch.shardTimeout: 30000

Logs queries sent to OpenSearch. Requires logging.verbose set to true.

opensearch.logQueries: false

Specifies the path where OpenSearch Dashboards creates the process ID file.

pid.file: /var/run/opensearchDashboards.pid

Enables you to specify a file where OpenSearch Dashboards stores log output.

logging.dest: stdout

Set the value of this setting to true to suppress all logging output.

logging.silent: false

Set the value of this setting to true to suppress all logging output other than error messages.

logging.quiet: false

Set the value of this setting to true to log all events, including system usage information

and all requests.

logging.verbose: false

Set the interval in milliseconds to sample system and process performance

metrics. Minimum is 100ms. Defaults to 5000.

ops.interval: 5000

Specifies locale to be used for all localizable strings, dates and number formats.

Supported languages are the following: English - en , by default , Chinese - zh-CN .

i18n.locale: “en”

Set the allowlist to check input graphite Url. Allowlist is the default check list.

vis_type_timeline.graphiteAllowedUrls: [‘https://www.hostedgraphite.com/UID/ACCESS_KEY/graphite’]

Set the blocklist to check input graphite Url. Blocklist is an IP list.

Below is an example for reference

vis_type_timeline.graphiteBlockedIPs: [

//Loopback

‘127.0.0.0/8’,

‘::1/128’,

//Link-local Address for IPv6

‘fe80::/10’,

//Private IP address for IPv4

‘10.0.0.0/8’,

‘172.16.0.0/12’,

‘192.168.0.0/16’,

//Unique local address (ULA)

‘fc00::/7’,

//Reserved IP address

‘0.0.0.0/8’,

‘100.64.0.0/10’,

‘192.0.0.0/24’,

‘192.0.2.0/24’,

‘198.18.0.0/15’,

‘192.88.99.0/24’,

‘198.51.100.0/24’,

‘203.0.113.0/24’,

‘224.0.0.0/4’,

‘240.0.0.0/4’,

‘255.255.255.255/32’,

‘::/128’,

‘2001:db8::/32’,

‘ff00::/8’,

]

vis_type_timeline.graphiteBlockedIPs:

opensearchDashboards.branding:

logo:

defaultUrl: “”

darkModeUrl: “”

mark:

defaultUrl: “”

darkModeUrl: “”

loadingLogo:

defaultUrl: “”

darkModeUrl: “”

faviconUrl: “”

applicationTitle: “”

Set the value of this setting to true to capture region blocked warnings and errors

for your map rendering services.

map.showRegionBlockedWarning: false%

opensearch.hosts: [http://localhost:9200]
opensearch.ssl.verificationMode: none
opensearch.username: “admin”
opensearch.password: “admin”
opensearch.requestHeadersWhitelist: [authorization, securitytenant]

server.ssl.enabled: false
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.preferred: [Private, Global]
opensearch_security.readonly_mode.roles: [kibana_read_only]

Use this setting if you are running opensearch-dashboards without https

opensearch_security.cookie.secure: false

=================================
cd /usr/share/opensearch/bin
sh opensearch-plugin list
opensearch-alerting
opensearch-anomaly-detection
opensearch-asynchronous-search
opensearch-cross-cluster-replication
opensearch-geospatial
opensearch-index-management
opensearch-job-scheduler
opensearch-knn
opensearch-ml
opensearch-notifications
opensearch-notifications-core
opensearch-observability
opensearch-performance-analyzer
opensearch-reports-scheduler
opensearch-security
opensearch-sql

curl -u admin:admin http://localhost:9200
{
“name” : “node1.com”,
“cluster_name” : “opensearch”,
“cluster_uuid” : “5a7X1qC9TbOZqne_GfIQVg”,
“version” : {
“distribution” : “opensearch”,
“number” : “2.3.0”,
“build_type” : “rpm”,
“build_hash” : “6f6e84ebc54af31a976f53af36a5c69d474a5140”,
“build_date” : “2022-09-09T00:07:32.109283578Z”,
“build_snapshot” : false,
“lucene_version” : “9.3.0”,
“minimum_wire_compatibility_version” : “7.10.0”,
“minimum_index_compatibility_version” : “7.0.0”
},
“tagline” : “The OpenSearch Project: https://opensearch.org/”
}

===========================================================

pablo · October 28, 2022, 2:23pm

@ashokfredrick You’ve disable security plugin in OpenSearch.

opensearch.yml

plugins.security.disabled: true

ashokfredrick · October 28, 2022, 3:43pm

Tried but no luck

Please share me the steps to configure ssl cert .

pablo · October 28, 2022, 4:00pm

@ashokfredrick I meant that you had set it in your OpenSearch. That disables the security plugin. That’s why OpenSearch Dashboards doesn’t work.
You must remove this line or set it to false to turn on the security plugin.

pablo · October 28, 2022, 4:01pm

@ashokfredrick Use the following link for TLS configuration.

pablo · October 28, 2022, 4:16pm

@ashokfredrick Just noticed that your opensearch.username and opensearch.password are not set to the default.

