Reporting troubleshooting

edit

Having trouble? Here are solutions to common problems you might encounter while using Reporting.

Reporting diagnostics

edit

Reporting comes with a built-in utility to try to automatically find common issues. When Kibana is running, navigate to the Report Listing page, and click Run reporting diagnostics. This will open up a diagnostic tool that checks various parts of the Kibana deployment and come up with any relevant recommendations.

If the diagnostic information doesn’t reveal the problem, you can troubleshoot further by starting the Kibana server with an environment variable for revealing additional debugging logs. Refer to Puppeteer debug logs.

Text rendered incorrectly in generated reports

edit

If a report label is rendered as an empty rectangle, no system fonts are available. Install at least one font package on the system.

If the report is missing certain Chinese, Japanese or Korean characters, ensure that a system font with those characters is installed.

Missing data in PDF report of data table visualization

edit

There is currently a known limitation with the Data Table visualization that only the first page of data rows, which are the only data visible on the screen, are shown in PDF reports.

File permissions

edit

Ensure that the headless_shell binary located in your Kibana data directory is owned by the user who is running Kibana, that the user has the execute permission, and if applicable, that the filesystem is mounted with the exec option.

The Chromium binary is located in the Kibana installation directory as data/headless_shell-OS_TYPE/headless_shell. The full path is logged the first time Kibana starts when verbose logging is enabled.

Error messages

edit

Whenever possible, a Reporting error message tries to be as self-explanatory as possible. Here are some error messages you might encounter, along with the solution.

StatusCodeError: [version_conflict_engine_exception]

edit

If you are running multiple instances of Kibana in a cluster, the instances share the work of executing report jobs to evenly distribute the work load. Each instance searches the reporting index for "pending" jobs that the user has requested. It is possible for multiple instances to find the same job in these searches. Only the instance that successfully updated the job status to "processing" will actually execute the report job. The other instances that unsuccessfully tried to make the same update will log something similar to this:

StatusCodeError: [version_conflict_engine_exception] [...]: version conflict, required seqNo [6124], primary term [1]. current document has seqNo [6125] and primary term [1], with { ... }
  status: 409,
  displayName: 'Conflict',
  path: '/.reporting-...',
  body: {
    error: {
      type: 'version_conflict_engine_exception',
      reason: '[...]: version conflict, required seqNo [6124], primary term [1]. current document has seqNo [6125] and primary term [1]',
    },
  },
  statusCode: 409
}

These messages alone don’t indicate a problem. They show normal events that happen in a healthy system.

Max attempts reached

edit

There are two primary causes of this error:

  • You’re creating a PDF of a visualization or dashboard that spans a large amount of data and Kibana is hitting the xpack.reporting.queue.timeout
  • Kibana is hosted behind a reverse-proxy, and the Kibana server settings are not configured correctly

Create a Markdown visualization and then create a PDF report. If this succeeds, increase the xpack.reporting.queue.timeout setting. If the PDF report fails with "Max attempts reached," check your Kibana server settings.

You must install nss for Reporting to work

edit

Reporting using the Chromium browser relies on the Network Security Service libraries (NSS). Install the appropriate nss package for your distribution.

Unable to use Chromium sandbox

edit

Chromium uses sandboxing techniques that are built on top of operating system primitives. The Linux sandbox depends on user namespaces, which were introduced with the 3.8 Linux kernel. However, many distributions don’t have user namespaces enabled by default, or they require the CAP_SYS_ADMIN capability.

Elastic recommends that you research the feasibility of enabling unprivileged user namespaces before disabling the sandbox. An exception is if you are running Kibana in Docker because the container runs in a user namespace with the built-in seccomp/bpf filters.

Verbose logs

edit

Kibana server logs have a lot of useful information for troubleshooting and understanding how things work. If you’re having any issues at all, the full logs from Reporting will be the first place to look. In kibana.yml:

logging.root.level: all

For more information about logging, see Kibana configuration settings.

Puppeteer debug logs

edit

The Chromium browser that Kibana launches on the server is driven by a NodeJS library for Chromium called Puppeteer. The Puppeteer library has its own command-line method to generate its own debug logs, which can sometimes be helpful, particularly to figure out if a problem is caused by Kibana or Chromium. See more at debugging tips.

Using Puppeteer’s debug method when launching Kibana would look like:

env DEBUG="puppeteer:*" ./bin/kibana

The internal DevTools protocol traffic will be logged via the debug module under the puppeteer namespace.

The Puppeteer logs are very verbose and could possibly contain sensitive information. Handle the generated output with care.

System requirements

edit

In Elastic Cloud, the Kibana instances that most configurations provide by default is for 1GB of RAM for the instance. That is enough for Kibana Reporting when the visualization or dashboard is relatively simple, such as a single pie chart or a dashboard with a few visualizations. However, certain visualization types incur more load than others. For example, a TSVB panel has a lot of network requests to render.

If the Kibana instance doesn’t have enough memory to run the report, the report fails with an error such as Error: Page crashed! In this case, try increasing the memory for the Kibana instance to 2GB.

Unable to connect to Elastic Maps Service

edit

Elastic Maps Service (EMS) is a service that hosts tile layers and vector shapes of administrative boundaries. If a report contains a map with a missing basemap layer or administrative boundary, the Kibana server does not have access to EMS. See Connect to Elastic Maps Service for information on how to connect your Kibana server to EMS.

Manually install the Chromium browser for Darwin

edit

Chromium is not embedded into Kibana for the Darwin (Mac OS) architecture. When running Kibana on Darwin, Reporting will download Chromium into the proper area of the Kibana installation path the first time the server starts. If the server does not have access to the Internet, you must download the Chromium browser and install it into the Kibana installation path.

  1. Download the Chromium zip file:

    • For x64 systems
    • For ARM systems
  2. Copy the zip file into the holding area. Relative to the root directory of Kibana, the path is:

    • .chromium/x64 for x64 systems
    • .chromium/arm64 for ARM systems

When Kibana starts, it will automatically extract the browser from the zip file, and is then ready for PNG and PDF reports.