Description of problem: [x] Seeing the following errors when trying to create a search index in kibana. object Object]: [security_exception] no permissions for [indices:data/read/field_caps] and User [name=ZK96YLT, roles=[gen_user_199526ad7a0de4af2684efb50a8d4e115b346b61, gen_kibana_199526ad7a0de4af2684efb50a8d4e115b346b61]] Config: Error 404 Not Found: [doc][config:5.6.13]: document missing: [document_missing_exception] [doc][config:5.6.13]: document missing, with { index_uuid="nEzQKgl5QOG2Ts7LGegFSg" & shard="0" & . [x] Attempted to delete the user indices and restore, but no change Version-Release number of selected component (if applicable): [x] 3.11.146-4 How reproducible: [x] Very Actual results: [x] Get errors reported above. Also, longform errors from ES logs attached privately. Expected results: [x] Able to create indices in Kibana for all needed users. Additional info: [x] Attached sensitive information privately to ticket for further review. [x] This issue appears similar [1] to issues resolved in 3.11.146-1, however customer is using 3.11.146-4 and still experiencing. [1] https://bugzilla.redhat.com/show_bug.cgi?id=1752853
This is because the Kibana version (5.6.13) is mismatched with the ES version (5.6.16). The images for both differ Kibana (3.11.141), ES(3.11.146). Something is incorrect in your deployment. Bump the kibana version to be the same as ES and this will be resolved. Closing NOTABUG