I would avoid admin user as service account for OpenSearch Dashboards.

If you’d like to use a customer user then you must configure it also in config.yml file.

config.dynamic.kibana.server_username(config.yml) and opensearch.username (opensearch_dashboards.yml) values must match.

ashokfredrick · October 29, 2022, 12:58am

Yes, i have tried but not working for me.

Removed the parameter - not able to start opensearch
changed to False - but after the change not able to start opensearch

path.data: /var/lib/opensearch

Path to log files:

path.logs: /var/log/opensearch

network.host: 0.0.0.0
discovery.type: single-node
plugins.security.disabled: false

ashokfredrick · October 29, 2022, 1:02am

Hi @pablo ,

Tried with kibanaserver also but not working for me.

Please find the config details below.

OpenSearch

path.data: /var/lib/opensearch

Path to log files:

path.logs: /var/log/opensearch

network.host: 0.0.0.0
discovery.type: single-node
plugins.security.disabled: true

OSD.yml

opensearch_dashboards.yml has some additional settings:
opensearch.hosts: [http://localhost:9200]
opensearch.ssl.verificationMode: none
opensearch.username: kibanaserver
opensearch.password: kibanaserver
opensearch.requestHeadersAllowlist: [“securitytenant”,“Authorization”]
opensearch_security.multitenancy.enabled: true
opensearch_security.multitenancy.tenants.enable_global: true
opensearch_security.multitenancy.tenants.enable_private: true
opensearch_security.multitenancy.tenants.preferred: [“Private”, “Global”]
opensearch_security.multitenancy.enable_filter: false
opensearch_security.cookie.secure: false
server.host: ‘0.0.0.0’

config.yml

config:
dynamic:
kibana:
multitenancy_enabled: true
server_username: kibanaserver
index: ‘.kibana’
do_not_fail_on_forbidden: false

ashokfredrick · October 29, 2022, 1:04am

Just trying with default settings without any pem/key files.

i.diaz · October 31, 2022, 1:58pm

Hello,

Have you tried re-running securityadmin script?
Don’t forget any auth/authz changes you made after 1st run needs a script re-run.

ashokfredrick · November 1, 2022, 3:57am

Hi,

Thanks for the details, will check and let u know.

ashokfredrick · November 1, 2022, 1:27pm

Hi,

I’m getting the below error while run the curl command after configured the truststore and keystore in my server. Kindly help.

Error : OpenSearch Security not initialized.

Full Error from the server :

=========

OpenSearch Security not initializtail -200 /var/log/opensearch/opensearch.log
[2022-11-01T21:20:09,020][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,518][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,519][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,520][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,521][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:12,648][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,021][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,023][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,023][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,024][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,522][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,524][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,525][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,525][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,025][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,026][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,026][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,027][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,304][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,527][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,529][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,530][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,530][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,030][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,031][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,031][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,032][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,532][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,533][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,534][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,534][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:28,189][ERROR][o.o.s.s.h.n.SecuritySSLNettyHttpServerTransport] [node1] Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1215) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1285) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:510) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:449) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:279) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:722) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:623) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:586) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:496) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at java.lang.Thread.run(Thread.java:833) [?:?]
[2022-11-01T21:20:28,190][WARN ][o.o.h.AbstractHttpServerTransport] [node1] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:60198}
io.netty.handler.codec.DecoderException: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:480) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:279) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:722) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:623) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:586) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:496) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at java.lang.Thread.run(Thread.java:833) [?:?]
Caused by: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1215) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1285) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:510) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:449) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
… 16 more
[2022-11-01T21:20:29,034][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,035][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,038][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,535][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,536][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,537][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,537][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,037][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,040][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:36,540][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,541][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,542][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,542][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,043][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,044][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,045][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,045][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,543][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,544][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,544][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,545][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,046][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,048][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,049][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,050][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,549][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,550][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,551][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,551][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:49,052][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,053][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,053][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,054][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,553][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,554][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,555][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,555][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,056][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,057][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,057][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,058][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,558][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,559][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,560][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,562][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,021][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,061][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,062][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,063][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,063][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:00,307][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,307][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:01,563][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,565][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,566][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,568][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,065][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,066][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,067][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,068][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,567][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,569][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,573][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,069][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,071][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,571][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,575][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,575][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:13,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:14,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,075][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,076][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,077][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,576][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,576][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,577][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,077][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,078][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,079][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,079][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,577][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,579][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,580][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,580][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,080][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,081][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,082][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,082][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)

===========

ashokfredrick · November 1, 2022, 1:29pm

Hi,

Getting the below error after configured the keystore and truststore in my env.

