forked from docs/doc-exports
Wuwan, Qi
050b395397
Reviewed-by: Kacur, Michal <michal.kacur@t-systems.com> Co-authored-by: Wuwan, Qi <wuwanqi1@noreply.gitea.eco.tsi-dev.otc-service.com> Co-committed-by: Wuwan, Qi <wuwanqi1@noreply.gitea.eco.tsi-dev.otc-service.com>
87 lines
15 KiB
HTML
87 lines
15 KiB
HTML
<a name="css_01_0088"></a><a name="css_01_0088"></a>
|
|
|
|
<h1 class="topictitle1">Accessing a Cluster from a Kibana Public Network</h1>
|
|
<div id="body1594896514756"><p id="css_01_0088__en-us_topic_0000001268394285_p973171613562">For CSS clusters that have security mode enabled, you can enable Kibana public access. After the configuration is complete, an IP address will be provided to access Kibana of this cluster over the Internet.</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_p8060118">You can configure Kibana public access during cluster creation, or after a cluster in security mode is created.</p>
|
|
<div class="note" id="css_01_0088__en-us_topic_0000001268394285_note946555615310"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="css_01_0088__en-us_topic_0000001268394285_ul729044815616"><li id="css_01_0088__en-us_topic_0000001268394285_li929094805611">You can enable <strong id="css_01_0088__b166491454101910">Security Mode</strong> for clusters of version 6.5.4 and later versions.</li><li id="css_01_0088__en-us_topic_0000001268394285_li129019482563">Kibana public access cannot be configured for Elasticsearch clusters created in security mode before this function was rolled out (before June 2020).</li><li id="css_01_0088__en-us_topic_0000001268394285_li103841165553">The whitelist for Kibana public network access depends on the ELB whitelist. After you updated the whitelist, the new settings take effect immediately for new connections. For existing persistent connections using the IP addresses that have been removed from the whitelist, the new settings take effect about 1 minute after these connections are stopped.</li></ul>
|
|
</div></div>
|
|
<div class="section" id="css_01_0088__en-us_topic_0000001268394285_section1638913302523"><h4 class="sectiontitle">Configuring Kibana Public Access When Creating a Cluster</h4><ol id="css_01_0088__en-us_topic_0000001268394285_ol1346120407506"><li id="css_01_0088__en-us_topic_0000001268394285_li154611240175011">Log in to the <span id="css_01_0088__en-us_topic_0000001268394285_text115093190244">CSS</span> management console.</li><li id="css_01_0088__en-us_topic_0000001268394285_li190715382599">Click <span class="uicontrol" id="css_01_0088__uicontrol101481748193419"><b><span id="css_01_0088__text181411948143412">Create Cluster</span></b></span> in the upper right corner. The <strong id="css_01_0088__b2014815489346">Create Cluster</strong> page is displayed.</li><li id="css_01_0088__en-us_topic_0000001268394285_li10902641195015">On the <strong id="css_01_0088__b2267115594811">Create Cluster</strong> page, enable <strong id="css_01_0088__b18111194135518">Security Mode</strong>.</li><li id="css_01_0088__en-us_topic_0000001268394285_li5497135844815">Set <strong id="css_01_0088__b3187466162">Advanced Settings</strong> to <strong id="css_01_0088__b1635110121163">Custom</strong>, enable <strong id="css_01_0088__b18996182712168">Kibana Public Access</strong>, and set parameters.
