elastalert
elastalert copied to clipboard
Rule testing cause authentication error on Elasticsearch
When I hit test rule it causes authentication error:
13:36:41.618Z ERROR elastalert-server:
TestController: Failed to test rule with error: WARNING:elasticsearch:GET http://localhost:9200/ [status:401 request:0.003s]
Error connecting to ElasticSearch:
AuthenticationException(401, u'security_exception', {u'status': 401, u'error': {u'header': {u'WWW-Authenticate': u'Basic realm="security" charset="UTF-8"'}, u'root_cause': [{u'header': {u'WWW-Authenticate': u'Basic realm="security" charset="UTF-8"'}, u'reason': u'missing authentication credentials for REST request [/]', u'type': u'security_exception'}], u'type': u'security_exception', u'reason': u'missing authentication credentials for REST request [/]'}})
WARNING:elasticsearch:GET http://localhost:9200/ [status:401 request:0.003s]
WARNING:elastalert:Error connecting to Elasticsearch for rule SSH abuse (ElastAlert 3.0.1) - 2. The rule has been disabled.
es_username
and es_password
are set in elastalert.yaml
and in config.yml
I even try put it in rule file but then it causes timeouts. Setting up indexes during start was ok.
I'm using ES 7.2 with Kibana plugin
@Pyton i have same issue ...plz are you solved this issue???
+1
:( I am having similar issue as explained in https://github.com/bitsensor/elastalert/issues/135