search-guard插件的使用---logstash的配置

input{

    file {

        path => ["/usr/local/test/logstash-5.0.0/file/test.log"]

        type => "logs"

    }

}

output {

  elasticsearch {

    index => "test-%{+YYYY.MM.dd}"

    hosts => ["localhost:9200"]    

    ssl => true      //必须

    ssl_certificate_verification => true   //必须

    keystore => "/usr/local/test/elasticsearch-5.3.0-localhost/config/CN=localhost-keystore.jks"   //必须           

    keystore_password => "fa5f481f1a5df359de86"   //必须

    truststore => "/usr/local/test/elasticsearch-5.3.0-localhost/config/truststore.jks"   //必须

    truststore_password => "1b2775b49b7905d36c76"  //必须

    workers => 1   

    flush_size => 100   

    idle_flush_time => 10

    user => "admin"  //必须

    password => "admin"   //必须

  }

}