OOKB - Olaf's Own Knowledge Base

This is an old revision of the document!

Let Kibana run on standard ports (HTTP :80 or HTTPS :443)

Without changing the default configuration, Kibana is listening at port 5601 for either HTTP or HTTPS.
In kibana.yml the line server.port: 5601 is setting this explicit.

When the standard port for HTTP (:443) is configured for Kibana in kibana.yml
server.port: 443
Kibana fails to start the next time with:
FATAL Error: listen EACCES: permission denied 0.0.0.0:443

When running this as root, the service starts.
The problem is that Kibana is lacking the permissions to bind to the standard ports by default.

NOTE: The following solution needs to be repeated when Kibana is updated by apt.

Solution

As root or with sudo run:

setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana
setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana-plugin
setcap cap_net_bind_service=+epi /usr/share/kibana/bin/kibana-keystore
setcap cap_net_bind_service=+epi /usr/share/kibana/node/bin/node

OOKB - Olaf's Own Knowledge Base

User Tools

Site Tools

Sidebar

Let Kibana run on standard ports (HTTP :80 or HTTPS :443)

Solution

Page Tools