This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.

› › ›

Enroll Kibana API

edit

Enroll Kibana API

edit

Enables a Kibana instance to configure itself for communication with a secured Elasticsearch cluster.

This API is currently intended for internal use only by Kibana.

Request

edit

GET /_security/enroll/kibana

Description

edit

Kibana uses this API internally to configure itself for communications with an Elasticsearch cluster that already has security features enabled.

Examples

edit

The following example shows how to enroll a Kibana instance.

resp = client.security.enroll_kibana()
print(resp)

const response = await client.security.enrollKibana();
console.log(response);

GET /_security/enroll/kibana

The API returns the following response:

{
  "token" : {
    "name" : "enroll-process-token-1629123923000", 
    "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" 
  },
  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", 
}

	The name of the bearer token for the `elastic/kibana` service account.
	The value of the bearer token for the `elastic/kibana` service account. Use this value to authenticate the service account with Elasticsearch.
	The CA certificate used to sign the node certificates that Elasticsearch uses for TLS on the HTTP layer. The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.

« Enable users API Enroll Node API »