Enroll Kibana

GET /_security/enroll/kibana

Auth

Enable a Kibana instance to configure itself for communication with a secured Elasticsearch cluster.

Note

This API is currently intended for internal use only by Kibana. Kibana uses this API internally to configure itself for communications with an Elasticsearch cluster that already has security features enabled.

Response

application/json

token object required
http_ca string required: The CA certificate used to sign the node certificates that Elasticsearch uses for TLS on the HTTP layer. The certificate is returned as a Base64 encoded string of the ASN.1 DER encoding of the certificate.

Examples

Request Console 1 / 8 languages

Console Kibana Dev Tools

GET /_security/enroll/kibana

JavaScript Elasticsearch JavaScript Client

const response = await client.security.enrollKibana();

Python Elasticsearch Python Client

resp = client.security.enroll_kibana()

curl Shell

curl -X GET "$ELASTICSEARCH_URL/_security/enroll/kibana" \
  -H "Authorization: ApiKey $ELASTIC_API_KEY"

Java Elasticsearch Java Client

client.security().enrollKibana();

C# Elasticsearch .NET Client

var response = await client.Security.EnrollKibanaAsync();

PHP Elasticsearch PHP Client

$resp = $client->security()->enrollKibana();

Ruby Elasticsearch Ruby Client

response = client.security.enroll_kibana

Response

A successful response from GET /_security/enroll/kibana.

{
  "token" : {
    "name" : "enroll-process-token-1629123923000", 
    "value": "AAEAAWVsYXN0aWM...vZmxlZXQtc2VydmVyL3Rva2VuMTo3TFdaSDZ" 
  },
  "http_ca" : "MIIJlAIBAzVoGCSqGSIb3...vsDfsA3UZBAjEPfhubpQysAICAA=", 
}