X-Pack for Elastic Search



After installing elastic search you may also install X-Pack. But ensure to install the right compatible version of X-pack for the installed version of Elastic Search.

Features of X-pack :

  1. Protect Data in ES.
  2. Put a password and cotrol user access. 
  3. Restrict certain user roles to access certain kind of data. Managing access control.
  4. Encryption - Prevent Snooping Tampering and Sniffing
  5. Restrict access upto to field level in your document data.
    1. Who can view the cluster 
    2. Who can add / delete index 
    3. Who can access sensitive documents 
    4. And restrict access at field level.
  6. Audit logging - Who did what and when.
  7. Monitoring - Seamless diagnostic of clusters 
  8. Perform real time and historic analysis.
  9. Generate schedule report. Helps visualise data better.
PS : Some of the features mentioned above are paid : 

Installing X-Pack :  

You need to run this on every node in your cluster if its a multiple cluster setup.


bin/elasticsearch-plugin install x-pack

X-Pack will automatically create number of indexes with in ES. If you have disable make sure to provide the following in the yml file

action.auto_create_index: .security,.monitoring*,.watches,.triggered_watches,.watcher-history*,.ml*

You must install X-Pack for kibana too : 


bin/kibana-plugin install x-pack

Now run ES and kibana 
You will now see a log in page when you try to access kibana 
By default the login credentials are below :

Username: elastic Password: changeme


Comments

Post a Comment