Enroll Kibana API

edit

Enables a Kibana instance to configure itself for communication with a secured Elasticsearch cluster.

This API is currently intended for internal use only by Kibana.

Request

edit

GET /_security/enroll/kibana

Description

edit

Kibana uses this API internally to configure itself for communications with an Elasticsearch cluster that already has security features enabled.

Examples

edit

The following example shows how to enroll a Kibana instance.

GET /_security/enroll/kibana

The API returns the following response:

{
  "token" : {
    "name" : "enroll-process-token-1629123923000", 
    "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" 
  },
  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", 
}

The name of the bearer token for the elastic/kibana service account.

The value of the bearer token for the elastic/kibana service account. Use this value to authenticate the service account with Elasticsearch.

The CA certificate used to sign the node certificates that Elasticsearch uses for TLS on the HTTP layer. The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.