Elasticsearch/kibana

Install elasticsearch

• sudo apt update && sudo apt upgrade
• sudo bash -c "export HOSTNAME=kali-purple.kali.purple; apt-get install elasticsearch -y"

take note of "elastic" user password

Convert to single-node setup (or replace fqdn name in initial_master_nodes list with IP address)

• sudo sed -e '/cluster.initial_master_nodes/ s/^#*/#/' -i /etc/elasticsearch/elasticsearch.yml
• echo "discovery.type: single-node" | sudo tee -a /etc/elasticsearch/elasticsearch.yml

Links

• https://gitlab.com/kalilinux/kali-purple/documentation/-/wikis/301_31:-Elastic-Stack-Installation