Elasticsearch Authentication Failure
The collector’s log indicates failed to bootstrap elasticsearch
and unable to authenticate user [<username>] for REST request
SYMPTOM
The collector's log indicates a message similar to the following:
PROBLEM
The collector's Elasticsearch output is unable to authenticate with the Elasticsearch host(s) specified in EF_OUTPUT_ELASTICSEARCH_ADDRESSES
.
SOLUTION
Ensure that EF_OUTPUT_ELASTICSEARCH_USERNAME
or EF_OUTPUT_ELASTICSEARCH_PASSWORD
has been entered correctly. Providing the correct username and password will correct this error. You can test the username and password manually using curl
. For example:
REFERENCE
EF_OUTPUT_ELASTICSEARCH_USERNAME
EF_OUTPUT_ELASTICSEARCH_PASSWORD