How To

Task-oriented recipes for common operations, grouped by topic.

Deployment

• Kibana behind a reverse proxy
• Kibana with HTTPS enabled
• Kibana with external certificates
• Elasticsearch with external certificates
• Standalone Logstash (no ES CA)
• Beats shipping directly to Elasticsearch
• Air-gapped / offline deployment

Cluster Operations

• Adding a node to an existing cluster
• Dedicated node roles (hot/warm/cold)
• Snapshot repository setup

Configuration

• elasticsearch_extra_config vs elasticsearch_cluster_settings
• elasticstack_full_stack: false — when and why
• Simplifying passwords with elasticstack_cert_pass
• Suppressing sensitive output for debugging

Pipelines & Inputs

• Filebeat with multiple log inputs
• Logstash with complex pipelines

Scaling & High Availability

• Scaling up (adding nodes)
• Scaling down (removing nodes)
• Multi-Kibana deployment
• Backup and restore

Monitoring & Observability

• Self-monitoring with Beats
• Audit logs
• Health check endpoints