Kibana user forbidden error {“statusCode”:403,“error”:“Forbidden”,“message”:“Forbidden”}

Question

I just setup my xpack in elasticsearch 7.1.0 as below in elasticsearch.yml:

xpack.security.enabled: true discovery.type: single-node in my elasticsearch.yml

Then, i ran >elasticsearch-setup-passwords interactive and changed all my built-in user passwords.

this is the change i made in Kibana.yml

xpack.security.enabled: true 
elasticsearch.username: "kibana" 
elasticsearch.password: "password@123"

When i restarted Kibana, i ws prompted with a username password page, where i gave kibana/password@123 that i had set in my yml.

Im getting the below response:

{"statusCode":403,"error":"Forbidden","message":"Forbidden"}

Please help me out.

Answer 1

Configuring security in Kibana

To use Kibana with X-Pack security:

Update the following settings in the kibana.yml configuration file:

elasticsearch.username: "kibana" elasticsearch.password: "kibanapassword"

Set the xpack.security.encryptionKey property in the kibana.yml configuration file.

xpack.security.encryptionKey: "something_at_least_32_characters"

Optional: Change the default session duration.

xpack.security.sessionTimeout: 600000

Restart Kibana.

Please follow this link using-kibana-with-security

Answer 2

Resolution: using "elastic" user account instead of kibana fixed this issue.