Xpack disable

Elastic Security
1

ES Version: 7.10.2
Query 1 : If I need to disable xpack I need to make yml changes to make xpack settings to false and restart each nodes ?

Query1 My Understanding is : Yes, there is no API call to disable or enable dynamically.

Query 2: Incase if I need to disable I should perform complete cluster shutdown and make yml changes and start entire cluster. As partial or hybrid mode of rolling restart won't work in Elasticsearch.

Query2 My understanding is: Yes, lets say out of 300 nodes, 100 are xpack disabled and 200 are xpack enabled the new app ingestion data will not go to xpack disabled ones and throws error. Also internode communication also needs ssl so its not going to balance the nodes or shards. Better is to go for complete shutdown of cluster make changes and start them back.

Please correct if my understandings have deviations. Thanks ! ! , we are going to perform this activity tomorrow midnight. TIA.

2

What do you mean with disable xpack? What changes are you planning to do in elasticsearch.yml.

Disable security?

3

Disabling authentication and ssl or security for elasticsearch.
xpack.security.enabled: false
xpack.security.transport.ssl.enabled: false
xpack.security.http.ssl.enabled: false

4

Why would you want to do that?

Disabling or enabling security does as far as I know require a full cluster restart.

5

Team, triaged and we might be hitting this.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.