Unknown setting [searchguard.enterprise_modules_enabled]

Search Guard
1

If you think it is a bug report or you have a technical issue, please answer the following questions. For general questions, you can delete these questions.

Elasticsearch version: 7.10.2

Server OS version: CentOS 7

Kibana version (if relevant): N/A

Browser version (if relevant): N/A

Browser OS version (if relevant): N/A

Describe the issue: The plugin does not recognize the option searchguard.enterprise_modules_enabled. The plugin is definitely loaded because it is recognizing other TLS-related options

Steps to reproduce:

  1. sudo /usr/share/elasticsearch/bin/elasticsearch-plugin install --verbose --batch https://maven.search-guard.com/search-guard-suite-release/com/floragunn/search-guard-suite-plugin/7.10.2-52.4.0/search-guard-suite-plugin-7.10.2-52.4.0.zip
  2. Add searchguard.enterprise_modules_enabled: false to the end of elasticsearch.yml
  3. java.lang.IllegalArgumentException: unknown setting [searchguard.enterprise_modules_enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings

Expected behavior: Search Guard License Info: No license needed because enterprise modules are not enabled

Provide configuration:
elasticsearch/config/elasticsearch.yml

# ======================== Elasticsearch Configuration =========================
#
# NOTE: Elasticsearch comes with reasonable defaults for most settings.
#       Before you set out to tweak and tune the configuration, make sure you
#       understand what are you trying to accomplish and the consequences.
#
# The primary way of configuring a node is via this file. This template lists
# the most important settings you may want to configure for a production cluster.
#
# Please consult the documentation for further information on configuration options:
# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
#
# ---------------------------------- Cluster -----------------------------------
#
# Use a descriptive name for your cluster:
#
cluster.name: atlr-moloch
#
# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
#node.name: node-1
#
# Add custom attributes to the node:
#
#node.attr.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
path.data: /home/elasticsearch/data
#
# Path to log files:
#
path.logs: /home/elasticsearch/logs
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
#bootstrap.memory_lock: true
#
# Make sure that the heap size is set to about half the memory available
# on the system and that the owner of the process is allowed to use this
# limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
# network.host: _site_
network.bind_host: _site_
network.publish_host: atlr-mlch-elastic-025.domainredacted.com
#
# Set a custom port for HTTP:
#
#http.port: 9200
#
# For more information, consult the network module documentation.
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when new node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
#discovery.zen.ping.unicast.hosts: ["host1", "host2"]
discovery.zen.ping.unicast.hosts:
  - atlr-mlch-elastic-001.domainredacted.com
  - atlr-mlch-elastic-002.domainredacted.com
  - atlr-mlch-elastic-003.domainredacted.com
  - atlr-mlch-elastic-004.domainredacted.com
  - atlr-mlch-elastic-005.domainredacted.com
  - atlr-mlch-elastic-006.domainredacted.com
#
# Prevent the "split brain" by configuring the majority of nodes (total number of master-eligible nodes / 2 + 1):
#
discovery.zen.minimum_master_nodes: 3
#
# For more information, consult the zen discovery module documentation.
#
# ---------------------------------- Gateway -----------------------------------
#
# Block initial recovery after a full cluster restart until N nodes are started:
#
#gateway.recover_after_nodes: 3
#
# For more information, consult the gateway module documentation.
#
# ---------------------------------- Various -----------------------------------
#
# Require explicit names when deleting indices:
#
#action.destructive_requires_name: true

searchguard.ssl_only: true
searchguard.ssl.transport.pemkey_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.key
searchguard.ssl.transport.pemcert_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.crt
searchguard.ssl.transport.pemtrustedcas_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.ca
searchguard.ssl.transport.enforce_hostname_verification: true

searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemkey_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.key
searchguard.ssl.http.pemcert_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.crt
searchguard.ssl.http.pemtrustedcas_filepath: /etc/ssl/certs/domainredacted/atlr-moloch.ca

