EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

Connecting to Elastic Search using XQuery is failed with error “Error type: XQuery Engine error. the URL:http://127.0.0.1:9200/<rest of the URL> is not allowed” after upgraded to MicroStrategy 2021.


Yating (Tiffanie) Zhai

Senior Cloud Support Engineer III • MicroStrategy


In some report which is fetching data from Elastics Search using XQuery, security filter is used to pass the Elastic Search Server IP address to report, most of the time Elastic Search Server is on the same server where MicroStrategy is installed and local IP as 127.0.0.1 is used. It is working fine before MicroStrategy 2021, but failed with error after upgraded to 2021.

Symptom
In some report which is fetching data from Elastics Search using XQuery, security filter is used to pass the Elastic Search Server IP address to report, most of the time Elastic Search Server is on the same server where Strategy is installed and local IP as 127.0.0.1 is used. It is working fine before Strategy 2021, but failed with below error after upgraded to 2021:

ka04W000000rZNoQAM_0EM4W0000096lCJ.png


QueryEngine encountered error: mstr-rest:post() failed. HTTP error encountered while trying to access a REST service.
Error type: XQuery Engine error. the URL:http://127.0.0.1:9200/<rest of the URL> is not allowed.

Cause
The error is caused by the IP of localhost (127.0.01) has been restricted due to security concerns. This is a change from Strategy 2021GA. That’s why the  error occurs after upgraded to Strategy 2021 version.
ACTION
Strategy recommend using community connector to connect to Elastic Search, and for Community Connector, from Strategy 2020 Update 4 and Strategy 2019 Update 8, Administrators can specify which URLs or URL paths are permitted by the Community Connectors, see KB484820: 
https://community.strategy.com/article/Securing-Community-Connectors-with-whitelist?language=en_US
This use case is using XQuery and there is no way to bypass the restriction. The workaround would be deploy Elastic Search on a different server, or use community connector.
 


Comment

0 comments

Details

Knowledge Article

Published:

November 21, 2023

Last Updated:

November 21, 2023