# Logstash security best practices: keystore, monitoring, ssl\_verification\_mode

**URL:** https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166
**Category:** Logstash
**Tags:** elastic-stack-monitoring, elastic-stack-security
**Created:** [August 19, 2024, 7:49pm UTC](https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166 "2024-08-19T19:49:00Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![Abdarrahmane](https://avatars.discourse-cdn.com/v4/letter/a/eb8c5e/32.png) [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)
#### Post date: [August 22, 2024, 3:58pm UTC](https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166/3 "2024-08-22T15:58:30Z")

</div>

[update]

for the logstash.keystore part i've been able to make it work thanks to @Badger  
here is the solution :

> [@Not a valid Logstash keystore java exception problem](https://discuss.elastic.co/t/not-a-valid-logstash-keystore-java-exception-problem/365362/3):
>
> Thank you somuch badger It worked ! here is what i did before creating the keystore and adding the secret username and password i went and creat the directory /etc/sysconfig/ and a logstash file in it with the value of LOGSTASH\_KEYSTORE\_PASS here are the commands : sudo systemctl stop logstash.service sudo mkdir /etc/sysconfig sudo nano /etc/sysconfig/logstash add the following (replace with actual password): LOGSTASH\_KEYSTORE\_PASS=mypassword sudo chmod 600 /etc/sysconfig/logstash Then …

---

_[View the full topic](https://discuss.elastic.co/t/logstash-security-best-practices-keystore-monitoring-ssl-verification-mode/365166)._