› › ›

Enroll Kibana API

Enables a Kibana instance to configure itself for communication with a secured Elasticsearch cluster.

This API is currently intended for internal use only by Kibana.

Request

GET /_security/enroll/kibana

Description

Kibana uses this API internally to configure itself for communications with an Elasticsearch cluster that already has security features enabled.

Examples

The following example shows how to enroll a Kibana instance.

resp = client.security.enroll_kibana()
print(resp)

const response = await client.security.enrollKibana();
console.log(response);

GET /_security/enroll/kibana

The API returns the following response:

{
  "token" : {
    "name" : "enroll-process-token-1629123923000", 
    "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" 
  },
  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", 
}

	The name of the bearer token for the `elastic/kibana` service account.
	The value of the bearer token for the `elastic/kibana` service account. Use this value to authenticate the service account with Elasticsearch.
	The CA certificate used to sign the node certificates that Elasticsearch uses for TLS on the HTTP layer. The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.

© 2023-2025 Elasticsearch
As of September 2024, Elasticsearch is available under a choice of three licenses: the Server Side Public License (SSPL), the Elastic License, or the AGPLv3 (OSI approved).
Elasticsearch and the Elasticsearch logo are trademarks of Elasticsearch B.V., registered in the U.S. and in other countries.
https://www.elastic.co/guide/en/elasticsearch/reference/8.17/security-api-kibana-enrollment.html