OOKB - Olaf's Own Knowledge Base

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

===== Let Kibana (debian) run on standard ports (HTTP :80 or HTTPS :443) =====

Without changing the default configuration, Kibana is listening at port 5601 for either HTTP or HTTPS.\\
In kibana.yml the line ''server.port: 5601'' is setting this explicit.\\

When the standard port for HTTP (:443) is configured for Kibana in kibana.yml\\
''server.port: 443''\\
Kibana fails to start the next time with:\\
''FATAL  Error: listen EACCES: permission denied 0.0.0.0:443''\\

When running this as ''root'', the service starts.\\
The problem is that Kibana is lacking the permissions to bind to the standard ports by default.

NOTE: The following solution needs to be repeated when Kibana is updated by apt.

=== Solution ===
As root or with sudo run:
<code bash>
setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana
setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana-plugin
setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana-keystore
# Before version 8.15
# setcap cap_net_bind_service=+epi /usr/share/kibana/node/bin/node
# Since version 8.15
setcap cap_net_bind_service=+epi /usr/share/kibana/node/glibc-217/bin/node
</code>

OOKB - Olaf's Own Knowledge Base

User Tools

Site Tools

Page Tools