CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Back out some ES settings

Browse Source
This commit is contained in:
Mike Reeves
2020-08-12 11:10:36 -04:00
parent 0f7074a499
commit 32083132e5
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
salt/elasticsearch/files/elasticsearch.yml
View File

@@ -24,21 +24,22 @@ cluster.routing.allocation.disk.watermark.low: 95%
cluster.routing.allocation.disk.watermark.high: 98% cluster.routing.allocation.disk.watermark.high: 98%
cluster.routing.allocation.disk.watermark.flood_stage: 98% cluster.routing.allocation.disk.watermark.flood_stage: 98%
{%- if FEATURES is sameas true %} {%- if FEATURES is sameas true %}
xpack.security.enabled: true xpack.security.enabled: false
xpack.security.http.ssl.enabled: false xpack.security.http.ssl.enabled: false
xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.enabled: false
xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
xpack.security.http.ssl.client_authentication: none #xpack.security.transport.ssl.verification_mode: none
xpack.security.authc: #xpack.security.http.ssl.client_authentication: none
anonymous: #xpack.security.authc:
username: anonymous_user # anonymous:
roles: superuser # username: anonymous_user
authz_exception: true # roles: superuser
# authz_exception: true
{%- endif %} {%- endif %}
node.attr.box_type: {{ NODE_ROUTE_TYPE }} node.attr.box_type: {{ NODE_ROUTE_TYPE }}
node.name: {{ ESCLUSTERNAME }} node.name: {{ ESCLUSTERNAME }}