Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):
Using all the latest versions of OpenSearch, Dashboard and OSS Logstash.
Describe the issue:
I am working to setup a OpenSearch cluster that uses client certificate authentication.
This has been enabled in the OpenSearch nodes, and OpenSearch Dashboards successfully connects to the cluster using certificate based authentication.
I am not trying to do the same with Logstash, but am unable to find the correct settings to specify the client certificate and key.
Ideally, I do not want to have to supply a username and password, instead relying on certificate based auth to connect the two.
Can anyone help me with the correct settings or where to find the correct settings to successfully set this up?
Configuration:
output {
if [@metadata][index_base] {
opensearch {
hosts => [“https://opensearch-node01:9200”,“https://opensearch-node02:9200”,“https://opensearch-node03:9200”]
ssl => true
##ISSUE IS WITH THESE KEYS
ssl_key => "/usr/share/logstash/config/certificates/logstash/logstash.key"
ssl_certificate => "/usr/share/logstash/config/certificates/logstash/logstash.pem"
#index => "logstash-%{[@metadata][index_base]}-%{+YYYY.MM}"
index => "logstash-%{[@metadata][index_base]}"
cacert => "/usr/share/logstash/config/certificates/ca/ca.pem"
ssl_certificate_verification => true
}
}
}
Relevant Logs or Screenshots:
[2025-05-23T04:12:18,234][ERROR][logstash.outputs.opensearch] Unknown setting ‘ssl_certificate’ for opensearch
[2025-05-23T04:12:18,235][ERROR][logstash.outputs.opensearch] Unknown setting ‘ssl_key’ for opensearch