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0088__en-us_topic_0000001268394285_table17115184318116" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Kibana public access parameters</caption><thead align="left"><tr id="css_01_0088__en-us_topic_0000001268394285_row13115543918"><th align="left" class="cellrowborder" valign="top" width="23.830000000000002%" id="mcps1.3.4.2.4.4.2.3.1.1"><p id="css_01_0088__en-us_topic_0000001268394285_p6115643517">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="76.17%" id="mcps1.3.4.2.4.4.2.3.1.2"><p id="css_01_0088__en-us_topic_0000001268394285_p1611564318117">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="css_01_0088__en-us_topic_0000001268394285_row15116743917"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.4.4.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_p10116443611">Bandwidth</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.4.4.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_p1911615431411">Bandwidth for accessing Kibana with the public IP address</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_p458617258523">Value range: 1 to 100</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_p209154432526">Unit: Mbit/s</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0088__en-us_topic_0000001268394285_row1811610437113"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.4.4.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_p911634315111">Access Control</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.4.4.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_p4116114313112">If you disable this function, all IP addresses can access Kibana through the public IP address. If you enable this function, only IP addresses or IP address in the whitelist can access Kibana through the public IP address.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0088__en-us_topic_0000001268394285_row191163438120"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.4.4.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_p911694312110">Whitelist</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.4.4.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_p4116164313119">IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses. This parameter can be configured only when <strong id="css_01_0088__b19712855195017">Access Control</strong> is enabled.</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_p4726101014818">You are advised to enable this function.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_p5711131621">After the cluster is created, click the cluster name to go to the <strong id="css_01_0088__b697422012412">Basic Information</strong> page. On the <strong id="css_01_0088__b11861473245">Kibana Public Access</strong> page, you can view the Kibana public IP address.</p>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0088__en-us_topic_0000001268394285_section18851031541"><h4 class="sectiontitle">Configuring Kibana Public Access for an Existing Cluster</h4><p id="css_01_0088__en-us_topic_0000001268394285_p2871748088">You can enable, disable, modify, and view Kibana public access for an existing cluster that has security mode enabled.</p>
|
|
<ol id="css_01_0088__en-us_topic_0000001268394285_ol179019266146"><li id="css_01_0088__en-us_topic_0000001268394285_li7625635121410">Log in to the <span id="css_01_0088__en-us_topic_0000001268394285_text1762514356145">CSS</span> management console.</li><li id="css_01_0088__en-us_topic_0000001268394285_li106254357143">Choose <strong id="css_01_0088__b2999181311911">Clusters</strong> in the navigation pane. On the <span class="wintitle" id="css_01_0088__wintitle108694343394957"><b>Clusters</b></span> page, click the name of the target cluster.</li><li id="css_01_0088__en-us_topic_0000001268394285_li341918231507">Click the <strong id="css_01_0088__b11842142311517">Kibana Public Access</strong> tab. Turn on the <strong id="css_01_0088__b158499231518">Kibana Public Access</strong> switch to enable the Kibana public access function.</li><li id="css_01_0088__en-us_topic_0000001268394285_li78118230213">On the displayed page, set parameters.
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0088__en-us_topic_0000001268394285_table145611511676" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Kibana public access parameters</caption><thead align="left"><tr id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_row13115543918"><th align="left" class="cellrowborder" valign="top" width="23.830000000000002%" id="mcps1.3.5.3.4.1.2.3.1.1"><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p6115643517">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="76.17%" id="mcps1.3.5.3.4.1.2.3.1.2"><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p1611564318117">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_row15116743917"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.5.3.4.1.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p10116443611">Bandwidth</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.5.3.4.1.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p1911615431411">Bandwidth for accessing Kibana with the public IP address</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p458617258523">Value range: 1 to 100</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p209154432526">Unit: Mbit/s</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_row1811610437113"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.5.3.4.1.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p911634315111">Access Control</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.5.3.4.1.