# Securing elasticsearch with auth for graylog

**URL:** <https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144>\
**Category:** Graylog Central (peer support)\
**Created:** [June 10, 2021, 3:47pm UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144 "2021-06-10T15:47:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![syntax](https://avatars.discourse-cdn.com/v4/letter/s/41988e/32.png) [@syntax](https://community.graylog.org/u/syntax)\
**Post date:** [June 10, 2021, 3:47pm UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144/1 "2021-06-10T15:47:40Z")

</div>

Hi,

I’m following the setup guide here,  
[https://docs.graylog.org/en/4.0/pages/configuration/multinode\_setup.html](https://docs.graylog.org/en/4.0/pages/configuration/multinode_setup.html)

> When you secure your Elasticsearch with User Authentication you need to add credentials to the Graylog configuration to be able to use the secured Elasticsearch cluster with Graylog.

Now that x-pack has been deprecated, what are my options? do i need to subscribe to ‘Elastic Stack’ ?

Thanks.

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [June 11, 2021, 1:17am UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144/2 "2021-06-11T01:17:41Z")

</div>

Hello,

I can understand your frustration.  
X-Pack requires the default distribution and can not be installed as a plugin on the OSS version.  
I believe this is more on the Elasticsearch side then it is from Graylog.

Maybe this might have answers for you.

> **[Tips to secure Elasticsearch clusters for free with encryption, users, and more](https://www.elastic.co/blog/tips-to-secure-elasticsearch-clusters-for-free-with-encryption-users-and-more)**
>
> Elasticsearch security is now free. This post revisits and updates best practices for securing your clusters, including transport layer security (TLS), native and file realm authentication, authorization features, cluster and node isolation, Kibana...

Hope this helps

---

<div class="post-metadata">

**Author:** ![syntax](https://avatars.discourse-cdn.com/v4/letter/s/41988e/32.png) [@syntax](https://community.graylog.org/u/syntax)\
**Post date:** [June 11, 2021, 9:28am UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144/3 "2021-06-11T09:28:13Z")

</div>

thanks @gsmith .  
after much struggle, i finally got it up.

i find the elasticsearch docs confusing.  
or maybe i just have difficulty understanding it.

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [June 11, 2021, 10:18pm UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144/4 "2021-06-11T22:18:33Z")

</div>

Hello,

> [@syntax](#):
>
> after much struggle, i finally got it up.

Nice 🙂  
I agree about elasticsearch documents I think we all do.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 25, 2021, 10:19pm UTC](https://community.graylog.org/t/securing-elasticsearch-with-auth-for-graylog/20144/5 "2021-06-25T22:19:09Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.