# Remotely accessing Kibana Web Interface
**URL:** https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415
**Category:** Kibana
**Created:** [April 16, 2020, 10:28pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415 "2020-04-16T22:28:38Z")
**Posts on this page:** 17
**Page:** 1
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 16, 2020, 10:28pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/1 "2020-04-16T22:28:38Z")
I am trying to access the Kibana interface remotely and locally. When I change server.host to the IP of the machine, it does not load locally nor remotely. When I set it to 0.0.0.0, I can only access locally. I made sure ufw is off. Selinux is not installed. I've also restarted the Kibana docker container. Is there anything else I can try?
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 18, 2020, 6:43pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/2 "2020-04-18T18:43:21Z")
> [@droidus](#):
>
> I am trying to access the Kibana interface remotely and locally. When I change server.host to the IP of the machine, it does not load locally nor remotely. When I set it to 0.0.0.0, I can only access locally. I made sure ufw is off. Selinux is not installed. I've also restarted the Kibana docker container. Is there anything else I can try?
_bump_
---
### Author:  [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [April 19, 2020, 7:48pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/3 "2020-04-19T19:48:36Z")
Can you try to curl the host from another one on that port? Did you restart Kibana after making the change? Did you even try to see if the port 5601 is open? Can you pls explain what is exact issue from IP address perspective? What does the logs say and if there a proxy in btw ?
Thanks
Rashmi
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 19, 2020, 11:18pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/4 "2020-04-19T23:18:06Z")
Like wget :5601?
Yes, I did restart via docker.
I can not access the Kibana in my web browser, yet I can ssh into it. Firefox says "unable to connect". I can access the web interface on SO itself.
I am running SO on ProxMox Hypervisor.
I confirmed that it is listening:
---
### Author:  [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [April 20, 2020, 3:46pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/5 "2020-04-20T15:46:02Z")
You'll want to set `server.host` in your `kibana.yml` . If you don't, Kibana will default to only binding to `localhost` . The important part to that is that the container is its own "localhost", so the default value will only allow Kibana to be seen from _inside the container_ , which is clearly not what you want.That's why, in the default config, we set `server.host` to `0` (shortcut for `0.0.0.0` ). This might be the issue - plz check.
Also a similar thread: [Reverse proxy behind nginx docker container not working Kibana 6.2.3](https://discuss.elastic.co/t/reverse-proxy-behind-nginx-docker-container-not-working-kibana-6-2-3/157466/15) which might have some ideas which you can use.
Thanks
Rashmi
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 20, 2020, 4:27pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/6 "2020-04-20T16:27:18Z")
> [@rashmi](#):
>
> You'll want to set `server.host` in your `kibana.yml` . If you don't, Kibana will default to only binding to `localhost` . The important part to that is that the container is its own "localhost", so the default value will only allow Kibana to be seen from _inside the container_ , which is clearly not what you want.That's why, in the default config, we set `server.host` to `0` (shortcut for `0.0.0.0` ). This might be the issue - plz check.
I did set it to "0", then restart the container, and I still can't access it from outside of the box.
---
### Author:  [@rashmi](https://discuss.elastic.co/u/rashmi)
#### Post date: [April 20, 2020, 11:17pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/7 "2020-04-20T23:17:18Z")
@jarpy -whenever you get sometime, can u plz check what might be an issue here?
Thanks
Rashmi
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 21, 2020, 2:53am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/8 "2020-04-21T02:53:39Z")
The `netstat` output that you pasted shows that the `docker-proxy` process is bound to an address on the loopback interface (`127.0.0.1`). Thus, it will only respond to requests from the local machine.
With `server.host` set to `0`, Kibana is correctly configured to accept connections from any hosts that are able to make it through Docker networking. You are now faced with the question of how you wish to configure the Docker network in order to expose the Kibana port.
It sounds like you are using some kind of management layer on top of Docker? I don't know what "SO" is but I understand that ProxMox is some kind of VM/container management system.
In pure Docker CLI terms, you could run the Kibana container with `--publish=5601:5601` or even with `--networking=host` to make things really simple.
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 21, 2020, 12:21pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/9 "2020-04-21T12:21:59Z")
I did set server.host to 0, and that is still what I am seeing. I even did a reboot of the host.
