Secure the ELK password in config files

You should go through this:
https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html#set-built-in-user-passwords
and this:
https://www.elastic.co/guide/en/elasticsearch/reference/6.2/secure-settings.html