WARNING: Version 5.6 of Kibana has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Reporting Settings in Kibana Breaking changes »
Elastic Docs ›Kibana User Guide [5.6] ›Set Up X-Pack ›X-Pack Settings in Kibana

Security Settings in Kibana

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Security Settings in Kibana

edit

You do not need to configure any additional settings to use X-Pack security in Kibana. It is enabled by default.

General Security Settings

edit
xpack.security.enabled

Set to true (default) to enable X-Pack security.

If set to false in kibana.yml, the user and role management options are hidden in this Kibana instance. If xpack.security.enabled is set to true in elasticsearch.yml, however, you can still use the X-Pack security APIs. To disable X-Pack security entirely, see the Elasticsearch Security Settings.

xpack.security.useDefaultEsCredentials

Set to true (default) to use kibana and changeme for the Elasticsearch credentials in Kibana when elasticsearch.username and elasticsearch.password are not defined in kibana.yml.

If set to false in kibana.yml, Public Key Infrastructure (PKI) certificates are used as the fallback instead. For more information, see PKI User Authentication.

« Reporting Settings in Kibana Breaking changes »