TLS client certificate

[adrianlzt]

Add options to be able to login to ES using client certificates.
Also an option to ignore checking certificate validity.

[adrianlzt]

Example config:

input {
  elasticsearch {
    hosts => "elastic:443"
    query => ''
    index => 'test'
    ssl => true
    ssl_verify => false
    ca_file => '/certs/admin-ca'
    client_cert_file => '/certs/admin-cert'
    client_key_file => '/certs/admin-key'
  }
}

[adrianlzt]

Fixes #71

[andrewvc]

Thanks for the patch.

The tricky thing here is adding options consistently across the ES input/output/filter

This is a bit of a weird time as we're trying to centralize into one repo here: logstash-plugins/logstash-integration-elasticsearch#1

Would you mind holding off on this patch till that happens? Otherwise we'll need three simultaneous PRs. We don't want to continue our current pattern of inconsistently adding features.

[adrianlzt]

Sure, no problem waiting. El vie., 27 oct. 2017 17:34, Andrew Cholakian <notifications@github.com> escribió:

…

Thanks for the patch. The tricky thing here is adding options consistently across the ES input/output/filter This is a bit of a weird time as we're trying to centralize into one repo here: logstash-plugins/logstash-integration-elasticsearch#1 <logstash-plugins/logstash-integration-elasticsearch#1> Would you mind holding off on this patch till that happens? Otherwise we'll need three simultaneous PRs. We don't want to continue our current pattern of inconsistently adding features. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#80 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADFnmL2YyLK-8xeVy9Ap89BiWnXjAP7yks5swff4gaJpZM4QIQ3S> .

[rnocx]

This function is highly sought after.

[hvdijk-p5]

Are there still plans to introduce this feature?

The feature logstash-plugins/logstash-integration-elasticsearch#1 was mentioned already more than a year ago with no recent updates. So I am curious if there are plans for this in the nearby future.