How to Install and Configure Kibana on Rocky Linux/Alma Linux 8

In this guide, we will learn how to install and configure Kibana in Rocky Linux 8. This guide will also work on other RHEL 8 based distros like Alma Linux 8 and Oracle Linux 8.

Kibana is a proprietary data visualization dashboard software for Elasticsearch, whose open source successor in OpenSearch is OpenSearch Dashboards. It is a data visualization and exploration tool used for log and time-series analytics, application monitoring, and operational intelligence use cases. It offers powerful and easy-to-use features such as histograms, line graphs, pie charts, heat maps, and built-in geospatial support. Kibana also acts as the user interface for monitoring, managing, and securing an Elastic Stack cluster — as well as the centralized hub for built-in solutions developed on the Elastic Stack.

Table of Content

Ensure the server is up to date
Import the Elastic gpg key
Install Kibana from the RPM Repo
Starting and enabling Kibana service
Enable the service in firewall
Configuring Kibana
Accessing Kibana

1. Ensuring that the server is up to date

Before proceeding, let us ensure that our server is up to date and all the packages are the latest version. Use these commands to achieve this:

sudo apt update
sudo apt upgrade -y

If there are packages to upgrade, the above command may take a couple of minutes.

Let us also install some common packages that we will need later:

sudo dnf install -y vim wget

2. Import the Elastic PGP Key

All Elastic packages are signed

with the Elastic Signing Key (PGP key D88E42B4, available from https://pgp.mit.edu) with fingerprint:

4609 5ACC 8548 582C 1A26 99A9 D27D 666C D88E 42B4

Download and install the public signing key:

sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

3. Install from the RPM repository

Create a file called kibana.repo in the /etc/yum.repos.d/ directory. Open the file with your favourite text editor. I am using vim

sudo vim /etc/yum.repos.d/kibana.repo

Add these content to the file

[kibana-7.x]
name=Kibana repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

The repository is ready to use. Let us install kibana

sudo dnf install -y kibana

Confirm the installation

$ rpm -qi kibana
Name        : kibana
Version     : 7.16.3
Release     : 1
Architecture: x86_64
Install Date: Fri 14 Jan 2022 10:27:52 AM UTC
Group       : default
Size        : 767221854
License     : Elastic License
Signature   : RSA/SHA512, Fri 07 Jan 2022 02:59:27 AM UTC, Key ID d27d666cd88e42b4
Source RPM  : kibana-7.16.3-1.src.rpm
Build Date  : Thu 06 Jan 2022 11:57:05 PM UTC
Build Host  : internal-ci-immutable-rm-ubuntu-2004-big-1641510328165721840.c.elastic-ci-prod.internal
Relocations : /
Packager    : Kibana Team <info@elastic.co>
Vendor      : Elasticsearch, Inc.
URL         : https://www.elastic.co
Summary     : Explore and visualize your Elasticsearch data
Description :
Explore and visualize your Elasticsearch data

4. Start and enable Kibana service

The Kibana service won’t be started by default. Use this command to start:

sudo systemctl start kibana

Confirm the service status using this command:

$ sudo systemctl status kibana
● kibana.service - Kibana
   Loaded: loaded (/etc/systemd/system/kibana.service; disabled; vendor preset: disabled)
   Active: active (running) since Fri 2022-01-14 10:30:03 UTC; 21s ago
     Docs: https://www.elastic.co
 Main PID: 69751 (node)
    Tasks: 11 (limit: 23176)
   Memory: 687.8M
   CGroup: /system.slice/kibana.service
           └─69751 /usr/share/kibana/bin/../node/bin/node /usr/share/kibana/bin/../src/cli/dist --logging.dest=/var/log/kibana/kibana.log --pid.file=/run/kibana/kibana.pid

Jan 14 10:30:03 dev-rockysrv.inv.re systemd[1]: Started Kibana.

The above output shows that the service is up and running. Enable the service using this command:

sudo systemctl enable kibana

5. Enable the service in firewall

If you have firewalld installed and enabled, you need to allow the service. Use these commands to achieve that:

sudo firewall-cmd --permanent --add-port=5601/tcp
sudo firewall-cmd --reload

6. Configuring Kibana

Kibana configuration file can be found in this path /etc/kibana/kibana.yml. Kibana will run as a http service exposing port 5601. It is bound to localhost by default. Confirm this using this command:

ss -tulpn | grep 5601

This is my output:

$ ss -tulpn | grep 5601
tcp   LISTEN 0      128             127.0.0.1:5601       0.0.0.0:*

To bind the service to all ports so the service can be accessed remotely, addd this line to the file:

server.host: "0.0.0.0"

To connect to an Elasticsearch instance, use this:

elasticsearch.hosts: ["http://localhost:9200"]

If you have configured a password for your elasticsearch, configure with this:

elasticsearch.username: "kibana_system"
elasticsearch.password: "pass"

If you do not have Elasticsearch installed, please check out this guide How to Install and Configure Elasticsearch on Rocky Linux 8.

To apply the changes, you need to restart the kibana service:

sudo systemctl restart kibana

7. Accessing Kibana dashboard

Access the Kibana dashboard on your web browser at http://server-IP:5601. You can now configure your graphs and metrics.