| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546 |
- network.host: wazuh1.indexer
- node.name: wazuh1.indexer
- cluster.initial_master_nodes:
- - wazuh1.indexer
- - wazuh2.indexer
- - wazuh3.indexer
- cluster.name: "wazuh-cluster"
- discovery.seed_hosts:
- - wazuh1.indexer
- - wazuh2.indexer
- - wazuh3.indexer
- node.max_local_storage_nodes: "3"
- path.data: /var/lib/wazuh-indexer
- path.logs: /var/log/wazuh-indexer
- plugins.security.ssl.http.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh1.indexer.pem
- plugins.security.ssl.http.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh1.indexer.key
- plugins.security.ssl.http.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
- plugins.security.ssl.transport.pemcert_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh1.indexer.pem
- plugins.security.ssl.transport.pemkey_filepath: ${OPENSEARCH_PATH_CONF}/certs/wazuh1.indexer.key
- plugins.security.ssl.transport.pemtrustedcas_filepath: ${OPENSEARCH_PATH_CONF}/certs/root-ca.pem
- plugins.security.ssl.http.enabled: true
- plugins.security.ssl.transport.enforce_hostname_verification: false
- plugins.security.ssl.transport.resolve_hostname: false
- plugins.security.ssl.http.enabled_ciphers:
- - "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
- - "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
- - "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
- - "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384"
- plugins.security.ssl.http.enabled_protocols:
- - "TLSv1.2"
- plugins.security.authcz.admin_dn:
- - "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
- plugins.security.check_snapshot_restore_write_privileges: true
- plugins.security.enable_snapshot_restore_privilege: true
- plugins.security.nodes_dn:
- - "CN=wazuh1.indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
- - "CN=wazuh2.indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
- - "CN=wazuh3.indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
- - "CN=filebeat,OU=Wazuh,O=Wazuh,L=California,C=US"
- plugins.security.restapi.roles_enabled:
- - "all_access"
- - "security_rest_api_access"
- plugins.security.allow_default_init_securityindex: true
- cluster.routing.allocation.disk.threshold_enabled: false
- compatibility.override_main_response_version: true
|
