doc-exports/docs/css/umn/css_01_0382.html

<a name="css_01_0382"></a><a name="css_01_0382"></a>

<h1 class="topictitle1">Logging In to an Elasticsearch Cluster Using Kibana</h1>
<div id="body0000001428595166"><p id="css_01_0382__p1958814818304">Kibana is the official data visualization and exploration platform for Elasticsearch. It enables in-depth data analysis and interactive visualization. In CSS, Kibana is pre-built for each Elasticsearch cluster. You can start Kibana with one click, without installing anything. Kibana offers a comprehensive suite of dashboard features and visualization tools. It seamlessly integrates Elasticsearch's analytical capabilities, supporting the full analytics process, from data exploration to actionable business insights.</p>
<p id="css_01_0382__p1430022194916">CSS's Kibana supports multiple access methods. Steps needed to log in to an Elasticsearch cluster vary depending on the access method you choose. For details, see <a href="#css_01_0382__table123121443185113">Table 1</a>.</p>

<div class="tablenoborder"><a name="css_01_0382__table123121443185113"></a><a name="table123121443185113"></a><table cellpadding="4" cellspacing="0" summary="" id="css_01_0382__table123121443185113" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Methods for logging in to an Elasticsearch cluster through Kibana</caption><thead align="left"><tr id="css_01_0382__row7312843185110"><th align="left" class="cellrowborder" valign="top" width="25%" id="mcps1.3.3.2.4.1.1"><p id="css_01_0382__p17312343195117">Kibana Access Method</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.4.1.2"><p id="css_01_0382__p231274335116">Constraints</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="25%" id="mcps1.3.3.2.4.1.3"><p id="css_01_0382__p18312174318513">Details</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0382__row10312943185115"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.1 "><p id="css_01_0382__p1931274375115">One-click access to Kibana from the service console</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.1.2 "><p id="css_01_0382__p20312184315112">N/A</p>
</td>
<td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.3 "><p id="css_01_0382__p1131294311516"><a href="#css_01_0382__en-us_topic_0000001428595166_section3544291266">Logging In to an Elasticsearch Cluster by Accessing Kibana Through the Console</a></p>
</td>
</tr>
<tr id="css_01_0382__row10312194320519"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.1 "><p id="css_01_0382__p15312194325120">Accessing Kibana using a public IP address</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.1.2 "><ul id="css_01_0382__ul145885213222"><li id="css_01_0382__li107458461238">Only clusters in security mode support Kibana access through a public IP address.</li><li id="css_01_0382__li1188105414468">Kibana public network access cannot be enabled for Elasticsearch security-mode clusters created before June 2020, that is, when the feature first became available.</li><li id="css_01_0382__li695318514719">The whitelist that controls Kibana public network access depends on whitelist support by the ELB service. After you update the whitelist, the new settings take effect immediately for new connections. For existing persistent connections using the IP addresses that have been removed from the whitelist, the new settings take effect in approximately 1 minute after these connections are disconnected.</li></ul>
</td>
<td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.3 "><p id="css_01_0382__p1331274311515"><a href="#css_01_0382__section311713401714">Logging In to an Elasticsearch Cluster by Accessing Kibana Using a Public IP Address</a></p>
</td>
</tr>
<tr id="css_01_0382__row143121943125114"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.1 "><p id="css_01_0382__p19312194335114">Accessing Kibana using a private network address</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.4.1.2 "><p id="css_01_0382__p19312144305111">Only servers in the same VPC can access Kibana using a private network address of the Elasticsearch cluster.</p>
</td>
<td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.3.2.4.1.3 "><p id="css_01_0382__p33124439516"><a href="#css_01_0382__section207611526916">Logging In to an Elasticsearch Cluster by Accessing Kibana Using a Private Network Address</a></p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="section" id="css_01_0382__section10349618115613"><h4 class="sectiontitle">Constraints on Kibana Usage</h4><ul id="css_01_0382__ul1467020359187"><li id="css_01_0382__li10670635191819">You can customize the username, role name, and tenant name in Kibana.</li></ul>
</div>
<div class="section" id="css_01_0382__en-us_topic_0000001428595166_section3544291266"><a name="css_01_0382__en-us_topic_0000001428595166_section3544291266"></a><a name="en-us_topic_0000001428595166_section3544291266"></a><h4 class="sectiontitle">Logging In to an Elasticsearch Cluster by Accessing Kibana Through the Console</h4><ol id="css_01_0382__en-us_topic_0000001428595166_ol19122182891618"><li id="css_01_0382__en-us_topic_0000001428595166_li17122102801616">Log in to the <span id="css_01_0382__text578440138111555">CSS</span> management console.</li><li id="css_01_0382__en-us_topic_0000001428595166_li112262815169">On the <span class="uicontrol" id="css_01_0382__en-us_topic_0000001428595166_uicontrol51229281162"><b>Clusters</b></span> page, locate the target cluster and click <span class="parmvalue" id="css_01_0382__en-us_topic_0000001428595166_parmvalue4122102817161"><b>Access Kibana</b></span> in the <span class="uicontrol" id="css_01_0382__en-us_topic_0000001428595166_uicontrol14122328131613"><b>Operation</b></span> column to go to the Kibana login page.<ul id="css_01_0382__en-us_topic_0000001428595166_ul20122192891614"><li id="css_01_0382__en-us_topic_0000001428595166_li412212815169">Non-security cluster: The Kibana console is displayed without asking for a username and password.</li><li id="css_01_0382__en-us_topic_0000001428595166_li612219289162">Security cluster: Enter the username and password on the login page and click <span class="uicontrol" id="css_01_0382__en-us_topic_0000001428595166_uicontrol01221228121616"><b>Log In</b></span> to log in to the Kibana console. The default username is <strong id="css_01_0382__en-us_topic_0000001428595166_b58112074224321">admin</strong> and the password is the one specified during cluster creation.</li></ul>
</li><li id="css_01_0382__en-us_topic_0000001428595166_li1812242815165">After the login is successful, you can access clusters through Kibana.</li></ol>
</div>
<div class="section" id="css_01_0382__section311713401714"><a name="css_01_0382__section311713401714"></a><a name="section311713401714"></a><h4 class="sectiontitle">Logging In to an Elasticsearch Cluster by Accessing Kibana Using a Public IP Address</h4><div class="note" id="css_01_0382__note37617321133"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="css_01_0382__ul49328235471"><li id="css_01_0382__css_01_0382_li107458461238">Only clusters in security mode support Kibana access through a public IP address.</li><li id="css_01_0382__css_01_0382_li1188105414468">Kibana public network access cannot be enabled for Elasticsearch security-mode clusters created before June 2020, that is, when the feature first became available.</li><li id="css_01_0382__css_01_0382_li695318514719">The whitelist that controls Kibana public network access depends on whitelist support by the ELB service. After you update the whitelist, the new settings take effect immediately for new connections. For existing persistent connections using the IP addresses that have been removed from the whitelist, the new settings take effect in approximately 1 minute after these connections are disconnected.</li></ul>
<ul id="css_01_0382__ul744894312231"><li id="css_01_0382__li1992510296488">If you disable Kibana public network access and then re-enable it, the public IP address for accessing Kibana may change. Exercise caution.</li></ul>
</div></div>
<ol id="css_01_0382__ol718616359918"><li id="css_01_0382__li3663173615112">Log in to the CSS management console.</li><li id="css_01_0382__li41863351196">Enable Kibana public network access for the Elasticsearch cluster. You can do that either when creating an Elasticsearch cluster or afterwards.<ul id="css_01_0382__ul1198731165"><li id="css_01_0382__li4986316160">For how to enable Kibana public network access when creating an Elasticsearch cluster, see <a href="css_01_0380.html">Creating an Elasticsearch Cluster</a>.</li><li id="css_01_0382__li16982381617">To enable public network access for Kibana for an existing cluster, perform the following steps:<ol type="a" id="css_01_0382__en-us_topic_0000001268394285_ol179019266146"><li id="css_01_0382__en-us_topic_0000001268394285_li106254357143">Choose <strong id="css_01_0382__b80788353042354">Clusters</strong> in the navigation pane. On the <span class="wintitle" id="css_01_0382__wintitle122154213542354"><b>Clusters</b></span> page, click the name of the target cluster.</li><li id="css_01_0382__en-us_topic_0000001268394285_li341918231507">Click the <strong id="css_01_0382__b7799435384">Kibana Public Access</strong> tab, and enable <strong id="css_01_0382__b98004351187">Kibana Public Access</strong>.</li><li id="css_01_0382__en-us_topic_0000001268394285_li78118230213">On the displayed page, set parameters. If Kibana public network access is already enabled, you can modify relevant settings.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0382__en-us_topic_0000001268394285_table145611511676" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Configuring public network access for Kibana</caption><thead align="left"><tr id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_row13115543918"><th align="left" class="cellrowborder" valign="top" width="30%" id="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.1"><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p6115643517">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="70%" id="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.2"><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p1611564318117">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_row15116743917"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.1 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p10116443611">Bandwidth</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.2 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p1911615431411">Bandwidth for accessing Kibana through a public IP address</p>
<p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p458617258523">Value range: 1 to 100.</p>
