ELK快速入门五-配置nginx代理kibana

由于kibana界面默认没有安全认证界面，为了保证安全，通过nginx进行代理并设置访问认证。

配置kibana

[root@linux-elk1 ~]# vim /etc/kibana/kibana.yml

server.host: "127.0.0.1"    #将监听地址更改为127.0.0.

[root@linux-elk1 ~]# systemctl restart kibana

[root@linux-elk1 ~]# netstat -nlutp |grep

tcp               127.0.0.1:          0.0.0.0:*               LISTEN      /node

部署nginx

1）安装nginx

[root@linux-elk1 ~]# yum -y install nginx httpd-tools

2）配置nginx

[root@linux-elk1 ~]# vim /etc/nginx/conf.d/kibana.conf

upstream kibana_server {

    server 127.0.0.1: weight= max_fails= fail_timeout=;

}

server {

    listen ;

    server_name www.kibana.com;

    auth_basic "Restricted Access";

    auth_basic_user_file /etc/nginx/conf.d/htpasswd.users;

    location / {

        proxy_pass http://kibana_server;

        proxy_http_version 1.1;

        proxy_set_header Upgrade $http_upgrade;

        proxy_set_header Connection 'upgrade';

        proxy_set_header Host $host;

        proxy_cache_bypass $http_upgrade;

    }

}

[root@linux-elk1 ~]# htpasswd -bc /etc/nginx/conf.d/htpasswd.users admin

Adding password for user admin

[root@linux-elk1 ~]# cat /etc/nginx/conf.d/htpasswd.users

admin:$apr1$ro5tQZp9$grhByziZtm3ZpZCsSFzsQ1

[root@linux-elk1 ~]# systemctl start nginx

3）windows上添加hosts, 路径C:\Windows\System32\drivers\etc\hosts

192.168.1.31    www.kibana.com

4）测试验证