Disabling SSL for the Elastic Stack

Disable SSL for the Elastic Stack services.

Before you begin

You must be a cluster administrator.

About this task

You can optionally disable SSL for the Elastic Stack by changing the parameters in the Elastic Stack configuration files.

Note: Only communication on the http protocol for Elasticsearch can be disabled. The transport protocol for Elasticsearch cannot be disabled.

Procedure

Stop the Elastic Stack services. For more information, see Stopping Elastic Stack services.
Disable SSL for the Elasticsearch services by setting the value of the orchestrator.security.auth.enable and orchestrator.ssl.transport.enabled parameter to false in the $EGO_CONFDIR/../../integration/elk/conf/elasticsearch/elasticsearch.yml configuration file.
Disable SSL for the elk-shipper and elk-indexer services by adding a number sign to comment out the following parameters in the corresponding configuration files:
- To disable SSL for the elk-shipper service, edit the $EGO_TOP/integration/elk/conf/indexer/indexer.conf configuration file:
```
#ssl => true
#ssl_certificate => "../../scripts/lumberjack.crt"
#ssl_key => "../../scripts/lumberjack.key"
```
- To disable SSL for the elk-indexer service, edit the $EGO_TOP/integration/elk/1.4.4/conf/filebeat.yml.template configuration file:
```
#ssl.certificate_authorities: ["@SSL_CERTIFICATE@"]
#ssl.verification_mode: none
```
Restart the Elastic Stack services. For more information, see Starting Elastic Stack services.

Update the Explorer access protocol so that you can view Explorer reports in the cluster management console after disabling SSL for the Elastic Stack:

Open the $EGO_CONFDIR/../../explorer/config/config.json file for editing.

Locate the "protocol":"https" line, and change it to "protocol":"http".

For example:


{
    "pa.net.port": 5000,
    "pa.metadata": {
        "datasource": "ds1",
        "index": "model"
    },
    "pa.dashboard.default": "cluster_overview",
    "pa.query.size.max": 10000,
    "pa.query.timeout" : 300000,
    "pa.logging": {
        "logLevel": "debug",
        "appName": "server",
        "logDir": "logs",
        "datasource": "ds1"
    },
    "pa.datasources": {
"ds1": {"name": "ES Instance1", "type": "elasticsearch", "hosts": [{"host" : "user.example.ibm.com", "port": 9200, "protocol":"http"}]}
    },
    "pa.allow.cross.domain": "false",
    "pa.allow.limited.access": "true",
    "pa.allow.access.ips": "9.21.52.21",
    "elasticsearch.version" : "7.8.1"
}

Save and close the file.
Restart the Explorer service for the changes to take effect:
```
egosh service stop Explorer
egosh service start Explorer
```