- Kibana Guide: other versions:
- What is Kibana?
- What’s new in 8.17
- Kibana concepts
- Quick start
- Set up
- Install Kibana
- Configure Kibana
- AI Assistant settings
- Alerting and action settings
- APM settings
- Banners settings
- Cases settings
- Enterprise Search settings
- Fleet settings
- i18n settings
- Logging settings
- Logs settings
- Metrics settings
- Monitoring settings
- Reporting settings
- Search sessions settings
- Secure settings
- Security settings
- Spaces settings
- Task Manager settings
- Telemetry settings
- URL drilldown settings
- Start and stop Kibana
- Access Kibana
- Securing access to Kibana
- Add data
- Upgrade Kibana
- Configure security
- Configure reporting
- Configure logging
- Configure monitoring
- Command line tools
- Production considerations
- Discover
- Dashboards
- Canvas
- Maps
- Build a map to compare metrics by country or region
- Track, visualize, and alert on assets in real time
- Map custom regions with reverse geocoding
- Heat map layer
- Tile layer
- Vector layer
- Plot big data
- Search geographic data
- Configure map settings
- Connect to Elastic Maps Service
- Import geospatial data
- Troubleshoot
- Reporting and sharing
- Machine learning
- Graph
- Alerting
- Observability
- Search
- Security
- Dev Tools
- Fleet
- Osquery
- Stack Monitoring
- Stack Management
- Cases
- Connectors
- Amazon Bedrock
- Cases
- CrowdStrike
- D3 Security
- Google Gemini
- IBM Resilient
- Index
- Jira
- Microsoft Teams
- Observability AI Assistant
- OpenAI
- Opsgenie
- PagerDuty
- SentinelOne
- Server log
- ServiceNow ITSM
- ServiceNow SecOps
- ServiceNow ITOM
- Swimlane
- Slack
- TheHive
- Tines
- Torq
- Webhook
- Webhook - Case Management
- xMatters
- Preconfigured connectors
- License Management
- Maintenance windows
- Manage data views
- Numeral Formatting
- Rollup Jobs
- Manage saved objects
- Security
- Spaces
- Advanced Settings
- Tags
- Upgrade Assistant
- Watcher
- REST API
- Get features API
- Kibana spaces APIs
- Kibana role management APIs
- User session management APIs
- Saved objects APIs
- Data views API
- Index patterns APIs
- Alerting APIs
- Action and connector APIs
- Cases APIs
- Import and export dashboard APIs
- Logstash configuration management APIs
- Machine learning APIs
- Osquery manager API
- Short URLs APIs
- Get Task Manager health
- Upgrade assistant APIs
- Synthetics APIs
- Uptime APIs
- Kibana plugins
- Troubleshooting
- Accessibility
- Release notes
- Upgrade notes
- Kibana 8.17.1
- Kibana 8.17.0
- Kibana 8.16.3
- Kibana 8.16.2
- Kibana 8.16.1
- Kibana 8.16.0
- Kibana 8.15.5
- Kibana 8.15.4
- Kibana 8.15.3
- Kibana 8.15.2
- Kibana 8.15.1
- Kibana 8.15.0
- Kibana 8.14.3
- Kibana 8.14.2
- Kibana 8.14.1
- Kibana 8.14.0
- Kibana 8.13.4
- Kibana 8.13.3
- Kibana 8.13.2
- Kibana 8.13.1
- Kibana 8.13.0
- Kibana 8.12.2
- Kibana 8.12.1
- Kibana 8.12.0
- Kibana 8.11.4
- Kibana 8.11.3
- Kibana 8.11.2
- Kibana 8.11.1
- Kibana 8.11.0
- Kibana 8.10.4
- Kibana 8.10.3
- Kibana 8.10.2
- Kibana 8.10.1
- Kibana 8.10.0
- Kibana 8.9.2
- Kibana 8.9.1
- Kibana 8.9.0
- Kibana 8.8.2
- Kibana 8.8.1
- Kibana 8.8.0
- Kibana 8.7.1
- Kibana 8.7.0
- Kibana 8.6.1
- Kibana 8.6.0
- Kibana 8.5.2
- Kibana 8.5.1
- Kibana 8.5.0
- Kibana 8.4.3
- Kibana 8.4.2
- Kibana 8.4.1
- Kibana 8.4.0
- Kibana 8.3.3
- Kibana 8.3.2
- Kibana 8.3.1
- Kibana 8.3.0
- Kibana 8.2.3
- Kibana 8.2.2
- Kibana 8.2.1
- Kibana 8.2.0
- Kibana 8.1.3
- Kibana 8.1.2
- Kibana 8.1.1
- Kibana 8.1.0
- Kibana 8.0.0
- Kibana 8.0.0-rc2
- Kibana 8.0.0-rc1
- Kibana 8.0.0-beta1
- Kibana 8.0.0-alpha2
- Kibana 8.0.0-alpha1
- Developer guide
Capturing diagnostics
editCapturing diagnostics
editThe Kibana Support Diagnostic tool captures a point-in-time snapshot of Kibana and its Task Manager health. It works on Kibana versions 7.11.0 and above.
