# Elasticsearch security config **URL:** \ **Category:** Alerting\ **Created:** [March 24, 2020, 4:41pm UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461 "2020-03-24T16:41:22Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![lerentis](https://avatars.discourse-cdn.com/v4/letter/l/bbce88/32.png) [@lerentis](https://forum.opensearch.org/u/lerentis)\ **Post date:** [March 24, 2020, 4:41pm UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461/1 "2020-03-24T16:41:23Z")
Hey there, i have installed the alerting plugin to elasticsearch and kibana as stated here: - [Standalone Elasticsearch Plugin Install - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/install/plugins/) - [Standalone Kibana Plugin Install - Open Distro Documentation](https://opendistro.github.io/for-elasticsearch-docs/docs/kibana/plugins/) i can now configure monitors and trigger via kibana but they never fire. a little bit of debugging showed that there is a security exception in elasticsearch: > {“type”: “server”, “timestamp”: “2020-03-24T16:10:52,615Z”, “level”: “ERROR”, “component”: “c.a.o.a.MonitorRunner”, “cluster.name”: “es-cluster”, “node.name”: “es-node-1”, “message”: “Error loading alerts for monitor: PYIuDXEBAGaEE73To77I”, “cluster.uuid”: “pRQK8DpFTreUfIUHc4Cg0A”, “node.id”: “FsFKB9o-T9Gd6I58vkfqOQ” , > “stacktrace”: [“org.elasticsearch.ElasticsearchSecurityException: action [indices:data/read/search] is unauthorized for user [\_system]”, can anyone point me to the right direction what i can do to eigher grant the \_system user these permissions (not sure if that’s possible if i am reading the code of elasticsearch correctly [1]) or have this query running as another dedicated alarm user? thanks in advance lerentis [1] [https://github.com/elastic/elasticsearch/blob/284c978475e4e2683d10ed5019c35082ee5c8441/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/SystemPrivilege.java#L22](https://github.com/elastic/elasticsearch/blob/284c978475e4e2683d10ed5019c35082ee5c8441/x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/privilege/SystemPrivilege.java#L22) ---
**Author:** ![dbbaughe](https://avatars.discourse-cdn.com/v4/letter/d/bbe5ce/32.png) [@dbbaughe](https://forum.opensearch.org/u/dbbaughe)\ **Post date:** [March 25, 2020, 12:00am UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461/2 "2020-03-25T00:00:49Z")
Hi @lerentis, We do not have explicit integration support with x-pack security. It’s possible some other users have found a way around it, but not something that we can help with. We instead offer our own open source Apache 2.0 licensed security plugin. [https://opendistro.github.io/for-elasticsearch-docs/docs/security-configuration/](https://opendistro.github.io/for-elasticsearch-docs/docs/security-configuration/) > **[GitHub - opendistro-for-elasticsearch/security](https://github.com/opendistro-for-elasticsearch/security)** > > Contribute to opendistro-for-elasticsearch/security development by creating an account on GitHub. ---
**Author:** ![lerentis](https://avatars.discourse-cdn.com/v4/letter/l/bbce88/32.png) [@lerentis](https://forum.opensearch.org/u/lerentis)\ **Post date:** [March 25, 2020, 10:21am UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461/3 "2020-03-25T10:21:46Z")
hi @dbbaughe uh okay thanks for answering my question. already tried my luck to replace xpack with the opendistro security plugin, but the certificate hassle is a bit too much for my setup (dedicated elastic network where i don’t want or need TLS and kibana exposed via traefik). guess i’ll have to go back to nagios and graylog 😕 Greetings lerentis ---
**Author:** ![bpavani](https://avatars.discourse-cdn.com/v4/letter/b/f475e1/32.png) [@bpavani](https://forum.opensearch.org/u/bpavani)\ **Post date:** [March 25, 2020, 6:29pm UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461/4 "2020-03-25T18:29:08Z")
> [@dbbaughe](#): > > ### [Security - Configuration](https://opendistro.github.io/for-elasticsearch-docs/docs/security-configuration/) > > Documentation for Open Distro for Elasticsearch, the community-driven, 100% open source distribution of Elasticsearch with advanced security, alerting, deep performance analysis, and more. > > ![](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/f/f404709c849820b75c9a34bce7f37fc2469cebf6.png) [GitHub](https://github.com/opendistro-for-elasticsearch/security) > > ![](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/1X/145cd7bdcdd45f6693554e604dad679816a14fc0.png) > > ### [opendistro-for-elasticsearch/security](https://github.com/opendistro-for-elasticsearch/security) > > Open Distro for E Hey Lerentis, Sorry to hear that you ran into some issues with the certificates. Perhaps, you can post your concerns and challenges on GitHub? Our team member can help you out. Thanks, Pavani ---
**Author:** ![lerentis](https://avatars.discourse-cdn.com/v4/letter/l/bbce88/32.png) [@lerentis](https://forum.opensearch.org/u/lerentis)\ **Post date:** [March 26, 2020, 7:57am UTC](https://forum.opensearch.org/t/elasticsearch-security-config/2461/5 "2020-03-26T07:57:53Z")
hi @bpavani , there are already two issues for that i think ([1] [2]). maybe to put it as a userstory: > i as a user want to deploy the security plugin without TLS, but with authentication configurable via environment variables inside a docker container also the mentioned securityadmin.sh script does not work inside the elastic container as the binary ‘which’ is missing. ah yeah and the autodetection of the JAVA\_HOME env is failing as well. Had to set it manually. should i create a PR in the documentation repo for that? greetings lerentis [1] [https://github.com/opendistro-for-elasticsearch/security/issues/36](https://github.com/opendistro-for-elasticsearch/security/issues/36) [2] [https://github.com/opendistro-for-elasticsearch/security/issues/37](https://github.com/opendistro-for-elasticsearch/security/issues/37)