ElasticSearch Encryption

Probably the disk.

See also here: Encryption at rest support in x-pack platinum