Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DOCS]: Add security and comms info to Ingest Manager doc #127

Closed
jmikell821 opened this issue Sep 1, 2020 · 1 comment
Closed

[DOCS]: Add security and comms info to Ingest Manager doc #127

jmikell821 opened this issue Sep 1, 2020 · 1 comment
Assignees
Labels
docs Improvements or additions to documentation

Comments

@jmikell821
Copy link
Contributor

Per request from Elastic Security product management, we need to update the Config Settings topic to include some additional security and comms information, as specified in this Google doc.

Copied and pasted as follows:

How are communications secured between endpoint and agent?
Endpoint connects to the agent over loopback TLS on port 6788.  Endpoint validates that the agent has root (Linux and macOS) or SYSTEM (Windows) permissions.  In future versions, the endpoint will validate the digital signature of the agent, and vice versa.

How are communications secured between agent and kibana?
Agent connects to Kibana over TLS and authenticates the certificate presented by Kibana.  Agent then provides an ApiKey as an authentication token, which Kibana validates.

What ES and Kibana ports need to be accessible?
The configuration file generated by the Ingest Manager app already contains the correct Elasticsearch address and port for your setup. If you run everything locally, the address is 127.0.0.1:9200. If you use our hosted Elasticsearch Service on Elastic Cloud, the address corresponds to the Elasticsearch endpoint URL that is listed under Endpoints as described in Work with Elasticsearch.  If not running in the cloud, both the Kibana and the Elasticsearch HTTPS ports must be accessible; by default these are 5601 and 9200 respectively.

We can discuss further during our sync on Thursday.

@jmikell821 jmikell821 added the docs Improvements or additions to documentation label Sep 1, 2020
@dedemorton dedemorton self-assigned this Sep 3, 2020
@dedemorton dedemorton added the v7.10.0 v7.10.0 label Sep 3, 2020
@bmorelli25 bmorelli25 removed the v7.10.0 v7.10.0 label Mar 31, 2021
@dedemorton
Copy link
Contributor

Closed by #238

colleenmcginnis pushed a commit to colleenmcginnis/observability-docs that referenced this issue May 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

3 participants