Docs
Elasticsearch Guide [8.1] » REST APIs » Security APIs » Enroll Kibana API
« Enable users API Enroll Node API »

Enroll Kibana API

Enables a Kibana instance to configure itself for communication with a secured Elasticsearch cluster.

This API is currently intended for internal use only by Kibana.

Request

GET /_security/enroll/kibana

Description

Kibana uses this API internally to configure itself for communications with an Elasticsearch cluster that already has security features enabled.

Examples

The following example shows how to enroll a Kibana instance.

GET /_security/enroll/kibana

The API returns the following response:

{
  "token" : {
    "name" : "enroll-process-token-1629123923000", 
    "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" 
  },
  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", 
}

The name of the bearer token for the elastic/kibana service account.

The value of the bearer token for the elastic/kibana service account. Use this value to authenticate the service account with Elasticsearch.

The CA certificate used to sign the node certificates that Elasticsearch uses for TLS on the HTTP layer. The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.
« Enable users API Enroll Node API »