Updates the IP address whitelist for access to the Kibana console of a specified Elasticsearch cluster.

Note Before you call this operation, make sure that the instance is not in the activating, invalid, or inactive state.


OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request headers

This operation uses only common request headers. For more information, see Common request parameters.

Request syntax

     PATCH|POST /openapi/instances/[InstanceId]/kibana-white-ips HTTP/1.1 

Request parameters

Parameter Type Position Required Example Description
InstanceId String Path Yes es-cn-tl329rbpc0001****

The ID of the instance.

clientToken String Query No 5A2CFF0E-5718-45B5-9D4D-70B3FF****

A unique token generated by the client to guarantee the idempotency of the request. You can use the client to generate the value, but you must ensure that it is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length.

modifyMode String Query No Cover

The modification method. Valid values:

  • Cover (default): overwrites the original IP address whitelist with the value of the ips parameter.
  • Append: Add the IP addresses entered in the ips parameter to the original IP address whitelist.
  • Delete: Delete the IP addresses entered in the ips parameter from the original IP address whitelist. You must retain at least one IP address.

You must also specify the following parameters in RequestBody to specify the whitelist to be updated.










The Kibana access whitelist to be updated.




{"groupName": "test_group_name", "ips": ["", "10.2.XX.XX"]}

Update the whitelist security configurations of an instance by using whitelist group whitelist parameters. You can update only one whitelist group.

└ groupName


Required in whiteIpGroup


The group name of the whitelist group.

└ ips


Required in whiteIpGroup

["", "10.2.XX.XX"]

The list of IP addresses in the whitelist group.


If the modifyMode parameter is set to Cover, the whitelist group is deleted if ips is empty.

If the modifyMode parameter is set to Cover, a new whitelist group is created if groupName is not in the list of existing whitelist group names.

If modifyMode is set to Delete, the deleted ips must retain at least one IP address.

If modifyMode is set to Append, ensure that the whitelist group name is created. Otherwise, NotFound is reported.

The addition and deletion of a whitelist group is implemented by calling modifyMode to Cover. Delete and Append cannot add or delete the whitelist group granularity, and can only modify the IP list in the whitelist group.

Response parameters

Parameter Type Example Description
RequestId String E5EF11F1-DBAE-4020-AC24-DFA6C4345CAE

The ID of the request.

Result Struct

The returned results.

kibanaIPWhitelist List [ "0.0.XX.XX", "10.2.XX.XX", "110.0.XX.XX/9" ]

The list of Kibana access whitelists.

kibanaPrivateIPWhitelist List [ "192.168.XX.XX/24" ]

The Kibana private network access whitelist.

The following returned parameter information is guaranteed to contain only the parameter information mentioned in the above returned parameter table, and the parameter information not mentioned is for reference only, and the program cannot be forced to rely on these parameters.


Sample requests

     POST /openapi/instances/es-cn-tl329rbpc0001****/kibana-white-ips HTTP/1.1 { "kibanaIPWhitelist": [ "110.0.XX.XX/8" ] } or { "whiteIpGroup": { "groupName": "test_group_name", "ips": [ "", "10.2.XX.XX" ] } } 

