From 7f73fd4c80dc5353548deefef59085825a4ec1ac Mon Sep 17 00:00:00 2001 From: Fabio Busatto <52658645+bytebilly@users.noreply.github.com> Date: Mon, 11 Oct 2021 17:12:44 +0200 Subject: [PATCH] Add Security section in elasticsearch.yml (#78337) * Add Security section in elasticsearch.yml * Update distribution/src/config/elasticsearch.yml Co-authored-by: Adam Locke * Update distribution/src/config/elasticsearch.yml Co-authored-by: Ioannis Kakavas * Apply suggestions from code review Address feedback Co-authored-by: Tim Vernum Co-authored-by: Adam Locke Co-authored-by: Adam Locke Co-authored-by: Ioannis Kakavas Co-authored-by: Tim Vernum Co-authored-by: Elastic Machine --- distribution/src/config/elasticsearch.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/distribution/src/config/elasticsearch.yml b/distribution/src/config/elasticsearch.yml index dc7c8428c7d37..658eb5041adc1 100644 --- a/distribution/src/config/elasticsearch.yml +++ b/distribution/src/config/elasticsearch.yml @@ -80,3 +80,17 @@ # Require explicit names when deleting indices: # #action.destructive_requires_name: true +# +# ---------------------------------- Security ---------------------------------- +# +# *** WARNING *** +# +# Elasticsearch security features are not enabled by default. +# These features are free, but require configuration changes to enable them. +# This means that users don’t have to provide credentials and can get full access +# to the cluster. Network connections are also not encrypted. +# +# To protect your data, we strongly encourage you to enable the Elasticsearch security features. +# Refer to the following documentation for instructions. +# +# https://www.elastic.co/guide/en/elasticsearch/reference/7.16/configuring-stack-security.html