Install Kibana from archive on Linux or macOS

Install Kibana from archive on Linux or macOSedit

Kibana is provided for Linux and Darwin as a .tar.gz package. These packages are the easiest formats to use when trying out Kibana.

This package contains both free and subscription features. Start a 30-day trial to try out all of the features.

The latest stable version of Kibana can be found on the Download Kibana page. Other versions can be found on the Past Releases page.

Download and install the Linux 64-bit packageedit

The Linux archive for Kibana v8.13.4 can be downloaded and installed as follows:

curl -O
curl | shasum -a 512 -c - 
tar -xzf kibana-8.13.4-linux-x86_64.tar.gz
cd kibana-8.13.4/ 

Compares the SHA of the downloaded .tar.gz archive and the published checksum, which should output kibana-{version}-linux-x86_64.tar.gz: OK.

This directory is known as $KIBANA_HOME.

Download and install the Darwin packageedit

macOS Gatekeeper warnings

Apple’s rollout of stricter notarization requirements affected the notarization of the 8.13.4 Kibana artifacts. If macOS displays a dialog when you first run Kibana that interrupts it, you will need to take an action to allow it to run.

To prevent Gatekeeper checks on the Kibana files, run the following command on the downloaded .tar.gz archive or the directory to which was extracted:

xattr -d -r <archive-or-directory>

Alternatively, you can add a security override if a Gatekeeper popup appears by following the instructions in the How to open an app that hasn’t been notarized or is from an unidentified developer section of Safely open apps on your Mac.

The Darwin archive for Kibana v8.13.4 can be downloaded and installed as follows:

curl -O
curl | shasum -a 512 -c - 
tar -xzf kibana-8.13.4-darwin-x86_64.tar.gz
cd kibana-8.13.4/ 

Compares the SHA of the downloaded .tar.gz archive and the published checksum, which should output kibana-{version}-darwin-x86_64.tar.gz: OK.

This directory is known as $KIBANA_HOME.

Start Elasticsearch and generate an enrollment token for Kibanaedit

When you start Elasticsearch for the first time, the following security configuration occurs automatically:

  • Certificates and keys for TLS are generated for the transport and HTTP layers.
  • The TLS configuration settings are written to elasticsearch.yml.
  • A password is generated for the elastic user.
  • An enrollment token is generated for Kibana.

You can then start Kibana and enter the enrollment token to securely connect Kibana with Elasticsearch. The enrollment token is valid for 30 minutes.

Run Kibana from the command lineedit

Kibana can be started from the command line as follows:


By default, Kibana runs in the foreground, prints its logs to the standard output (stdout), and can be stopped by pressing Ctrl-C.

If this is the first time you’re starting Kibana, this command generates a unique link in your terminal to enroll your Kibana instance with Elasticsearch.

  1. In your terminal, click the generated link to open Kibana in your browser.
  2. In your browser, paste the enrollment token that was generated in the terminal when you started Elasticsearch, and then click the button to connect your Kibana instance with Elasticsearch.
  3. Log in to Kibana as the elastic user with the password that was generated when you started Elasticsearch.

If you need to reset the password for the elastic user or other built-in users, run the elasticsearch-reset-password tool. To generate new enrollment tokens for Kibana or Elasticsearch nodes, run the elasticsearch-create-enrollment-token tool. These tools are available in the Elasticsearch bin directory.

Configure Kibana via the config fileedit

Kibana loads its configuration from the $KIBANA_HOME/config/kibana.yml file by default. The format of this config file is explained in Configuring Kibana.

Directory layout of .tar.gz archivesedit

The .tar.gz packages are entirely self-contained. All files and directories are, by default, contained within $KIBANA_HOME — the directory created when unpacking the archive.

This is very convenient because you don’t have to create any directories to start using Kibana, and uninstalling Kibana is as easy as removing the $KIBANA_HOME directory. However, it is advisable to change the default locations of the config and data directories so that you do not delete important data later on.

Type Description Default Location Setting


Kibana home directory or $KIBANA_HOME

Directory created by unpacking the archive


Binary scripts including kibana to start the Kibana server and kibana-plugin to install plugins



Configuration files including kibana.yml




The location of the data files written to disk by Kibana and its plugins



Plugin files location. Each plugin will be contained in a subdirectory.