Guest User

Untitled

a guest
Aug 19th, 2019
94
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.31 KB | None | 0 0
  1. {"type":"error","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","auth","session"],"pid":12,"level":"error","error":{"message":"Unauthorized","name":"Error","stack":"Error: Unauthorized\n at validate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:153:49)\n at Object.authenticate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:226:26)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth.test (/usr/share/kibana/node_modules/hapi/lib/auth.js:92:54)\n at Session.test [as get] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/session.js:42:52)\n at Authenticator.get [as getSessionValue] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:206:47)\n at Authenticator.getSessionValue [as authenticate] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:117:44)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:229:62)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/auth_redirect.js:28:60)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth._authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:238:58)\n at authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:214:21)\n at Request._lifecycle (/usr/share/kibana/node_modules/hapi/lib/request.js:263:62)\n at process._tickCallback (internal/process/next_tick.js:68:7)"},"message":"Unauthorized"}
  2. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate user request to /?token=ZWxhc3RpYzoxMjM0NTY=."}
  3. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via login attempt."}
  4. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Username and password not found in payload."}
  5. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via header."}
  6. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","monitoring","kibana-monitoring"],"pid":12,"message":"Received Kibana Ops event data"}
  7. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","monitoring","kibana-monitoring"],"pid":12,"message":"Received Kibana Ops event data"}
  8. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Request has been authenticated via header."}
  9. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["spaces","debug"],"pid":12,"message":"SpacesClient.getAll(), using RBAC. Found 1 spaces"}
  10. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["spaces","debug"],"pid":12,"message":"SpacesClient.getAll(), authorized for 1 spaces, derived from ES privilege check: {\"default\":{\"login:\":true}}"}
  11. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["spaces","debug"],"pid":12,"message":"SpacesClient.getAll(), using RBAC. returning spaces: default"}
  12. {"type":"response","@timestamp":"2019-08-19T16:42:43Z","tags":[],"pid":12,"method":"get","statusCode":302,"req":{"url":"/?token=ZWxhc3RpYzoxMjM0NTY%3D","method":"get","headers":{"host":"localhost:5601","connection":"close","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en-US;q=0.9,en;q=0.8"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1"},"res":{"statusCode":302,"responseTime":132,"contentLength":9},"message":"GET /?token=ZWxhc3RpYzoxMjM0NTY%3D 302 132ms - 9.0B"}
  13. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","stats-collection"],"pid":12,"message":"Fetching data from kibana_stats collector"}
  14. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","stats-collection"],"pid":12,"message":"Fetching data from kibana_settings collector"}
  15. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","legacy-proxy"],"pid":12,"message":"Event is being forwarded: connection"}
  16. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","stats-collection"],"pid":12,"message":"not sending [kibana_settings] monitoring document because [undefined] is null or invalid."}
  17. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","monitoring","kibana-monitoring"],"pid":12,"message":"Uploading bulk stats payload to the local cluster"}
  18. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","legacy-service"],"pid":12,"message":"Request will be handled by proxy GET:/app/kibana."}
  19. {"type":"error","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","auth","session"],"pid":12,"level":"error","error":{"message":"Unauthorized","name":"Error","stack":"Error: Unauthorized\n at validate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:153:49)\n at Object.authenticate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:226:26)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth.test (/usr/share/kibana/node_modules/hapi/lib/auth.js:92:54)\n at Session.test [as get] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/session.js:42:52)\n at Authenticator.get [as getSessionValue] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:206:47)\n at Authenticator.getSessionValue [as authenticate] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:117:44)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:229:62)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/auth_redirect.js:28:60)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth._authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:238:58)\n at authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:214:21)\n at Request._lifecycle (/usr/share/kibana/node_modules/hapi/lib/request.js:263:62)\n at process._tickCallback (internal/process/next_tick.js:68:7)"},"message":"Unauthorized"}
