Monitoring Troubleshooting

Logstash Monitoring Not Working After Upgrade

When upgrading from older versions, the built-in logstash_system user is disabled for security reasons. To resume monitoring:

  1. Change the logstash_system password:
PUT _xpack/security/user/logstash_system/_password
{
  "password": "newpassword"
}
  1. Re-enable the logstash_system user:
PUT _xpack/security/user/logstash_system/_enable