Symptoms:

Resolution:

If the Security plugin is enabled in Elasticsearch but disabled in Kibana, you must still set elasticsearch.username and elasticsearch.password in kibana.yml. Otherwise, Kibana cannot connect to Elasticsearch.