Elasticsearch:Log on to the Kibana console

Background information

The Kibana console provided by Alibaba Cloud Elasticsearch allows you to expand your business. The Kibana console is seamlessly integrated into Elasticsearch. You can use the Kibana console to view the status of your Elasticsearch cluster in real time and manage the cluster.

Prerequisites

Architecture description

Alibaba Cloud Elasticsearch provides a new control architecture, which is the cloud-native control architecture, for some clusters of higher versions. The operations that are performed to log on to the Kibana console of a cluster deployed based on the cloud-native control architecture differ from the operations that are performed to log on to the Kibana console of a cluster deployed based on the original control architecture. You can perform the following steps to determine the control architecture of a cluster:

1. Log on to the Alibaba Cloud Elasticsearch console.
2. In the left-side navigation pane, click Elasticsearch Clusters.
3. Navigate to the desired cluster.
   1. In the top navigation bar, select the resource group to which the cluster belongs and the region where the cluster resides.
   2. On the Elasticsearch Clusters page, find the cluster and click its ID.

4. In the left-side navigation pane of the page that appears, click Data Visualization.

5. In the Kibana section of the page that appears, click Edit Configuration.

6. On the Kibana Configuration page, determine the control architecture of the cluster based on the value of Public Network Port.

   • If the value of Public Network Port is 5601, the original control architecture is used for the cluster. For more information about how to log on to the Kibana console of the cluster, see Procedure (original control architecture).

   • If the value of Public Network Port is 443, the cloud-native control architecture is used for the cluster. For more information about how to log on to the Kibana console of the cluster, see Procedure (cloud-native control architecture).

Procedure (original control architecture)

1. Log on to the Alibaba Cloud Elasticsearch console.
2. In the left-side navigation pane, click Elasticsearch Clusters.
3. Navigate to the desired cluster.
   1. In the top navigation bar, select the resource group to which the cluster belongs and the region where the cluster resides.
   2. On the Elasticsearch Clusters page, find the cluster and click its ID.

4. In the left-side navigation pane of the page that appears, click Data Visualization.

5. In the Kibana section, click Access over Internal Network or Access over Internet.

   • Access over Internal Network: The Access over Internal Network entry is displayed only after you enable the Private Network Access feature for the Kibana console. This feature is disabled by default. For more information, see Configure a public or private IP address whitelist for Kibana.

     Note

     You can enable Private Network Access only if port 5601 is used for access to Kibana over the Internet. You can go to the console to check whether you can enable Private Network Access.

   • Access over Internet: The Access over Internet entry is displayed only after you enable the Public Network Access feature for the Kibana console. This feature is enabled by default. For more information, see Configure a public or private IP address whitelist for Kibana.

     Note

     • If this is the first time you are logging on to the Kibana console from the Access over Internet entry, and you have not modified the access configuration, the system prompts you to modify the configuration. In the Note message, click Edit Configuration. The Modify Public Network Whitelist panel appears. In this panel, add the IP address of your client to the whitelist. For more information, see Configure a public or private IP address whitelist for Kibana. After you modify the configuration, go back to the Data Visualization page and click Access over Internet again. Then, the Kibana logon page appears.

     • If your client is in a home network or in a LAN of an office, you must add the IP address of the Internet egress to the whitelist rather than the private IP address of the client. We recommend that you visit https://myip.ipip.net to query the IP address of the Internet egress. You can also specify 0.0.0.0/0 as the whitelist. If you make this configuration, all public IPv4 addresses can be used to access the Kibana console. This poses security risks. You must evaluate the risks before you make this configuration.

6. On the Kibana logon page, enter the username and password and click Log in.

   • Username: The default username is elastic. You can also customize a username. For more information, see Use the RBAC mechanism provided by Elasticsearch X-Pack to implement access control.

   • Password: the password that corresponds to the elastic username. The password of the elastic account is specified when you create the Elasticsearch cluster. If you forget the password, you can reset it. For more information about the procedure and precautions for resetting the password, see Reset the access password of an Elasticsearch cluster.

   After you log on to the Kibana console, you can perform the desired operations. For example, you can query data or create dashboards to present data. For more information, see Kibana Guide.

Procedure (cloud-native control architecture)

1. Log on to the Alibaba Cloud Elasticsearch console.
2. In the left-side navigation pane, click Elasticsearch Clusters.
3. Navigate to the desired cluster.
   1. In the top navigation bar, select the resource group to which the cluster belongs and the region where the cluster resides.
   2. On the Elasticsearch Clusters page, find the cluster and click its ID.

4. In the left-side navigation pane of the page that appears, click Data Visualization.

5. In the Kibana section of the page that appears, click Access over Internet.

   The Access over Internet entry is displayed only after you enable the Public Network Access feature for the Kibana console. This feature is enabled by default. For more information, see Configure a public or private IP address whitelist for Kibana.

   Note

   • If port 443 is used for access to Kibana over the Internet, you cannot enable Private Network Access.

   • If this is the first time you are logging on to the Kibana console from the Access over Internet entry, and you have not modified the access configuration, the system prompts you to modify the configuration. In the Note message, click Edit Configuration. The Modify Public Network Whitelist panel appears. In this panel, add the IP address of your client to the whitelist. For more information, see Configure a public or private IP address whitelist for Kibana. After you modify the configuration, go back to the Data Visualization page and click Access over Internet again. Then, the Kibana logon page appears.

   • If your client is in a home network or in a LAN of an office, you must add the IP address of the Internet egress to the whitelist rather than the private IP address of the client. We recommend that you visit https://myip.ipip.net to query the IP address of the Internet egress. You can also specify 0.0.0.0/0 as the whitelist. If you make this configuration, all public IPv4 addresses can be used to access the Kibana console. This poses security risks. You must evaluate the risks before you make this configuration.

6. On the Kibana logon page, enter the username and password and click Log in.

   • Username: The default username is elastic. You can also customize a username. For more information, see Use the RBAC mechanism provided by Elasticsearch X-Pack to implement access control.

   • Password: the password that corresponds to the elastic username. The password of the elastic account is specified when you create the Elasticsearch cluster. If you forget the password, you can reset it. For more information about the procedure and precautions for resetting the password, see Reset the access password of an Elasticsearch cluster.

   After you log on to the Kibana console, you can perform the desired operations. For example, you can query data or create dashboards to present data. For more information, see Kibana Guide.

FAQ

• How do I log on to the Kibana console? What are the username and password?

• What is the password of the elastic account used for?

• Can I use the Kibana console to access Internet services such as Baidu Maps and AMAP?

• How do I manage permissions in the Kibana console?

• What do I do if the Kibana console fails to start and displays the "Kibana server is not ready yet" message?

• What do I do if the "Maximum call stack size exceeded" error is reported when I use the Kibana console?

• An error is reported when I log on to the Kibana console, but I want to delete data from my cluster in the Kibana console. What do I do?

• What do I do if I fail to access the Dev Tools page in the Kibana console?

• How do I view the information of shards and indexes in the Kibana console?

• When I use the elastic account to create a user in the Kibana console, the "You do not have permission to manage users" message is displayed. What do I do?

• Can I install custom plug-ins for Kibana?

• In which Kibana versions can I change the language of the Kibana console?