# After edited the elasticsearch.yml file, my service turn into inactive

**URL:** https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338
**Category:** Elasticsearch
**Created:** [March 4, 2025, 2:53am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338 "2025-03-04T02:53:13Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Duong\_Hieu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/duong_hieu/32/141303_2.png) [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)
#### Post date: [March 4, 2025, 2:53am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/1 "2025-03-04T02:53:13Z")

</div>

Hi, im new to elasticsearch, i already install elasticsearch and kibana, they're running well but things have change when i edited the elastichsearch.yml file  
After i edited, the elasticsearch service turn to inactive status. I read the logs file and they said

\< [2025-03-03T09:50:10,856][WARN][o.e.h.n.Netty4HttpServerTransport] [dr-oradb-uat01] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:53516} \>

can someone tell me where im wrong, thanks a lot.

---

<div class="post-metadata">

### Author: ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [March 4, 2025, 3:54am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/2 "2025-03-04T03:54:05Z")

</div>

> [@Duong\_Hieu](#):
>
> Hi, im new to elasticsearch, i already install elasticsearch and kibana, they're running well but things have change when i edited the elastichsearch.yml file

You need to provide more context about what you've changed in `elasticsearch.yml`

The log line you shared just says that Elasticsearch received a http request, when it is listening on https.

Was https disabled before?

---

<div class="post-metadata">

### Author: ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [March 4, 2025, 7:20am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/3 "2025-03-04T07:20:34Z")

</div>

> [@Duong\_Hieu](#):
>
> \< [2025-03-03T09:50:10,856][WARN][o.e.h.n.Netty4HttpServerTransport] [dr-oradb-uat01] **received plaintext http traffic on an https channel** , closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:53516} \>

You are using HTTP instead of HTTPS to connect ES. Also check is there any [ERROR] instead of [WARN] in the log.

In case you have problems with yaml, you should use a yaml validator e.g. [https://www.yamllint.com/](https://www.yamllint.com/)

---

<div class="post-metadata">

### Author: ![Duong\_Hieu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/duong_hieu/32/141303_2.png) [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)
#### Post date: [March 4, 2025, 7:44am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/4 "2025-03-04T07:44:14Z")

</div>

Hi, tks for anwser  
i havent changed much, in the yml file i just delete the "#" symbol front of  
host

path to data

path to log

http:9200

thats all.

---

<div class="post-metadata">

### Author: ![Duong\_Hieu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/duong_hieu/32/141303_2.png) [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)
#### Post date: [March 4, 2025, 7:47am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/5 "2025-03-04T07:47:32Z")

</div>

this is my yml file

```auto
# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
# Before you set out to tweak and tune the configuration, make sure you
# understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
#cluster.name: els-payment
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
node.name: dr-uat-ora01
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
path.data: /data/ELK/elasticsearch/data
#
# Path to log files:
#
path.logs: /data/ELK/elasticsearch/logs
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# By default Elasticsearch is only accessible on localhost. Set a different
# address here to expose this node on the network:
#
network.host: 10.6.145.226
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when this node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
discovery.seed_hosts: 10.6.145.226
#
# Bootstrap the cluster using an initial set of master-eligible nodes:
#
#cluster.initial_master_nodes: ["node-1", "node-2"]
#
# For more information, consult the discovery and cluster formation module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Allow wildcard deletion of indices:
#
#action.destructive_requires_name: false

#----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
#
# The following settings, TLS certificates, and keys have been automatically
# generated to configure Elasticsearch security features on 22-08-2024 07:43:10
#
# --------------------------------------------------------------------------------

# Enable security features
xpack.security.enabled: true

xpack.security.enrollment.enabled: true

# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
# Discover existing nodes in the cluster
#discovery.seed_hosts: ["10.6.145.219:9300","10.6.145.218:9300", "10.6.145.217:9300"]

# Allow HTTP API connections from anywhere
# Connections are encrypted and require user authentication
http.host: 0.0.0.0

# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
transport.host: 0.0.0.0

#----------------------- END SECURITY AUTO CONFIGURATION -------------------------

```

---

<div class="post-metadata">

### Author: ![Duong\_Hieu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/duong_hieu/32/141303_2.png) [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)
#### Post date: [March 4, 2025, 7:49am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/6 "2025-03-04T07:49:37Z")

</div>

i tried the link u give and it said:"Map keys must be unique at line 107, column 1"  
and the line 107 is here \< xpack.security.transport.ssl: \>

---

<div class="post-metadata">

### Author: ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)
#### Post date: [March 4, 2025, 3:53pm UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/7 "2025-03-04T15:53:38Z")

</div>

This is wrong:

```auto
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  keystore.path: certs/http.p12

# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12

```

You need to remove the first lines and just keep for that part:

```auto
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
```

---

<div class="post-metadata">

### Author: ![Duong\_Hieu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/duong_hieu/32/141303_2.png) [@Duong\_Hieu](https://discuss.elastic.co/u/Duong_Hieu)
#### Post date: [March 5, 2025, 3:32am UTC](https://discuss.elastic.co/t/after-edited-the-elasticsearch-yml-file-my-service-turn-into-inactive/375338/8 "2025-03-05T03:32:52Z")

</div>

tks for the anwser, but i thought thats for Kibana to connect  
Anyway im solved the problem yesterday, i mentioned that yml file is located for root so i tried to change the owner to the ELK owner and it worked. tks a lot guys
