elastic / elastic/logstash

Retaining Logstash Keystore Password Across Upgrades Without Repeated Commands

Open
#16,442 1 comment 0 reactions 0 assignees View on GitHub
bug status:needs-triage
Dominant language
Java
Stars
14.9k
Forks
3.5k
Avg merge
1d 4h
Merged PRs (30d)
88

Description

Hi, my requirement is as follows:

I installed Logstash on my server, and I successfully ran the commands **logstash-keystore create** and l**ogstash-keystore add ES_PWD** to set the keystore password. After this, I backed up the **logstash-keystore.keystore** file. Then, I upgraded Logstash and removed the **logstash-keystore.keystore** file from the config path. I replaced it with the old **logstash-keystore.keystore** file in the config path and started Logstash. However, now I am facing an error in the Logstash log folder that says, **"Unable to connect to Elasticsearch"** and **"Unable to authenticate."**

My question is: How can I retain the keystore password while upgrading Logstash without having to run the **logstash-keystore create** and **logstash-keystore add ES_PWD** commands every time? Are there any possible approaches to avoid these steps?

Regards,
Michael Mathan S

Contributor guide

Open the contributing guide

Research direction

Start with the logstash-keystore create/add commands and the backed-up logstash-keystore.keystore in the config path; review how an upgrade reads that file and compare the authentication failure in the Logstash logs. Done would be a documented, supported upgrade procedure or a clearly scoped change that preserves the existing keystore.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.