On Alma9 I bypassed ES / A9 security issues by:
Code:
xpack.security.enabled: false
xpack.security.transport.ssl.enabled: false
xpack.security.http.ssl.enabled: false
Also UNCHECK Use HTTPS connection
Note: this should not be done on multi node ES installs but if your ES service is local to XF, your server security will handle external connections (CSF).