Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Plugin doesn't work correctly with self-signed SSL certs even with ca_cert specified #2

Open
Anarhyst266 opened this issue May 16, 2023 · 0 comments

Comments

@Anarhyst266
Copy link

Anarhyst266 commented May 16, 2023

My filter configuration is:

       opensearch {
          index => "index"
          query_template => "/etc/logstash/templates/6hr-1200km-template.json"
          hosts       => ["opensearch-cluster-master.elastic-stack-logging.svc.cluster.local:9200"]
          user        => "logstash"
          password    => "logstash"
          ssl         => true
          ca_file     => "/usr/share/logstash/certs/ca.crt"
          add_field => {"found_distance_alert" => "YES"}
          fields => {
            "subject" => "found_subject"
            "ip" => "found_ip"
            "[geoip][country_name]" => "found_country"
            "[geoip][city_name]" => "found_city_name"
            "[geoip][latitude]" => "[found_geoip][latitude]"
            "[geoip][longitude]" => "[found_geoip][longitude]"
            "[geoip][location]" => "[found_geoip][location]"
          }
        }
        

and plugin can't communicate with OpenSearch normally.

I've fixed that in https://github.com/Anarhyst266/logstash-filter-opensearch-manticore (had to create new repo with another name, because need to install it from rubygems).
Feel free to port changes back here

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant