# Configure Kafka sink for SASL\_SSL

**URL:** <https://forum.opensearch.org/t/configure-kafka-sink-for-sasl-ssl/26764>\
**Category:** Data Prepper\
**Tags:** configure\
**Created:** [September 3, 2025, 12:46am UTC](https://forum.opensearch.org/t/configure-kafka-sink-for-sasl-ssl/26764 "2025-09-03T00:46:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nanochristal](https://avatars.discourse-cdn.com/v4/letter/n/58956e/32.png) [@nanochristal](https://forum.opensearch.org/u/nanochristal)\
**Post date:** [September 3, 2025, 12:46am UTC](https://forum.opensearch.org/t/configure-kafka-sink-for-sasl-ssl/26764/1 "2025-09-03T00:46:23Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

Data Prepper 2.12.0

**Describe the issue** :

There is barely any documentation on the kafka sink. How do I configure the plugin to send messages using SASL\_SSL protocol? Is this feature supported?

For context, we are hosting Data Prepper on ECS in an effort to migrate away from a pipeline with Logstash sending to kafka using `security_protocol => "SASL_SSL"`.

**Configuration** :

What I have tried:

> ```auto
> sink:
> - kafka:
> bootstrap_servers:
> - "server1.domain.net:9094"
> - "server2.domain.net:9094"
> - "server3.domain.net:9094"
> - "server4.domain.net:9094"
> - "server5.domain.net:9094"
> - "server6.domain.net:9094"
> topic:
> name: TOPIC_NAME
> serde_format: "json"
> partition_key: "messageTimestamp"
> producer_properties:
> enable_idempotence: true
> retries: 1
> encryption:
> trust_store_file_path: /usr/share/data-prepper/certs/truststore.jks
> trust_store_password: ********
> authentication:
> sasl:
> scram:
> username: "user"
> password: "pass"
> mechanism: "SCRAM-SHA-256"
> 
> ```

**Relevant Logs or Screenshots** :

Error:

> ```auto
> 2025-09-03T00:08:46,255 [kafka-producer-network-thread | producer-1] WARN org.apache.kafka.clients.NetworkClient$DefaultMetadataUpdater - [Producer clientId=producer-1] Bootstrap broker server4.domain.net:9094 (id: -4 rack: null) disconnected
> 
> 2025-09-02T21:13:56,164 [pool-5-thread-1] ERROR org.opensearch.dataprepper.plugins.kafka.producer.KafkaCustomProducer - Error occurred while publishing Topic TOPIC_NAME not present in metadata after 60000 ms.
> 
> ```

According to [Solved: Problem kafka producer - WARN clients.NetworkClien… - Cloudera Community - 347167](https://community.cloudera.com/t5/Support-Questions/Problem-kafka-producer-WARN-clients-NetworkClient-Producer/m-p/347167/highlight/true), these error message indicates a security misconfiguration.

---

<div class="post-metadata">

**Author:** ![Leeroy](https://avatars.discourse-cdn.com/v4/letter/l/eb9ed0/32.png) [@Leeroy](https://forum.opensearch.org/u/Leeroy)\
**Post date:** [September 25, 2025, 1:40pm UTC](https://forum.opensearch.org/t/configure-kafka-sink-for-sasl-ssl/26764/2 "2025-09-25T13:40:33Z")

</div>

Hi @nanochristal ,

Are you still seeing an issue here? or did you manage to get it working?

Leeroy.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/3/33547ea01a5b12dcca2958411d3edd97ae2ea8c1.png) [@system](https://forum.opensearch.org/u/system)\
**Post date:** [November 24, 2025, 1:41pm UTC](https://forum.opensearch.org/t/configure-kafka-sink-for-sasl-ssl/26764/3 "2025-11-24T13:41:19Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.