Hide elasticsearch superuser name and password in logstash conf

[zaeemmasood]

Hello all,

The logstash (7.x) in the environment resides on the same server as filebeat. I am reluctant to mention superuser name and password info for elasticsearch in logstash.conf.

Can I create a new user in Kibana and assign it a role which is not as powerful as superuser but allows logstash to push messages to elasticsearch? What role would that be?

Thanks

[stephenb (Stephen Brown)]

Use the secrets keystore here it is exactly for this use case.

In addition you can create a logstash_writerrole that has access to the indices you want to write to here is some documentation on that.

[zaeemmasood]

Thank you!