Skip to content

Commit 50d47b2

Browse files
Update tls-encryption.asciidoc (#17387) (#17444)
The referenced elasticsearch output plugin has deprecated the options that were specified (`ssl`, `cacert`) https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-deprecated-options When I tried using the `ssl` option I noticed a warning in the logstash logs: ``` [WARN ][logstash.outputs.elasticsearch] You are using a deprecated config setting "ssl" set in elasticsearch. Deprecated settings will continue to work, but are scheduled for removal from logstash in the future. Set 'ssl_enabled' instead. If you have any questions about this, please visit the #logstash channel on freenode irc. ``` I have updated this document with the suggested new options to use instead. (cherry picked from commit 3402310) Co-authored-by: Matt Johnson <[email protected]>
1 parent 3cde776 commit 50d47b2

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

Diff for: docs/static/security/tls-encryption.asciidoc

+7-5
Original file line numberDiff line numberDiff line change
@@ -3,21 +3,23 @@
33
=== Configuring Logstash to use TLS/SSL encryption
44

55
If TLS encryption is enabled on an on premise {es} cluster, you need to
6-
configure the `ssl` and `cacert` options in your Logstash `.conf` file:
6+
configure the `ssl_enabled` and `ssl_certificate_authorities` options in your Logstash `.conf` file:
7+
8+
NOTE: See https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html[elasticsearch output plugin documentation] for a full list of options
79

810
[source,js]
911
--------------------------------------------------
1012
output {
1113
elasticsearch {
1214
...
13-
ssl => true
14-
cacert => '/path/to/cert.pem' <1>
15+
ssl_enabled => true
16+
ssl_certificate_authorities => '/path/to/cert.pem' <1>
1517
}
1618
}
1719
--------------------------------------------------
1820
<1> The path to the local `.pem` file that contains the Certificate
1921
Authority's certificate.
20-
22+
2123
NOTE: Hosted {ess} simplifies security. This configuration step is not necessary for hosted Elasticsearch Service on Elastic Cloud.
2224
{ess-leadin-short}
23-
25+

0 commit comments

Comments
 (0)