  20. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate user request to /app/kibana."}
  21. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via login attempt."}
  22. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Username and password not found in payload."}
  23. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via header."}
  24. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Failed to authenticate request via header: [security_exception] missing authentication credentials for REST request [/_security/_authenticate], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}
  25. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["info","authentication"],"pid":12,"message":"Authentication attempt failed: [security_exception] missing authentication credentials for REST request [/_security/_authenticate], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}
  26. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["license","debug","xpack"],"pid":12,"message":"Calling [data] Elasticsearch _xpack API. Polling frequency: 30001"}
  27. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","monitoring","kibana-monitoring"],"pid":12,"message":"Uploaded bulk stats payload to the local cluster"}
  28. {"type":"response","@timestamp":"2019-08-19T16:42:43Z","tags":[],"pid":12,"method":"get","statusCode":401,"req":{"url":"/app/kibana","method":"get","headers":{"host":"localhost:5601","connection":"close","upgrade-insecure-requests":"1","user-agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36","accept":"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en-US;q=0.9,en;q=0.8"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1"},"res":{"statusCode":401,"responseTime":63,"contentLength":9},"message":"GET /app/kibana 401 63ms - 9.0B"}
  29. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","legacy-proxy"],"pid":12,"message":"Event is being forwarded: connection"}
  30. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","legacy-service"],"pid":12,"message":"Request will be handled by proxy GET:/favicon.ico."}
  31. {"type":"error","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","auth","session"],"pid":12,"level":"error","error":{"message":"Unauthorized","name":"Error","stack":"Error: Unauthorized\n at validate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:153:49)\n at Object.authenticate (/usr/share/kibana/node_modules/hapi-auth-cookie/lib/index.js:226:26)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth.test (/usr/share/kibana/node_modules/hapi/lib/auth.js:92:54)\n at Session.test [as get] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/session.js:42:52)\n at Authenticator.get [as getSessionValue] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:206:47)\n at Authenticator.getSessionValue [as authenticate] (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:117:44)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/authentication/authenticator.js:229:62)\n at Object.authenticate (/usr/share/kibana/x-pack/plugins/security/server/lib/auth_redirect.js:28:60)\n at module.exports.internals.Manager.execute (/usr/share/kibana/node_modules/hapi/lib/toolkit.js:35:106)\n at module.exports.internals.Auth._authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:238:58)\n at authenticate (/usr/share/kibana/node_modules/hapi/lib/auth.js:214:21)\n at Request._lifecycle (/usr/share/kibana/node_modules/hapi/lib/request.js:263:62)\n at process._tickCallback (internal/process/next_tick.js:68:7)"},"message":"Unauthorized"}
  32. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate user request to /favicon.ico."}
  33. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via login attempt."}
  34. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Username and password not found in payload."}
  35. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Trying to authenticate via header."}
  36. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["debug","security","basic"],"pid":12,"message":"Failed to authenticate request via header: [security_exception] missing authentication credentials for REST request [/_security/_authenticate], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}
  37. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["info","authentication"],"pid":12,"message":"Authentication attempt failed: [security_exception] missing authentication credentials for REST request [/_security/_authenticate], with { header={ WWW-Authenticate=\"Basic realm=\\\"security\\\" charset=\\\"UTF-8\\\"\" } }"}
  38. {"type":"log","@timestamp":"2019-08-19T16:42:43Z","tags":["license","debug","xpack"],"pid":12,"message":"Calling [data] Elasticsearch _xpack API. Polling frequency: 30001"}
  39. {"type":"response","@timestamp":"2019-08-19T16:42:43Z","tags":[],"pid":12,"method":"get","statusCode":401,"req":{"url":"/favicon.ico","method":"get","headers":{"host":"localhost:5601","connection":"close","user-agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36","accept":"image/webp,image/apng,image/*,*/*;q=0.8","referer":"http://localhost:5601/app/kibana","accept-encoding":"gzip, deflate, br","accept-language":"en-GB,en-US;q=0.9,en;q=0.8"},"remoteAddress":"127.0.0.1","userAgent":"127.0.0.1","referer":"http://localhost:5601/app/kibana"},"res":{"statusCode":401,"responseTime":58,"contentLength":9},"message":"GET /favicon.ico 401 58ms - 9.0B"}
Add Comment
Please, Sign In to add comment