Transport run as granted t roles= action= request= – How to solve this Elasticsearch error

Opster Team

Aug-23, Version: 6.8-6.8

Briefly, this error occurs when there’s an issue with the Elasticsearch security feature, specifically with the Run As functionality. This feature allows a user to submit requests on behalf of another user. The error suggests that the user doesn’t have the necessary roles to perform the action. To resolve this, you can check the roles of the user and ensure they have the necessary permissions. Alternatively, you can disable the Run As feature if it’s not needed. Also, ensure that the Elasticsearch cluster is properly configured and the nodes are communicating correctly.

This guide will help you check for common problems that cause the log ” {}[transport] [run_as_granted]t{}; {}; roles=[{}]; action=[{}]; request=[{}]{} ” to appear. To understand the issues related to this log, read the explanation below about the following Elasticsearch concepts: plugin.

Log Context

Log “{}[transport] [run_as_granted]t{}; {}; roles=[{}]; action=[{}]; request=[{}]{}” classname is DeprecatedLoggingAuditTrail.java.
We extracted the following from Elasticsearch source code for those seeking an in-depth context :

                     logger.info("{}[transport] [run_as_granted]\t{}; {}; roles=[{}]; action=[{}]; indices=[{}]; request=[{}]{}";
                            localNodeInfo.prefix; originAttributes(threadContext; message; localNodeInfo); runAsSubject(authentication);
                            arrayToCommaDelimitedString(roleNames); action; arrayToCommaDelimitedString(indices.get());
                            message.getClass().getSimpleName(); opaqueId());
                } else {
                    logger.info("{}[transport] [run_as_granted]\t{}; {}; roles=[{}]; action=[{}]; request=[{}]{}"; localNodeInfo.prefix;
                            originAttributes(threadContext; message; localNodeInfo); runAsSubject(authentication);
                            arrayToCommaDelimitedString(roleNames); action; message.getClass().getSimpleName(); opaqueId());
                }
            }
        }




 

How helpful was this guide?

We are sorry that this post was not useful for you!

Let us improve this post!

Tell us how we can improve this post?