# How to read filebeat keystore?
**URL:** https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153
**Category:** Beats
**Tags:** filebeat
**Created:** [December 31, 2023, 10:03am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153 "2023-12-31T10:03:34Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Aparna\_R](https://discuss.elastic.co/u/Aparna_R)
#### Post date: [December 31, 2023, 10:03am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153/1 "2023-12-31T10:03:34Z")
Hi,
I am using Powershell Desired State Configuration (DSC) to manage filebeat on my VM. In the DSC script, I need to be able to compare the secure strings used in Filebeat configuration through keystore with the source to update the secure strings and restart Filebeat (if needed).
I have not been able to find a way to read the keystore data to compare with the source of the secrets. Is there a way to do so? Or if there is a way to attach some readable metadata in keystore, that also might work for me. Thanks in advance!
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [December 31, 2023, 2:43pm UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153/2 "2023-12-31T14:43:39Z")
Hi @Aparna_R Welcome to the community!
> [@Aparna\_R](#):
>
> I have not been able to find a way to read the keystore data to compare with the source of the secrets. Is there a way to do so?
Unfortunately, It looks like you can not read the values after they have been added...
> **[Filebeat command reference | Filebeat Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/command-line-options.html#keystore-command)**
> [@Aparna\_R](#):
>
> Or if there is a way to attach some readable metadata in keystore, that also might work for me. Thanks in advance!
No that does not seem to be an option either...
This is a very simple keystore.
---
### Author:  [@Aparna\_R](https://discuss.elastic.co/u/Aparna_R)
#### Post date: [January 1, 2024, 5:33am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153/3 "2024-01-01T05:33:53Z")
Thanks for the prompt response! Appreciate it!
Is there a way to create configuration such thay filebeat can read password or connection string from windows credential manager? That way, I need not use the keystore at all.
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [January 1, 2024, 5:40am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153/4 "2024-01-01T05:40:13Z")
You will need to write your own scripting. Unfortunately, I am not a Windows expert...
You can also use Environment Variables.
> **[Use environment variables in the configuration | Filebeat Reference \[8.11\] |...](https://www.elastic.co/guide/en/beats/filebeat/current/using-environ-vars.html)**
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 29, 2024, 7:40am UTC](https://discuss.elastic.co/t/how-to-read-filebeat-keystore/350153/5 "2024-01-29T07:40:45Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.