# Can I use Search Guard when X pack is enabled?

**URL:** <https://forum.search-guard.com/t/can-i-use-search-guard-when-x-pack-is-enabled/2191>\
**Category:** Search Guard\
**Created:** [July 20, 2021, 12:20pm UTC](https://forum.search-guard.com/t/can-i-use-search-guard-when-x-pack-is-enabled/2191 "2021-07-20T12:20:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sharoncr1](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/sharoncr1/32/1049_2.png) [@sharoncr1](https://forum.search-guard.com/u/sharoncr1)\
**Post date:** [July 20, 2021, 12:20pm UTC](https://forum.search-guard.com/t/can-i-use-search-guard-when-x-pack-is-enabled/2191/1 "2021-07-20T12:20:32Z")

</div>

Is there a way to have Search Guard alongside the ElasticSearch when x.pack and TLS is enabled?

I am setting up the ELK stack in Kubernetes using ECK.

ECK, by default deploys ELK stack with x.pack and TLS. We need to implement log-based alerting and ElasticSearch doesn’t allow setting up connectors unless purchased. At that point, I cam across Search Guard’s Signal feature which pretty much does the same thing. In short, we need only the Signal feature of Search Guard at the moment.

From forums, I read that we can’t disable SSL in it once search guard plugin is installed on ElasticSearch. Is there a way to use existing certificates used by ElasticSearch for search guard as well and have both encryption around ?

**Elasticsearch version:**  
7.13.0

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\
**Post date:** [July 22, 2021, 7:54pm UTC](https://forum.search-guard.com/t/can-i-use-search-guard-when-x-pack-is-enabled/2191/2 "2021-07-22T19:54:49Z")

</div>

Hello @sharoncr1

To use the Search Guard plugin with Signals you must disable xpack security plug-in.

You can disable SSL for HTTP traffic or keep it enabled and use your existing SSL certificates.  
To disable SSL in Elasticsearch, set below in elasticsearch.yml

> searchguard.ssl.http.enabled: false

To use your existing Elasticsearch SSL certificates, you can point them in the elasticsearch.yml file.

> searchguard.ssl.transport.pemcert\_filepath: \<node\>.pem  
> searchguard.ssl.transport.pemkey\_filepath: \<node-key\>.pem  
> searchguard.ssl.transport.pemtrustedcas\_filepath: \<root-ca\>.pem

> searchguard.ssl.http.pemcert\_filepath: \<node\>.pem  
> searchguard.ssl.http.pemkey\_filepath: \<node-key\>.pem  
> searchguard.ssl.http.pemtrustedcas\_filepath: \<root-ca\>.pem

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [August 12, 2021, 7:54pm UTC](https://forum.search-guard.com/t/can-i-use-search-guard-when-x-pack-is-enabled/2191/3 "2021-08-12T19:54:51Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.