Docker-elk_logstash_1 exited with code 1 after enabling xpack.security

Elastic Stack Logstash
1

Hello,

I set-up docker image in production server with single node. Stack came up and working fine. As a part of next step, enabled "xpack.security.enabled: true" in elasticsearch.yml. Generated random passwords for built-in users and added those users/passwords to config files. post that logstash is not coming up. Kindly check and advice

Enabled logstash security as per below page:
https://www.elastic.co/guide/en/logstash/current/ls-security.html#ls-monitoring-user

Docker setup

elasticsearch.yml

cluster.name: "docker-cluster"
network.host: 0.0.0.0
path.repo: ["/opt/hc/esbackup"]
bootstrap.memory_lock: true
discovery.type: single-node

xpack.license.self_generated.type: basic
xpack.security.enabled: true
xpack.monitoring.collection.enabled: true
xpack.security.audit.enabled: true

logstash.yml

http.host: "0.0.0.0"
xpack.monitoring.elasticsearch.hosts: [ "http://10.206.2.97:9200" ]

xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.username: logstash_system
xpack.monitoring.elasticsearch.password: NE29ubV6DlES2

logstasg-output.conf

  elasticsearch {
     hosts => ["10.206.2.97:9200"]
     user => logstash_internal
     password => healthcenter
         }

kibana.yml

server.name: kibana
server.host: 0.0.0.0
elasticsearch.hosts: [ "http://10.206.2.97:9200" ]
monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.requestTimeout: 120000

elasticsearch.username: kibana_system
elasticsearch.password: oA8AEX1eKAojZg
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.