| Warning |
|---|
You have tried to access an archived page. Please go to the new https://root360.atlassian.net/wiki/spaces/KB to find more documents. |
...
| Table of Contents |
|---|
Access to a Kibana dashboard is subject to an IP-based access policy that limits access based on an AWS convention.
...
To achieve this, two things are required:
For you an SSH public key is stored on the jump server
You know the Kibana endpoint of your ElasticSearch clusters
The endpoint (default: elasticsearch-logs.<region>.<environment>.<project>.<company>) can be found in your root360 cloud dashboard in the elasticsearch section:
SSH Forwarding Setup
The first step is to build an SSH forwarding on your local computer.
In the case of Kibana, there are 2 special features to consider.
A forward to the dest_port 443 must be established, since access is via HTTPS
Dest_server is not the complete URL of the Kibana endpoint, but only the domain name
| Code Block | ||||
|---|---|---|---|---|
| ||||
ssh -L localport:dest_server:dest_port DEINUSER@IP-DEINES-JUMPSERVERS ssh -L 4443:search-wswgr-rejnjdwdoygzs7ndopio46e3ii.eu-west-1.es.amazonaws.com:443 DEINUSER@IP-DEINES-JUMPSERVERS -N |
...
You'll also find the remaining part of the Kibana endpoint:
| Code Block | ||||
|---|---|---|---|---|
| ||||
https://127.0.0.1:4443/_plugin/kibana/ |
...