Link Search Menu Expand Document

Open Distro for Elasticsearch development has moved to OpenSearch. The ODFE plugins will continue to work with legacy versions of Elasticsearch OSS, but we recommend upgrading to OpenSearch to take advantage of the latest features and improvements.


Kibana is the default visualization tool for data in Elasticsearch. It also serves as a user interface for the Open Distro for Elasticsearch security, alerting, and Index State Management plugins.

Run Kibana using Docker

You can start Kibana using docker run after creating a Docker network and starting Elasticsearch, but the process of connecting Kibana to Elasticsearch is significantly easier with a Docker Compose file.

  1. Run docker pull amazon/opendistro-for-elasticsearch-kibana:1.13.2.

  2. Create a docker-compose.yml file appropriate for your environment. A sample file that includes Kibana is available on the Open Distro for Elasticsearch Docker installation page.

    Just like elasticsearch.yml, you can pass a custom kibana.yml to the container in the Docker Compose file.

  3. Run docker-compose up.

    Wait for the containers to start. Then see Get started with Kibana.

  4. When finished, run docker-compose down.

Run Kibana using the RPM or Debian package

  1. If you haven’t already, add the yum repositories specified in steps 1–2 in RPM or the apt repositories in steps 2–3 of Debian package.
  2. sudo yum install opendistroforelasticsearch-kibana or sudo apt install opendistroforelasticsearch-kibana
  3. Modify /etc/kibana/kibana.yml to use elasticsearch.hosts rather than elasticsearch.url.
  4. sudo systemctl start kibana.service
  5. To stop Kibana:

    sudo systemctl stop kibana.service


To run Kibana when the system starts:

sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service

You can also modify the values in /etc/kibana/kibana.yml.

Run Kibana using the tarball

  1. Download the tarball:

    # x64
    curl -o opendistroforelasticsearch-kibana-1.13.2-linux-x64.tar.gz
    # ARM64
    curl -o opendistroforelasticsearch-kibana-1.13.2-linux-arm64.tar.gz
  2. Download the checksum:

    # x64
    curl -o opendistroforelasticsearch-kibana-1.13.2-linux-x64.tar.gz.sha512
    # ARM64
    curl -o opendistroforelasticsearch-kibana-1.13.2-linux-arm64.tar.gz.sha512
  3. Verify the tarball against the checksum:

    # x64
    shasum -a 512 -c opendistroforelasticsearch-kibana-1.13.2-linux-x64.tar.gz.sha512
    # ARM64
    shasum -a 512 -c opendistroforelasticsearch-kibana-1.13.2-linux-arm64.tar.gz.sha512

    On CentOS, you might not have shasum. Install this package:

    sudo yum install perl-Digest-SHA
  4. Extract the TAR file to a directory and change to that directory:

    # x64
    tar -zxf opendistroforelasticsearch-kibana-1.13.2-linux-x64.tar.gz
    cd opendistroforelasticsearch-kibana
    # ARM64
    tar -zxf opendistroforelasticsearch-kibana-1.13.2-linux-arm64.tar.gz
    cd opendistroforelasticsearch-kibana
  5. If desired, modify config/kibana.yml.

  6. Run Kibana:


Run Kibana on Windows (ZIP)

  1. Download the ZIP.

  2. Extract the ZIP file to a directory and open that directory at the command prompt.

  3. If desired, modify config/kibana.yml.

  4. Run Kibana:


Run Kibana on Windows (EXE)

  1. Download the EXE file, run it, and click through the steps.

  2. Open the command prompt.

  3. Navigate to the Kibana install directory.

  4. If desired, modify config/kibana.yml.

  5. Run Kibana:


Get started with Kibana

  1. After starting Kibana, you can access it at port 5601. For example, http://localhost:5601.
  2. Log in with the default username admin and password admin.
  3. Choose Try our sample data and add the sample flight data.
  4. Choose Discover and search for a few flights.
  5. Choose Dashboard, [Flights] Global Flight Dashboard, and wait for the dashboard to load.