# Config https for Elasticsearch 5.6

**URL:** <https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792>\
**Category:** Elasticsearch\
**Created:** [December 14, 2017, 2:52pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792 "2017-12-14T14:52:58Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Derrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/derrick/32/49944_2.png) [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Post date:** [December 14, 2017, 2:52pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/1 "2017-12-14T14:52:59Z")

</div>

Hi,

we are upgrading our ES from 2 to 5.6, but cannot make https works, could someone can provide the config?

this is what we have in elasticsearcy.yml.

# --------------------------------- XPack Config ------------------------------

action.auto\_create\_index: .security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*

xpack.security.enabled: true

xpack.ssl.keystore.path: /usr/share/elasticsearch/config/keystore.jks  
xpack.ssl.keystore.password: password  
xpack.ssl.keystore.key\_password: password

xpack.ssl.truststore.path: /usr/share/elasticsearch/config/truststore.jks  
xpack.ssl.truststore.password: changeit

xpack.security.transport.ssl.enabled: true  
xpack.security.http.ssl.enabled: true

xpack.ssl.verification\_mode: none  
xpack.ssl.client\_authentication: none

xpack.security.authc.realms:  
realm1:  
type: native  
order: 3

```
realm2:
    type: file
    order: 1

realm3:
    type: ldap
    order: 2
    url: "ldap://ldap.service.consul"
    user_dn_templates:
        - "uid={0}, ou=ISS-FRNT OFFCE DEV-CLIENT SUPPORT CENTRE,o=Scotia Capital Markets,c=CA"
    #files:
    # role_mapping: "/usr/share/elasticsearch/config/shield/ldap_role_mapping.yml"
    unmapped_groups_as_roles: false
```

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 14, 2017, 3:04pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/2 "2017-12-14T15:04:15Z")

</div>

I moved this to #x-pack

---

<div class="post-metadata">

**Author:** ![Derrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/derrick/32/49944_2.png) [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Post date:** [December 14, 2017, 3:32pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/3 "2017-12-14T15:32:13Z")

</div>

now I am getting this error, please help, thanks

[2017-12-14T15:27:31,252][WARN][o.e.b.ElasticsearchUncaughtExceptionHandler] [[pxv-data1.dev.lbb4sd.333az.net](http://pxv-data1.dev.lbb4sd.333az.net)] uncaught exception in thread [main]  
org.elasticsearch.bootstrap.StartupException: ElasticsearchException[Failed to load plugin class [org.elasticsearch.xpack.XPackPlugin]]; nested: InvocationTargetException; nested: IllegalArgumentException[the [action.auto\_create\_index] setting value [.security,.monitoring\*,.watches,.triggered\_watches,.watcher-history\*] is too restrictive. disable [action.auto\_create\_index] or set it to [.security,.security-6]];  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:136) ~[elasticsearch-5.6.4.jar:5.6.4]

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 14, 2017, 4:04pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/4 "2017-12-14T16:04:57Z")

</div>

May be do what is written in the logs?

> disable [action.auto\_create\_index] or set it to [.security,.security-6]

---

<div class="post-metadata">

**Author:** ![Derrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/derrick/32/49944_2.png) [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Post date:** [December 20, 2017, 9:15pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/5 "2017-12-20T21:15:02Z")

</div>

it doesn't work either.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 20, 2017, 9:51pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/6 "2017-12-20T21:51:20Z")

</div>

Exact same logs now?

---

<div class="post-metadata">

**Author:** ![Derrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/derrick/32/49944_2.png) [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Post date:** [December 20, 2017, 10:02pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/7 "2017-12-20T22:02:49Z")

</div>

Yes, same issue

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [December 20, 2017, 10:20pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/8 "2017-12-20T22:20:48Z")

</div>

Can you share your config file, your logs?

Did you restart the nodes?

---

<div class="post-metadata">

**Author:** ![Derrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/derrick/32/49944_2.png) [@Derrick](https://discuss.elastic.co/u/Derrick)\
**Post date:** [December 20, 2017, 10:28pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/9 "2017-12-20T22:28:23Z")

</div>

I share it in this thread, [Failed to load xpackplugin, please help, urgent](https://discuss.elastic.co/t/failed-to-load-xpackplugin-please-help-urgent/112719/3)

Also es is being run in docker, so I restart docker.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 17, 2018, 10:28pm UTC](https://discuss.elastic.co/t/config-https-for-elasticsearch-5-6/111792/10 "2018-01-17T22:28:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
