Autenticación básica en Kibana

Raul Unzue Pulido 8 junio, 2020 Linux 2 Comentarios 3,024 Vistas

Autenticación básica en Kibana

A continuación, os explicamos como configurar la autenticación básica en Kibana.

Colocar el puerto 5601 en NGINX

[root@KIBANA nginx]# cat kibana.conf
server {
    listen 5601;

    server_name kibana.negu.local;

    location / {
        proxy_pass http://127.0.0.1:5601;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        auth_basic "Restricted Access";
        auth_basic_user_file /etc/nginx/.kibana-user;
    }
}

[root@KIBANA nginx]# cat kibana.conf

server {

listen 5601;

server_name kibana.negu.local;

location / {

proxy_pass http://127.0.0.1:5601;

proxy_http_version 1.1;

proxy_set_header Upgrade $http_upgrade;

proxy_set_header Connection 'upgrade';

proxy_set_header Host $host;

proxy_cache_bypass $http_upgrade;

auth_basic "Restricted Access";

auth_basic_user_file /etc/nginx/.kibana-user;

}

Añadir en el fichero /etc/elasticsearch/elasticsearch.yml el siguiente parámetro:

xpack.security.enabled: true

1	xpack.security.enabled: true

Lanzamos el configurador de ElasticSearch:

[root@KIBANA bin]# ./elasticsearch-setup-passwords interactive
Initiating the setup of passwords for reserved users elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y

[root@KIBANA bin]# ./elasticsearch-setup-passwords interactive

Initiating the setup of passwords for reserved users elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.

You will be prompted to enter passwords as the process progresses.

Please confirm that you would like to continue [y/N]y

Enter password for [elastic]:
Reenter password for [elastic]:
Enter password for [apm_system]:
passwords must be at least [6] characters long
Try again.
Enter password for [apm_system]:
passwords must be at least [6] characters long
Try again.
Enter password for [apm_system]:
Reenter password for [apm_system]:
Passwords do not match.
Try again.
Enter password for [apm_system]:
Reenter password for [apm_system]:
Enter password for [kibana]:
Reenter password for [kibana]:
Enter password for [logstash_system]:
Reenter password for [logstash_system]:
Enter password for [beats_system]:
Reenter password for [beats_system]:
Enter password for [remote_monitoring_user]:
Reenter password for [remote_monitoring_user]:
Changed password for user [apm_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]

Enter password for [elastic]:

Reenter password for [elastic]:

Enter password for [apm_system]:

passwords must be at least [6] characters long

Try again.

Enter password for [apm_system]:

passwords must be at least [6] characters long

Try again.

Enter password for [apm_system]:

Reenter password for [apm_system]:

Passwords do not match.

Try again.

Enter password for [apm_system]:

Reenter password for [apm_system]:

Enter password for [kibana]:

Reenter password for [kibana]:

Enter password for [logstash_system]:

Reenter password for [logstash_system]:

Enter password for [beats_system]:

Reenter password for [beats_system]:

Enter password for [remote_monitoring_user]:

Reenter password for [remote_monitoring_user]:

Changed password for user [apm_system]

Changed password for user [kibana]

Changed password for user [logstash_system]

Changed password for user [beats_system]

Changed password for user [remote_monitoring_user]

Changed password for user [elastic]

Modificaremos las líneas del usuario y password que hemos introducido en este paso anterior:

nano /etc/kibana/kibana.yml

1	nano /etc/kibana/kibana.yml

Agregamos los datos al logstash:

nano /etc/logstash/logstash.yml

xpack.monitoring.enabled: enable
xpack.monitoring.elasticsearch.username: logstash_system
xpack.monitoring.elasticsearch.password: Password2020S

nano /etc/logstash/logstash.yml

xpack.monitoring.enabled: enable

xpack.monitoring.elasticsearch.username: logstash_system

xpack.monitoring.elasticsearch.password: Password2020S

Reiniciamos servicios:

[root@KIBANA bin]# systemctl restart elasticsearch
[root@KIBANA bin]# systemctl restart kibana
[root@KIBANA  bin]# systemctl restart logstash
[root@KIBANA  bin]# systemctl restart nginx

[root@KIBANA bin]# systemctl restart elasticsearch

[root@KIBANA bin]# systemctl restart kibana

[root@KIBANA bin]# systemctl restart logstash

[root@KIBANA bin]# systemctl restart nginx

Cuando accederás a Kibana el acceso será con autenticación:

Espero os parezca interesante…

¿Te ha gustado la entrada SÍGUENOS EN TWITTER?

Follow @@elblogdenegu

¿Te ha gustado la entrada SÍGUENOS EN TWITTER O INVITANOS A UN CAFE?

Follow @@elblogdenegu

2 comentarios

Ricardo
20 enero, 2021 a 17:58

Buenas tardes,

He seguido este procedimiento he conseguido activar la Autenticación.
Pero los dasboard que tenía ahora no muestran los datos.

¿Me recomiendas revisar alguna configuración en concreto?

Responder
Javier
22 marzo, 2022 a 11:05

Buenos días, muy buen articulo. Una consulta ¿Cómo se puede indicar usuario y contraseña en la url para que pueda acceder a su espacio?
Gracias, un saludo

Responder