mirror of
https://github.com/elastic/logstash.git
synced 2025-04-24 14:47:19 -04:00
parent
b9039dcb57
commit
382baf4016
5 changed files with 7 additions and 7 deletions
2
docs/static/azure-module.asciidoc
vendored
2
docs/static/azure-module.asciidoc
vendored
|
@ -492,7 +492,7 @@ the event originated.
|
||||||
==== Deploying the module in production
|
==== Deploying the module in production
|
||||||
|
|
||||||
Use security best practices to secure your configuration.
|
Use security best practices to secure your configuration.
|
||||||
See {stack-ov}/elasticsearch-security.html[Securing the {stack}] for details and recommendations.
|
See {ref}/secure-cluster.html[Secure a cluster] for details and recommendations.
|
||||||
|
|
||||||
[[azure-resources]]
|
[[azure-resources]]
|
||||||
==== Microsoft Azure resources
|
==== Microsoft Azure resources
|
||||||
|
|
2
docs/static/deploying.asciidoc
vendored
2
docs/static/deploying.asciidoc
vendored
|
@ -124,7 +124,7 @@ Enterprise-grade security is available across the entire delivery chain.
|
||||||
* There’s a wealth of security options when communicating with Elasticsearch
|
* There’s a wealth of security options when communicating with Elasticsearch
|
||||||
including basic authentication, TLS, PKI, LDAP, AD, and other custom realms.
|
including basic authentication, TLS, PKI, LDAP, AD, and other custom realms.
|
||||||
To enable Elasticsearch security, see
|
To enable Elasticsearch security, see
|
||||||
{stack-ov}/elasticsearch-security.html[Securing the {stack}].
|
{ref}/secure-cluster.html[Secure a cluster].
|
||||||
|
|
||||||
[float]
|
[float]
|
||||||
==== Monitoring
|
==== Monitoring
|
||||||
|
|
|
@ -58,7 +58,7 @@ is disabled in {es} and data is ignored from all other sources.
|
||||||
. Configure your Logstash nodes to send metrics by setting the
|
. Configure your Logstash nodes to send metrics by setting the
|
||||||
`xpack.monitoring.elasticsearch.hosts` in `logstash.yml`. If {security} is
|
`xpack.monitoring.elasticsearch.hosts` in `logstash.yml`. If {security} is
|
||||||
enabled, you also need to specify the credentials for the
|
enabled, you also need to specify the credentials for the
|
||||||
{stack-ov}/built-in-users.html[built-in `logstash_system` user]. For more
|
{ref}/built-in-users.html[built-in `logstash_system` user]. For more
|
||||||
information about these settings, see <<monitoring-settings>>.
|
information about these settings, see <<monitoring-settings>>.
|
||||||
+
|
+
|
||||||
--
|
--
|
||||||
|
|
|
@ -119,7 +119,7 @@ it using HTTPS. For example, use a `hosts` setting like `https://localhost:9600`
|
||||||
ID and password so that {metricbeat} can collect metrics successfully:
|
ID and password so that {metricbeat} can collect metrics successfully:
|
||||||
|
|
||||||
.. Create a user on the production cluster that has the
|
.. Create a user on the production cluster that has the
|
||||||
`remote_monitoring_collector` {stack-ov}/built-in-roles.html[built-in role].
|
`remote_monitoring_collector` {ref}/built-in-roles.html[built-in role].
|
||||||
|
|
||||||
.. Add the `username` and `password` settings to the module configuration
|
.. Add the `username` and `password` settings to the module configuration
|
||||||
file (`logstash-xpack.yml`).
|
file (`logstash-xpack.yml`).
|
||||||
|
@ -180,9 +180,9 @@ must provide a valid user ID and password so that {metricbeat} can send metrics
|
||||||
successfully:
|
successfully:
|
||||||
|
|
||||||
.. Create a user on the monitoring cluster that has the
|
.. Create a user on the monitoring cluster that has the
|
||||||
`remote_monitoring_agent` {stack-ov}/built-in-roles.html[built-in role].
|
`remote_monitoring_agent` {ref}/built-in-roles.html[built-in role].
|
||||||
Alternatively, use the `remote_monitoring_user`
|
Alternatively, use the `remote_monitoring_user`
|
||||||
{stack-ov}/built-in-users.html[built-in user].
|
{ref}/built-in-users.html[built-in user].
|
||||||
+
|
+
|
||||||
TIP: If you're using index lifecycle management, the remote monitoring user
|
TIP: If you're using index lifecycle management, the remote monitoring user
|
||||||
requires additional privileges to create and read indices. For more
|
requires additional privileges to create and read indices. For more
|
||||||
|
|
2
docs/static/security/logstash.asciidoc
vendored
2
docs/static/security/logstash.asciidoc
vendored
|
@ -204,7 +204,7 @@ data to a secure cluster, you need to configure the username and password that
|
||||||
Logstash uses to authenticate for shipping monitoring data.
|
Logstash uses to authenticate for shipping monitoring data.
|
||||||
|
|
||||||
{security} comes preconfigured with a
|
{security} comes preconfigured with a
|
||||||
{stack-ov}/built-in-users.html[`logstash_system` built-in user]
|
{ref}/built-in-users.html[`logstash_system` built-in user]
|
||||||
for this purpose. This user has the minimum permissions necessary for the
|
for this purpose. This user has the minimum permissions necessary for the
|
||||||
monitoring function, and _should not_ be used for any other purpose - it is
|
monitoring function, and _should not_ be used for any other purpose - it is
|
||||||
specifically _not intended_ for use within a Logstash pipeline.
|
specifically _not intended_ for use within a Logstash pipeline.
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue