I have installed the Search guard Plugin in all the ELK Servers and Kibana Server. How should i make the SC Work now

Search Guard
1

If you think it is a bug report or you have a technical issue, please answer the following questions. For general questions, you can delete these questions.

Elasticsearch version: 7.17.3 .x

Server OS version: Windows

Kibana version (if relevant):

Browser version (if relevant):

Browser OS version (if relevant):

Describe the issue:

Steps to reproduce:
1.
2.
3.

Expected behavior:

Provide configuration:
elasticsearch/config/elasticsearch.yml
elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
kibana/config/kibana.yml (if relevant)

Provide logs:
Elasticsearch
Kibana (if relevant)

Screenshots (if relevant):

Errors in browser console (if relevant):

Additional data:

2

After installing we are in to Certificate Generation. Can you please guide me how to generate Certs and what are all the Certs needed to have Search guard working

We do have ELK CLuster servers and Kibana Server

3

@amalk12 This section of the SG documentation describes TLS configuration.

4

Thanks for the Document, i have gone through it. I have couple of doubts on the same.

I have 5 node elk cluster and 2 Kibana. So i would be generating 7 certs all together. Out of which 5 will be node certs(elk) and 2 (Kibana) will be client certificates. One Client cert will be a Admin certificate.
Is my Understanding correct.

5

@amalk12 Kibana is also a node certificate. You’ll need it if you want to enable an SSL connection between the browser and Kibana UI.

All the rest is correct.

6

I want to first Enable SC Plugin in the ELK and Kibana, so i have the SC GUI Working . For HTTPS connections, i will generate a separate Certs from ELK TLS Utility.

So for Enabling the SC Plugin and GUI , I need to put in the node certs (elk) and Kibana(2 certs) with the client certificates in the yml file of the tls tool to generate the certificates

7

@amalk12 Correct

8

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.