logstash连接elasticsearch https

获取elasticsearch api_key

post request like below.

POST /_security/api_key
{
  "name": "my-api-key"
}
1
2
3
4

output {
    stdout {}
    elasticsearch{
        hosts => ["https://elasticsearch_hostname:9200"]
        ssl => true
        cacert => "/etc/logstash/certs/rootCA.crt"
        //替换上面得到的id和api_key
        api_key => "id:api_key"
        index => "index_name"
    }
}
1
2
3
4
5
6
7
8
9
10
11