Enable X Pack Basic Security
Elasticsearch security is not enabled, so the cluster lacks authentication and role-based access controls. Unprotected clusters are easier targets for unauthorized access and misuse.
For a complete list of insights, refer to AutoOps insights.
| Field | Value |
|---|---|
| Component | Elasticsearch |
| Severity | Medium |
| Scope | Cluster |
| Domains | security-safety |
The following is an example of what you might see when this insight is triggered. Real insights use live data and links from your deployment or cluster.
No description available.
AutoOps shows different recommendations depending on how their conditions match your deployment or cluster.
Enable X-Pack basic security
Condition: Always shown for this insight.
Set xpack.security.enabled: true in elasticsearch.yml, then restart the nodes.
Impact: When X-pack security is not enabled, your clusters are vulnerable to hackers and ransomware. X-Pack security provides role-based access control and many other security features. It is available for Versions 6.8 and 7.1 with all license types (Basic is FREE), but not in the open-source release.