# Secure way of setting username/password in logstash config file

**URL:** <https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126>\
**Category:** Logstash\
**Created:** [August 26, 2015, 4:04pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126 "2015-08-26T16:04:10Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![imad](https://avatars.discourse-cdn.com/v4/letter/i/f08c70/32.png) [@imad](https://discuss.elastic.co/u/imad)\
**Post date:** [August 26, 2015, 4:04pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/1 "2015-08-26T16:04:10Z")

</div>

Is there a more secure way of setting username/password of couchdb in logstash config file. Setting a plain password in config file wouldn't be a very likable option.

Thanks,  
Imad.

---

<div class="post-metadata">

**Author:** ![imad](https://avatars.discourse-cdn.com/v4/letter/i/f08c70/32.png) [@imad](https://discuss.elastic.co/u/imad)\
**Post date:** [August 31, 2015, 6:43pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/2 "2015-08-31T18:43:56Z")

</div>

I am still waiting for an alternate solution, will appreciate any help.

---

<div class="post-metadata">

**Author:** ![simmel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simmel/32/48040_2.png) [@simmel](https://discuss.elastic.co/u/simmel)\
**Post date:** [September 1, 2015, 7:45am UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/3 "2015-09-01T07:45:03Z")

</div>

The only solution I've used is to replace placeholders in the config  
after it has been update but before logstash runs it's configtest and it  
restarts.

---

<div class="post-metadata">

**Author:** ![imad](https://avatars.discourse-cdn.com/v4/letter/i/f08c70/32.png) [@imad](https://discuss.elastic.co/u/imad)\
**Post date:** [September 1, 2015, 1:45pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/4 "2015-09-01T13:45:35Z")

</div>

thanks for your response but once you have placed credentials in their placeholders and restart logstash they'll always be there right and that would again put risk of exposing credentials.

---

<div class="post-metadata">

**Author:** ![simmel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simmel/32/48040_2.png) [@simmel](https://discuss.elastic.co/u/simmel)\
**Post date:** [September 3, 2015, 2:22pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/5 "2015-09-03T14:22:44Z")

</div>

On Tue, 2015-09-01 at 13:55:44 +0000, imad wrote:

---

<div class="post-metadata">

**Author:** ![gmmurugan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gmmurugan/32/12488_2.png) [@gmmurugan](https://discuss.elastic.co/u/gmmurugan)\
**Post date:** [January 31, 2017, 5:18pm UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/6 "2017-01-31T17:18:45Z")

</div>

you guys atleast able to save password using jdbc\_password\_filepath?

i couldnt.. any thoughts?

Unknown setting 'jdbc\_password\_filepath' for jdbc {:level=\>:error}

[https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html#plugins-inputs-jdbc-jdbc\_password\_filepath](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-jdbc.html#plugins-inputs-jdbc-jdbc_password_filepath)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:29am UTC](https://discuss.elastic.co/t/secure-way-of-setting-username-password-in-logstash-config-file/28126/7 "2017-07-06T04:29:01Z")

</div>