52 lines
2.1 KiB
YAML
Executable File
52 lines
2.1 KiB
YAML
Executable File
network.host: "0.0.0.0"
|
|
node.name: "wazuh.indexer"
|
|
cluster.name: "wazuh-cluster"
|
|
|
|
# Compatibilité Filebeat 7.x (libbeat) avec OpenSearch 2.x
|
|
# Filebeat envoie _type dans les requêtes bulk — OpenSearch 2.x le rejette
|
|
# sans ce flag.
|
|
compatibility.override_main_response_version: true
|
|
|
|
path.data: /var/lib/wazuh-indexer
|
|
path.logs: /var/log/wazuh-indexer
|
|
|
|
plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
|
|
plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
|
|
plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem
|
|
plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
|
|
plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
|
|
plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem
|
|
plugins.security.ssl.http.enabled: true
|
|
plugins.security.ssl.transport.enforce_hostname_verification: false
|
|
plugins.security.ssl.transport.resolve_hostname: false
|
|
|
|
plugins.security.authcz.admin_dn:
|
|
- "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
|
|
plugins.security.nodes_dn:
|
|
- "CN=wazuh.indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
|
|
|
|
plugins.security.check_snapshot_restore_write_privileges: true
|
|
plugins.security.enable_snapshot_restore_privilege: true
|
|
plugins.security.restapi.roles_enabled:
|
|
- "all_access"
|
|
- "security_rest_api_access"
|
|
|
|
plugins.security.system_indices.enabled: true
|
|
plugins.security.system_indices.indices:
|
|
- ".opendistro-alerting-config"
|
|
- ".opendistro-alerting-alert*"
|
|
- ".opendistro-anomaly-results*"
|
|
- ".opendistro-anomaly-detector*"
|
|
- ".opendistro-anomaly-checkpoints"
|
|
- ".opendistro-anomaly-detection-state"
|
|
- ".opendistro-reports-*"
|
|
- ".opendistro-notifications-*"
|
|
- ".opendistro-notebooks"
|
|
- ".opensearch-observability"
|
|
- ".opendistro-asynchronous-search-response*"
|
|
- ".replication-metadata-store"
|
|
|
|
discovery.type: single-node
|
|
plugins.security.allow_default_init_securityindex: true
|
|
cluster.routing.allocation.disk.threshold_enabled: false
|