Enable Elasticsearch Security Features for free using X-Pack basic license(Elastic Stack)

The video describes how to enable FREE basic license security features for Elasticsearch, Logastash, Kibana, and Beats(Elastic Stack). I provide you links with ready to use virtual machine(VirtualBox) configuration image and all needed software so you can follow the video step-by-step, also the whole set of commands that I am using. Official documentation - https://www.elastic.co/guide/en/elast... Links from the video: Download VirtualBox - https://download.virtualbox.org/virtu... VirtualBox Virtual Machine image - https://drive.google.com/open?id=1els... Putty Client - https://the.earth.li/~sgtatham/putty/... Filebeat pipelineConfiguration.txt - https://drive.google.com/open?id=1MvG... Ready to use filebeat archive - https://drive.google.com/open?id=1fXY... Test Log file - https://drive.google.com/open?id=1mXw... username: elk password: elk Commands: sudo su systemctl start elasticsearch systemctl start kibana systemctl start logstash optional you can check the status of the services if you want Enable Elasticsearch Security: nano /etc/elasticsearch/elasticsearch.yml xpack.security.enabled: true discovery.type: single-node systemctl restart elasticsearch cd /usr/share/elasticsearch ./bin/elasticsearch-setup-passwords interactive passwords: elastic apmsystem kibana logstashsystem beatssystem remotemonitoring Enable Kibana security: cd /usr/share/kibana ./bin/kibana-keystore create --allow-root ./bin/kibana-keystore add elasticsearch.username --allow-root username: kibana ./bin/kibana-keystore add elasticsearch.password --allow-root password: kibana systemctl restart kibana Enable Logstash security: tail -f /var/log/logstash/logstash-plain.log systemctl stop logstash nano /etc/logstash/logstash.yml uncomment the x-pack username and password username: logstash_system password: logstashsystem sudo -E /usr/share/logstash/bin/logstash-keystore --path.settings /etc/logstash create sudo -E /usr/share/logstash/bin/logstash-keystore --path.settings /etc/logstash add ES_USER user:elastic sudo -E /usr/share/logstash/bin/logstash-keystore --path.settings /etc/logstash add ES_PWD password:elastic Edit Logstash pipeline configuration file: nano /etc/logstash/conf.d/estack-test-pipeline.conf !NB Please find "pipelineConfiguration.txt" file in the links(youtube restricts curly braces in description ;)) systemctl start logstash tail -f /var/log/logstash/logstash-plain.log Filebeat Configuration: unarchive the filebeat in your Program Files folder forward the port 5033 in VirtualBox cd 'C:\Program Files\filebeat\' .\filebeat.exe -c filebeat.yml -e -d "*" If you want more videos like this please subscribe. Follow me on my social network accounts: Instagram -   / nbglink   facebook -   / techlinkbg   twitter -   / nbglink   patreon -   / nbglink   Thank you and enjoy it! ;) #Elasticsearch #SecurityFeatures #XPack 00:00 For what is all about. 00:45 Start with the process. 02:58 Connect to the VM using ssh(Putty). 03:47 Start the Elasticsearch. 05:25 Start Kibana. 05:50 Run Logstash. 06:24 Check that everything looks good at this point. 07:30 Enable Elastic Stack security. 12:42 Check that security features working. 14:00 Create a user and set a role. 16:40 Logstash configuration. 24:28 Run Filebeat to process some logs. 30:25 Check that the logs are in Elasticsearch using the Kibana interface.