# Elasticsearch configuration

**URL:** <https://discuss.elastic.co/t/elasticsearch-configuration/381927>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-monitoring, docker\
**Created:** [September 14, 2025, 3:03am UTC](https://discuss.elastic.co/t/elasticsearch-configuration/381927 "2025-09-14T03:03:34Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![piyush\_hn](https://avatars.discourse-cdn.com/v4/letter/p/eada6e/32.png) [@piyush\_hn](https://discuss.elastic.co/u/piyush_hn)\
**Post date:** [September 14, 2025, 3:03am UTC](https://discuss.elastic.co/t/elasticsearch-configuration/381927/1 "2025-09-14T03:03:34Z")

</div>

Hi,

Trying to run elasticsearch inside a docker container but getting below error.

> {"@timestamp":"2025-09-14T02:18:15.072Z", "log.level":"ERROR", "message":"node validation exception\n[2] bootstrap checks failed. You must address the points described in the following [2] lines before starting Elasticsearch. For more information see [[Bootstrap checks | Elastic Docs](https://www.elastic.co/docs/deploy-manage/deploy/self-managed/bootstrap-checks?version=9.0%5C)]\nbootstrap check failure [1] of [2]: the default discovery settings are unsuitable for production use; at least one of [discovery.seed\_hosts, discovery.seed\_providers, cluster.initial\_master\_nodes] must be configured; for more information see [[Bootstrap checks | Elastic Docs](https://www.elastic.co/docs/deploy-manage/deploy/self-managed/bootstrap-checks?version=9.0#bootstrap-checks-discovery-configuration%5C)]\nbootstrap check failure [2] of [2]: Transport SSL must be enabled if security is enabled. Please set [xpack.security.transport.ssl.enabled] to [true] or disable security by setting [xpack.security.enabled] to [false]; for more information see [[Bootstrap checks | Elastic Docs](https://www.elastic.co/docs/deploy-manage/deploy/self-managed/bootstrap-checks?version=9.0#bootstrap-checks-tls%5C)]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server","process.thread.name":"main","log.logger":"org.elasticsearch.bootstrap.Elasticsearch","elasticsearch.node.name":"d05fa74a568d","elasticsearch.cluster.name":"docker-cluster"}  
> ERROR: Elasticsearch did not exit normally - check the logs at /usr/share/elasticsearch/logs/docker-cluster.log

Based on this error, I tried to modify the .yml file, but still giving me the same error. Can someone please suggest ?

```auto
> cluster.name: "docker-cluster"
> network.host: 3.6.91.243
> discovery.seed_hosts:- \["3.6.91.243", "\[::1\]"\]
>
> #----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
>
> # 
>
> # The following settings, TLS certificates, and keys have been automatically
>
> # generated to configure Elasticsearch security features on 14-09-2025 02:01:13
>
> # 
>
> # --------------------------------------------------------------------------------
>
> # Enable security features
>
> xpack.security.enabled: false
>
> xpack.security.enrollment.enabled: false
>
> # Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
>
> xpack.security.http.ssl:
> enabled: false
> keystore.path: certs/http.p12
>
> # Enable encryption and mutual authentication between cluster nodes
>
> xpack.security.transport.ssl:
> enabled: false
> verification_mode: certificate
> keystore.path: certs/transport.p12
> truststore.path: certs/transport.p12
>
> # Create a new cluster with the current node only
>
> # Additional nodes can still join the cluster later
>
> cluster.initial_master_nodes: \["faf75573db03"\]
>
> #----------------------- END SECURITY AUTO CONFIGURATION -------------------------

```

---

<div class="post-metadata">

**Author:** ![Rafa\_Silva](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rafa_silva/32/147814_2.png) [@Rafa\_Silva](https://discuss.elastic.co/u/Rafa_Silva)\
**Post date:** [September 14, 2025, 3:52am UTC](https://discuss.elastic.co/t/elasticsearch-configuration/381927/2 "2025-09-14T03:52:48Z")

</div>

You need to add both discovery and security settings. Example:

> cluster.name: "docker-cluster"  
> network.host: 0.0.0.0  
> discovery.seed\_hosts: ["127.0.0.1"]  
> cluster.initial\_master\_nodes: ["node-1"]
> 
> xpack.security.enabled: false  
> xpack.security.transport.ssl.enabled: false

Restart with this config and it should pass bootstrap checks.