Xpack configuration in ELK stack

Cyber Tool Guardian
3 min readSep 18, 2023

What is Xpack?

Elastic Stack, often known as ELK (Elasticsearch, Logstash, and Kibana), is a collection of extensions known as X-Pack. The Elastic Stack’s functionality is improved by X-Pack’s new features and capabilities, increasing its adaptability to a wider range of use scenarios.

If you are not medium member, find the full story here.

How to enable minimal security in ELK using xpack

Stop elasticsearch and kibana

systemctl stop elasticsearch
systemctl stop kibana

Edit elasticsearch.yml in /etc/elasticsearch and add,
xpack.security.enabled: true as shown below

nano /etc/elasticsearch/elasticsearch.yml
xpack.security.enabled: true

Start elasticsearch and check status using,

systemctl start elasticsearch
systemctl status elasticsearch
Starting elasticsearch

--

--