# Kibana Public Access

For CSS clusters that have security mode enabled, you can access Kibana through the Internet after configuring Kibana public access. For a cluster that has security mode enabled, CSS allows you to enable Kibana public access and configure access bandwidth. After the configuration is complete, the cluster obtains a Kibana public IP address that you can use to access Kibana of this cluster.

You can configure Kibana public access when creating a cluster or configure this function after enabling security mode for a cluster.

Clusters purchased before rollout of this feature do not support this function.

#### Configuring Kibana Public Access When Creating a Cluster

1. Log in to the CSS management console.
2. Click Create Cluster in the upper right corner. The Create Cluster page is displayed.
3. On the Create Cluster page, enable Security Mode.

   You can enable Security Mode for clusters of version 6.5.4 and later versions.

4. Set Advanced Settings to Custom, enable Kibana Public Access, and set parameters.

   Table 1 Kibana public access parameters
   Parameter | Description
   --- | ---
   Bandwidth | Bandwidth for accessing Kibana with the public IP address Value range: 1 to 100 Unit: Mbit/s
   Access Control | If you disable this function, any IP addresses can access the cluster through the public IP address. If you enable this function, only IP addresses or IP address ranges in the whitelist can access the cluster through the public IP address.
   Whitelist | IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses. You are advised to enable this function.

   After the cluster is created, click the cluster name to go to the Basic Information page. On the Kibana Public Access page, you can view the Kibana public IP address.

#### Configuring Kibana Public Access for an Existing Cluster

You can enable, disable, modify, and view Kibana public access for an existing cluster that has security mode enabled.

1. Log in to the CSS management console.
2. On the Clusters page, click the name of the target cluster.
3. Click the Kibana Public Access tab. Turn on the Kibana Public Access switch to enable the Kibana public access function.

   indicates that Kibana public access is disabled. indicates that Kibana public access is enabled.

4. On the displayed page, set parameters.

   Table 2 Kibana public access parameters
   Parameter | Description
   --- | ---
   Bandwidth | Bandwidth for accessing Kibana with the public IP address Value range: 1 to 100 Unit: Mbit/s
   Access Control | If you disable this function, any IP addresses can access the cluster through the public IP address. If you enable this function, only IP addresses or IP address ranges in the whitelist can access the cluster through the public IP address.
   Whitelist | IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses. You are advised to enable this function.

5. After you set the parameters, click OK.

#### Modifying Kibana Public Access

CSS allows you to modify bandwidth and access control of clusters configured with Kibana public access.

1. Log in to the CSS management console.
2. On the Clusters page, click the name of the target cluster.
3. Click the Kibana Public Access tab and modify the Kibana public access parameters.
   - Modifying bandwidth

     Click Modify on the right of Bandwidth. On the Modify Bandwidth page, modify the bandwidth and click OK.

   - Modifying access control

     Click Modify on the right of Access Control. On the Modify Access Control page, set Access Control and Whitelist, and click OK.

#### Accessing Kibana with the Public IP Address

After configuring Kibana public access, you will obtain a public IP address that you can use to access Kibana of this cluster.

1. Log in to the CSS management console.
2. On the Clusters page, click the name of the target cluster.
3. Click the Kibana Public Access tab to obtain the Kibana public IP address.
4. Use this IP address to access Kibana of this cluster through the Internet.

Parent topic: Managing Elasticsearch Clusters