Hi,
I have elasticsearch cluster formed with 3 nodes, cluster is up and running in green state
epoch timestamp cluster status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
1699949121 08:05:21 oup-logs green 3 2 66 33 0 0 0 0 - 100.0%
Attaching elasticsearch.yml and kibana.yml
elasticsearch.yml
cluster.name: oup-logs
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
node.name: p-weu-elk-app02
node.roles: [ data ]
path.data: /mt/sdc2/data/lib/elasticsearch
path.logs: /mt/sdc2/data/log/elasticsearch
network.host: 10.181.9.67
#network.publish_host: 10.181.9.67
#
# By default Elasticsearch listens for HTTP traffic on the first free port it
# finds starting at 9200. Set a specific HTTP port here:
#
http.port: 9200
transport.port: 9300
#
discovery.seed_hosts: ["10.181.9.68","10.181.9.67","10.181.9.66"]
cluster.initial_master_nodes: p-weu-elk-app01
# Enable security features
xpack.security.enabled: true
#xpack.security.enrollment.enabled: true
# Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
xpack.security.http.ssl:
enabled: true
keystore.path: /etc/elasticsearch/http.p12
# Enable encryption and mutual authentication between cluster nodes
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: /etc/elasticsearch/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /etc/elasticsearch/elastic-certificates.p12
http.host: 0.0.0.0
# Allow other nodes to join the cluster from anywhere
# Connections are encrypted and mutually authenticated
transport.host: 10.181.9.67
kibana.yml
server.port: 5601
server.host: "10.181.9.64"
elasticsearch.hosts: ["10.181.9.68","10.181.9.67","10.181.9.66"]
elasticsearch.username: "username"
elasticsearch.password: "password"
xpack.security.enabled: false
elasticsearch.ssl.certificateAuthorities: [ "H:\kibana-8.10.3-windows-x86_64\kibana-8.10.3\config\elasticsearch-ca.pem" ]
elasticsearch.ssl.verificationMode: certificate