Kindly help.

OpenSearch Security not initialized

OpenSearch Security not initializtail -200 /var/log/opensearch/opensearch.log
[2022-11-01T21:20:09,020][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,518][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,519][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,520][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:11,521][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:12,648][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,021][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,023][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,023][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:14,024][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,522][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,524][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,525][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:16,525][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,025][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,026][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,026][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:19,027][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,304][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:21,527][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,529][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,530][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:21,530][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,030][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,031][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,031][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:24,032][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,532][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,533][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,534][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:26,534][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:28,189][ERROR][o.o.s.s.h.n.SecuritySSLNettyHttpServerTransport] [node1] Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1215) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1285) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:510) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:449) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:279) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:722) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:623) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:586) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:496) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at java.lang.Thread.run(Thread.java:833) [?:?]
[2022-11-01T21:20:28,190][WARN ][o.o.h.AbstractHttpServerTransport] [node1] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:60198}
io.netty.handler.codec.DecoderException: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:480) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:279) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:379) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:365) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:722) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeysPlain(NioEventLoop.java:623) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:586) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:496) [netty-transport-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) [netty-common-4.1.79.Final.jar:4.1.79.Final]
at java.lang.Thread.run(Thread.java:833) [?:?]
Caused by: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 474554202f20485454502f312e310d0a486f73743a206c6f63616c686f73743a393230300d0a417574686f72697a6174696f6e3a204261736963205957527461573436595752746157343d0d0a557365722d4167656e743a206375726c2f372e36312e310d0a4163636570743a202a2f2a0d0a0d0a
at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1215) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1285) ~[netty-handler-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:510) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:449) ~[netty-codec-4.1.79.Final.jar:4.1.79.Final]
… 16 more
[2022-11-01T21:20:29,034][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,035][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,038][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:29,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,535][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,536][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,537][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:31,537][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,037][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,039][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,040][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:34,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,305][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:34,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:36,540][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,541][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,542][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:36,542][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,043][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,044][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,045][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:39,045][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,543][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,544][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,544][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:41,545][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,046][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,048][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,049][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:44,050][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,549][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,550][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,551][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:46,551][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:47,306][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:20:49,052][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,053][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,053][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:49,054][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,553][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,554][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,555][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:51,555][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,056][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,057][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,057][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:54,058][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,558][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,559][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,560][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:56,562][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,021][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,061][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,062][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,063][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:20:59,063][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:00,307][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,307][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:00,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:01,563][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,565][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,566][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:01,568][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,065][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,066][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,067][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:04,068][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,567][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,569][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,573][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:06,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,069][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,071][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:09,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,571][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,575][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:11,575][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:13,308][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for internalusers while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for actiongroups while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for config while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for roles while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for rolesmapping while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:13,309][WARN ][o.o.s.c.ConfigurationLoaderSecurity7] [node1] No data for tenants while retrieving configuration for [INTERNALUSERS, ACTIONGROUPS, CONFIG, ROLES, ROLESMAPPING, TENANTS, NODESDN, WHITELIST, ALLOWLIST, AUDIT] (index=.opendistro_security)
[2022-11-01T21:21:14,073][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,075][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,076][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:14,077][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,574][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,576][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,576][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:16,577][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,077][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,078][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,079][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:19,079][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,577][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,579][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,580][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:21,580][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,080][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,081][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,082][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)
[2022-11-01T21:21:24,082][ERROR][o.o.s.a.BackendRegistry ] [node1] Not yet initialized (you may need to run securityadmin)

pablo · November 2, 2022, 12:02am

@ashokfredrick With the enabled security plugin you must configure the security transport layer as it’s mandatory to initiate the plugin. That means you can’t have OpenSearch config without any certificates with a security plugin enabled.

Could you describe your scenario? What would you like to achieve in this deployment?
Are you planning to run unsecured OpenSearch and OpenSearch Dashboards?

Topic		Replies	Views
Opensearch dashboard login issue " Invalid username or password" OpenSearch	1	3548	January 4, 2023
Cannot login to dashboards OpenSearch Dashboards troubleshoot	4	1370	January 16, 2024
Trouble logging into Opensearch Dashboards for the first time with Default Credentials Reporting Plugin troubleshoot	4	1995	October 26, 2022
Initial Setup Security Plugin Error OpenSearch Dashboards troubleshoot	14	3858	March 21, 2024
Can't get past Dashboard login screen OpenSearch Dashboards	13	72	October 14, 2024

Not able to login with default password in OpenSearch Dashboard2.3

======================== OpenSearch Configuration =========================

NOTE: OpenSearch comes with reasonable defaults for most settings.

