securityonion/salt/kibana/defaults.yaml

kibana:
  enabled: True
  saved_objects:
    discover:
      sampleSize: 100
    theme:
      darkMode: True
    timepicker:
      timeDefaults:
        from: now-24h
        to: now
    securitySolution:
      defaultIndex:
        - apm-*-transaction*
        - traces-apm*
        - auditbeat-*
        - endgame-*
        - filebeat-*
        - logs-*
        - packetbeat-*
        - winlogbeat-*
        - so-*
  config:
    server:
      name: kibana
      host: "0.0.0.0"
      basePath: /kibana
      publicBaseUrl: https://{{salt['pillar.get']('global:url_base')}}/kibana
    elasticsearch:
      hosts:
        - https://{{salt['pillar.get']('manager:mainip')}}:9200
      ssl:
        verificationMode: none
      requestTimeout: 90000
    logging:
      appenders:
        file:
          type: file
          fileName: /var/log/kibana/kibana.log
          layout:
            type: pattern
      root:
        appenders: 
          - default
          - file
    telemetry:
        enabled: False
    security:
      showInsecureClusterWarning: False
    xpack:
      ml:
        enabled: False