• X-Pack Reference for 6.0-6.2 and 5.x:
  • Introduction
  • Setting Up X-Pack
    • Installing X-Pack
    • Upgrading X-Pack
    • Uninstalling X-Pack
    • X-Pack Settings
  • Breaking Changes
  • X-Pack APIs
  • Graphing Connections in Your Data
  • Profiling your Queries and Aggregations
  • Reporting from Kibana
  • Securing the Elastic Stack
    • Getting Started with Security
    • How Security Works
    • Setting Up User Authentication
      • How Authentication Works
      • Enabling Anonymous Access
      • Native User Authentication
      • LDAP User Authentication
      • Active Directory User Authentication
      • PKI User Authentication
      • File-based User Authentication
      • SAML Authentication
      • Integrating with Other Authentication Systems
      • Controlling the User Cache
    • Configuring SAML Single-Sign-On on the Elastic Stack
      • The Identity Provider
      • Configure Elasticsearch for SAML Authentication
      • Generating SP metadata
      • Configuring Role Mappings
      • User Metadata
      • Configuring Kibana
    • Configuring Role-based Access Control
      • Built-in Roles
      • Defining Roles
      • Granting Privileges for Indices & Aliases
      • Mapping Users and Groups to Roles
      • Setting Up Field and Document Level Security
      • Submitting Requests on Behalf of Other Users
      • Custom Roles Provider Extension
    • Auditing Security Events
    • Encrypting Communications
      • Setting Up TLS on a Cluster
      • Enabling Cipher Suites for Stronger Encryption
      • Separating node-to-node and client traffic
    • Restricting Connections with IP Filtering
    • Cross Cluster Search, Tribe, Clients and Integrations
      • Cross Cluster Search and Security
      • Tribe Nodes and Security
      • Java Client and Security
      • HTTP/REST Clients and Security
      • ES-Hadoop and Security
      • Beats and Security
      • Monitoring and Security
    • Reference
      • Security Privileges
      • Security Files
  • Monitoring the Elastic Stack
    • How Monitoring Works
    • Monitoring in a Production Environment
  • Alerting on Cluster and Index Events
    • Getting Started with Watcher
    • How Watcher Works
    • Encrypting Sensitive Data in Watcher
    • Inputs
      • Simple Input
      • Search Input
      • HTTP Input
      • Chain Input
    • Triggers
      • Schedule Trigger
    • Conditions
      • Always Condition
      • Never Condition
      • Compare Condition
      • Array Compare Condition
      • Script Condition
    • Actions
      • Adding conditions to actions
      • Email Action
      • Webhook Action
      • Index Action
      • Logging Action
      • HipChat Action
      • Slack Action
      • PagerDuty Action
      • Jira Action
    • Transforms
      • Search Transform
      • Script Transform
      • Chain Transform
    • Java API
    • Managing Watches
    • Example Watches
      • Watching the Status of an Elasticsearch Cluster
      • Watching Event Data
  • Machine Learning in the Elastic Stack
    • Overview
      • Jobs
      • Datafeeds
      • Buckets
      • Calendars and Scheduled Events
      • Basic Terms
    • Getting Started
      • Identifying Data for Analysis
      • Creating Jobs
      • Creating Single Metric Jobs
      • Managing Jobs
      • Exploring Single Metric Job Results
      • Creating Multi-metric Jobs
      • Exploring Multi-metric Job Results
      • Creating Forecasts
      • Next Steps
    • Configuring Machine Learning
      • Adding Custom URLs To Machine Learning Results
      • Aggregating Data For Faster Performance
      • Categorizing log messages
      • Performing Population Analysis
      • Transforming Data With Script Fields
    • Stopping Machine Learning
    • API Quick Reference
    • Function Reference
      • Count Functions
      • Geographic Functions
      • Information Content Functions
      • Metric Functions
      • Rare Functions
      • Sum Functions
      • Time Functions
  • Troubleshooting
    • Getting Help
    • X-Pack security
      • Can’t log in after upgrading to 6.2.4
      • Some settings are not returned via the nodes settings API
      • Authorization exceptions
      • Users command fails due to extra arguments
      • Users are frequently locked out of Active Directory
      • Certificate verification fails for curl on Mac
      • SSLHandshakeException causes connections to fail
      • Common SSL/TLS exceptions
      • Internal Server Error in Kibana
      • Setup-passwords command fails due to connection failure
    • X-Pack Watcher
    • X-Pack monitoring
    • X-Pack machine learning
      • Machine learning features unavailable after rolling upgrade
      • Job creation failure due to mapping clash
      • Kibana cannot display jobs with invalid characters in their name
      • Upgraded nodes fail to start due to datafeed issues
  • Limitations
    • Security Limitations
    • Watcher Limitations
    • Machine Learning Limitations
  • License Management
    • License Expiration
  • Release Notes
    • Change List