Configuration of kibana with elasticsearch 8 Cluster

Good morning;
Please, I would like to ask you a question regarding the configuration of kibana.
Normally there are two ways to configure the kibana connection with elasticsearch :

  • Elasticsearch.username/elasticsearch.password
    or
  • The enrollment token

When I use the login/password of "kibana_system", Kibana works correctly.
On the other hand, when I just use the token, Kibana launches fine, but it remains stuck on: Kibana server is not ready yet

# For more configuration options see the configuration guide for Kibana in
# https://www.elastic.co/guide/index.html

# =================== System: Kibana Server ===================
# Kibana is served by a back end server. This setting specifies the port to use.
server.port: 5601

# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
# The default is 'localhost', which usually means remote machines will not be able to connect.
# To allow connections from remote users, set this parameter to a non-loopback address.
server.host: "189.000.71.169"


elasticsearch.hosts: ["https://189.000.71.169:9200"]


elasticsearch.username: "kibana_system"
elasticsearch.password: "<password>"

# Kibana can also authenticate to Elasticsearch via "service account tokens".
# Service account tokens are Bearer style tokens that replace the traditional username/password based configuration.
# Use this token instead of a username/password.
#elasticsearch.serviceAccountToken: "eyJ2ZXIiOiI4LjUuMCIsImFkciI6WyIxNzMuMTk5LjcxLjE0NDo5MjAwIl0sImZnciIhNTk2MDgzM2Y5YTEzNzY4MmM2MDQ2ZDc3ZThkOTNmMjAiLCJrZXkiOiJ2amNGYXBRQktjZNbFJ5V2tSOG1Wd3BCSzR3In0="


elasticsearch.ssl.certificateAuthorities: [ "/etc/kibana/certs/http_ca.crt" ]

# To disregard the validity of SSL certificates, change this setting's value to 'none'.
#elasticsearch.ssl.verificationMode: full

# =================== System: Logging ===================
# Set the value of this setting to off to suppress all logging output, or to debug to log everything. Defaults to 'info'
#logging.root.level: debug

# Enables you to specify a file where Kibana stores log output.
logging:
  appenders:
    file:
      type: file
      fileName: /var/log/kibana/kibana.log
      layout:
        type: json
  root:
    appenders:
      - default
      - file
#  layout:
#    type: json

# Logs queries sent to Elasticsearch.
#logging.loggers:
#  - name: elasticsearch.query
#    level: debug

# Logs http responses.
#logging.loggers:
#  - name: http.server.response
#    level: debug

# Logs system usage information.
#logging.loggers:
#  - name: metrics.ops
#    level: debug

# =================== System: Other ===================
# The path where Kibana stores persistent data not saved in Elasticsearch. Defaults to data
#path.data: data

# Specifies the path where Kibana creates the process ID file.
pid.file: /run/kibana/kibana.pid

any idea please ?

Hi @b_Ensberg,

Welcome back! I've removed the password from your configuration. Can you confirm that the enrollment token is correct?

Can you check the common fixes in this post, and also share the output of the logs. It might be an authentication or other issue.

If there is a error associated with the token you could try regenerating the enrollement token using the elasticsearch-create-enrollment-token util.

Hope that helps!