Add Kibana user settings

Elasticsearch Service supports most of the standard Kibana and X-Pack settings. Through a YAML editor in the console, you can append Kibana properties to the kibana.yml file. Your changes to the configuration file are read on startup.


Be aware that some settings that could break your cluster if set incorrectly and that the syntax might change between major versions. Before upgrading, be sure to review the full list of the latest Kibana settings and syntax.

To change Kibana settings:

  1. Log into the Elasticsearch Service Console.
  2. On the Deployments page, select your deployment.

    Narrow your deployments by name, ID, or choose from several other filters. To customize your view, use a combination of filters, or change the format from a grid to a list.

  3. From your deployment menu, go to the Edit page.
  4. At the bottom of the Kibana instance, expand the User settings overrides caret.
  5. Update the user settings.
  6. Click Save changes.

Saving your changes initiates a configuration plan change that restarts Kibana automatically for you.


If a setting is not supported by Elasticsearch Service, you will get an error message when you try to save.

Supported Kibana settings

Set to true to log all events, including system usage information and all requests.
Specifies the additional vector layers for use in Region Map visualizations.
Mandatory. A description of the map being provided.
Mandatory. The location of the geojson file as provided by a webserver.
Optional. References the originating source of the geojson file.
Mandatory. Specifies one or more fields to expose from the geojson file for each layer.
Mandatory. Used to do an inner-join between the document stored in Elasticsearch and the geojson file.
Mandatory. Provides the human readable text that is shown under the Options tab when building the Region Map visualization.
Controls whether layers from the Elastic Maps Service should or shouldn’t be included in the vector layer option list.
Specifies the default route when opening Kibana. You can use this setting to modify the landing page when opening Kibana.
Adds the map attribution string.
Sets the maximum zoom level.
Sets the minimum zoom level.
Provides an array of subdomains used by the tile service. Specify the position of the subdomain the URL with the token {s}.
Lists the URL to the tileservice that Kibana uses to display map tiles in tilemap visualizations.
Specifies the locale for all strings, dates, and number formats that can be localized. Defaults to en (English).

For version 7.x The Timelion application no longer appears by default in the Kibana side navigation.

Set to true to add Timelion back in the side navigation.

X-Pack configuration settings

For version 5.0 and later: You can configure the following X-Pack settings from the Kibana User Settings editor. You can review the full list of the latest X-Pack settings, if needed.

Set to true (default) to enable the Grok Debugger.
Set to false to disable X-Pack graph.
When enabled, specifies the email address to receive cluster alert notifications. As of version 6.5, replaces the xpack:defaultAdminEmail setting for monitoring.
Controls how often data samples are collected.
Specifies the minimum number of seconds that a time bucket in a chart can represent. If you modify the xpack.monitoring.kibana.collection.interval, use the same value in this setting.

For Elasticsearch clusters that run in containers, enables the Node Listing to display the CPU utilization based on the Cgroup statistics, and adds the Cgroup CPU utilization to the Node Overview page instead of the overall operating system CPU utilization.

Defaults to false. Set to true (default) to enable machine learning.

If set to false in kibana.yml, the machine learning icon is hidden in this Kibana instance. If is set to true in elasticsearch.yml, however, you can still use the machine learning APIs. To disable machine learning entirely, see the Elasticsearch Machine Learning Settings.

Set to false to disable reporting.

How long each worker has to produce a report. If your machine is slow or under heavy load, you might need to increase this timeout. Specified in milliseconds.

Defaults to 30000 (30 seconds).


Specifies the browser to use to capture screenshots. Valid options are phantom and chromium. When chromium is set, the settings specified in the Chromium settings are respected.

Defaults to phantom.

Set to any text string. To provide your own encryption key for reports, use this setting.

Sets the maximum size of a CSV file before being truncated. This setting exists to prevent large exports from causing performance and storage issues.

Defaults to 10485760 (10mB).

Set to false to disable X-Pack APM UI.