# ElasticSearch Strange behavior

**URL:** <https://discuss.elastic.co/t/elasticsearch-strange-behavior/313650>\
**Category:** Elasticsearch\
**Created:** [September 5, 2022, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-strange-behavior/313650 "2022-09-05T07:22:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lcui\_dxc](https://avatars.discourse-cdn.com/v4/letter/l/8edcca/32.png) [@lcui\_dxc](https://discuss.elastic.co/u/lcui_dxc)\
**Post date:** [September 5, 2022, 7:22am UTC](https://discuss.elastic.co/t/elasticsearch-strange-behavior/313650/1 "2022-09-05T07:22:05Z")

</div>

Hello there:

I use ELK v8.3.3, it worked fine without x-park. I activated x-pack and configured Elasticsearch by adding the following initially

pack.security.enabled: true  
xpack.security.http.ssl.enabled: true  
xpack.security.transport.ssl.enabled: true  
xpack.security.transport.ssl.verification\_mode: certificate  
xpack.security.http.ssl.client\_authentication: none  
#xpack.security.transport.ssl.client\_authentication: required  
xpack.security.transport.ssl.client\_authentication: none  
xpack.security.transport.ssl.keystore.path: /elastic-certificates.p12  
xpack.security.transport.ssl.truststore.path: /elastic-certificates.p12  
#xpack.security.transport.ssl.keystore.secure\_password  
#xpack.security.transport.ssl.truststore.secure\_password

xpack.security.enabled: true  
xpack.security.http.ssl.enabled: true  
xpack.security.transport.ssl.enabled: true  
xpack.security.transport.ssl.verification\_mode: certificate  
xpack.security.http.ssl.client\_authentication: none  
xpack.security.transport.ssl.client\_authentication: none  
xpack.security.transport.ssl.keystore.path: /elastic-certificates.p12  
xpack.security.transport.ssl.truststore.path: /elastic-certificates.p12  
#action.destructive\_requires\_name: false

Eleasticsearch keeps getting for following errors:

[2022-09-05T07:01:50,515][ERROR][o.e.b.Elasticsearch] [esna-1] fatal exception while booting Elasticsearch  
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: unknown secure setting [xpack.security.http.ssl.truststore] did you mean any of [xpack.security.http.ssl.truststore.path, xpack.security.http.ssl.truststore.type, xpack.security.http.ssl.truststore.password, xpack.security.http.ssl.truststore.algorithm, xpack.security.http.ssl.keystore.type, xpack.security.http.ssl.certificate, xpack.security.http.ssl.keystore.path, xpack.security.http.ssl.key\_passphrase, xpack.security.http.ssl.keystore.password, xpack.security.http.ssl.enabled, xpack.security.http.ssl.key, xpack.security.transport.ssl.truststore.path, xpack.security.transport.ssl.truststore.type]?  
at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:228) [elasticsearch-8.3.3.jar:?]  
at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:67) [elasticsearch-8.3.3.jar:?]  
Caused by: java.lang.IllegalArgumentException: unknown secure setting [xpack.security.http.ssl.truststore] did you mean any of [xpack.security.http.ssl.truststore.path, xpack.security.http.ssl.truststore.type, xpack.security.http.ssl.truststore.password, xpack.security.http.ssl.truststore.algorithm, xpack.security.http.ssl.keystore.type, xpack.security.http.ssl.certificate, xpack.security.http.ssl.keystore.path, xpack.security.http.ssl.key\_passphrase, xpack.security.http.ssl.keystore.password, xpack.security.http.ssl.enabled, xpack.security.http.ssl.key, xpack.security.transport.ssl.truststore.path, xpack.security.transport.ssl.truststore.type]?

I don't have xpack.security.http.ssl.truststore in my elasticsearch.yml file.  
I stopped the VM where the Elastic is running on few times thinking something may be stuck in the cache.. still the same error... I started with a new elasticsearch.yml, still the same..

Anything I did it wrong? Please advise.

Thanks in advance

Li

---

<div class="post-metadata">

**Author:** ![cheshirecat](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cheshirecat/32/109532_2.png) [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\
**Post date:** [September 5, 2022, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-strange-behavior/313650/2 "2022-09-05T09:10:28Z")

</div>

> [@lcui\_dxc](#):
>
> xpack.security.transport.ssl.truststore.path: /elastic-certificates.p12

First of all: why did you use "/"? It should be like this:

```auto
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

```

or if you would like to use absolute path `/etc/elasticsearch/{{file_name}}`

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 3, 2022, 9:10am UTC](https://discuss.elastic.co/t/elasticsearch-strange-behavior/313650/3 "2022-10-03T09:10:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.