Filebeat and ELK stack question

Elastic Stack Elasticsearch
#1

Hi

I have two servers (one that is running suricata and filebeat) the other is running ELK stack. They are on the same network and I want to send the suricata logs via filebeat to the ELK stack (that as basic license and security enabled).

Do I need to configure SSL to manage this to work?

#2

You shouldn't need to, but it's highly recommended. Once you move beyond a single node cluster you do need to set Security up by default.

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.