# You are using a deprecated config setting "truststore" set in http. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Use \`ssl\_truststore\_path\` instead

**URL:** <https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071>\
**Category:** Logstash\
**Created:** [December 15, 2025, 12:07pm UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071 "2025-12-15T12:07:35Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prateek\_Garg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prateek_garg/32/141370_2.png) [@Prateek\_Garg](https://discuss.elastic.co/u/Prateek_Garg)\
**Post date:** [December 15, 2025, 12:07pm UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071/1 "2025-12-15T12:07:36Z")

</div>

You are using a deprecated config setting "truststore" set in http. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Use `ssl_truststore_path` instead If you have any questions about this, please ask it on the [Logstash - Discuss the Elastic Stack](https://discuss.elastic.co/c/logstash) discussion forum {:name=\>"truststore", :plugin=\>\<LogStash::Outputs::Http keystore\_password=\>, http\_method=\>"post", content\_type=\>"application/json", truststore\_password=\>, format=\>"message", keystore=\>"/var/run/secrets/java.io/keystores/fi-keystore.jks", truststore=\>"/var/run/secrets/java.io/keystores/sip-tls-truststore.jks", id=\>"XXX", message=\>"{"faultName":"LOGSTASH\_1","createdAt":"%{errorCreatedAt}","serviceName":"logstash","severity":"Major","description":"Logstash parsing failure. See index XXX-error-XXX-%{+YYYY.MM}","faultyResource":"ewp-lwac","expiration":3600}", url=\>"[https://xxx:9999/yyy/v1/xxx](https://xxx:9999/yyy/v1/xxx)", enable\_metric=\>true, codec=\>\<LogStash::Codecs::Plain id=\>"plain\_6fdd35a4-eda1-4965-8a7e-05exxx", enable\_metric=\>true, charset=\>"UTF-8"\>, workers=\>1, request\_timeout=\>60, socket\_timeout=\>10, connect\_timeout=\>10, follow\_redirects=\>true, pool\_max=\>50, pool\_max\_per\_route=\>25, keepalive=\>true, automatic\_retries=\>1, retry\_non\_idempotent=\>false, validate\_after\_inactivity=\>200, ssl\_enabled=\>true, ssl\_verification\_mode=\>"full", cookies=\>true, keystore\_type=\>"JKS", truststore\_type=\>"JKS", retry\_failed=\>true, retryable\_codes=\>[429, 500, 502, 503, 504], http\_compression=\>false\>}

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [December 15, 2025, 12:12pm UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071/2 "2025-12-15T12:12:19Z")

</div>

Hi @Prateek_Garg,

Welcome to the community! From the error message it looks like you are using the setting `truststore` which is deprecated and will be removed in a future version. The message is advising you to switch to the `ssl_truststore_path` instead, as covered [here](https://www.elastic.co/docs/reference/logstash/plugins/plugins-outputs-elasticsearch#plugins-outputs-elasticsearch-ssl_truststore_path).

If that isn't clear, can you share the version of Logstash you are using and your configuration?

Hope that helps!

---

<div class="post-metadata">

**Author:** ![Prateek\_Garg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/prateek_garg/32/141370_2.png) [@Prateek\_Garg](https://discuss.elastic.co/u/Prateek_Garg)\
**Post date:** [December 16, 2025, 12:53pm UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071/3 "2025-12-16T12:53:17Z")

</div>

In the error description it says  
Logstash parsing failure. See index XXX-error-XXX-%{+YYYY.MM}

But there is no such index created in the system. So I am not sure whether it is a misleading message or not. If not then which parsing has failed.

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [December 16, 2025, 4:45pm UTC](https://discuss.elastic.co/t/you-are-using-a-deprecated-config-setting-truststore-set-in-http-deprecated-settings-will-continue-to-work-but-are-scheduled-for-removal-from-logstash-in-the-future-use-ssl-truststore-path-instead/384071/4 "2025-12-16T16:45:47Z")

</div>

Thanks for pointing that out @Prateek_Garg. It looks like an error parsing a pattern in your config but it's difficult to say why. Can you share your configuration and the version of Logstash you're using?