tested on debian12
apt install kibana cp -pi /etc/kibana/node.options /etc/kibana/node.options.dist cat /etc/kibana/node.options tail -F /var/log/kibana/kibana.log systemctl restart kibana systemctl status kibana systemctl enable kibana # already netstat -lntup | grpe 5601
data node
/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token --scope kibana
remotely
ssh -L 5608:localhost:5601 elastic8 http://localhost:5608/ ==> paste token
back to data node
/usr/share/kibana/bin/kibana-verification-code
https://www.elastic.co/guide/en/kibana/8.14/production.html#openssl-legacy-provider