Securing the Elasticsearch Cluster

#elasticsearch #elasticsearchtutorial #kibana #filebeat
In this tutorial, we setup the security certificates for inter-node communications and for HTTP clients.
Watch how to setup Elasticsearch and Kibana:
• Installing and Configu...
Thank you for watching.
Follow me on Twitter: / ayounes9
Check out my Blog: www.thelionping.com/

[@grenade558]

i cant tell you how many times ive struggled with this despite reading the docs. sometimes a visual walkthrough and side by side setup is exactly what's needed! thank you so much for making this video!!!!

[@birgaripkul1612]

Thank you very much for your great tutorial. Even if the Elastic documentation explains similar steps but there were many steps not working, but you shown them practically.

[@justinjonesfitness]

Been following through your elasticsearch videos. Love them!

[@sushilkumar95]

Really appreciate your effort and the way you have described. Thank you.

[@170insane]

I was frustrated following the documentation to set up a basic SSL for transport on a cluster. I forgot to change the file permission on the generated certificate so that Elasticsearch has read permission! Thank you so much for posting this video!

[@user-lf3qv3rp9i]

Thank You Man. You are saving Carreers, for real. Thank You

[@makeiteasy1307]

U are great brother please continue with more videos

[@jg1000c]

Very helpful, thanks

[@sergeeric-ze1yp]

Good tutorial hope to see more tutoria

[@elastvd7503]

Great es channel, thanks

[@YosefCohen-dn3ev]

Thank you!

[@Deg0cRuz]

Thank you!!

[@ammarmostafa14]

ALL SUPPORT TO YOU😍😍😍

[@user-ny1up4xr2r]

Despite configuring SSL certificates why it appears insecure n the browser?????????????????????????????????

[@saraichiba5387]

Thank you @Ali for these tutorials, they are very good. What about Kibana server?

[@AliYounesGo4IT]

You can set elasticsearch.ssl.certificateAuthorities in the kibana.yml file to point to the CA cert to secure the connection to the Elasticsearch hosts.

[@readycortana9575]

Is it mandatory to use kibana? I have 3 nodes. 2 nodes connected to load balancer

[@shahrazkl]

thanks

[@markmarais8524]

Has the cluster config changed from 8.5?

[@bitaddict1254]

Love your videos, they are so helpful. Can you also do a video on how to secure including Logstash nodes?

[@AliYounesGo4IT]

Thank you! Do you mean the output plugin in Logstash that connects to Elasticsearch?

[@leonardohenrique6878]

When accessing the integration page nothing loads and in the logs it shows "Self-signed certificate in the chaim", any ideas? I also configured my proxy in kibana

[@sasikanth1329]

Hi ali... I am facing an issue.... After following these steps i am unable to connect to elasticsearch search from my logstash server.... Can you help

[@funkiam9214]

Hi, Ali! Nice video! but its possible to put only basic auth to elastic search cluster like username and password?

[@saraichiba5387]

@Ali have you done something to configure metricbeats to use TLS, because in my setup all the netricbeats stoped working :/. your input is much appreciated

[@AliYounesGo4IT]

I have another video about installing metricbeat to monitor the Elasticsearch nodes: kzbin.info/www/bejne/Z4XClZueob1qrtk I used the SSL settings to secure the connection to elasticsearch in metricbeat.yml file

[@elantizurdo]

I've been following this videos to configure my node to learn how to do this and it's been fantastic. I was at the 9:30 min mark and then I hit an error: ERROR: will not overwrite keystore at [/etc/elasticsearch/elasticsearch.keystore], because this incurs changing the file owner, with exit code 78 Does the ownership of the bin/files has to be root:elasticsearch? Because mine are elasticsearch:elasticsearch. Thanks so much!

[@elantizurdo]

I've changed ownership of this file: chown root:elasticsearch /etc/elasticsearch/elasticsearch.keystore I hope I didn't break anything.

[@nuazzolo]

Is there anyway to do this to an unsecured running cluster without causing downtime?

[@AliYounesGo4IT]

It is tricky to enable security without downtime. You will need a restart of the cluster when you enable security. The nodes with security enabled cannot communicate with nodes you haven't enabled security on yet. It's better to plan for a downtime.

[@vuat1494]

suppose if i add 1 2 nodes to elasticsearch cluster, i have to go to node 1 master again to reissue http certificate? this is crazy

[@AliYounesGo4IT]

because the master is the CA, it has to sign the other certs, or you can just copy the CA cert from the master to the new ones.