-
Notifications
You must be signed in to change notification settings - Fork 483
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Bug] Kibana upload getting unauthorized error #634
Comments
@shravaka based off the 401 error message, it seems like this is related to credentials, or the permissions of the account you'e using. Can you share more of the stack trace from your terminal output? This would help us pinpoint the bug better. And please don't forget to remove any personal information, like your credentials from the output. |
Yeah i thought so too initially and wasted much time on double checking permissions and password, but in the end managed to push the files after changing 'providerName': 'cloud-basic' to simply 'providerName': 'basic' I'll share stack shortly |
|
Had a very similar case and debugged it on Slack: My version is |
Forgot to mention that version I'm working with is |
Description:
It is impossible to upload rules to a internally or locally hosted instance by using the Python script.
The cause seems to be one of the parameters in line 118 of the /detection-rules/kibana/connector.py file:
payload = {'params': payload, 'currentURL': '', 'providerType': 'basic', 'providerName': 'cloud-basic'}
Should the 'ProviderName' be hardcoded here?
Steps to reproduce the behavior:
python -m detection_rules kibana --kibana-url xxx -ku username -kp password upload-rule example.toml
where xxx is internally hosted instance of kibana
Expected behavior:
Rule successfully uploaded to Kibana
Actual behavior:
Python returns an error:
requests.exceptions.HTTPError: 401 Client Error: Unauthorized for url:xxx
The text was updated successfully, but these errors were encountered: