Configure Kibana for HTTPS

Elastic Stack Elasticsearch
1

I want the front end of ES (kibana) to run on SSL but keep the backend
connection from Kibana to ES unencrypted since both are running on the same
host. I configured Apache2 to accept SSL connections and it works but when
Kibana populates the dashboard it get the below error. Any help is very
much appreciated. Could not reach
http://ec2-XX-XX-XX-XX.compute-1.amazonaws.com/elasticsearch/_nodes
http://ec2-xx-xx-xx-xx.compute-1.amazonaws.com/elasticsearch/_nodes. If
you are using a proxy, ensure it is configured correctly

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/00d13d00-3687-42ca-8b9a-b5c52612de48%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

On Monday, January 19, 2015 at 15:45 CET,
Karthik M karthik40us@gmail.com wrote:

I want the front end of ES (kibana) to run on SSL but keep the
backend connection from Kibana to ES unencrypted since both are
running on the same host. I configured Apache2 to accept SSL
connections and it works but when Kibana populates the dashboard it
get the below error. Any help is very much appreciated. Could not
reach [1]http://ec2-XX-XX-XX-XX.compute-1.amazonaws.com/elasticsearch/_
nodes. If you are using a proxy, ensure it is configured correctly

Which version of Kibana is this?

--
Magnus Bäck | Software Engineer, Development Tools
magnus.back@sonymobile.com | Sony Mobile Communications

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20150120071740.GA2980%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.

3

Kibana version 3

On Tuesday, January 20, 2015 at 2:17:49 AM UTC-5, Magnus Bäck wrote:

On Monday, January 19, 2015 at 15:45 CET,
Karthik M <karth...@gmail.com <javascript:>> wrote:

I want the front end of ES (kibana) to run on SSL but keep the
backend connection from Kibana to ES unencrypted since both are
running on the same host. I configured Apache2 to accept SSL
connections and it works but when Kibana populates the dashboard it
get the below error. Any help is very much appreciated. Could not
reach [1]http://ec2-XX-XX-XX-XX.compute-1.amazonaws.com/elasticsearch/_
nodes. If you are using a proxy, ensure it is configured correctly

Which version of Kibana is this?

--
Magnus Bäck | Software Engineer, Development Tools
magnu...@sonymobile.com <javascript:> | Sony Mobile Communications

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/3b9f1175-3ad1-4936-893c-4996be207494%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

On Tuesday, January 20, 2015 at 14:54 CET,
Karthik M karthik40us@gmail.com wrote:

On Tuesday, January 20, 2015 at 2:17:49 AM UTC-5, Magnus Bäck wrote:

I want the front end of ES (kibana) to run on SSL but keep the
backend connection from Kibana to ES unencrypted since both are
running on the same host. I configured Apache2 to accept SSL
connections and it works but when Kibana populates the dashboard
it get the below error. Any help is very much appreciated. Could
not reach
http://ec2-XX-XX-XX-XX.compute-1.amazonaws.com/elasticsearch/_
nodes. If you are using a proxy, ensure it is configured correctly

 Which version of Kibana is this?

Kibana version 3

Kibana 3 doesn't have a backend. The connections to Elasticsearch
originate from your browser so you'll want to encrypt them as well.
Placing just the Kibana files behind HTTPS isn't useful.

--
Magnus Bäck | Software Engineer, Development Tools
magnus.back@sonymobile.com | Sony Mobile Communications

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20150120140106.GA484%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.

5

Thanks Magnus. Would be able to point me towards on how to set that up?

On Jan 20, 2015, at 9:01 AM, Magnus Bäck magnus.back@sonymobile.com wrote:

On Tuesday, January 20, 2015 at 14:54 CET,
Karthik M karthik40us@gmail.com wrote:

On Tuesday, January 20, 2015 at 2:17:49 AM UTC-5, Magnus Bäck wrote:

I want the front end of ES (kibana) to run on SSL but keep the
backend connection from Kibana to ES unencrypted since both are
running on the same host. I configured Apache2 to accept SSL
connections and it works but when Kibana populates the dashboard
it get the below error. Any help is very much appreciated. Could
not reach
http://ec2-XX-XX-XX-XX.compute-1.amazonaws.com/elasticsearch/_
nodes. If you are using a proxy, ensure it is configured correctly

Which version of Kibana is this?

Kibana version 3

Kibana 3 doesn't have a backend. The connections to Elasticsearch
originate from your browser so you'll want to encrypt them as well.
Placing just the Kibana files behind HTTPS isn't useful.

--
Magnus Bäck | Software Engineer, Development Tools
magnus.back@sonymobile.com | Sony Mobile Communications

--
You received this message because you are subscribed to a topic in the Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/elasticsearch/_WeJQGeQ6Gg/unsubscribe.
To unsubscribe from this group and all its topics, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20150120140106.GA484%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/4EFBA424-56EA-45F8-8499-FCE7E61BB9FE%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

6

On Tuesday, January 20, 2015 at 15:59 CET,
Karthik Gmail karthik40us@gmail.com wrote:

On Jan 20, 2015, at 9:01 AM, Magnus Bäck
magnus.back@sonymobile.com wrote:

Kibana 3 doesn't have a backend. The connections to Elasticsearch
originate from your browser so you'll want to encrypt them as well.
Placing just the Kibana files behind HTTPS isn't useful.

Thanks Magnus. Would be able to point me towards on how to set that up?

Googling "kibana reverse proxy" should yield some useful results,
but start with the blog post from the Elasticsearch team.

--
Magnus Bäck | Software Engineer, Development Tools
magnus.back@sonymobile.com | Sony Mobile Communications

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/20150120150330.GA5033%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.

7

On Tuesday, January 20, 2015 at 10:03:47 AM UTC-5, Magnus Bäck wrote:

On Tuesday, January 20, 2015 at 15:59 CET,
Karthik Gmail <karth...@gmail.com <javascript:>> wrote:

On Jan 20, 2015, at 9:01 AM, Magnus Bäck
<magnu...@sonymobile.com <javascript:>> wrote:

Kibana 3 doesn't have a backend. The connections to Elasticsearch
originate from your browser so you'll want to encrypt them as well.
Placing just the Kibana files behind HTTPS isn't useful.

Thanks Magnus. Would be able to point me towards on how to set that up?

Googling "kibana reverse proxy" should yield some useful results,
but start with the blog post from the Elasticsearch team.

Elasticsearch Platform — Find real-time answers at scale | Elastic

I'm also working through the same process (see my post at
https://groups.google.com/d/msg/elasticsearch/S4LQQrbZAb4/r8bnxIwgkGUJ),
but the ES blog link you provided doesn't touch on Kibana access to ES
sitting behind a reverse proxy. This is where I'm having problems. Any
ideas welcome.

Iain

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/0551b411-6924-4c7d-bff8-f90d6eb97efc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.