# Encrypt or hide ES credentials in td-agent configuration file

**URL:** <https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770>\
**Category:** Elasticsearch\
**Created:** [September 9, 2021, 12:22pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770 "2021-09-09T12:22:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Swathi\_Nayak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/swathi_nayak/32/81251_2.png) [@Swathi\_Nayak](https://discuss.elastic.co/u/Swathi_Nayak)\
**Post date:** [September 9, 2021, 12:22pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770/1 "2021-09-09T12:22:24Z")

</div>

We have a td-agent configuration file that connects to elastic search with SSL enabled. User and password is used for safe connection. But these credentials are in plain text. How to encrypt or hide these credentials?

\<match \*\>  
@type elasticsearch  
host \<host\_name\>  
port \<port\_no\>

logstash\_format true  
logstash\_prefix cmm-acquirer-unikix  
user \<user\_name\>  
password \<password\_in\_plain\_text\>

ca\_file ./certs/elasticsearch-ca.pem  
ssl\_verify true  
scheme https  
ssl\_version TLSv1\_2

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770/2 "2021-09-09T13:49:51Z")

</div>

This sounds like a question better directed at the td-agent community.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 7, 2021, 1:50pm UTC](https://discuss.elastic.co/t/encrypt-or-hide-es-credentials-in-td-agent-configuration-file/283770/3 "2021-10-07T13:50:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.