anchor.diff:  `/kibana` directory that you created when <<encrypt-http-communication,encrypting HTTP client communications for {es}>>.
   
   . Copy the `elasticsearch-ca.pem` certificate to the directory where you
  -installed Metricbeat.
  +installed {metricbeat}.
   
   . Open the `metricbeat.yml` configuration file and configure the connection
  -to Elasticsearch.
  +to {es}.
   +
   Under `output.elasticsearch`, specify the following fields:
   +
  
positive.code: and `metricbeat_setup` users that you created. If you need a greater level of
  security, we recommend using PKI certificates.
  
  After configuring connections to Elasticsearch and Kibana, you'll enable the
  `elasticsearch-xpack` module and configure that module to use HTTPS.
  
  WARNING: In production environments, we strongly recommend using a separate
  
negative.code: ===== Configure {metricbeat} to use TLS
  
  Before starting {metricbeat}, you configure the connections to {es} and
  {kib}. You can configure authentication to send data to your secured cluster
  using basic authentication, API key authentication, or Public Key
  Infrastructure (PKI) certificates.
  
  