# Logstash XPack Password

**URL:** <https://discuss.elastic.co/t/logstash-xpack-password/111149>\
**Category:** Logstash\
**Created:** [December 11, 2017, 5:05pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149 "2017-12-11T17:05:47Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![MultiplierMultiplier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/multipliermultiplier/32/25063_2.png) [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Post date:** [December 11, 2017, 5:05pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/1 "2017-12-11T17:05:47Z")

</div>

So I have installed X Pack on my ELK stack, I am just wondering to put the below (I have set the new username and password this is just the example):  
xpack.monitoring.elasticsearch.username: logstash\_system  
xpack.monitoring.elasticsearch.password: logstashpassword

So it says to add it to the logstash.yml file, but I don't see any current settings to add my username and password to. Am I missing some config options or do I just append these two options to my logstash.yml file?

Cheers

G

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 11, 2017, 11:10pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/2 "2017-12-11T23:10:42Z")

</div>

You need to add them into the file.

Also we’ve renamed ELK to the Elastic Stack, otherwise Beats and APM feel left out! 😉

---

<div class="post-metadata">

**Author:** ![MultiplierMultiplier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/multipliermultiplier/32/25063_2.png) [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Post date:** [December 13, 2017, 11:13am UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/3 "2017-12-13T11:13:13Z")

</div>

So the end of my logstash.yml file looks like this:

> # ------------ Debugging Settings --------------
> 
> # 
> 
> # Options for log.level:
> 
> # \* fatal
> 
> # \* error
> 
> # \* warn
> 
> # \* info (default)
> 
> # \* debug
> 
> # \* trace
> 
> # 
> 
> # log.level: info
> 
> path.logs: /var/log/logstash
> 
> # 
> 
> # ------------ Other Settings --------------
> 
> # 
> 
> # Where to find custom plugins
> 
> # path.plugins:
> 
> xpack.monitoring.elasticsearch.username: logstash\_system  
> xpack.monitoring.elasticsearch.password: EXAMPLEPASSWORD

So I saved the file and restarted Logstash and it keeps restarting and I get the following error:

> [2017-12-13T11:08:58,901][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<ArgumentError: Setting "xpack.monitoring.elasticsearch.username" hasn't been registered\>, :backtrace=\>["/usr/share/logstash/logstash-core/lib/logstash/settings.rb:32:in `get_setting'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:64:in `set\_value'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:83:in `merge'", "org/jruby/RubyHash.java:1342:in `each'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:83:in `merge'", "/usr/share/logstash/logstash-core/lib/logstash/settings.rb:135:in `validate\_all'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:243:in `execute'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:67:in `run'", "/usr/share/logstash/logstash-core/lib/logstash/runner.rb:204:in `run'", "/usr/share/logstash/vendor/bundle/jruby/1.9/gems/clamp-0.6.5/lib/clamp/command.rb:132:in `run'", "/usr/share/logstash/lib/bootstrap/environment.rb:71:in `(root)'"]}

I am running Elastic Stack version 5.6

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [December 13, 2017, 12:29pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/4 "2017-12-13T12:29:04Z")

</div>

It doesn't look like you've installed X-Pack into Logstash.  
You need to install the plugin independently into each product (Elasticsearch, Kibana, Logstash).

---

<div class="post-metadata">

**Author:** ![MultiplierMultiplier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/multipliermultiplier/32/25063_2.png) [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\
**Post date:** [December 13, 2017, 2:03pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/5 "2017-12-13T14:03:13Z")

</div>

Oh silly me, I thought I'd installed it.

So I have installed it now and added the following to the end of the Logstash.yml:

> xpack.monitoring.elasticsearch.password: f5iTz&#\_#\*N!\_uFwn~?@  
> xpack.monitoring.elasticsearch.url: [http://localhost:9200](http://localhost:9200)  
> xpack.monitoring.elasticsearch.username: logstash\_system  
> xpack.monitoring.enabled: false

Logstash keeps restarting and isn't writing any logs.

Cheers,

G

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 10, 2018, 2:03pm UTC](https://discuss.elastic.co/t/logstash-xpack-password/111149/6 "2018-01-10T14:03:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.