# Kafka plugin try to describe all the topics when used \`topics\_pattern\`

**URL:** <https://discuss.elastic.co/t/kafka-plugin-try-to-describe-all-the-topics-when-used-topics-pattern/174508>\
**Category:** Logstash\
**Created:** [March 29, 2019, 9:49am UTC](https://discuss.elastic.co/t/kafka-plugin-try-to-describe-all-the-topics-when-used-topics-pattern/174508 "2019-03-29T09:49:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![skbly7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skbly7/32/36520_2.png) [@skbly7](https://discuss.elastic.co/u/skbly7)\
**Post date:** [March 29, 2019, 9:49am UTC](https://discuss.elastic.co/t/kafka-plugin-try-to-describe-all-the-topics-when-used-topics-pattern/174508/1 "2019-03-29T09:49:52Z")

</div>

Hi,

We are using Logstash Kafka input plugin which is connecting to Kafka with below configuration.

```
  kafka {
    codec => "json"
    bootstrap_servers => "1.2.3.4:9094"
    topics_pattern => "^something-.*$"
    group_id => "something-group"
    consumer_threads => 4
    client_id => "something-group"
    decorate_events => true
    auto_offset_reset => "earliest"
    security_protocol => "SSL"
    ssl_key_password => "${USERTRUSTSTOREPASS}"
    ssl_keystore_location => "/usr/share/logstash/truststore/user.truststore"
    ssl_keystore_password => "${USERTRUSTSTOREPASS}"
    ssl_truststore_type => "jks"
    ssl_truststore_location => "/usr/share/logstash/truststore/server.truststore"
    ssl_truststore_password => "${SERVERTRUSTSTOREPASS}"
    ssl_truststore_type => "jks"
  }

```

The Kafka is running with PREFIXED ACL security and above credentials have `something-*` access.

The above logstash are trying to run `Describe` on all the topics in Kafka instead of just the index patterns one. I believe this isn't desired? Let me know if I should create bug for it in logstash-kafka-input repository.

```auto
2019-03-28 14:42:35,217 INFO Principal = User:CN=something-group is Denied Operation = Describe from host = 172.16.6.0 on resource = Topic:LITERAL:some-other-topic (kafka.authorizer.logger) [kafka-request-handler-3]

```

Though it isn't causing performance issue right now BUT the failed ACLs attempt detection is getting spammed due to the same.

> Kafka Version: 2.0.1  
> Logstash Version tried with: 6.3.2 & 6.6.2

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 26, 2019, 9:49am UTC](https://discuss.elastic.co/t/kafka-plugin-try-to-describe-all-the-topics-when-used-topics-pattern/174508/2 "2019-04-26T09:49:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.