elasticsearch-security-troubleshooting

What problem does it solve?

This Skill helps diagnose and fix common security issues in Elasticsearch, such as authentication failures, authorization errors, TLS problems, and Kibana login issues, ensuring secure and uninterrupted access to your data.

Core Features & Use Cases

• Diagnose Authentication Failures: Troubleshoot HTTP 401 errors and understand why users cannot authenticate.
• Resolve Authorization Errors: Address HTTP 403 errors and ensure users have the correct permissions.
• Fix TLS/SSL Issues: Identify and resolve certificate errors and handshake problems.
• Troubleshoot API Keys: Investigate expired or invalid API keys and role mapping mismatches.
• Kibana Login Issues: Resolve login failures, redirect loops, and CORS errors in Kibana.
• License Expiry Recovery: Guide users through recovering from security lockouts due to expired licenses.
• Use Case: A user reports they are receiving a "403 Forbidden" error when trying to access a specific index. This Skill can be used to determine if the user's roles are correctly mapped and if they possess the necessary privileges for that index.

Quick Start

Use the elasticsearch-security-troubleshooting skill to diagnose why a user is receiving a 401 authentication error when accessing the cluster.