Hi Hiwot, Regarding to your question, in the link below you can find a solution to your problem,
https://opster.com/analysis/elasticsearch-authentication-of-was-terminated-by-realm/ I hope this information can help you, Regards -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/ossec-list/b1c95846-223c-43a0-b254-52dbbda7ee82n%40googlegroups.com.