#StackBounty: #elasticsearch #logstash #kibana Configure ingest manager in elasticseach 7.9

Bounty: 50

I have configured ELK on a single VM ( Centos 7 / 10Gig / 4 CPU) along with filebeat and auditbeat as POC and encountered the below error while trying to use the ingest manager.

Screenshot

I followed the security setup as suggested in this link, the elasticsearch wont come up after many attempts of troubleshooting and i need some help to fix it.

The logs suggest the below errors

2:

HTTPS is required in order to use the API key service; please enable HTTPS using the [xpack.security.http.ssl.enabled] setting or disable the API key service using the [xpack.security.authc.api_key.enabled] setting

The elasticsearch config is below:

#
# Block initial recovery after a full cluster restart until N nodes are started:
#
#gateway.recover_after_nodes: 3
#
# For more information, consult the gateway module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Require explicit names when deleting indices:
bootstrap.memory_lock: true
#
#action.destructive_requires_name: true
xpack.license.self_generated.type: basic
xpack.monitoring.collection.enabled: true
xpack.security.enabled: true
xpack.security.authc.realms.file.users.order: 0
xpack.security.transport.ssl.enabled: true
xpack.security.authc.api_key.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.transport.ssl.enabled: true

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.keystore.path: /etc/elasticsearch/certs/ca.p12
xpack.security.transport.ssl.truststore.path: /etc/elasticsearch/certs/ca.p12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: /etc/elasticsearch/certs/ca.p12
xpack.security.http.ssl.truststore.path: /etc/elasticsearch/certs/ca.p12

The Kibana config is below:

# Set the interval in milliseconds to sample system and process performance
# metrics. Minimum is 100ms. Defaults to 5000.
#ops.interval: 5000
# Specifies locale to be used for all localizable strings, dates and number formats.
# Supported languages are the following: English - en , by default , Chinese - zh-CN .
#i18n.locale: "en"
xpack.ingestManager.enabled: true
xpack.ingestManager.fleet.tlsCheckDisabled: true
xpack.security.enabled: true
xpack.encryptedSavedObjects.encryptionKey: "8ru3HMCHCLJfcWdKz2rtHQUX43krs5t9deb"
elasticsearch.username: "kibana_system"
elasticsearch.password: "welcome"
xpack.security.encryptionKey: "something_at_least_32_characters"
xpack.security.session.idleTimeout: "10m"
xpack.security.session.lifespan: "8h"


Get this bounty!!!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.