Sorry, SO is Security Onion: [https://securityonion.net/](https://securityonion.net/)
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 22, 2020, 12:23am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/10 "2020-04-22T00:23:01Z")
Thanks. We can be fairly confident that your Kibana is configured correctly. However, you will need figure out a way to configure Docker networking to get the result you desire. If you paste exactly how you are configuring the Docker network and how you are running the container, I might see something I can help with.
The most common approach would be to use the default bridge network that that Docker sets up, and bind the Kibana port to it with `--publish`.
Like this:
```auto
docker run --network=bridge --publish=5601:5601 docker.elastic.co/kibana/kibana:7.6.1
```
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 22, 2020, 5:06pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/11 "2020-04-22T17:06:28Z")
> [@jarpy](#):
>
> ```auto
> docker run --network=bridge --publish=5601:5601 docker.elastic.co/kibana/kibana:7.6.1
>
> ```
I had to modify the command some, but here is what I got:
```
sudo docker run --network=bridge --publish=5601:5601 securityonionsolutions/so-kibana
docker: Error response from daemon: driver failed programming external connectivity on endpoint exciting_colden (b9ea74859e094c70348e2df461eb6a5424dac6a396bf9d356e4d4232fc444f94): Error starting userland proxy: listen tcp 0.0.0.0:5601: bind: address already in use.
ERRO[0006] error waiting for container: context canceled
```
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 22, 2020, 11:00pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/12 "2020-04-22T23:00:37Z")
So something is already listening on that port. It's probably another Kibana process.
---
### Author:  [@droidus](https://discuss.elastic.co/u/droidus)
#### Post date: [April 23, 2020, 4:23pm UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/13 "2020-04-23T16:23:50Z")
I've stopped the service, then started it up again with this, and am now getting this error:
docker run --network=bridge --publish=5601:5601 eecb343cfe4b
docker: Error: error contacting notary server: dial tcp: lookup [notary.docker.io](http://notary.docker.io) ... read: connection refused.
Why is it trying to reach out onto the internet when I am only publishing the port locally?
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 24, 2020, 2:36am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/14 "2020-04-24T02:36:41Z")
That error message is from Docker, not Kibana. It's trying to contact Notary for image signing information. What image is `eecb343cfe4b`? Is it one of the Elastic official Kibana images?
[https://www.docker.elastic.co/](https://www.docker.elastic.co/)
Even if that message was from Kibana, the listening sockets that you choose to publish don't have any effect on whatever outbound connections a given process chooses to establish.
I'm not sure what your goals are in any of this, but if you want to generally learn about running the Elastic Stack in Docker, I'd recommend following our documentation and getting it running on a conventional distribution like Ubuntu or Fedora. I think that Security Onion is adding a lot of complexity and that means that you have to deal with many complex interactions at the same time.
If your goal is to have a standard Security Onion deployment (which seems to include Kibana out of the box?) then interacting with the Security Onion community might be the best bet. The real question might be "why is SO's implementation of Kibana not working", rather than "why is Kibana not working". It looks like Security Onion's Kibana is supposed to "just work", so if you find yourself running Docker containers manually, something has already gone wrong with the distribution.
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 24, 2020, 2:48am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/15 "2020-04-24T02:48:39Z")
It looks like quite a few Security Onion users have a problem like this, so maybe they can help. This comment is interesting:
> **[r/securityonion - Can't get remote web access to Kibana](https://www.reddit.com/r/securityonion/comments/edgjts/cant_get_remote_web_access_to_kibana/fbipqyd/)**
>
> 3 votes and 5 comments so far on Reddit
---
### Author:  [@jarpy](https://discuss.elastic.co/u/jarpy)
#### Post date: [April 24, 2020, 2:49am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/16 "2020-04-24T02:49:46Z")
And this one 🙂
> **[r/securityonion - Kibana only listening to tcp/5601 on loopback in Security...](https://www.reddit.com/r/securityonion/comments/fa24kc/kibana_only_listening_to_tcp5601_on_loopback_in/)**
>
> 1 vote and 3 comments so far on Reddit
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 22, 2020, 2:49am UTC](https://discuss.elastic.co/t/remotely-accessing-kibana-web-interface/228415/17 "2020-05-22T02:49:48Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.