Trouble in connecting kibana on AWS EC2 to AWS ES service

Security
1

Hello All,

We have created AWS ES domain with fine grain control enabled and master user (for basic auth). I am able to log-in to AWS kibana (which comes by default with ES) using master user credential.

Now I am trying to setup external kibana on EC2 which is pointing to AWS ES.
In kibana.yml I have configured
elasticsearch.hosts: https: AWS ES Endpoint:443
elasticsearch.username: master user username
elasticsearch.password: master user password

Now while starting kibana I got below logs

log [11:19:47.686] [info][OpenDistro Security Migration] Starting tenant migration
error [11:19:47.700] [error][migration] AuthenticationError
at wrapElasticsearchError (/home/ubuntu/opendistroforelasticsearch-kibana/plugins/opendistro_security/lib/backend/errors/wrap_elasticsearch_error.js:36:12)
at SecurityBackend.getTenantInfoWithInternalUser (/home/ubuntu/opendistroforelasticsearch-kibana/plugins/opendistro_security/lib/backend/opendistro_security.js:259:19)
at process._tickCallback (internal/process/next_tick.js:68:7)
log [11:19:47.716] [info][status][plugin:opendistro_security@7.4.2] Status changed from yellow to yellow - Tenant indices migration failed

Any pointer what I am missing here ?

2

@nrmohta Did you find the solution?

3

Try this

$ sudo vi /etc/kibana/kibana.yml
....
opendistro_security.multitenancy.enabled: false
...

$ sudo systemctl restart kibana

Reference

Pros: Your Kibana will work.
Cons: Multi-Tenancy is disabled.

4

Hi @nrmohta @hanspro - We are also facing exact same issue but we do want multi-tenancy enabled for our Kibana running on EC2. Do we know how we can solve this issue?

5

we too! This is not normal or expected behaviour

using Kibana Open Distro 1.9.0 on AWS Elasticsearch Open Distro 7.8