ZeaburThis template deploys a secure, production-ready single-node Elasticsearch with Kibana, using official Elastic images. Password and SSL are enabled by default.
ELK does not provide a one-click deployment. You should follow the instructions below to get a secured instance of ELK:
Deploy the stack
Run the following command in "Terminal" to create a service account token for Kibana.
$ ./bin/elasticsearch-service-tokens create elastic/kibana kibana
SERVICE_TOKEN elastic/kibana/kibana2 = <your-service-token>
Fill the service token to the Kibana environment variable ELASTICSEARCH_SERVICEACCOUNTTOKEN.
Restart the Kibana service.
Generate the encryption keys for Kibana. Run the following command in "Terminal":
$ bin/kibana-encryption-keys generate
## Kibana Encryption Key Generation Utility
The 'generate' command guides you through the process of setting encryption keys for:
xpack.encryptedSavedObjects.encryptionKey
Used to encrypt stored objects such as dashboards and visualizations
https://www.elastic.co/guide/en/kibana/current/xpack-security-secure-saved-objects. html#xpack-security-secure-saved-objects
xpack.reporting.encryptionKey
Used to encrypt saved reports
https://www.elastic.co/guide/en/kibana/current/reporting-settings-kb. html#general-reporting-settings
xpack.security.encryptionKey
Used to encrypt session information
https://www.elastic.co/guide/en/kibana/current/security-settings-kb. html#security-session-and-cookie-settings
Already defined settings are ignored and can be regenerated using the --force flag. Check the documentation links for instructions on how to rotate encryption keys.
Definitions should be set in the kibana.yml used configure Kibana.
Settings:
xpack.encryptedSavedObjects.encryptionKey: <XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY>
xpack.reporting.encryptionKey: <XPACK_REPORTING_ENCRYPTIONKEY>
xpack.security.encryptionKey: <XPACK_SECURITY_ENCRYPTIONKEY>
XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY, XPACK_REPORTING_ENCRYPTIONKEY, and XPACK_SECURITY_ENCRYPTIONKEY.https://<your-elasticsearch-domain>:9200https://<your-kibana-domain>:5601 (Web-based visualization interface)Check the instruction section of the Kibana service to get the default credentials.
Login to Kibana using the elastic username and the auto-generated password to start exploring, visualizing, and managing your Elasticsearch data through the intuitive web interface.
Zeabur