searchguard.enterprise_modules_enabled: false

cluster.routing.allocation.disk.watermark.low: 97%
cluster.routing.allocation.disk.watermark.high: 98%
cluster.routing.allocation.disk.watermark.flood_stage: 99%
action.search.shard_count.limit: 100000
thread_pool.write.queue_size: 2000
http.compression: true
cluster.routing.allocation.cluster_concurrent_rebalance: 10
cluster.routing.allocation.node_concurrent_recoveries: 5
cluster.routing.allocation.node_initial_primaries_recoveries: 5
indices.recovery.max_bytes_per_sec: "400mb"
signals.enabled: false

cluster.max_shards_per_node: 1000000

cluster.initial_master_nodes:
  - atlr-mlch-elastic-001.domainredacted.com
  - atlr-mlch-elastic-002.domainredacted.com
  - atlr-mlch-elastic-003.domainredacted.com
  - atlr-mlch-elastic-004.domainredacted.com
  - atlr-mlch-elastic-005.domainredacted.com
  - atlr-mlch-elastic-006.domainredacted.com
  - atlr-mlch-elastic-025.domainredacted.com
  - atlr-mlch-elastic-026.domainredacted.com

cluster.remote:
  mspj:
    seeds:
      - mspj-mlch-elastic-001.domainredacted.com:9300
      - mspj-mlch-elastic-002.domainredacted.com:9300
      - mspj-mlch-elastic-003.domainredacted.com:9300
      - mspj-mlch-elastic-004.domainredacted.com:9300
      - mspj-mlch-elastic-005.domainredacted.com:9300
      - mspj-mlch-elastic-006.domainredacted.com:9300
      - mspj-mlch-elastic-007.domainredacted.com:9300
      - mspj-mlch-elastic-008.domainredacted.com:9300
      - mspj-mlch-elastic-009.domainredacted.com:9300
      - mspj-mlch-elastic-010.domainredacted.com:9300
      - mspj-mlch-elastic-011.domainredacted.com:9300
      - mspj-mlch-elastic-012.domainredacted.com:9300
      - mspj-mlch-elastic-013.domainredacted.com:9300
      - mspj-mlch-elastic-014.domainredacted.com:9300
    transport.compress: true
    skip_unavailable: true
  atl1:
    seeds:
      - atl1-mlch-elastic-001.domainredacted.com:9300
      - atl1-mlch-elastic-002.domainredacted.com:9300
      - atl1-mlch-elastic-003.domainredacted.com:9300
      - atl1-mlch-elastic-004.domainredacted.com:9300
      - atl1-mlch-elastic-005.domainredacted.com:9300
      - atl1-mlch-elastic-006.domainredacted.com:9300
      - atl1-mlch-elastic-007.domainredacted.com:9300
      - atl1-mlch-elastic-008.domainredacted.com:9300
      - atl1-mlch-elastic-009.domainredacted.com:9300
      - atl1-mlch-elastic-010.domainredacted.com:9300
      - atl1-mlch-elastic-011.domainredacted.com:9300
      - atl1-mlch-elastic-012.domainredacted.com:9300
      - atl1-mlch-elastic-013.domainredacted.com:9300
      - atl1-mlch-elastic-014.domainredacted.com:9300
    transport.compress: true
    skip_unavailable: true

elasticsearch/plugins/search-guard-7/sgconfig/sg_config.yml
Not touched.

kibana/config/kibana.yml (if relevant)
N/A

Provide logs:
Elasticsearch

[2021-10-18T14:37:33,209][INFO ][o.e.n.Node               ] [atlr-mlch-elastic-025.domainredacted.com] version[7.10.2], pid[18716], build[oss/rpm/747e1cc71def077253878a59143c1f785afa92b9/2021-01-13T00:42:12.435326Z], OS[Linux/3.10.0-1160.el7.x86_64/amd64], JVM[Red Hat, Inc./OpenJDK 64-Bit Server VM/17/17+35]
[2021-10-18T14:37:33,212][INFO ][o.e.n.Node               ] [atlr-mlch-elastic-025.domainredacted.com] JVM home [/usr/lib/jvm/java-17-openjdk-17.0.0.0.35-1.rolling.el7.x86_64], using bundled JDK [false]
[2021-10-18T14:37:33,212][INFO ][o.e.n.Node               ] [atlr-mlch-elastic-025.domainredacted.com] JVM arguments [-Xshare:auto, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-Omi
tStackTraceInFastThrow, -XX:+ShowCodeDetailsInExceptionMessages, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapacityPerThread=0, -Dio.netty.allocator.numDirectArenas=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.locale.providers=SPI,COMPAT, -X
ms31g, -Xmx31g, -Des.networkaddress.cache.ttl=60, -Des.networkaddress.cache.negative.ttl=10, -XX:+AlwaysPreTouch, -Xss1m, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djna.nosys=true, -XX:-OmitStackTraceInFastThrow, -Dio.netty.noUnsafe=true, -Dio.netty.noKeySetOptimization=true, -Dio.netty.recycler.maxCapac
ityPerThread=0, -Dlog4j.shutdownHookEnabled=false, -Dlog4j2.disable.jmx=true, -Djava.io.tmpdir=/tmp/elasticsearch-7129420635071328646, -XX:+HeapDumpOnOutOfMemoryError, -XX:HeapDumpPath=/var/lib/elasticsearch, -XX:ErrorFile=/var/log/elasticsearch/hs_err_pid%p.log, -Xlog:gc*,gc+age=trace,safepoint:file=/var/log/el
asticsearch/gc.log:utctime,pid,tags:filecount=32,filesize=64m, -Djava.locale.providers=COMPAT, -XX:UseAVX=2, -XX:MaxDirectMemorySize=16642998272, -Des.path.home=/usr/share/elasticsearch, -Des.path.conf=/etc/elasticsearch, -Des.distribution.flavor=oss, -Des.distribution.type=rpm, -Des.bundled_jdk=true]
[2021-10-18T14:37:34,082][INFO ][c.f.s.SearchGuardPlugin  ] [atlr-mlch-elastic-025.domainredacted.com] ES Config path is /etc/elasticsearch
[2021-10-18T14:37:34,233][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] JVM supports TLSv1.3
[2021-10-18T14:37:34,235][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] Config directory is /etc/elasticsearch/, from there the key- and truststore files are resolved relatively
[2021-10-18T14:37:34,647][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] TLS Transport Client Provider : JDK
[2021-10-18T14:37:34,647][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] TLS Transport Server Provider : JDK
[2021-10-18T14:37:34,648][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] TLS HTTP Provider             : JDK
[2021-10-18T14:37:34,648][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] Enabled TLS protocols for transport layer : [TLSv1.3, TLSv1.2]
[2021-10-18T14:37:34,648][INFO ][c.f.s.s.DefaultSearchGuardKeyStore] [atlr-mlch-elastic-025.domainredacted.com] Enabled TLS protocols for HTTP layer      : [TLSv1.3, TLSv1.2]
[2021-10-18T14:37:34,668][WARN ][c.f.s.SearchGuardPlugin  ] [atlr-mlch-elastic-025.domainredacted.com] Search Guard plugin run in ssl only mode. No authentication or authorization is performed
[2021-10-18T14:37:34,685][INFO ][c.f.s.s.SignalsPainlessExtension] [atlr-mlch-elastic-025.domainredacted.com] Loaded script whitelist: org.elasticsearch.painless.spi.Whitelist@3e3315d9
[2021-10-18T14:37:34,691][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [aggs-matrix-stats]
[2021-10-18T14:37:34,691][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [analysis-common]
[2021-10-18T14:37:34,691][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [geo]
[2021-10-18T14:37:34,692][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [ingest-common]
[2021-10-18T14:37:34,692][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [ingest-geoip]
[2021-10-18T14:37:34,692][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [ingest-user-agent]
[2021-10-18T14:37:34,692][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [kibana]
[2021-10-18T14:37:34,692][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [lang-expression]
[2021-10-18T14:37:34,693][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [lang-mustache]
[2021-10-18T14:37:34,693][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [lang-painless]
[2021-10-18T14:37:34,693][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [mapper-extras]
[2021-10-18T14:37:34,693][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [parent-join]
[2021-10-18T14:37:34,693][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [percolator]
[2021-10-18T14:37:34,694][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [rank-eval]
[2021-10-18T14:37:34,694][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [reindex]
[2021-10-18T14:37:34,694][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [repository-url]
[2021-10-18T14:37:34,694][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [systemd]
[2021-10-18T14:37:34,695][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded module [transport-netty4]
[2021-10-18T14:37:34,695][INFO ][o.e.p.PluginsService     ] [atlr-mlch-elastic-025.domainredacted.com] loaded plugin [search-guard-7]
