<div id="readability-page-1" class="page"><div>PS&nbsp;D:\ELK\kibana-9.0.1\bin&gt;&nbsp;.\kibana-encryption-keys.bat&nbsp;generate&nbsp;-i##&nbsp;Kibana&nbsp;Encryption&nbsp;Key&nbsp;Generation&nbsp;UtilityThe&nbsp;'generate'&nbsp;command&nbsp;guides&nbsp;you&nbsp;through&nbsp;the&nbsp;process&nbsp;of&nbsp;setting&nbsp;encryption&nbsp;keys&nbsp;for:xpack.encryptedSavedObjects.encryptionKey&nbsp;&nbsp;&nbsp;&nbsp;Used&nbsp;to&nbsp;encrypt&nbsp;stored&nbsp;objects&nbsp;such&nbsp;as&nbsp;dashboards&nbsp;and&nbsp;visualizations&nbsp;&nbsp;&nbsp;&nbsp;https://www.elastic.co/guide/en/kibana/current/xpack-security-secure-saved-objects.html#xpack-security-secure-saved-objectsxpack.reporting.encryptionKey&nbsp;&nbsp;&nbsp;&nbsp;Used&nbsp;to&nbsp;encrypt&nbsp;saved&nbsp;reports&nbsp;&nbsp;&nbsp;&nbsp;https://www.elastic.co/guide/en/kibana/current/reporting-settings-kb.html#general-reporting-settingsxpack.security.encryptionKey&nbsp;&nbsp;&nbsp;&nbsp;Used&nbsp;to&nbsp;encrypt&nbsp;session&nbsp;information&nbsp;&nbsp;&nbsp;&nbsp;https://www.elastic.co/guide/en/kibana/current/security-settings-kb.html#security-session-and-cookie-settingsAlready&nbsp;defined&nbsp;settings&nbsp;are&nbsp;ignored&nbsp;and&nbsp;can&nbsp;be&nbsp;regenerated&nbsp;using&nbsp;the&nbsp;--force&nbsp;flag.&nbsp;&nbsp;Check&nbsp;the&nbsp;documentation&nbsp;links&nbsp;for&nbsp;instructions&nbsp;on&nbsp;how&nbsp;to&nbsp;rotate&nbsp;encryption&nbsp;keys.Definitions&nbsp;should&nbsp;be&nbsp;set&nbsp;in&nbsp;the&nbsp;kibana.yml&nbsp;used&nbsp;configure&nbsp;Kibana.This&nbsp;tool&nbsp;will&nbsp;ask&nbsp;you&nbsp;a&nbsp;number&nbsp;of&nbsp;questions&nbsp;in&nbsp;order&nbsp;to&nbsp;generate&nbsp;the&nbsp;right&nbsp;set&nbsp;of&nbsp;keys&nbsp;for&nbsp;your&nbsp;needs.Set&nbsp;xpack.encryptedSavedObjects.encryptionKey?&nbsp;[y/N]&nbsp;ySet&nbsp;xpack.reporting.encryptionKey?&nbsp;[y/N]&nbsp;nSet&nbsp;xpack.security.encryptionKey?&nbsp;[y/N]&nbsp;nThe&nbsp;following&nbsp;key&nbsp;was&nbsp;generated:xpack.encryptedSavedObjects.encryptionKeySave&nbsp;generated&nbsp;keys&nbsp;to&nbsp;a&nbsp;sample&nbsp;Kibana&nbsp;configuration&nbsp;file?&nbsp;[y/N]&nbsp;yWhat&nbsp;filename&nbsp;should&nbsp;be&nbsp;used&nbsp;for&nbsp;the&nbsp;sample&nbsp;Kibana&nbsp;config&nbsp;file?&nbsp;[D:\ELK\kibana-9.0.1\config\kibana.sample.yml]):Wrote&nbsp;configuration&nbsp;to&nbsp;D:\ELK\kibana-9.0.1\config\kibana.sample.yml</div></div>

케세라세라

stack mornitoring 실행하니 이런 에러가 뜬다. 개체 암호화키가 필요하다고?
까라면 까야지(..) 암호화키 생성.
PS D:\ELK\kibana-9.0.1\bin> .\kibana-encryption-keys.bat generate -i
## Kibana Encryption Key Generation Utility
 
The 'generate' command guides you through the process of setting encryption keys for:
 
xpack.encryptedSavedObjects.encryptionKey
    Used to encrypt stored objects such as dashboards and visualizations
    https://www.elastic.co/guide/en/kibana/current/xpack-security-secure-saved-objects.html#xpack-security-secure-saved-objects
 
xpack.reporting.encryptionKey
    Used to encrypt saved reports
    https://www.elastic.co/guide/en/kibana/current/reporting-settings-kb.html#general-reporting-settings
 
xpack.security.encryptionKey
    Used to encrypt session information
    https://www.elastic.co/guide/en/kibana/current/security-settings-kb.html#security-session-and-cookie-settings
 
 
Already defined settings are ignored and can be regenerated using the --force flag.  Check the documentation links for instructions on how to rotate encryption keys.
Definitions should be set in the kibana.yml used configure Kibana.
 
This tool will ask you a number of questions in order to generate the right set of keys for your needs.
 
Set xpack.encryptedSavedObjects.encryptionKey? [y/N] y
Set xpack.reporting.encryptionKey? [y/N] n
Set xpack.security.encryptionKey? [y/N] n
 
The following key was generated:
xpack.encryptedSavedObjects.encryptionKey
 
Save generated keys to a sample Kibana configuration file? [y/N] y
What filename should be used for the sample Kibana config file? [D:\ELK\kibana-9.0.1\config\kibana.sample.yml]):
Wrote configuration to D:\ELK\kibana-9.0.1\config\kibana.sample.yml
Colored by Color Scripter
cs
생성된 암호화키 설정 추가.
보안이 계속 강화된다. 중요하지 보안(..)
관련 글
Elasticsearch 9.0의 변화
Elasticsearch 8.11의 변화
Filebeat 9.0의 변화

Elasticsearch 9.0의 변화 - 2nd

댓글