Ran into a connection error today because my security tool tried talking over an unencrypted channel (http) while my database required an encrypted channel (https).
Added the missing "s" to https and everything connected instantly.
#TechTip#Cybersecurity#ITSecurity
Kibana couldn't talk to Elasticsearch after a TLS reconfig broke self-signed cert trust.
To bypass, set elasticsearch.ssl.verificationMode: none in kibana.yml.
In prod? Fix the CA trust chain instead of disabling validation. Know the difference.
#cloudsecurity#elasticsearch
@WilliamInCyber I find the data correlation part most tricky. Getting different tools to talk to each other and making sense of how separate events are connected takes a lot of time.
Force-restarted a frozen VM (twice). Next boot: "filing system damaged, needs manual repair." Turns out yanking power mid-task can corrupt storage, not just lose unsaved work. Fixed it, but lesson learned is that you should pause before you pull the plug. #cloudsecurity
Learned this the hard way: one of my tools, ElasticSearch auto-grabs 50% of available memory. Gave it more memory to stop the freezing but it just took more, froze again. Fix wasn't "more resources," it was telling it exactly how much it's allowed to use. #ELK#CloudSecurity