Metricbeat password literal issue

naveenbangalore · March 31, 2020, 12:07pm

Hi,
Not sure if this issue was already reported. Found an unusual behaviour with metricbeat.
Typically when Xpack is enabled, username and password are added in the metricbeat.yml. When the password contains the literals "$$" (consecutive $), elasticsearch fails to authorize the user.
To replicate, try having the password of a user with literals like "P@$$XXyy"

Alex_Kristiansen · March 31, 2020, 2:39pm

This is due to the template engine the metricbeat config. I would recommend using the Beat keystore, or just substituting $$ for $$$$ to escape the template engine.

naveenbangalore · March 31, 2020, 4:29pm

Thanks, @Alex_Kristiansen for the response. Is this info present in the documentation?

Alex_Kristiansen · March 31, 2020, 4:56pm

Right now we are not documenting the behavior of $$. We should probably change that.

system · April 28, 2020, 4:56pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.