Hide elasticsearch superuser name and password in logstash conf

Hello all,

The logstash (7.x) in the environment resides on the same server as filebeat. I am reluctant to mention superuser name and password info for elasticsearch in logstash.conf.

Can I create a new user in Kibana and assign it a role which is not as powerful as superuser but allows logstash to push messages to elasticsearch? What role would that be?


Use the secrets keystore here it is exactly for this use case.

In addition you can create a logstash_writerrole that has access to the indices you want to write to here is some documentation on that.

1 Like

Thank you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.