Configure Filebeat to use X-Pack security

If you want Filebeat to connect to a cluster that has X-Pack security enabled, there are extra configuration steps:

  1. Grant users access to secured resources.

    You can use role-based access control to grant Filebeat users access to secured resources.

  2. Configure authentication credentials.

    To interact with a secured cluster, Filebeat must either provide basic authentication credentials or present a client certificate.

  3. Configure Filebeat to use encrypted connections.

    If encryption is enabled on the cluster, you need to enable HTTPS in the Filebeat configuration.

For more information about X-Pack security, see Securing the Elastic Stack.