[2021-10-18T14:37:34,727][INFO ][o.e.e.NodeEnvironment    ] [atlr-mlch-elastic-025.domainredacted.com] using [1] data paths, mounts [[/home (/dev/mapper/centos-home)]], net usable_space [36.3tb], net total_space [36.3tb], types [xfs]
[2021-10-18T14:37:34,727][INFO ][o.e.e.NodeEnvironment    ] [atlr-mlch-elastic-025.domainredacted.com] heap size [31gb], compressed ordinary object pointers [true]
[2021-10-18T14:37:34,760][INFO ][o.e.n.Node               ] [atlr-mlch-elastic-025.domainredacted.com] node name [atlr-mlch-elastic-025.domainredacted.com], node ID [3QWfOq1oSKKCaq8LiROdJw], cluster name [atlr-moloch], roles [master, remote_cluster_client, data, ingest]
[2021-10-18T14:37:36,373][ERROR][o.e.b.Bootstrap          ] [atlr-mlch-elastic-025.domainredacted.com] Exception
java.lang.IllegalArgumentException: unknown setting [searchguard.enterprise_modules_enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.node.Node.<init>(Node.java:406) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.10.2.jar:7.10.2]
        Suppressed: java.lang.IllegalArgumentException: unknown setting [signals.enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.node.Node.<init>(Node.java:406) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) [elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) [elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) [elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) [elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) [elasticsearch-cli-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.Command.main(Command.java:90) [elasticsearch-cli-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) [elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) [elasticsearch-7.10.2.jar:7.10.2]
[2021-10-18T14:37:36,378][ERROR][o.e.b.ElasticsearchUncaughtExceptionHandler] [atlr-mlch-elastic-025.domainredacted.com] uncaught exception in thread [main]
org.elasticsearch.bootstrap.StartupException: java.lang.IllegalArgumentException: unknown setting [searchguard.enterprise_modules_enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:174) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
        at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.10.2.jar:7.10.2]
Caused by: java.lang.IllegalArgumentException: unknown setting [searchguard.enterprise_modules_enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.node.Node.<init>(Node.java:406) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.2.jar:7.10.2]
        at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.2.jar:7.10.2]
        ... 6 more
        Suppressed: java.lang.IllegalArgumentException: unknown setting [signals.enabled] please check that any required plugins are installed, or check the breaking changes documentation for removed settings
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:544) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:489) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:460) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.AbstractScopedSettings.validate(AbstractScopedSettings.java:431) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.common.settings.SettingsModule.<init>(SettingsModule.java:149) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.node.Node.<init>(Node.java:406) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.node.Node.<init>(Node.java:289) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:227) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:393) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:170) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.execute(Elasticsearch.java:161) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.EnvironmentAwareCommand.execute(EnvironmentAwareCommand.java:86) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.Command.mainWithoutErrorHandling(Command.java:127) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
                at org.elasticsearch.cli.Command.main(Command.java:90) ~[elasticsearch-cli-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:126) ~[elasticsearch-7.10.2.jar:7.10.2]
                at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:92) ~[elasticsearch-7.10.2.jar:7.10.2]

Kibana (if relevant)
N/A

Screenshots (if relevant): N/A

Errors in browser console (if relevant): N/A

Additional data:

2

@matoro

Just tested your config. It looks like searchguard.ssl_only: true is causing it.
When is set to false, ES starts successfully with the SG plug-in.

{"type": "server", "timestamp": "2021-10-18T21:42:47,670Z", "level": "INFO", "component": "c.f.s.c.ConfigurationRepository", "cluster.name": "Cluster1", "node.name": "sgssl-0.example.com", "message": "Search Guard License Info: No license needed because enterprise modules are not enabled", "cluster.uuid": "KZBA8c9DTVmh59q3B_vBPw", "node.id": "AC5RpECGQ36snsz4FSgQUQ"  }
3

Thank you Pablo! To clarify then, does searchguard.ssl_only imply that all Enterprise features are disabled? Is this setting sufficient to ensure license compliance with the community edition if we only want to use the SSL functionality?

4

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.