X-Pack security uses the following files:
ES_PATH_CONF/roles.ymldefines the roles in use on the cluster (read more here).
ES_PATH_CONF/elasticsearch-usersdefines the users and their hashed passwords for the
ES_PATH_CONF/elasticsearch-users_rolesdefines the user roles assignment for the the
ES_PATH_CONF/role_mapping.ymldefines the role assignments for a Distinguished Name (DN) to a role. This allows for LDAP and Active Directory groups and users and PKI users to be mapped to roles (read more here).
ES_PATH_CONF/log4j2.propertiescontains audit information (read more here).
Several of these files are in the YAML format. When you edit these files, be aware that YAML is indentation-level sensitive and indentation errors can lead to configuration errors. Avoid the tab character to set indentation levels, or use an editor that automatically expands tabs to spaces.
Be careful to properly escape YAML constructs such as
: or leading exclamation
points within quoted strings. Using the
> characters to define block
literals instead of escaping the problematic characters can help avoid problems.