anchor.diff:  `/kibana` directory that you created when <<encrypt-http-communication,encrypting HTTP client communications for {es}>>.
   
   . Copy the `elasticsearch-ca.pem` certificate to the directory where you
  -installed Metricbeat.
  +installed {metricbeat}.
   
   . Open the `metricbeat.yml` configuration file and configure the connection
  -to Elasticsearch.
  +to {es}.
   +
   Under `output.elasticsearch`, specify the following fields:
   +
  
positive.code:  password: "p@ssw0rd"
  ----
  
     `hosts`:: The URLs of the Elasticsearch instances to use for all your
     queries. Ensure that you include `https` in the URL.
  
     `username`:: Name of the user with privileges required to set up dashboards in Kibana. The `metricbeat_setup` user that you created has these privileges.
  
     `password`:: Password for the indicated `username`.
  
  
negative.code: and `metricbeat_setup` users that you created. If you need a greater level of
  security, we recommend using PKI certificates.
  
  After configuring connections to {es} and {kib}, you'll enable the
  `elasticsearch-xpack` module and configure that module to use HTTPS.
  
  WARNING: In production environments, we strongly recommend using a separate
  