Before you set out to tweak and tune the configuration, make sure you

understand what are you trying to accomplish and the consequences.

The primary way of configuring a node is via this file. This template lists

the most important settings you may want to configure for a production cluster.

Please consult the documentation for further information on configuration options:

https://www.opensearch.org

---------------------------------- Cluster -----------------------------------

Use a descriptive name for your cluster:

------------------------------------ Node ------------------------------------

Use a descriptive name for the node:

Add custom attributes to the node:

----------------------------------- Paths ------------------------------------

Path to directory where to store the data (separate multiple locations by comma):

Path to log files:

----------------------------------- Memory -----------------------------------

Lock the memory on startup:

Make sure that the heap size is set to about half the memory available

on the system and that the owner of the process is allowed to use this

limit.

OpenSearch performs poorly when the system is swapping the memory.

---------------------------------- Network -----------------------------------

Set the bind address to a specific IP (IPv4 or IPv6):

Set a custom port for HTTP:

For more information, consult the network module documentation.

--------------------------------- Discovery ----------------------------------

Pass an initial list of hosts to perform discovery when this node is started:

The default list of hosts is [“127.0.0.1”, “[::1]”]

Bootstrap the cluster using an initial set of cluster-manager-eligible nodes:

For more information, consult the discovery and cluster formation module documentation.

---------------------------------- Gateway -----------------------------------

Block initial recovery after a full cluster restart until N nodes are started:

For more information, consult the gateway module documentation.

---------------------------------- Various -----------------------------------

Require explicit names when deleting indices:

Copyright OpenSearch Contributors

SPDX-License-Identifier: Apache-2.0

Description:

Default configuration for OpenSearch Dashboards

OpenSearch Dashboards is served by a back end server. This setting specifies the port to use.

server.port: 5601

Specifies the address to which the OpenSearch Dashboards server will bind. IP addresses and host names are both valid values.

The default is ‘localhost’, which usually means remote machines will not be able to connect.

To allow connections from remote users, set this parameter to a non-loopback address.

Enables you to specify a path to mount OpenSearch Dashboards at if you are running behind a proxy.

Use the server.rewriteBasePath setting to tell OpenSearch Dashboards if it should remove the basePath

from requests it receives, and to prevent a deprecation warning at startup.

This setting cannot end in a slash.

server.basePath: “”

Specifies whether OpenSearch Dashboards should rewrite requests that are prefixed with

server.basePath or require that they are rewritten by your reverse proxy.

server.rewriteBasePath: false

The maximum payload size in bytes for incoming server requests.

server.maxPayloadBytes: 1048576

The OpenSearch Dashboards server’s name. This is used for display purposes.

server.name: “your-hostname”

The URLs of the OpenSearch instances to use for all your queries.

opensearch.hosts: [“http://localhost:9200”]

OpenSearch Dashboards uses an index in OpenSearch to store saved searches, visualizations and

dashboards. OpenSearch Dashboards creates a new index if the index doesn’t already exist.

opensearchDashboards.index: “.opensearch_dashboards”

The default application to load.

opensearchDashboards.defaultAppId: “home”

Setting for an optimized healthcheck that only uses the local OpenSearch node to do Dashboards healthcheck.

This settings should be used for large clusters or for clusters with ingest heavy nodes.

It allows Dashboards to only healthcheck using the local OpenSearch node rather than fan out requests across all nodes.

It requires the user to create an OpenSearch node attribute with the same name as the value used in the setting

This node attribute should assign all nodes of the same cluster an integer value that increments with each new cluster that is spun up

e.g. in opensearch.yml file you would set the value to a setting using node.attr.cluster_id:

Should only be enabled if there is a corresponding node attribute created in your OpenSearch config that matches the value here

opensearch.optimizedHealthcheckId: “cluster_id”

If your OpenSearch is protected with basic authentication, these settings provide

the username and password that the OpenSearch Dashboards server uses to perform maintenance on the OpenSearch Dashboards

index at startup. Your OpenSearch Dashboards users still need to authenticate with OpenSearch, which

is proxied through the OpenSearch Dashboards server.

opensearch.username: “opensearch_dashboards_system”

opensearch.password: “pass”

Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.

Use the `server.rewriteBasePath` setting to tell OpenSearch Dashboards if it should remove the basePath

`server.basePath` or require that they are rewritten by your reverse proxy.