es日志報錯
[2018-07-17T15:48:48,525][INFO ][o.e.x.s.a.AuthenticationService] [iLxwotO] Authentication of [elastic] was terminated by realm [reserved] - failed to authenticate user [elastic]
kibana日志報錯
[warning][license][xpack] License information from the X-Pack plugin could not be obtained from Elasticsearch for the [data] cluster. [security_exception] failed to authenticate user [elastic], with { header={ WWW-Authenticate="Basic realm="security" charset="UTF-8"" } } :: {"path":"/_xpack","statusCode":401,"response":"{"error":{"root_cause":[{"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}}],"type":"security_exception","reason":"failed to authenticate user [elastic]","header":{"WWW-Authenticate":"Basic realm=\"security\" charset=\"UTF-8\""}},"status":401}","wwwAuthenticateDirective":"Basic realm="security" charset="UTF-8""}
排查是刪掉es的data目錄導(dǎo)致刪除了.security-6索引
解決：
bin / elasticsearch-setup-passwords auto | interactive
重置密碼 auto：隨機(jī)密碼 interactive：手動設(shè)置
然后在es，kibana的配置文件重新指定密碼 ok
