# Logstash kafka output plugin not behaving according to documentation

**URL:** https://discuss.elastic.co/t/logstash-kafka-output-plugin-not-behaving-according-to-documentation/185280
**Category:** Logstash
**Created:** [June 11, 2019, 9:07pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-plugin-not-behaving-according-to-documentation/185280 "2019-06-11T21:07:22Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![preddy75](https://avatars.discourse-cdn.com/v4/letter/p/a88e4f/32.png) [@preddy75](https://discuss.elastic.co/u/preddy75)
#### Post date: [June 11, 2019, 9:07pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-plugin-not-behaving-according-to-documentation/185280/1 "2019-06-11T21:07:22Z")

</div>

I cannot get logstash-kafka output plugin to work with basic auth. I am using below, but it will not let me do it because it insists on on a keyfile to be specified:

logstash output config:

output {

```
    if "kafka" in [tags] {
      kafka {
        bootstrap_servers => "<bootstrap server>"
        codec => "json"
        topic_id => "<topic>"
        jaas_path => "<path>/kafka_client_jaas.conf"
        security_protocol => "SASL_SSL"
        sasl_mechanism => "PLAIN"
      }
    }

```

which corresponds to this documentation:

> **[Apache Kafka](https://kafka.apache.org/documentation/#security_sasl_plain)**
>
> Apache Kafka: A Distributed Streaming Platform.

and here is jaas config:

KafkaClient {  
org.apache.kafka.common.security.plain.PlainLoginModule required  
username=  
password=  
};

[ERROR] 2019-06-11 20:44:35.075 [[main]-pipeline-manager] kafka - Unable to create Kafka producer from given configuration {:kafka\_error\_message=\>#\<LogStash::ConfigurationError: ssl\_truststore\_location must be set when SSL is enabled\>, :cause=\>nil}  
[ERROR] 2019-06-11 20:44:35.079 [[main]-pipeline-manager] pipeline - Error registering plugin {:pipeline\_id=\>"main", :plugin=\>"#LogStash::OutputDelegator:0x798ad460", :error=\>"ssl\_truststore\_location must be set when SSL is enabled", :thread=\>"#\<Thread:0x12c614f1 run\>"}  
[ERROR] 2019-06-11 20:44:35.082 [[main]-pipeline-manager] pipeline - Pipeline aborted due to error {:pipeline\_id=\>"main", :exception=\>#\<LogStash::ConfigurationError: ssl\_truststore\_location must be set when SSL is enabled\>, :backtrace=\>["/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-kafka-7.1.3/lib/logstash/outputs/kafka.rb:357:in `set_trustore_keystore_config'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-kafka-7.1.3/lib/logstash/outputs/kafka.rb:341:in`create\_producer'", "/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-output-kafka-7.1.3/lib/logstash/outputs/kafka.rb:192:in `register'", "org/logstash/config/ir/compiler/OutputStrategyExt.java:102:in`register'", "org/logstash/config/ir/compiler/AbstractOutputDelegatorExt.java:46:in `register'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:242:in`register\_plugin'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:253:in `block in register_plugins'", "org/jruby/RubyArray.java:1734:in`each'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:253:in `register_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:594:in`maybe\_setup\_out\_plugins'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:263:in `start_workers'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:200:in`run'", "/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:160:in `block in start'"], :thread=\>"#\<Thread:0x12c614f1 run\>"}

---

<div class="post-metadata">

### Author: ![preddy75](https://avatars.discourse-cdn.com/v4/letter/p/a88e4f/32.png) [@preddy75](https://discuss.elastic.co/u/preddy75)
#### Post date: [June 14, 2019, 3:49pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-plugin-not-behaving-according-to-documentation/185280/2 "2019-06-14T15:49:09Z")

</div>

So it appears that this property is the missing link. I wish this was not mandatory, inside this cluster environment we know who the other side is, we don't need to validate the other side via a cert.

[https://www.elastic.co/guide/en/logstash/6.4/plugins-outputs-kafka.html#plugins-outputs-kafka-ssl\_truststore\_location](https://www.elastic.co/guide/en/logstash/6.4/plugins-outputs-kafka.html#plugins-outputs-kafka-ssl_truststore_location)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 12, 2019, 3:49pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-plugin-not-behaving-according-to-documentation/185280/3 "2019-07-12T15:49:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.