# Security elasticsearch

**URL:** https://discuss.elastic.co/t/security-elasticsearch/196926
**Category:** Elasticsearch
**Created:** [August 27, 2019, 10:20am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926 "2019-08-27T10:20:09Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![cristianaxion](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@cristianaxion](https://discuss.elastic.co/u/cristianaxion)
#### Post date: [August 27, 2019, 10:20am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/1 "2019-08-27T10:20:09Z")

</div>

Can you have security before starting in kibana or do I need to have x-pack? And if you can how it is done?

---

<div class="post-metadata">

### Author: ![irobot678](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@irobot678](https://discuss.elastic.co/u/irobot678)
#### Post date: [August 27, 2019, 10:43am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/2 "2019-08-27T10:43:40Z")

</div>

Yes, if you use 6.8 and 7.1.0 version

How to do it :

Reference :

> **[Security for Elasticsearch is now free](https://www.elastic.co/blog/security-for-elasticsearch-is-now-free)**
>
> We are thrilled to announce that the core security features of the Elastic Stack -- like TLS encryption, RBAC, and both file and native authentication -- are now free.

---

<div class="post-metadata">

### Author: ![cristianaxion](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@cristianaxion](https://discuss.elastic.co/u/cristianaxion)
#### Post date: [August 27, 2019, 11:09am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/3 "2019-08-27T11:09:52Z")

</div>

I get an error following the steps

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e9918340adb0d6a12936b1cebaffe1fc2853e70c.png)

---

<div class="post-metadata">

### Author: ![irobot678](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@irobot678](https://discuss.elastic.co/u/irobot678)
#### Post date: [August 27, 2019, 1:17pm UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/4 "2019-08-27T13:17:32Z")

</div>

Hi @cristianaxion ,

please check your elasticsearch.yml configuration whether x-pack is enabled are not

For complete step by step procedure :

> **[Secure Elasticsearch with TLS encryption and role-based access control](https://www.elastic.co/blog/getting-started-with-elasticsearch-security)**
>
> Secure your Elasticsearch clusters -- and the other components of the Elastic Stack -- with node-to-node TLS and role-based access control (RBAC). These features and more are now available free with the default distribution of Elasticsearch and...

---

<div class="post-metadata">

### Author: ![cristianaxion](https://avatars.discourse-cdn.com/v4/letter/c/aca169/32.png) [@cristianaxion](https://discuss.elastic.co/u/cristianaxion)
#### Post date: [August 29, 2019, 10:35am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/5 "2019-08-29T10:35:49Z")

</div>

Hi vamsi,  
I give you the configuration of the elasticsearch.yml file ... Is there something missing because it still doesn't come out ??

# ======================== Elasticsearch Configuration =========================

# 

# NOTE: Elasticsearch comes with reasonable defaults for most settings.

# Before you set out to tweak and tune the configuration, make sure you

# understand what are you trying to accomplish and the consequences.

# 

# The primary way of configuring a node is via this file. This template lists

# the most important settings you may want to configure for a production cluster.

# 

# Please consult the documentation for further information on configuration options:

# [https://www.elastic.co/guide/en/elasticsearch/reference/index.html](https://www.elastic.co/guide/en/elasticsearch/reference/index.html)

# 

# ---------------------------------- Cluster -----------------------------------

# 

# Use a descriptive name for your cluster:

# 

#cluster.name: my-application

# 

# ------------------------------------ Node ------------------------------------

# 

# Use a descriptive name for the node:

# 

#node.name: node-1

# 

# Add custom attributes to the node:

# 

#node.attr.rack: r1

# 

# ----------------------------------- Paths ------------------------------------

# 

# Path to directory where to store the data (separate multiple locations by comma):

# 

path.data: /var/lib/elasticsearch

# 

# Path to log files:

# 

path.logs: /var/log/elasticsearch

# 

# ----------------------------------- Memory -----------------------------------

# 

# Lock the memory on startup:

# 

#bootstrap.memory\_lock: true

# 

# Make sure that the heap size is set to about half the memory available

# on the system and that the owner of the process is allowed to use this

# limit.

# 

# Elasticsearch performs poorly when the system is swapping the memory.

# 

# ---------------------------------- Network -----------------------------------

# 

# Set the bind address to a specific IP (IPv4 or IPv6):

network.host: 0.0.0.0

# 

# Set a custom port for HTTP:

# 

http.port: 9200

# 

# For more information, consult the network module documentation.

# 

# --------------------------------- Discovery ----------------------------------

# 

# Pass an initial list of hosts to perform discovery when new node is started:

# The default list of hosts is ["127.0.0.1", "[::1]"]

# 

#discovery.zen.ping.unicast.hosts: ["host1", "host2"]

# 

# Prevent the "split brain" by configuring the majority of nodes (total number of master-eligible nodes / 2 + 1):

# 

#discovery.zen.minimum\_master\_nodes:

# 

# For more information, consult the zen discovery module documentation.

# 

# ---------------------------------- Gateway -----------------------------------

# 

# Block initial recovery after a full cluster restart until N nodes are started:

# 

#gateway.recover\_after\_nodes: 3

# 

# For more information, consult the gateway module documentation.

# 

# ---------------------------------- Various -----------------------------------

# 

# Require explicit names when deleting indices:

# 

#action.destructive\_requires\_name: true

---

<div class="post-metadata">

### Author: ![irobot678](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@irobot678](https://discuss.elastic.co/u/irobot678)
#### Post date: [September 6, 2019, 4:36am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/6 "2019-09-06T04:36:35Z")

</div>

Hi @cristianaxion ,

There is no x-pack enabled on your elasticsearch.yml please refer the document i have attached in the previous post or follow the steps from the below video

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 4, 2019, 4:36am UTC](https://discuss.elastic.co/t/security-elasticsearch/196926/7 "2019-10-04T04:36:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