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p4116114313112">If you disable this function, all IP addresses can access Kibana through the public IP address. If you enable this function, only IP addresses or IP address in the whitelist can access Kibana through the public IP address.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_row191163438120"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.5.3.4.1.2.3.1.1 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p911694312110">Whitelist</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.5.3.4.1.2.3.1.2 "><p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p4116164313119">IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses. This parameter can be configured only when <strong id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_b19712855195017">Access Control</strong> is enabled.</p>
|
|
<p id="css_01_0088__en-us_topic_0000001268394285_en-us_topic_0000001268394285_p4726101014818">You are advised to enable this function.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li><li id="css_01_0088__en-us_topic_0000001268394285_li10845133416104">After you set the parameters, click <strong id="css_01_0088__b14928252493">OK</strong>.</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0088__en-us_topic_0000001268394285_section1697222318302"><h4 class="sectiontitle">Modifying Kibana Public Access</h4><p id="css_01_0088__en-us_topic_0000001268394285_p4508834193119">For clusters configured Kibana public access, you can modify its bandwidth and access control or disable this function.</p>
|
|
<ol id="css_01_0088__en-us_topic_0000001268394285_ol1799411336114"><li id="css_01_0088__en-us_topic_0000001268394285_li138111738814">Log in to the <span id="css_01_0088__en-us_topic_0000001268394285_text12811143819117">CSS</span> management console.</li><li id="css_01_0088__en-us_topic_0000001268394285_li11811133813113">Choose <strong id="css_01_0088__b6186138191313">Clusters</strong> in the navigation pane. On the <span class="wintitle" id="css_01_0088__wintitle71867819137"><b>Clusters</b></span> page, click the name of the target cluster.</li><li id="css_01_0088__en-us_topic_0000001268394285_li18111738114">Click the <span class="uicontrol" id="css_01_0088__uicontrol15811738718"><b>Kibana Public Access</b></span> tab to modify the Kibana public access configuration.<ul id="css_01_0088__en-us_topic_0000001268394285_ul3234101310336"><li id="css_01_0088__en-us_topic_0000001268394285_li1223591310335">Modifying bandwidth<p id="css_01_0088__en-us_topic_0000001268394285_p92511033193318"><a name="css_01_0088__en-us_topic_0000001268394285_li1223591310335"></a><a name="en-us_topic_0000001268394285_li1223591310335"></a>Click <strong id="css_01_0088__b1965512400466">Modify</strong> on the right of <strong id="css_01_0088__b3633124844615">Bandwidth</strong>. On the <strong id="css_01_0088__b9674191454716">Modify Bandwidth</strong> page, modify the bandwidth and click <strong id="css_01_0088__b11671828164718">OK</strong>.</p>
|
|
</li><li id="css_01_0088__en-us_topic_0000001268394285_li611781833312">Modifying access control<p id="css_01_0088__en-us_topic_0000001268394285_p480914215308"><a name="css_01_0088__en-us_topic_0000001268394285_li611781833312"></a><a name="en-us_topic_0000001268394285_li611781833312"></a>Click <strong id="css_01_0088__b16835173644710">Modify</strong> on the right of <strong id="css_01_0088__b1334503919475">Access Control</strong>. On the <strong id="css_01_0088__b125391120716">Modify Access Control</strong> page, set <strong id="css_01_0088__b18925104317111">Access Control</strong> and <strong id="css_01_0088__b3951056813">Whitelist</strong>, and click <strong id="css_01_0088__b56861657210">OK</strong>.</p>
|
|
</li><li id="css_01_0088__en-us_topic_0000001268394285_li206931007153">Disabling Kibana public access<p id="css_01_0088__en-us_topic_0000001268394285_p76701306166"><a name="css_01_0088__en-us_topic_0000001268394285_li206931007153"></a><a name="en-us_topic_0000001268394285_li206931007153"></a>Toggle off the <strong id="css_01_0088__b2052519479464">Kibana Public Access</strong> switch.</p>
|
|
</li></ul>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0088__en-us_topic_0000001268394285_section2022235142517"><h4 class="sectiontitle">Accessing Kibana with the Public IP Address</h4><p id="css_01_0088__en-us_topic_0000001268394285_p1243345415167">After configuring Kibana public access, you will obtain a public IP address that you can use to access Kibana of this cluster.</p>
|
|
<ol id="css_01_0088__en-us_topic_0000001268394285_ol1495031414210"><li id="css_01_0088__en-us_topic_0000001268394285_li0753248144214">Log in to the <span id="css_01_0088__en-us_topic_0000001268394285_text0753154894217">CSS</span> management console.</li><li id="css_01_0088__en-us_topic_0000001268394285_li7753134817424">Choose <strong id="css_01_0088__b149433385410">Clusters</strong> in the navigation pane. On the <span class="wintitle" id="css_01_0088__wintitle15950153819418"><b>Clusters</b></span> page, click the name of the target cluster.</li><li id="css_01_0088__en-us_topic_0000001268394285_li67541648174213">Click the <strong id="css_01_0088__b050745415316">Kibana Public Access</strong> tab to obtain the Kibana public IP address.</li><li id="css_01_0088__en-us_topic_0000001268394285_li1392114911442">Use this IP address to access Kibana of this cluster through the Internet.</li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0107.html">Kibana Platform</a></div>
|
|
</div>
|
|
</div>
|
|
|