You can use the information captured by the tool to troubleshoot problems with Kibana instances. Check the Troubleshooting Kibana Health blog for examples.
You can generate diagnostic information using this tool before you contact Elastic Support or Elastic Discuss to help get a timely answer.
Requirements
edit- Java Runtime Environment or Java Development Kit v1.8 or higher.
Access the tool
editThe Support Diagnostic tool is included out-of-the-box as a sub-library in:
- Elastic Cloud Enterprise - Find the tool under Elastic Cloud Enterprise > Deployment > Operations > Prepare Bundle > Kibana.
-
Elastic Cloud on Kubernetes - Run the tool with
eck-diagnostics
.
You can also get the latest version of the tool by downloading the diagnostics-X.X.X-dist.zip
file from
the
support-diagnostic
repo.
Capture diagnostic information
editTo run a Kibana diagnostic:
-
In a terminal, verify that your network and user permissions are sufficient to connect by polling Kibana’s Task Manager health.
For example, with the parameters
host:localhost
,port:5601
, andusername:elastic
, you’d use the following curl request. Adapt these parameters to your context.curl -X GET -k -H 'kbn-xsrf: true' -u elastic -p https://localhost:5601/api/task_manager/_health
If you receive an HTTP 200
OK
response, you can proceed to the next step. If you receive a different response code, you must diagnose the issue before proceeding. -
Using the same environment parameters, run the diagnostic tool script.
For information about the parameters that you can pass to the tool, refer to the diagnostic parameter reference.
The following command options are recommended:
Unix-based systems
sudo ./diagnostics.sh --type kibana-local --host localhost --port 5601 -u elastic -p --bypassDiagVerify --ssl --noVerify
Windows
sudo .\diagnostics.bat --type kibana-local --host localhost --port 5601 -u elastic -p --bypassDiagVerify --ssl --noVerify
Script execution modes
You can execute the script in three modes:
-
kibana-local
(default, recommended): Polls the Kibana API, gathers operating system info, and captures cluster and garbage collection (GC) logs. -
kibana-remote
: Establishes an SSH session to the applicable target server to pull the same information askibana-local
. -
kibana-api
: Polls the Kibana API. All other data must be collected manually.
-
-
When the script has completed, verify that no errors were logged to
diagnostic.log
. If the log file contains errors, refer to Diagnose errors indiagnostic.log
. -
If the script completed without errors, an archive with the
format
<diagnostic type>-diagnostics-<DateTimeStamp>.zip
is created in the working directory or the output directory that you have specified. You can review or share the diagnostic archive as needed.
Diagnose a non-200 response
editWhen you poll your Task Manager health, if you receive any response other
than 200 0K
, then the diagnostic tool might not work as intended. Check the possible resolutions based on the error code that you get:
-
HTTP 401
UNAUTHENTICATED
-
Additional information in the error will usually indicate
that your
username:password
pair is invalid, or that your Elasticsearch.security
index is unavailable and you need to setup a temporary Elasticsearch file-based realm user withrole:superuser
to authenticate. -
HTTP 403
UNAUTHORIZED
-
Your
username
is recognized but has insufficient permissions to run the diagnostic. Either use a different username or increase the user’s privileges. -
HTTP 429
TOO_MANY_REQUESTS
(for example,circuit_breaking_exception
) - The authentication and authorization were successful, but the Elasticsearch cluster isn’t responding to requests. This issue is usually intermittent and can happen when the cluster is overwhelmed. In this case, resolve Elasticsearch’s health first before returning to Kibana.
-
HTTP 504
BAD_GATEWAY
- Your network has trouble reaching Kibana. You might be using a proxy or firewall. Consider running the diagnostic tool from a different location, confirming your port, or using an IP instead of a URL domain.
Diagnose errors in diagnostic.log
editThe following are common errors that you might encounter when running the diagnostic tool:
-
Error: Could not find or load main class com.elastic.support.diagnostics.DiagnosticApp
This indicates that you accidentally downloaded the source code file instead of
diagnostics-X.X.X-dist.zip
from the releases page. -
A
security_exception
that includesis unauthorized for user
:The provided user has insufficient admin permissions to run the diagnostic tool. Use another user, or grant the user
role:superuser
privileges. -
{kib} Server is not Ready yet
This indicates issues with Kibana’s dependencies blocking full start-up. To investigate, check Troubleshoot Kibana UI error.
On this page
ElasticON events are back!
Learn about the Elastic Search AI Platform from the experts at our live events.
Register now