mirror of
https://github.com/elastic/logstash.git
synced 2025-04-25 07:07:54 -04:00
The referenced elasticsearch output plugin has deprecated the options that were specified (`ssl`, `cacert`) https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-deprecated-options
When I tried using the `ssl` option I noticed a warning in the logstash logs:
```
[WARN ][logstash.outputs.elasticsearch] You are using a deprecated config setting "ssl" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Set 'ssl_enabled' instead. If you have any questions about this, please visit the #logstash channel on freenode irc.
```
I have updated this document with the suggested new options to use instead.
(cherry picked from commit 3402310b40
)
Co-authored-by: Matt Johnson <M@ttJohnson.com>
25 lines
911 B
Text
25 lines
911 B
Text
[discrete]
|
|
[[ls-http-ssl]]
|
|
=== Configuring Logstash to use TLS/SSL encryption
|
|
|
|
If TLS encryption is enabled on an on premise {es} cluster, you need to
|
|
configure the `ssl_enabled` and `ssl_certificate_authorities` options in your Logstash `.conf` file:
|
|
|
|
NOTE: See https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html[elasticsearch output plugin documentation] for a full list of options
|
|
|
|
[source,js]
|
|
--------------------------------------------------
|
|
output {
|
|
elasticsearch {
|
|
...
|
|
ssl_enabled => true
|
|
ssl_certificate_authorities => '/path/to/cert.pem' <1>
|
|
}
|
|
}
|
|
--------------------------------------------------
|
|
<1> The path to the local `.pem` file that contains the Certificate
|
|
Authority's certificate.
|
|
|
|
NOTE: Hosted {ess} simplifies security. This configuration step is not necessary for hosted Elasticsearch Service on Elastic Cloud.
|
|
{ess-leadin-short}
|
|
|