search

telekom-security / tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
GNU General Public License v3.0
6.87k stars 1.08k forks source link

Kibana connectors - unable to load #1329

Closed jmrkvicka909 closed 1 year ago

jmrkvicka909 commented 1 year ago

Hello, I have just downloaded ISO image, installed it and updated. Now, I have problem with Kibana. I would like to send alert to Slack, but when I click on connectors in settings of Kibana I obtained two errors:

I checked log by command docker logs -f 821f2fa941a9

There is error 

[2023-05-16T06:35:32.056+00:00][ERROR][http] Error: Unable to create actions client because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
    at Object.getActionsClient (/usr/share/kibana/x-pack/plugins/actions/server/plugin.js:100:21)
    at /usr/share/kibana/x-pack/plugins/actions/server/routes/connector_types.js:43:51
    at processTicksAndRejections (node:internal/process/task_queues:96:5)
    at /usr/share/kibana/x-pack/plugins/actions/server/routes/verify_access_and_context.js:24:14
    at /usr/share/kibana/node_modules/@kbn/core-http-router-server-internal/target_node/src/error_wrapper.js:20:14
    at Router.handle (/usr/share/kibana/node_modules/@kbn/core-http-router-server-internal/target_node/src/router.js:141:30)
    at handler (/usr/share/kibana/node_modules/@kbn/core-http-router-server-internal/target_node/src/router.js:107:50)
    at exports.Manager.execute (/usr/share/kibana/node_modules/@hapi/hapi/lib/toolkit.js:60:28)
    at Object.internals.handler (/usr/share/kibana/node_modules/@hapi/hapi/lib/handler.js:46:20)
    at exports.execute (/usr/share/kibana/node_modules/@hapi/hapi/lib/handler.js:31:20)
    at Request._lifecycle (/usr/share/kibana/node_modules/@hapi/hapi/lib/request.js:371:32

I have found some instruction, how to solve it [https://hakanmazi123.medium.com/elasticsearch-unable-to-create-actions-client-because-the-encrypted-saved-objects-plugin-is-missing-5736b9a7a1c1], however adding keys to kibana.yml doesn't change anything.

Could someone help me, where could be a problem? Thank you.

t3chn0m4g3 commented 1 year ago

We are running the ELK stack behind a secured reverse proxy, as a result we do not enable xpack and encryption, so this behaviour is expected on start or with configuration changes involving xpack or changes relying on encryption for that matter. Within the use cases of T-Pot your Kibana should have started up correctly and display events generated by the honeypots.