Skip to content

[Security Solution] Data Quality dashboard errors when a basePath is configured #156231

@andrew-goldstein

Description

@andrew-goldstein

The Data Quality dashboard displays errors when a basePath is configured, preventing indices from being checked.

Kibana/Elasticsearch Stack version:

8.7.0

Steps to reproduce:

  1. Configure the following settings in config/kibana.dev.yml
server.basePath: '/foo'
server.publicBaseUrl: 'http://localhost:5601/foo'
  1. Start Kibana with yarn start

  2. Navigate to http://localhost:5601/ in a new browser tab

Expected result

  • The browser is redirected to a login page that includes the configured base path /foo, e.g.
http://localhost:5601/foo/login?next=%2Ffoo%2F
  1. Login with the elastic superuser

  2. Navigate to Security > Dashboards > Data Quality

Expected results

  • The View errors popover button is NOT visible
  • Errors are not displayed for any patterns

Actual results

  • The View errors popover button is visible
  • Errors are displayed for each of the patterns, per the following example text and screenshot:
Indices matching the .alerts-security.alerts-default pattern won't be checked

Errors may occur when pattern or index metadata is temporarily unavailable, or because you don't have the privileges required for access

The following privileges are required to check an index:
monitor or manage
view_index_metadata
read

before

  • The View errors popover, when clicked, displays Not Found errors for each of the patterns, per the examples below:
Pattern Index Error
.alerts-security.alerts-default -- Error loading stats: Error: Not Found
auditbeat-* -- Error loading stats: Error: Not Found
logs-* -- Error loading stats: Error: Not Found
packetbeat-* -- Error loading ILM Explain: Error: Not Found

Metadata

Metadata

Labels

Team: SecuritySolutionSecurity Solutions Team working on SIEM, Endpoint, Timeline, Resolver, etc.Team:Threat HuntingSecurity Solution Threat Hunting TeamTeam:Threat Hunting:InvestigationsSecurity Solution Threat Hunting Investigations TeambugFixes for quality problems that affect the customer experiencev8.8.0

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions