forked from docs/doc-exports
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: zhengxiu <zhengxiu@huawei.com> Co-committed-by: zhengxiu <zhengxiu@huawei.com>
43 lines
6.8 KiB
HTML
43 lines
6.8 KiB
HTML
<a name="EN-US_TOPIC_0000001960397601"></a><a name="EN-US_TOPIC_0000001960397601"></a>
|
|
|
|
<h1 class="topictitle1">How Do I Connect In-house Developed Kibana to an Elasticsearch Cluster in CSS?</h1>
|
|
<div id="body1607331461686"><div class="section" id="EN-US_TOPIC_0000001960397601__section5307125464920"><h4 class="sectiontitle">Constraints</h4><p id="EN-US_TOPIC_0000001960397601__p111011578497">Only Kibana images of the OSS version can be connected to Elasticsearch clusters in CSS.</p>
|
|
</div>
|
|
<div class="section" id="EN-US_TOPIC_0000001960397601__section1779411035010"><h4 class="sectiontitle">Procedure</h4><ol id="EN-US_TOPIC_0000001960397601__ol20533192815573"><li id="EN-US_TOPIC_0000001960397601__li2534142811579">Create an ECS.<ul id="EN-US_TOPIC_0000001960397601__ul95309321314"><li id="EN-US_TOPIC_0000001960397601__li8530932812">The ECS must be within the same VPC as the CSS cluster.</li><li id="EN-US_TOPIC_0000001960397601__li55301132616">Port 5601 must be allowed by the security group associated with the ECS.</li><li id="EN-US_TOPIC_0000001960397601__li253063217114">An EIP must be allocated to the ECS.</li></ul>
|
|
<p id="EN-US_TOPIC_0000001960397601__p328551712584">For details, see Elastic Cloud Server User Guide.</p>
|
|
</li><li id="EN-US_TOPIC_0000001960397601__li276773217411">Obtain the address for accessing the Elasticsearch cluster of CSS.<ol type="a" id="EN-US_TOPIC_0000001960397601__en-us_topic_0000001975823337_ol15355114704317"><li id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_li962471018233"><span id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_ph1162461016234">Log in to the CSS management console.</span></li><li id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_li562441032314">In the navigation pane on the left, choose <span class="uicontrol" id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_uicontrol206034223985117"><b>Clusters > Elasticsearch</b></span>.</li><li id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_en-us_topic_0000001961178833_li392216231538">In the cluster list, obtain the target cluster's private IP address from the <strong id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_b7217183618175">Private IP Address</strong> column. Generally, the IP address format is <em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i8377769238175"><host></em>:<em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i16969141938175"><port></em> or <em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i18383433328175"><host></em>:<em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i16522841718175"><port></em>,<em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i6783075698175"><host></em>:<em id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_i18005065588175"><port></em>.<p id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_en-us_topic_0000001961178833_p18422185125018">If the cluster has only one node, the IP address and port number of this single node are displayed, for example, <span class="parmvalue" id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_en-us_topic_0000001961178833_parmvalue1916781025515"><b>10.62.179.32:9200</b></span>. If the cluster has multiple nodes and all of them are data nodes, the IP addresses and port numbers of all these nodes are displayed; if some of them are client nodes, only the IP addresses and port numbers of these client nodes are displayed; for example, <span class="parmvalue" id="EN-US_TOPIC_0000001960397601__en-us_topic_0000002338102386_en-us_topic_0000001961178833_parmvalue1425141583119"><b>10.62.179.32:9200,10.62.179.33:9200</b></span>.</p>
|
|
</li></ol>
|
|
</li><li id="EN-US_TOPIC_0000001960397601__li1215720258419">Install Kibana on the ECS and modify the <span class="filepath" id="EN-US_TOPIC_0000001960397601__filepath6255175717531"><b>kibana.yml</b></span> configuration file.<ul id="EN-US_TOPIC_0000001960397601__ul2644425182118"><li id="EN-US_TOPIC_0000001960397601__li8644132515217">The following is an example of the configuration file for a security-mode cluster:<pre class="screen" id="EN-US_TOPIC_0000001960397601__screen96442251219">elasticsearch.username: "***" //Username of the security cluster
|
|
elasticsearch.password: "***" //Password of the security cluster
|
|
elasticsearch.ssl.verificationMode: none
|
|
server.ssl.enabled: false
|
|
server.rewriteBasePath: false
|
|
server.port: 5601
|
|
logging.dest: /home/Ruby/log/kibana.log
|
|
pid.file: /home/Ruby/run/kibana.pid
|
|
server.host: 192.168.xxx.xxx //IP address or DNS name of the Kibana server. localhost is recommended.
|
|
elasticsearch.hosts: http://10.0.0.xxx:9200 //Address for accessing the Elasticsearch cluster
|
|
elasticsearch.requestHeadersWhitelist: ["securitytenant","Authorization"]
|
|
opendistro_security.multitenancy.enabled: true
|
|
opendistro_security.multitenancy.tenants.enable_global: true
|
|
opendistro_security.multitenancy.tenants.enable_private: true
|
|
opendistro_security.multitenancy.tenants.preferred: ["Private", "Global"]
|
|
opendistro_security.multitenancy.enable_filter: false</pre>
|
|
<div class="caution" id="EN-US_TOPIC_0000001960397601__note3578134012018"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="EN-US_TOPIC_0000001960397601__p146670617118">To access a security-mode cluster, the opendistro_security_kibana plug-in must be installed. For details, see <a href="https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/tags?after=v1.3.0.0" target="_blank" rel="noopener noreferrer">security-kibana-plugin</a>. The plug-in version must be the same as that of the cluster. To check the plug-in version, run the <b><span class="cmdname" id="EN-US_TOPIC_0000001960397601__cmdname5645202552119">GET _cat/plugins</span></b> command.</p>
|
|
</div></div>
|
|
</li><li id="EN-US_TOPIC_0000001960397601__li264518251218">The following is an example of the configuration file for a non-security mode cluster:<pre class="screen" id="EN-US_TOPIC_0000001960397601__screen06451925182118">server.port: 5601
|
|
logging.dest: /home/Ruby/log/kibana.log
|
|
pid.file: /home/Ruby/run/kibana.pid
|
|
server.host: 192.168.xxx.xxx //IP address or DNS name of the Kibana server. localhost is recommended.
|
|
elasticsearch.hosts: http://10.0.0.xxx:9200 //Address for accessing the Elasticsearch cluster</pre>
|
|
</li></ul>
|
|
</li><li id="EN-US_TOPIC_0000001960397601__li24576225335">Use a browser on your local PC to connect to the EIP associated with the ECS. The URL is <span class="parmvalue" id="EN-US_TOPIC_0000001960397601__parmvalue15721455121819"><b>http://EIP:5601</b></span>. Log in to Kibana to access the Elasticsearch cluster.</li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_02_0077.html">Accessing CSS Clusters</a></div>
|
|
</div>
|
|
</div>
|
|
|