Configuration Guide

10.3

Back Next

Secure the Elasticsearch Cluster

To secure the Elasticsearch cluster, configure the Search Guard security plugin. To configure the security plugin, edit the Search Guard sample configuration files, which include the required settings.

If you use certificates created by the

sip_ant

script, do not edit the sample configuration files.

Find the Search Guard sample configuration files in the following directory:

<elasticsearch installation directory>/plugins/search-guard-6/sgconfig

If you did not use the

sip_ant

script to create the security certificates, use a text editor to open the files, and edit the parameters.

Configuration File	Purpose	Required Edit
sg_config.yml	Authentication and authorization configuration	Update the username_attribute . Default is cn .
sg_roles.yml	User role configuration	Add the sg_mdm_access role for the MDM Hub. The role is required, because the client and administrator certificates for Elasticsearch are different and need to be mapped to this role.
sg_role_mapping.yml	User role mappings configuration	Map the common name of the client certificate to the sg_mdm_access role. By default, the administrator and client roles are mapped to the common name of the client certificate CN=EsClient .

For more information about Search Guard configuration files, see the Search Guard documentation.

Rename Saved Search

Table of Contents

Configuration Guide

Configuration Guide

Secure the Elasticsearch Cluster

Secure the Elasticsearch Cluster