Do we require licence to enable xpack.security feature

mohammed.sabil · October 22, 2021, 10:32am

Hello Team,

I just wanted to know, If I wanted to use the alerting, monitoring and user administration RBAC feature in ELK stack. Do I require a license for the same?

I also wanted to know, if I would like to do integration of a tool with ELK stack in that case also do we require a license?

As today I tried to enable the xpack.security.enable=true in docker-compose of ELK i am getting error message "License is required"

Please do let me know on this.

Regards,
Sabil.

stephenb · October 22, 2021, 1:47pm

Hi @mohammed.sabil

What version of the Elasticsearch are you using?

Basic security has been Free for quite some time.

You can see the features and license matrix here

mohammed.sabil · October 23, 2021, 7:43am

@stephenb thank you for the information.

Sometimes means 14 days. Right?

Regards,
Sabil

mohammed.sabil · October 23, 2021, 9:25am

When I make xpack.security.enable is true..

Still getting an error message that unable to retrieve the licence server information

Can you please suggest?

Sabil.

stephenb · October 23, 2021, 2:17pm

Where are you seeing that error?

That error can be seen when security is improperly configured for Kibana and / or Elasticsearch.

Proper security configuration is more than just that one setting.

I suggest you read and carefully follow the documentation here.

I have also constructed a complete walkthrough here with all the essential steps for a single note and Kibana

github.com

bvader/howtos/blob/master/basic-security-elasticsearch/README.md


## Single Node Secured Elasticsearch + Kibana with Elastic generated self signed certs (updated)

#### NOTE / DISCLAIMER: **This configuration should only be used for Dev / POC purposes this is NOT suitable for production use.**

For Further Details Please Refer to the Official Documentation: [Elasticsearch](https://www.elastic.co/guide/en/elasticsearch/reference/current/index.html) and [Kibana](https://www.elastic.co/guide/en/kibana/current/index.html)

### What we are doing?

This is simple / minimal quickstart to create a single Elasticsearch node and Kibana with basic authentication and SSL/TLS enabled (we will enable SSL for both HTTPS and Transport layer even though it is just a single node). This is a condensed / direct path to the Basic Security + HTTPs shown in the diagram [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html) and described [Configure security for the Elastic Stack](https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html#security-basic-https-overview). We will then be able to bind the Elasticsearch and Kibana to the network so it can be safely reached from another system.  
**Do NOT bind your Elasticsearch node or cluster to the network unless you secure your cluster and Kibana FIRST!** 

![Elastic Securty Layers](https://www.elastic.co/guide/en/elasticsearch/reference/current/images/elastic-security-overview.png)

**Notes:** 
* This example is using Elastic Stack 7.15.1 and Ubuntu 20.04 LTS using a Deb Package
* We are colocating Elasticsearch and Kibana for Dev / POC only for POC / Dev only
* Many of these commands / directores require `root` access so either be prepared to `sudo` most of the commands or just do a `sudo -i` for the duration of the session... your choice...
* There are many important settings for Elasticsearch that are not in the example please review them [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/setup.html) before moving on from POC / Dev mode
* All the IP Adresses are just examples and are not to be taken literally.

This file has been truncated. show original

system · November 20, 2021, 2:17pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.