Install Elasticsearch + Kibana 8.x with TLS/SSL

IMPORTANT UPDATE - 2023-02-22!!!

So in short, use a firewall!

We will be posting an updated video soon.

DISCLAIMER: These videos are intended to be educational and we can make mistakes on occasion. Please do your own due diligence when it comes to security. And if you learn anything we missed, share with us in the comments! We are all here to learn together!
------------
Install ElasticSearch and Kibana 8.x with TLS and SSL.

NOTE 1:
If you wish to add more nodes to form an Elasticsearch cluster, you can follow this video instead:

Our elasticsearch cluster tutorial covers many of the same steps as this video, but with some subtle and important differences.

NOTE 4: It would be a good idea to also do the following your in installation for production usage:
- use a firewall to protect unnecessary ports
- change default port numbers for elastic and kibana (explained in video)

NOTE 5:
```
[Service]
LimitMEMLOCK=infinity
```
#elasticsearch #kibana

[Made_by_House]

this helped me set up a single node self hosted "cluster". Thanks! the certs are what my problem area was.

[kukuruku]

This is really the best tutorial for setup ES+Kibana with SSL. Thank you soooo much! You have a new subscriber!

[naseebramlakhan]

The best tutorial for activating SSL on Elastic and Kibana . Thank you. you have a new subscriber

[emiliocobos]

Many thanks, by far the best tutorial in this exact topic.

[alexdoe-fi]

excellent vid. learnt a lot about linux permissions just from your video

[bytegalaxy]

My kibana server was working fine until I set "server.publicBaseUrl" configuration property.
I found some errors in log about low memory but I thought it was false alert because my VM had 8G of memory.
Your video even at the very start suggested a memory of 12G.
After setting the memory to 12G my problem is solved and kibana works fine again!
Thank you so much.

[evermightsystems]

IMPORTANT UPDATE 2023-03-01:


2) If you use publicly signed certificates for in elasticsearch.yml like we did in the video, please use a firewall on your elasticsearch server to restrict access to only trusted clients on specific ports. Read the description of this video for more details. We will be posting an updated video as soon as possible.


Hope that helps!

[Towhid]

excellent just love your tutorial. great effort.

[UPPERKEES]

Finally someone who doesn't acts cool with self signed certs.

[rafaeltadeunobrecorreiaafo]

Hi Evermight Tech, your video save my life. If is possible off sure, can you post some video to take Logstash TLS/SSL integration with Elasticsearch and Kibana? =D

[TomasKulikauskas]

Hello, does it work public certificate on Elastic Cluster? I have tried like you and does work on single node but doesn't work on more than one node cluster.

[nitinrai]

Hey @evermighttech Following your tutorial I managed to setup Elasticsearch & Kibana in a VM instance in GCP. Both were installed in a single VM instance. It is working as expected as per the tutorial but I've a requirement to expose Elasticsearch & Kibana both through a Public IP Address. Kibana is already exposed & running on browser but how can I do the same for Elasticsearch??

[BekirNiyaz]

hello thanks for sharing, do you have elasticsearch cluster with ssl installation notes with 2 nodes ( as master replica)?

[vuat]

i see: elasticsearch default bad_certificate so this is bug og elasticsearch can not fix

[mubashartariq]

How did you create these Linux VM? With Vagrant?

[JoseManuel-loed]

would you know tell me how to confugure filebeat to send logs to elasticsearch and see in kibana please?

Best regards.

[yosharma]

Hi can u pls explain when u call the service elasticsearch start/stop how is the work flow

As in the elasticsearch.service flag it only has execstart= command not execstop

[andrerabello]

I've found some others config steps pointing to /lib/systemd/system/0.service and increasing the timeout to solve the timeout problem.

TimeoutStartSec=300. Maybe this could help.

Btw, great job!
One more subs

[MohamedOuf_]

The best tutorial but how to do this by docker and docker compose

[JoseManuel-loed]

Come on man! You already make the certificates, no man, you have to put all the process... I am very dissapointed.

Best regards.☹