X-Pack is an Elastic Stack extension that bundles security, alerting, monitoring, reporting, and graph capabilities into one easy-to-install package. While the X-Pack components are designed to work together seamlessly, you can easily enable or disable the features you want to use.
Questions tagged [elasticsearch-x-pack]
140 questions
0
votes
1 answer
ElasticSearch: user authentication required in jquery ajax http request
I'm using ElasticSearch 14-day trial service deployed on Google Cloud and I'm trying to make a HTTP request from JQuery to realize a generic search on ElasticSearch.
$.ajax({
method: "GET",
url:…
Pedro Estevão
- 982
- 1
- 13
- 41
0
votes
1 answer
Elastic alert format list of items
I have a list of items retrieved from my query using aggregations. I want to print this list of items in my email with each appearing on a separate line. Right now I can print everything but it all appears one after the other i.e. file1.txt…
James
- 493
- 1
- 10
- 37
0
votes
1 answer
where is bin/elasticsearch on kuberenetes
I have installed elasticsearch on kubernetes using the helm chart
. I need to enable xpack security for that I need to create a certificate using elasticsearch-certutil. I can't find it's location on kubernetes.
the error I am getting now…
M.Bou
- 43
- 1
- 7
0
votes
1 answer
Difference between X-Pack and SearchGuard in Elasticsearch
I am setting up user authentication when accessing kibana. I would like to have a login prompt whenever user hits the kibana URL.
I found x-pack and searchguard manages user authentication, I am not sure of the difference. I am actually using…
xxestter
- 441
- 7
- 19
0
votes
1 answer
Unable to perform SQL search on logstash index in kibana
I have below indexes in the kibana when searched with below query.
GET /_xpack/sql?format=txt
{
"query": "SHOW tables"
}
Output:
name | type
---------------------------------+---------------
.kibana …
Bitra Hemanth
- 41
- 1
- 10
0
votes
1 answer
Elasticsearch X-Pack builtin cluster alerts email
I'm running ES 6.4 with X-Pack installed.
There are builtin alerts for cluster awareness:
I'm receiving email alerts for cluster severity, shards allocation etc which are coming in from "X-pack Admin" with one of my email addresses. These watchers…
JustAGuy
- 5,151
- 11
- 41
- 55
0
votes
0 answers
Is it possible to hide some fields based on user role in elasticsearch v 5.6.6?
I need to hide some fields from any find result in elasticsearch for non-admin users. For example object below exists in elasticsearch database
{
"name": "John",
"login": "john",
"password": "123"
}
And if user login with admin role, he can…
tosha220
- 51
- 1
- 1
- 4
0
votes
1 answer
Read-only OAuth access to Kibana
Question1: Is there way to achieve free read-only access to Kibana?
Question2: Is there way to achieve free OAuth login to Kibana?
Already everyone who have link to my Kibana have all accesses too. What I need is give some users read-only access.
I…
TheHorizon
- 145
- 1
- 16
0
votes
0 answers
Upgrading Xpack license in Kibana
In elastic Search 6.3.2, and Kibana 6.3.2, there is Xpack already installed with the package, but when i tried to access in Kibana, it threw license expired error. How should i upgrade Xpack version and I need to work on watcher. Please help me to…
gowrim
- 11
- 4
0
votes
1 answer
ElasticSearch: New user with admin privileges of an index unable to access it in Kibana
I want to create a user who has admin rights (search, read, write) access on testIndex index. For this, I created a role testIndex_admin (ref. kibana screenshot given below) and assigned the new user this role.
However after the user logs in he…
Temp O'rary
- 5,366
- 13
- 49
- 109
0
votes
0 answers
Elasticsearch Searching over large number of fields in a large index
On Elasticsearch 5.6.
We've got a requirement to implement a context free search (a simple google like search anything) feature that could operate over an index with 1000 fields. The index itself can be big (1 million docs per day).
I was looking at…
user1189332
- 1,773
- 4
- 26
- 46
0
votes
1 answer
Set up watcher for alerting high CPU usage by some process
I'm trying to create a Watcher Alert that will be triggered when some process on a node uses over 0.95% of CPU for the last one hour.
Here is an example of my config:
{
"trigger": {
"schedule": {
"interval": "10m"
}
},
"input":…
0
votes
1 answer
ELK - X-Pack Custom realm
I've developed a custom realm for my ELK cluster.
This module works well on a on node elasticsearch but when I install it on my production cluster, nothing works.
Elasticsearch starting logs :
- nothing special, everything seems to work and xpack…
Crank
- 26
- 4
0
votes
1 answer
Can I retrieve the data from the Forecast API in Elasticsearch/X-pack
I am using the Forecast API in X-pack to produce a 30 day forecast like this
POST _xpack/ml/anomaly_detectors/my_job/_forecast
{
"duration": "30d"
}
and get an acknowledgement response with a forecast_id. I'm trying to retrieve the forecast…
uyth
- 3
- 2
0
votes
1 answer
Unable to create PreBuiltXPackTransportClient x-pack elastic search
pack watch. I have added dependency of x-pack.
org.elasticsearch.client
x-pack-transport
5.3.3
…
lucy
- 4,136
- 5
- 30
- 47