kibi_demo_secured.yml

# Kibana is served by a back end server. This controls which port to use.
server.port: 5606

# The host to bind the server to.
server.host: "127.0.0.1"

# If you are running kibana behind a proxy, and want to mount it at a path,
# specify that path here. The basePath can't end in a slash.
# server.basePath: ""

# The maximum payload size in bytes on incoming server requests.
# server.maxPayloadBytes: 1048576

# The Elasticsearch instance to use for all your queries.
elasticsearch.url: "https://127.0.0.1:9220"

# preserve_elasticsearch_host true will send the hostname specified in `elasticsearch`. If you set it to false,
# then the host you use to connect to *this* Kibana instance will be sent.
# elasticsearch.preserveHost: true

# Kibana uses an index in Elasticsearch to store saved searches, visualizations
# and dashboards. It will create a new index if it doesn't already exist.
kibana.index: ".kibi"

# The default application to load.
kibana.defaultAppId: "dashboard"

# If your Elasticsearch is protected with basic auth, these are the user credentials
# used by the Kibana server to perform maintenance on the kibana_index at startup. Your Kibana
# users will still need to authenticate with Elasticsearch (which is proxied through
# the Kibana server)
elasticsearch.username: 'kibiserver'
elasticsearch.password: 'password'

# SSL for outgoing requests from the Kibana Server to the browser (PEM formatted)
# server.ssl.cert: 'kibi-certificate/server.crt'
# server.ssl.key: 'kibi-certificate/server.key

# Optional setting to validate that your Elasticsearch backend uses the same key files (PEM formatted)
server.ssl.cert: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\server.crt'
server.ssl.key: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\server.key'

# If you need to provide a CA certificate for your Elasticsearch instance, put
# the path of the pem file here.
elasticsearch.ssl.ca: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\cacert.pem'

# Set to false to have a complete disregard for the validity of the SSL
# certificate.
elasticsearch.ssl.verify: false

# Time in milliseconds to wait for elasticsearch to respond to pings, defaults to
# request_timeout setting
# elasticsearch.pingTimeout: 1500

# Time in milliseconds to wait for responses from the back end or elasticsearch.
# This must be > 0
# elasticsearch.requestTimeout: 300000

# Time in milliseconds for Elasticsearch to wait for responses from shards.
# Set to 0 to disable.
# elasticsearch.shardTimeout: 0

# Time in milliseconds to wait for Elasticsearch at Kibana startup before retrying
# elasticsearch.startupTimeout: 5000

# Set the path to where you would like the process id file to be created.
# pid.file: /var/run/kibana.pid

# If you would like to send the log output to a file you can set the path below.
# logging.dest: stdout

# Set this to true to suppress all logging output.
# logging.silent: false

# Set this to true to suppress all logging output except for error messages.
# logging.quiet: false

# Set this to true to log all events, including system usage information and all requests.
# logging.verbose: false

# Kibi default configuration
kibi_core:
  load_jdbc: false
  datasource_encryption_algorithm: 'AES-GCM'
  datasource_encryption_key: 'iSxvZRYisyUW33FreTBSyJJ34KpEquWznUPDvn+ka14='
  datasource_cache_size: 501
  default_dashboard_title: Articles

# Gremlin server configuration
  gremlin_server:
    # change the scheme to https after enabling SSL for Gremlin
    url: https://127.0.0.1:8061
    path: gremlin_server/gremlin-es2-server.jar
#    log_conf_path: gremlin_server/gremlin-es2-server-log.properties
    ssl:
      key_store: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\gremlin.jks'
      key_store_password: 'password'
      ca: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\cacert.pem'

  elasticsearch:
    auth_plugin: "searchguard"
    # transport_client:
    #   ssl:
    #     ca: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\searchguard\truststore.jks'
    #     ca_password: "password"
    #     key_store: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\searchguard\CN=demouser-keystore.jks'
    #     key_store_password: "password"
    #     verify_hostname: false

kibi_access_control:
  enabled: true
  cookie:
    password: "12345678123456781234567812345678"
  sentinl:
    elasticsearch:
      username: sentinl
      password: password

sense.proxyConfig:
  - match:
      protocol: "https"
    ssl:
      ca: 'E:\kibi-enterprise-4.6.4-1\kibi\pki\searchguard\truststore.jks'