Kibana setup and connection in Elasticsearch - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Kibana used for in the Elastic Stack?

Kibana is a tool to visualize and explore data stored in Elasticsearch. It helps you create charts, dashboards, and search data easily.

beginner

Which file do you edit to configure Kibana's connection to Elasticsearch?

You edit the kibana.yml file to set the Elasticsearch URL and other settings for Kibana to connect properly.

beginner

What is the default port Kibana runs on?

Kibana runs by default on port 5601. You can access it in your browser at http://localhost:5601.

beginner

How do you start the Kibana server after installation?

You start Kibana by running the ./bin/kibana command inside the Kibana installation folder or using system service commands if installed as a service.

intermediate

What should you check if Kibana cannot connect to Elasticsearch?

Check if Elasticsearch is running, the URL in kibana.yml is correct, and network/firewall settings allow communication on the Elasticsearch port (default 9200).

Which file do you modify to set the Elasticsearch host for Kibana?

A kibana.yml

B elasticsearch.yml

C kibana.json

D elasticsearch.json

The kibana.yml file is used to configure Kibana settings including the Elasticsearch host.

What is the default port number to access Kibana in a browser?

A 8080

B 9200

C 5601

D 443

Kibana runs on port 5601 by default, while Elasticsearch uses 9200.

If Kibana cannot connect to Elasticsearch, what is the first thing to check?

A If Kibana is running

B If Kibana's port is 9200

C If Kibana has internet access

D If Elasticsearch is running

Elasticsearch must be running and reachable for Kibana to connect.

How do you start Kibana from the command line after installation?

A ./bin/kibana

B service kibana stop

C ./bin/elasticsearch

D kibana start

You start Kibana by running ./bin/kibana inside the Kibana folder.

Which protocol does Kibana use to communicate with Elasticsearch?

A FTP

B HTTP

C SSH

D SMTP

Kibana communicates with Elasticsearch over HTTP.

Explain the steps to set up Kibana to connect to an Elasticsearch server.

Think about installation, configuration, starting services, and accessing the UI.

Describe common troubleshooting steps if Kibana fails to connect to Elasticsearch.

Focus on connection and configuration checks.

Practice

1. What is the main requirement before starting Kibana to ensure it works properly?

easy

A. The browser must be Internet Explorer

B. Kibana must be installed on a different server

C. Elasticsearch must be running

D. A database connection must be configured

Solution

1. Step 1: Understand Kibana's dependency

   Kibana is a visualization tool that requires Elasticsearch to provide data.

2. Step 2: Confirm service requirement

   Without Elasticsearch running, Kibana cannot fetch or display data.

3. Final Answer:

   Elasticsearch must be running -> Option C

4. Quick Check:

   Kibana needs Elasticsearch running [OK]

Hint: Remember: Kibana shows data from Elasticsearch only [OK]

Common Mistakes:

• Thinking Kibana works standalone without Elasticsearch
• Confusing Kibana with a database
• Assuming any browser works without checking compatibility

2. Which setting in kibana.yml specifies the Elasticsearch server address?

easy

A. elasticsearch.hosts

B. server.port

C. kibana.index

D. logging.dest

Solution

1. Step 1: Identify configuration purpose

   The kibana.yml file configures Kibana settings including connection details.

2. Step 2: Locate Elasticsearch host setting

   The setting elasticsearch.hosts defines the URL(s) of Elasticsearch nodes Kibana connects to.

3. Final Answer:

   elasticsearch.hosts -> Option A

4. Quick Check:

   Elasticsearch server address = elasticsearch.hosts [OK]

Hint: Look for 'elasticsearch.hosts' in kibana.yml [OK]

Common Mistakes:

• Confusing server.port with Elasticsearch address
• Using kibana.index which is for saved objects
• Mistaking logging.dest for connection settings

3. Given the following kibana.yml snippet:

elasticsearch.hosts: ["http://localhost:9200"]
server.port: 5601

What URL should you open in your browser to access Kibana?

medium

A. http://localhost:9200

B. http://localhost:9200/kibana

C. http://localhost:5601/elasticsearch

D. http://localhost:5601

Solution

1. Step 1: Identify Kibana server port

   The setting server.port: 5601 means Kibana listens on port 5601.

2. Step 2: Determine correct URL

   To access Kibana, open the browser at http://localhost:5601. Port 9200 is for Elasticsearch, not Kibana.

3. Final Answer:

   http://localhost:5601 -> Option D

4. Quick Check:

   Kibana URL uses server.port = 5601 [OK]

Hint: Kibana runs on server.port, default 5601 [OK]

Common Mistakes:

• Opening Elasticsearch port 9200 instead of Kibana port
• Appending /kibana or /elasticsearch incorrectly
• Confusing ports between services

4. You started Kibana but get a connection error. Which of these is the most likely cause?

medium

A. Elasticsearch service is not running

B. Kibana is running on port 9200

C. Browser cache is full

D. Kibana.yml file is missing

Solution

1. Step 1: Understand connection error cause

   Kibana depends on Elasticsearch; if Elasticsearch is down, Kibana cannot connect.

2. Step 2: Evaluate other options

   Kibana does not run on port 9200 (Elasticsearch default). Browser cache or missing config file usually cause different errors.

3. Final Answer:

   Elasticsearch service is not running -> Option A

4. Quick Check:

   Connection error = Elasticsearch down [OK]

Hint: Check Elasticsearch service status first [OK]

Common Mistakes:

• Assuming Kibana runs on Elasticsearch port
• Blaming browser cache for connection errors
• Ignoring Elasticsearch service status

5. You want to connect Kibana to a remote Elasticsearch server at http://192.168.1.100:9200. Which is the correct elasticsearch.hosts setting in kibana.yml?

hard

A. elasticsearch.hosts: ["http://localhost:9200"]

B. elasticsearch.hosts: ["http://192.168.1.100:9200"]

C. elasticsearch.hosts: "192.168.1.100:5601"

D. elasticsearch.hosts: ["https://192.168.1.100:5601"]

Solution

1. Step 1: Identify remote Elasticsearch URL

   The remote server address is http://192.168.1.100:9200, which is the default Elasticsearch port.

2. Step 2: Set elasticsearch.hosts correctly

   The setting must be a list with the full URL including protocol and port: ["http://192.168.1.100:9200"].

3. Step 3: Eliminate incorrect options

   elasticsearch.hosts: ["http://localhost:9200"] points to localhost, not remote. Options C and D use wrong ports or protocols for Elasticsearch.

4. Final Answer:

   elasticsearch.hosts: ["http://192.168.1.100:9200"] -> Option B

5. Quick Check:

   Remote Elasticsearch URL in elasticsearch.hosts list [OK]

Hint: Use full URL with http and port 9200 in elasticsearch.hosts [OK]

Common Mistakes:

• Using localhost instead of remote IP
• Omitting protocol (http://)
• Using wrong port like 5601 for Elasticsearch