<p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p209154432526">Unit: Mbit/s</p>
</td>
</tr>
<tr id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_row1811610437113"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.1 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p911634315111">Access Control</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.2 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p4116114313112">If you disable this function, all IP addresses can access Kibana through the public IP address. If you enable this function, only IP addresses or IP address ranges in the whitelist can access Kibana through the public IP address.</p>
</td>
</tr>
<tr id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_row191163438120"><td class="cellrowborder" valign="top" width="30%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.1 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p911694312110">Whitelist</p>
</td>
<td class="cellrowborder" valign="top" width="70%" headers="mcps1.3.6.3.2.1.2.1.3.1.2.3.1.2 "><p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p4116164313119">IP addresses or IP address ranges allowed to access the cluster. Use commas (,) to separate multiple IP addresses or ranges. This parameter can be configured only when <strong id="css_01_0382__css_01_0380_b200581461025619">Access Control</strong> is enabled.</p>
<p id="css_01_0382__css_01_0380_en-us_topic_0000001268394285_p4726101014818">You are advised to enable the whitelist.</p>
<div class="note" id="css_01_0382__css_01_0380_note367029122416"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="css_01_0382__css_01_0380_p171085328241">The whitelist that controls Kibana public network access depends on whitelist support by the ELB service. After you update the whitelist, the new settings take effect immediately for new connections. For existing persistent connections using the IP addresses that have been removed from the whitelist, the new settings take effect in approximately 1 minute after these connections are disconnected.</p>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</li><li id="css_01_0382__en-us_topic_0000001268394285_li10845133416104">Click <strong id="css_01_0382__b10428773942354">OK</strong>.</li></ol>
</li></ul>
</li><li id="css_01_0382__li2493238175917">After Kibana public network access is enabled, obtain the Kibana public IP address on the <strong id="css_01_0382__b6326175471715">Kibana Public Access</strong> page.</li><li id="css_01_0382__li2613145095913">Enter the public IP address for Kibana in the browser address box to go to the Kibana login page.<p id="css_01_0382__p1167441914347"><a name="css_01_0382__li2613145095913"></a><a name="li2613145095913"></a>Enter the username and password on the login page and click <span class="uicontrol" id="css_01_0382__uicontrol447733401718"><b>Log In</b></span> to log in to the Kibana console. The default username is <strong id="css_01_0382__b155466311182">admin</strong> and the password is the administrator password you specified during cluster creation.</p>
</li><li id="css_01_0382__li61231640803">After the login is successful, you can access the Elasticsearch cluster through Kibana.</li></ol>
</div>
<div class="section" id="css_01_0382__section207611526916"><a name="css_01_0382__section207611526916"></a><a name="section207611526916"></a><h4 class="sectiontitle">Logging In to an Elasticsearch Cluster by Accessing Kibana Using a Private Network Address</h4><div class="note" id="css_01_0382__note0672161312216"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_01_0382__p98320511928">Only servers in the same VPC can access Kibana using a private network address of the Elasticsearch cluster.</p>
</div></div>
<ol id="css_01_0382__ol188058223"><li id="css_01_0382__li128801887214">Log in to the CSS management console.</li><li id="css_01_0382__li138731117748">On the <strong id="css_01_0382__b515010363223">Clusters</strong> page, click the name of a cluster. The <strong id="css_01_0382__b151516363227">Cluster Information</strong> page is displayed.</li><li id="css_01_0382__li1035913231757">On the <strong id="css_01_0382__b1820912329233">Cluster Information</strong> page, obtain the cluster's private network address.<div class="fignone" id="css_01_0382__fig2025218384518"><span class="figcap"><b>Figure 1 </b>Obtaining the private IP address</span><br><span><img id="css_01_0382__image1225211382055" src="en-us_image_0000001975979129.png"></span></div>
</li><li id="css_01_0382__li159263615107">Change the port number in the cluster's private network address from <strong id="css_01_0382__b196220209253">9200</strong> to <strong id="css_01_0382__b1478452292517">5601</strong>, which becomes the private network address of Kibana. For example, if the cluster's private network IPv4 address is <strong id="css_01_0382__b651677102612">192.168.0.***:9200</strong>, the private network address of Kibana is <strong id="css_01_0382__b878113168263">192.168.0.***:5601</strong>.</li><li id="css_01_0382__li1882885214">On the server, enter the private network address of Kibana to go to the Kibana login page.<ul id="css_01_0382__ul3882986211"><li id="css_01_0382__css_01_0382_en-us_topic_0000001428595166_li412212815169">Non-security cluster: The Kibana console is displayed without asking for a username and password.</li><li id="css_01_0382__css_01_0382_en-us_topic_0000001428595166_li612219289162">Security cluster: Enter the username and password on the login page and click <span class="uicontrol" id="css_01_0382__css_01_0382_en-us_topic_0000001428595166_uicontrol01221228121616"><b>Log In</b></span> to log in to the Kibana console. The default username is <strong id="css_01_0382__css_01_0382_en-us_topic_0000001428595166_b58112074224321">admin</strong> and the password is the one specified during cluster creation.</li></ul>
