Kibana

Access Kibana Web UI:

Open your browser at http://<server-ip>:5601

Important Directories:

• Config: /etc/kibana
• Data: /var/lib/kibana
• Logs: /var/log/kibana
• Binaries: /usr/share/kibana/bin
• Plugins: /usr/share/kibana/plugins

Manage Kibana Service:

Use systemctl commands to check status, restart, or enable Kibana:

systemctl status kibana
systemctl restart kibana
systemctl stop kibana
systemctl start kibana

Enrolling Kibana (Optional):

1. On the Elasticsearch server, generate an enrollment token:

/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana

2. Copy the token, then on the Kibana server run:

/usr/share/kibana/bin/kibana-setup --enrollment-token "<your-token>"

3. Restart the Kibana service (on the Kibana server):

systemctl restart kibana

This securely links Kibana to Elasticsearch.