# Logstash http output basic auth base64 encode not parsed

**URL:** <https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432>\
**Category:** Logstash\
**Created:** [March 26, 2021, 4:01am UTC](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432 "2021-03-26T04:01:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![lemoncodes91](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lemoncodes91/32/86128_2.png) [@lemoncodes91](https://discuss.elastic.co/u/lemoncodes91)\
**Post date:** [March 26, 2021, 4:01am UTC](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432/1 "2021-03-26T04:01:04Z")

</div>

Hello i followed some guides on how to do basic auth in logstash. However, when i check the outgoing packet from logstash, the HTTP protocol contains "Authorization: Basic %{password}" instead of "Authorization: Basic \<base64 encoded string (user:pass)\>"

here is my config

```auto
    input {
      beats {
    host => "localhost"
    port => 5044
      }
    }

    filter {
      mutate {
    remove_field => ["host", "@timestamp", "@version", "tags", "input", "ecs", "agent", "log", "offset"]
      }
      grok {
    patterns_dir => ["C:\\logstash\\patterns"]
    match => { "message" => "%{COMMON_TIMESTAMP:timestamp}"}
      }
      ruby {
    	code => "
    		require 'base64';
    		event['password'] = Base64.encode64('root:root').sub(/\n/,'')
    	"
      }
    }

    output {
      stdout { codec => rubydebug }
      http {
    	headers => {"Authorization" => "Basic %{password}"}
    url => ["http://localhost:9999/api/v1/logs/data"]
    http_method => "post"
    	content_type => "application/json"
    format => json
      }
    }

```

Additionally i am using logstash-7.7.0

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 26, 2021, 5:02pm UTC](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432/2 "2021-03-26T17:02:53Z")

</div>

> [@lemoncodes91](#):
>
> `event['password']`

You can no longer reference the event as a hash. You have to use the [Event API | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/event-api.html).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 23, 2021, 5:02pm UTC](https://discuss.elastic.co/t/logstash-http-output-basic-auth-base64-encode-not-parsed/268432/3 "2021-04-23T17:02:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.