Kibana 大版本已經出到了8.0 ,近期使用Kibana的時候已經加入日志告警 。
[warning] # 從kibana8.0 開始 ,日志格式將會發生變化
Starting in 8.0, the Kibana logging format will be changing. # 新變化可能會影響一些舊的日志處理,比如集成日志到ES進行分析的時候 This may affect you if you are doing any special handling of your Kibana logs, such as ingesting logs into Elasticsearch for further analysis.
# 如果您正在使用新的日志配置,那么您已經接收到舊格式和新格式的日志,舊格式將會消失。 If you are using the new logging configuration, you are already receiving logs in both old and new formats, and the old format will simply be going away. # 如果您還沒有使用新的日志配置,升級到8.0 以后日志格式會發生變化 If you are not yet using the new logging configuration, the log format will change upon upgrade to 8.0. # 從8.0開始,JSON日志的格式將是ecs兼容的JSON,並且默認的模式日志格式將與我們的新日志系統進行配置。 有關新日志格式的更多信息,請參閱文檔。 Beginning in 8.0, the format of JSON logs will be ECS-compatible JSON, and the default pattern log format will be configurable with our new logging system.
Please refer to the documentation for more information about the new logging format. [warning] # Kibana使用“elastic”用戶對Elasticsearch進行身份驗證告警。官方建議使用賬戶TOKEN代替。
Kibana is configured to authenticate to Elasticsearch with the "elastic" user. Use a service account token instead. [warning] # 使用Kibana應用程序權限授予報表權限。“xpack.reporting.roles。
Use Kibana application privileges to grant reporting privileges.
# "xpack.reporting.roles.allow" 授予報表權限已被棄用。() Using "xpack.reporting.roles.allow" to grant reporting privileges is deprecated. # "xpack.reporting.roles.enabled" 未來的版本 默認設置為 false The "xpack.reporting.roles.enabled" setting will default to false in a future release. # 8.0 用戶會話空閑8小時自動超時斷開,可以根據需求設置 User sessions will automatically time out after 8 hours of inactivity starting in 8.0. Override this value to change the timeout. [warning] # 8.0 用戶30天需要重新登陸,可以根據需求設置
Users are automatically required to log in again after 30 days starting in 8.0. Override this value to change the timeout.
[warning][config][plugins][security] # xpack.security.encryptionKey 為32位隨機key
Generating a random key for xpack.security.encryptionKey. # 為防止kibana重啟 用戶會話失效,配置文件增加 xpack.security.encryptionKey 配置;或者 使用 kibana-encryption-keys啟動 To prevent sessions from being invalidated on restart,
please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command. [warning][config][plugins][security] # 官方建議使用https 所以http訪問會有告警 Session cookies will be transmitted over insecure connections. This is not recommended. [warning][config][plugins][reporting] Generating a random key for xpack.reporting.encryptionKey.
To prevent sessions from being invalidated on restart,
please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command. [warning][encryptedSavedObjects][plugins] # xpack.encryptedSavedObjects.encryptionKey 未設置,kibaba 部分功能受限
Saved objects encryption key is not set.
This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command. [warning][actions][plugins]
# API功能關閉; 設置 xpack.encryptedSavedObjects.encryptionKey 啟用 APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
# 官方建議 啟動沙箱可以增加保護 [warning][chromium][plugins][reporting] Enabling the Chromium sandbox provides an additional layer of protection. # 啟動告警不嚴重,Kibana會降級啟動,服務可用 [info][status] Kibana is now available (was degraded) # [warning][fetcher][plugins][telemetry] Error fetching usage. (Error: Not all collectors are ready.) [info][0][1] [endpoint:metadata-check-transforms-task:0][plugins][securitySolution] no endpoint metadata transforms found
