Disabling security

A more permanent option is to remove the Security plugin entirely:

1. Delete all plugins.security.* configuration entries from opensearch.yml.

To perform these steps on the Docker image, see Working with plugins.

The Security plugin is actually two plugins: one for OpenSearch and one for OpenSearch Dashboards. You can use the OpenSearch plugin independently, but the OpenSearch Dashboards plugin depends on a secured OpenSearch cluster.

If you disable the Security plugin in opensearch.yml (or delete the plugin entirely) and still want to use OpenSearch Dashboards, you must remove the corresponding OpenSearch Dashboards plugin. For more information, see OpenSearch Dashboards remove plugins.

1. In this case, opensearch_dashboards.yml is a “vanilla” version of the file with no entries for the Security plugin. It might look like this:

3. Change or opensearch.hosts to http:// rather than https://.