elasticsearch/es-cli-keystore

Manage Keystore

Create Elasticsearch keystore

elasticsearch
security
keystore

Command

elasticsearch-keystore create

Explanation

Manages secure storage for sensitive Elasticsearch settings such as passwords, keystore/truststore paths.

Common Use Cases

  • Storing secure settings
  • Setting bootstrap passwords
  • Securing private keys or credentials

Best Practices

  • Use keystore for all sensitive credentials
  • Avoid storing plaintext passwords in config

Common Mistakes to Avoid

  • Editing keystore manually (not allowed)
  • Forgetting to restart service after keystore change

Troubleshooting

Problem: Keystore locked

Solution: Stop node before modifying the keystore.

Problem: Setting not applied

Solution: Restart Elasticsearch after modifying keystore.

Examples

Add bootstrap password to keystore

elasticsearch-keystore add bootstrap.password