X-Pack is an Elastic Stack extension that bundles security, alerting, monitoring, reporting, and graph capabilities into one easy-to-install package. While the X-Pack components are designed to work together seamlessly, you can easily enable or disable the features you want to use.
Questions tagged [elasticsearch-x-pack]
140 questions
1
vote
1 answer
Configure Elasticsearch, Kibana 5, Logstash with http input
I am trying to install the ELK stack in the last couples of days but unfortunately I could not get it to work.
The steps that I've done:
installing Elasticsearch with X-pack.
installing Kibana 5 with X-pack.
kibana.yml:
server.port:…

Yanay Hollander
- 327
- 1
- 5
- 19
0
votes
1 answer
Can Elastic Search xpack security features be disabled after having had them enabled on a cluster?
I am running a 3 node Elastic Search 8.9 cluster, each on a separate VM, with a Kibana instance, all of them on Centos 7.9. Due to not being able to connect an app to the cluster I've decided to disable xpack and ssl security. As such, my config for…

notmeagain
- 3
- 2
0
votes
0 answers
failed to retrieve password hash for reserver user [elastic] at least one primary shard for the index [.security-7] is unavailable?
I ve installed elastic 8.5.x with xpack on kubernates (bitnami). At the begining it works well.
Somehow it crashed after one month (nearly) then when i looked error it says
failed to retrieve password hash for reserver user [elastic] at least one…

CompEng
- 7,161
- 16
- 68
- 122
0
votes
0 answers
My xpack license is valid and active but monitoring tab is still showing that the license has expired
My basic license got expired and I have re-issued and installed the license again using curl -X PUT $HOST/_xpack/license api . So when I check the license this way : curl -X GET $HOST/_xpack/license ;
It shows the license is valid.
{
"license" :…
0
votes
1 answer
Docker: Kibana and Elasticsearch - Closed connection
When I try to use kibana.yml the service stop working unexpectedly. I need to set xpack.encryptedSavedObjects.encryptionKey because I need to enable alerts.
version: '3'
services:
elasticsearch:
container_name: elasticsearch
image:…

Edoardo Zucchelli
- 77
- 1
- 10
0
votes
1 answer
Local setup for Elasticsearch with Xpack and Spring
I locally installed Elasticsearch with X-Pack and Kibana 8.2.2 and made it up and running. I also created a new project with Spring and Java that would connect with Elasticsearch. When running Elasticsearch for the first time it creates a…

betaros
- 590
- 7
- 24
0
votes
0 answers
ELK Implement anonymous authentification on Kubernetes Deployment
I have an ElasticSearch + Kibana cluster on Kubernetes. We want to bypass authentification to let user to directly to dashboard without having to log in.
We have managed to implement Elastic Anoynmous access on our elastic nodes. Unfortunately, it…

Jules Civel
- 449
- 2
- 13
0
votes
1 answer
How to provide api token based authentication to Logstash http input
I'm have this simple logstash config, and I would like to add api-token auth to http input. I know how to do that for output to elastic search, but can't figure out is that possible to provide similar to http input
input {
http {
host =>…

Shepler
- 3
- 1
0
votes
1 answer
Is it possible to install only the profiling feature of Elasticsearch 6.8 X-Pack?
My installation of Elasticsearch 6.8.22 does not include an installation of X-Pack because so far we have not needed any of its features.
I am generating profiling data on queries, using the Profile API, but I want to use the Search Profiler UI…

k-den
- 853
- 13
- 28
0
votes
1 answer
Java rest client call elastic search after enable https
everyone , I am using elasticsearch 6.8.22 and I need to enable the https for it
I have done setting of secure the elasticsearch and can connect to https://localhost:9200/_cat/indices?v , it require user login , then I already set the user password…

mres
- 53
- 2
- 6
0
votes
1 answer
Elasticsearch PKI security realm licensing
Here in subscription page https://www.elastic.co/subscriptions
Stated that Encrypted communications is under basic license.
However when I defined pki realm for client authentication, it didn't work until I enabled trial version.
Looked again on…

liotur
- 809
- 2
- 17
- 36
0
votes
2 answers
Failed to setup Alerts and Actions for ELK - You must enable Transport Layer Security
Am trying to setup the Alert and Actions for ELK. But, getting the error message
You must enable Transport Layer Security.
Have already set up the following parameter in the kibana.yml. As followed:
xpack.encryptedSavedObjects.encryptionKey:…

ksee00
- 9
- 1
0
votes
0 answers
Basic authentication in ELK Stack
I am trying to enable basic authentication in our ELK Stack. The below steps have tried to enable the authentication
1. docker run -d -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:7.10.1
2. docker exec -it…

user4948798
- 1,924
- 4
- 43
- 89
0
votes
1 answer
How to Disable Elastic User access in Kibana Dashboard
I am trying to setup Elastic search log management...
I have enabled Free Xpack secutiry for kibana Dashboard authentication and created users with super access for my team members.. Now I would like to disable elastic user login access in kibana…

Kumar
- 1
- 1
0
votes
1 answer
ElasticSearch X-Pack Security Roles and Field Security
I am using ES 6.2.4 and I am using X-Pack.
I register a user with the following roles:
{
"password" : "changeme",
"roles" : [ "object_basic", "object_ext" ],
"full_name" : "FullName",
"email" : "sample@example.com",
"metadata" :…

Investigator
- 1,431
- 2
- 17
- 24