Masking password in logstash config file

Elastic Stack Logstash
1

Hello all,

As logstash config file is not centrally controlled, I want to mask the elasticsearch password in logstash.conf file so that it is not visible to all. Also user with what "security role" should suffice for mentioning in the conf file?

 **user => "abcd"
   password => "xyz"**

Please help

2

There is a keystore that can be used with logstash, beats, elasticsearch, and kibana configuration files.

3

Thanks. What should be the least privileged "security role" that could be used in the logtsash conf?

4

This guide has the appropriate roles and permissions.