diff --git a/salt/elasticsearch/defaults.yaml b/salt/elasticsearch/defaults.yaml
index 12d5b27fa..e119fb62d 100644
--- a/salt/elasticsearch/defaults.yaml
+++ b/salt/elasticsearch/defaults.yaml
@@ -25,7 +25,10 @@ elasticsearch:
       publish_host: {{ grains.host }}
       publish_port: 9300
     xpack:
+      ml:
+        enabled: false
       security:
+        enabled: true
         authc:
           anonymous:
             authz_exception: true