</li><li id="css_01_0382__li188821381226">After the login is successful, you can access the Elasticsearch cluster through Kibana.</li></ol>
</div>
<div class="section" id="css_01_0382__section13511426964"><h4 class="sectiontitle">More: Configuring a Custom Kibana Base Path for Public Network Access</h4><p id="css_01_0382__p910855816815">With Elasticsearch 7.10.2, you can configure a custom Base Path for Kibana access after Kibana public network access is enabled. Or you can use the default Kibana Base Path instead.</p>
<div class="notice" id="css_01_0382__note109731551680"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><ul id="css_01_0382__ul172721572194"><li id="css_01_0382__li3540161472715">This feature is available for Elasticsearch 7.10.2 clusters (the image version is no earlier than 7.10.2_24.3.3_x.x.x) for which Kibana public network access is enabled.</li><li id="css_01_0382__li05586921912">Only the cluster administrator <strong id="css_01_0382__b72181933131915">admin</strong> under Global Tenant has the permission to configure a custom Kibana Base Path, which applies globally.</li></ul>
</div></div>
<ol id="css_01_0382__ol1447841514810"><li id="css_01_0382__li622171716132">Log in to the CSS management console.</li><li id="css_01_0382__li3224141761315">Choose <strong id="css_01_0382__b10095030153059">Clusters</strong> &gt; <strong id="css_01_0382__b169669224">Elasticsearch</strong> in the navigation pane. On the <span class="uicontrol" id="css_01_0382__uicontrol128196384853059"><b>Clusters</b></span> page, locate the target cluster and click <span class="uicontrol" id="css_01_0382__uicontrol2370263053059"><b>Access Kibana</b></span> in the <strong id="css_01_0382__b159109328553059">Operation</strong> column.</li><li id="css_01_0382__li11194728121310">Log in to Kibana using an administrator account.<ul id="css_01_0382__ul11224131791311"><li id="css_01_0382__li18223171731318">Username: <strong id="css_01_0382__b92808070553059">admin</strong> (default administrator account)</li><li id="css_01_0382__li1722491721319">Password: Enter the administrator password you set when creating the cluster in security mode.</li></ul>
</li><li id="css_01_0382__li14379949186">After a successful login, choose <span class="wintitle" id="css_01_0382__wintitle1629173114257"><b>Stack Management</b></span> in the left navigation pane of the Kibana console.</li><li id="css_01_0382__li18164182382820">Choose <strong id="css_01_0382__b177439501032">Advanced Settings</strong> on the left of the <strong id="css_01_0382__b156513561837">Stack Management</strong> page.</li><li id="css_01_0382__li699341872910">On the <strong id="css_01_0382__b24871654411">Settings</strong> page, set <strong id="css_01_0382__b57541513549">Base Path Alias</strong>. The value must start with a slash (/) and must not end with one. A multi-layer path is allowed, but its length cannot exceed 255 characters.<div class="fignone" id="css_01_0382__fig198531244113119"><span class="figcap"><b>Figure 2 </b>Custom Base Path</span><br><span><img id="css_01_0382__image985319448311" src="en-us_image_0000002120318316.png"></span></div>
</li><li id="css_01_0382__li17211101319172">Click <span class="uicontrol" id="css_01_0382__uicontrol1465702219354"><b>Save changes</b></span>. The saved changes take effect in approximately 10 seconds.</li><li id="css_01_0382__li6987194241414">Access Kibana using the Kibana public network address plus <em id="css_01_0382__i3459526144017">Base Path Alias</em>.<p id="css_01_0382__p456063141810">For example, if the Kibana public network address of the Elasticsearch cluster is <span class="parmvalue" id="css_01_0382__parmvalue2902151914"><b>https://xx.xx.xx.xx:5601</b></span> and the configured <span class="parmname" id="css_01_0382__parmname1340132142011"><b>Base Path Alias</b></span> is <span class="parmvalue" id="css_01_0382__parmvalue1223042322018"><b>/test</b></span>, you can access Kibana via <span class="parmvalue" id="css_01_0382__parmvalue9122832172015"><b>https://xx.xx.xx.xx:5601/test</b></span> from the public network.</p>
</li></ol>
</div>
<div class="section" id="css_01_0382__section184711937193613"><h4 class="sectiontitle">Related Documents</h4><ul id="css_01_0382__ul11873395413"><li id="css_01_0382__li475333434617">For details about how to use in-house developed Kibana to access Elasticsearch clusters in CSS, see </li><li id="css_01_0382__li1418793916418">For routine O&amp;M tasks (such as shard adjustment, index management, and performance monitoring), you are advised to use Cerebro for cluster login. For details, see <a href="css_01_0383.html">Logging In to an Elasticsearch Cluster Through Cerebro</a>.</li></ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0210.html">Accessing Elasticsearch Clusters</a></div>
</div>
</div>