Install Kibana with Debian packageedit

The Debian package for Kibana can be downloaded from our website or from our APT repository. It can be used to install Kibana on any Debian-based system such as Debian and Ubuntu.

This package contains both free and subscription features. Start a 30-day trial to try out all of the features.

The latest stable version of Kibana can be found on the Download Kibana page. Other versions can be found on the Past Releases page.

Import the Elastic PGP keyedit

We sign all of our packages with the Elastic Signing Key (PGP key D88E42B4, available from https://pgp.mit.edu) with fingerprint:

4609 5ACC 8548 582C 1A26 99A9 D27D 666C D88E 42B4

Download and install the public signing key:

wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg

Install from the APT repositoryedit

Version 8.10.0 of Kibana has not yet been released.

Download and install the Debian package manuallyedit

Version 8.10.0 of Kibana has not yet been released.

Start Elasticsearch and generate an enrollment token for Kibanaedit

When you start Elasticsearch for the first time, the following security configuration occurs automatically:

  • Authentication and authorization are enabled, and a password is generated for the elastic built-in superuser.
  • Certificates and keys for TLS are generated for the transport and HTTP layer, and TLS is enabled and configured with these keys and certificates.

The password and certificate and keys are output to your terminal.

If Kibana was in stalled via APT repository, the security configuration, including the password, above won’t be initiated.

To get the password for the user elastic for login, please do this in elasticsearch by following referring to this section

You can then generate an enrollment token for Kibana with the elasticsearch-create-enrollment-token tool:

bin/elasticsearch-create-enrollment-token -s kibana

or if we are in a cloud environment, such as AWS, we will need

sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token --scope kibana --url "https://localhost:9200"

Running as root

If Kibana was installed using the deb or rpm package then run /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token --scope kibana as root

Start Kibana and enter the enrollment token to securely connect Kibana with Elasticsearch.

Run Kibana with systemdedit

To configure Kibana to start automatically when the system starts, run the following commands:

sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service

Kibana can be started and stopped as follows:

sudo systemctl start kibana.service
sudo systemctl stop kibana.service

These commands provide no feedback as to whether Kibana was started successfully or not. Log information can be accessed via journalctl -u kibana.service.

Configure Kibana via the config fileedit

Kibana loads its configuration from the /etc/kibana/kibana.yml file by default. The format of this config file is explained in Configuring Kibana.

Directory layout of Debian packageedit

The Debian package places config files, logs, and the data directory in the appropriate locations for a Debian-based system:

Type Description Default Location Setting

home

Kibana home directory or $KIBANA_HOME

/usr/share/kibana

bin

Binary scripts including kibana to start the Kibana server and kibana-plugin to install plugins

/usr/share/kibana/bin

config

Configuration files including kibana.yml

/etc/kibana

KBN_PATH_CONF

data

The location of the data files written to disk by Kibana and its plugins

/var/lib/kibana

path.data

logs

Logs files location

/var/log/kibana

path.logs

plugins

Plugin files location. Each plugin will be contained in a subdirectory.

/usr/share/kibana/plugins