Sample success responses

JSON format

     { "Result": { "instanceId": "es-cn-tl329rbpc0001****", "version": "7.10.0_with_X-Pack", "description": "lrr", "nodeAmount": 0, "paymentType": "postpaid", "status": "active", "privateNetworkIpWhiteList": [ "11.22.XX.XX", "0.0.XX.XX/0" ], "enablePublic": false, "nodeSpec": {}, "dataNode": false, "networkConfig": { "vpcId": "vpc-bp1jy348ibzulk6hn65xf", "vswitchId": "vsw-bp1a0mifpletdd1dakx5j", "vsArea": "cn-hangzhou-h", "whiteIpGroupList": [ { "groupName": "default", "ips": [ "0.0.XX.XX/0", "11.22.XX.XX" ], "whiteIpType": "PRIVATE_ES" }, { "groupName": "default", "ips": [ "110.0.XX.XX/9" ], "whiteIpType": "PUBLIC_KIBANA" }, { "groupName": "default", "ips": [ "192.168.XX.XX/24" ], "whiteIpType": "PRIVATE_KIBANA" }, { "groupName": "test_group_name", "ips": [ "0.0.XX.XX", "10.2.XX.XX" ], "whiteIpType": "PUBLIC_KIBANA" } ], "type": "vpc" }, "createdAt": "2021-07-21T01:29:38.510Z", "updatedAt": "2021-07-21T06:12:12.370Z", "commodityCode": "elasticsearch", "extendConfigs": [ { "configType": "usageScenario", "value": "log" }, { "configType": "maintainTime", "maintainStartTime": "02:00Z", "maintainEndTime": "06:00Z" }, { "configType": "aliVersion", "aliVersion": "ali1.4.0" }, { "configType": "followCube", "followClusterEnabled": true } ], "endTime": 4782556800000, "clusterTasks": [], "vpcInstanceId": "es-cn-tl329rbpc0001****-worker", "resourceGroupId": "rg-acfmxxkk2p7****", "zoneCount": 1, "protocol": "HTTP", "zoneInfos": [ { "zoneId": "cn-hangzhou-h", "status": "NORMAL" } ], "instanceType": "elasticsearch", "inited": true, "tags": [ { "tagKey": "acs:rm:rgId", "tagValue": "rg-acfmxxkk2p7****" } ], "serviceVpc": true, "domain": "es-cn-tl329rbpc0001****.elasticsearch.aliyuncs.com", "port": 9200, "esVersion": "7.10.0_with_X-Pack", "esConfig": { "action.destructive_requires_name": "true", "xpack.watcher.enabled": "false", "action.auto_create_index": "+.*,-*" }, "esIPWhitelist": [ "11.22.XX.XX", "0.0.XX.XX/0" ], "esIPBlacklist": [], "kibanaProtocol": "HTTPS", "kibanaIPWhitelist": [ "", "10.2.XX.XX", "110.0.XX.XX/9" ], "kibanaPrivateIPWhitelist": [ "192.168.XX.XX/24" ], "publicIpWhitelist": [], "kibanaDomain": "es-cn-tl329rbpc0001****.kibana.elasticsearch.aliyuncs.com", "kibanaPort": 5601, "kibanaPrivateDomain": "es-cn-tl329rbpc0001****-kibana.internal.elasticsearch.aliyuncs.com", "kibanaPrivatePort": 5601, "haveKibana": true, "instanceCategory": "IS", "dedicateMaster": false, "advancedDedicateMaster": false, "masterConfiguration": {}, "haveClientNode": false, "warmNode": true, "warmNodeConfiguration": { "spec": "elasticsearch.d1.2xlarge", "amount": 3 }, "clientNodeConfiguration": {}, "kibanaConfiguration": { "spec": "elasticsearch.n4.small", "amount": 1, "disk": 0 }, "elasticDataNodeConfiguration": {}, "haveElasticDataNode": false, "dictList": [ { "name": "SYSTEM_MAIN.dic", "fileSize": 2782602, "sourceType": "ORIGIN", "type": "MAIN" }, { "name": "SYSTEM_STOPWORD.dic", "fileSize": 132, "sourceType": "ORIGIN", "type": "STOP" } ], "synonymsDicts": [], "ikHotDicts": [], "aliwsDicts": [], "haveGrafana": false, "haveCerebro": false, "enableKibanaPublicNetwork": true, "enableKibanaPrivateNetwork": true, "advancedSetting": { "gcName": "CMS" }, "enableMetrics": true, "readWritePolicy": { "writeHa": false } }, "RequestId": "E815C5C9-E82D-4B10-BDE0-D25340C2ACEF" } 

Error codes

HttpCode Error code Error message Description
400 InstanceActivating Instance is activating. The instance is currently in effect.
400 InstanceNotFound The instanceId provided does not exist. The instance cannot be found. Check the instance status.

For a list of error codes, visit the API Error Center.