0% found this document useful (0 votes)
33 views2 pages

Setup Kibana

This document provides a step-by-step guide for installing Kibana, including creating a repository and managing GPG checks. It outlines options for handling SHA1 errors and details the installation process, service configuration, firewall updates, and token verification. The instructions ensure proper setup and accessibility of Kibana on a specified IP address.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
33 views2 pages

Setup Kibana

This document provides a step-by-step guide for installing Kibana, including creating a repository and managing GPG checks. It outlines options for handling SHA1 errors and details the installation process, service configuration, firewall updates, and token verification. The instructions ensure proper setup and accessibility of Kibana on a specified IP address.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

INSTALLING KIBANA

CREATE A REPOSITORY

[kibana-8.x]
name=Kibana repository for 8.x packages
baseurl=https://artifacts.elastic.co/packages/8.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=0
autorefresh=1
type=rpm-md

DECIDE ON GPG –NOGPGCHECK, OR REPO GPGCHECK=0

SHA1 error prevents you from importing the GPG Key, You have 3 options:

1. Set the default to SHA1

update-crypto-policies –-set DEFAULT:SHA1


If you do this make sure you switch back!

update-crypto-policies –-DEFAULT

2. Set gpgcheck=0 in the repo

gpgcheck=0
3. Set –nogpgcheck in the install command#

dnf/yum install <package> --nogpgcheck

Source: Enhancing RHEL Security: Understanding SHA-1 deprecation on RHEL 9 (redhat.com)


INSTALL KIBANA

dnf install --enablerepo=kibana kibana

1. Get the password you got while installing elasticsearch or reset it

/usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic

2. Reload systemctl (because you have a new config file)

systemctl daemon-reload
3. Enable the service to start at boot

systemctl enable kibana


4. Bind Kibana to the ip address, not localhost (/etc/kibana/kibana.yml)

Server.host: “<IPADDRESS>”
5. Start Kibana

systemctl start kibana


6. Update the Firewall

firewall-cmd –zone=public –permanent –add-port=5601/tcp

firewall-cmd --reload
7. Check you can get to the URL

http://<ipaddress>:5601

8. Get your enrolment token

/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -
-scope kibana

9. Verify the token

/usr/share/kibana/bin/ kibana-verification-code

You might also like