Logstash keystore error after upgrade


I did a deployment and upgrade, from logstash 7.6.2 deployed binary to logstash 7.10.2 dockerized.
I used the same logstash.keystore file (copy and paste .keystore from 7.6.2 to /usr/share/logstash/config inside container 7.10.2).

Next you find the errors reported:
Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:.monitoring-logstash...
Failed to execute action {:action=>LogStash::PipelineAction::Create/pipeline_id:my_pipeline....

Both errors have the same exception:
:message=>Found a file at /usr/share/logstash/config/logstash.keystore, but it is not a valid Logstash keystore.

Was it a mistake to use the same file in different logstash versions?


  1. xpack.monitoring.elasticsearch.user/password defined in logstash.yml it has no variables. Shouldn't take them from keystore.
  2. my_pipeline in output elasticsearch definition contains variables for username and password.

Does anybody have any suggestion to overcome the error?


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.