Hide elasticsearch superuser name and password in logstash conf

Elastic Stack Logstash
1

Hello all,

The logstash (7.x) in the environment resides on the same server as filebeat. I am reluctant to mention superuser name and password info for elasticsearch in logstash.conf.

Can I create a new user in Kibana and assign it a role which is not as powerful as superuser but allows logstash to push messages to elasticsearch? What role would that be?

Thanks

2

Use the secrets keystore here it is exactly for this use case.

In addition you can create a logstash_writerrole that has access to the indices you want to write to here is some documentation on that.

3

Thank you!