Cyb3rWard0g / HELK

The Hunting ELK
GNU General Public License v3.0
3.72k stars 675 forks source link

Trying to build HELK stack for Production Cluster ES #499

Open doludizgin opened 3 years ago

doludizgin commented 3 years ago

Hi,

i am trying to build HELK with an elastic cluster with TLS enabled to use basic license in prodcution mode.

I rebuilded the compose file and i can get the cluster online in production mode only kibana isnt finding the cluster can you pinpoint me further ?

https://pastebin.com/SWiec39w

Cyb3rWard0g commented 3 years ago

I have not tested HELK with that type of setup. I assume it has to do with the Kibana needed to be configured also to handle the client certificate and private key: https://www.elastic.co/guide/en/kibana/current/elasticsearch-mutual-tls.html

Cyb3rWard0g commented 3 years ago

Duplicate of https://github.com/Cyb3rWard0g/HELK/issues/500