Secure settings kibana

How can I hide the password in kibana.yml

Hey there,

You might take a look through the step by step guide in securing kibana: Configure security in Kibana | Kibana Guide [7.13] | Elastic

If you're meaning the elasticsearch.password that's in kibana.yml that Kibana uses to talk to Elasticsearch, I believe you should be able to add that field in your kibana keystore and not have to put it in the yml. Here's some info: Secure settings | Kibana Guide [master] | Elastic

thankyou @poff
yes i do


but how i can add this in kibana.yml

From the documents that he referenced

Once added to the keystore, these setting will be automatically applied to this instance of Kibana when started. For example if you do

bin/kibana-keystore add elasticsearch.username

...

So you don't need to add them to the kibana.yml

not like logstash and filebeat?

Yes we should be more consistent.....

Thank you vvery mutch @stephenb