Logstash breaking changes
Before you upgrade, carefully review the Logstash breaking changes and take the necessary steps to mitigate any issues.
To learn how to upgrade, check out <uprade docs>.
Release date: March 25, 2025
We’ve removed deprecated SSL settings in some Logstash plugins, and have replaced them with updated settings. If your plugin configuration contains any of these obsolete options, the plugin may fail to start.
`logstash-input-beats`
| Setting | Replaced by |
|---|---|
| cipher_suites | ssl_cipher_suites |
| ssl | ssl_enabled |
| ssl_peer_metadata | ssl_peer_metadata option of enrich |
| ssl_verify_mode | ssl_client_authentication |
| tls_min_version | ssl_supported_protocols |
| tls_max_version | ssl_supported_protocols |
`logstash-input-elastic_agent`
| Setting | Replaced by |
|---|---|
| cipher_suites | ssl_cipher_suites |
| ssl | ssl_enabled |
| ssl_peer_metadata | ssl_peer_metadata option of enrich |
| ssl_verify_mode | ssl_client_authentication |
| tls_min_version | ssl_supported_protocols |
| tls_max_version | ssl_supported_protocols |
`logstash-input-elasticsearch`
| Setting | Replaced by |
|---|---|
| ca_file | ssl_certificate_authorities |
| ssl | ssl_enabled |
| ssl_certificate_verification | ssl_verification_mode |
`logstash-input-elastic_serverless_forwarder`
| Setting | Replaced by |
|---|---|
| ssl | ssl_enabled |
`logstash-input-http`
| Setting | Replaced by |
|---|---|
| cipher_suites | ssl_cipher_suites |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| ssl | ssl_enabled |
| ssl_verify_mode | ssl_client_authentication |
| tls_max_version | ssl_supported_protocols |
| tls_min_version | ssl_supported_protocols |
| verify_mode | ssl_client_authentication |
`logstash-input-http_poller`
| Setting | Replaced by |
|---|---|
| cacert | ssl_certificate_authorities |
| client_cert | ssl_certificate |
| client_key | ssl_key |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| keystore_type | ssl_keystore_password |
| truststore | ssl_truststore_path |
| truststore_password | ssl_truststore_password |
| truststore_type | ssl_truststore_type |
`logstash-input-tcp`
| Setting | Replaced by |
|---|---|
| ssl_cert | ssl_certificate |
| ssl_enable | ssl_enabled |
| ssl_verify | ssl_client_authentication in server mode and ssl_verification_mode in client mode |
`logstash-filter-elasticsearch`
| Setting | Replaced by |
|---|---|
| ca_file | ssl_certificate_authorities |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| ssl | ssl_enabled |
`logstash-filter-http`
| Setting | Replaced by |
|---|---|
| cacert | ssl_certificate_authorities |
| client_cert | ssl_certificate |
| client_key | ssl_key |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| keystore_type | ssl_keystore_type |
| truststore | ssl_truststore_path |
| truststore_password | ssl_truststore_password |
| truststore_type | ssl_truststore_type |
`logstash-output-elasticsearch`
| Setting | Replaced by |
|---|---|
| cacert | ssl_certificate_authorities |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| ssl | ssl_enabled |
| ssl_certificate_verification | ssl_verification_mode |
| truststore | ssl_truststore_path |
| truststore_password | ssl_truststore_password |
`logstash-output-http`
| Setting | Replaced by |
|---|---|
| cacert | ssl_certificate_authorities |
| client_cert | ssl_certificate |
| client_key | ssl_key |
| keystore | ssl_keystore_path |
| keystore_password | ssl_keystore_password |
| keystore_type | ssl_keystore_password |
| truststore | ssl_truststore_path |
| truststore_password | ssl_truststore_password |
| truststore_type | ssl_truststore_type |
`logstash-output-tcp`
| Setting | Replaced by |
|---|---|
| ssl_cacert | ssl_certificate_authorities |
| ssl_cert | ssl_certificate |
| ssl_enable | ssl_enabled |
| ssl_verify | ssl_client_authentication in server mode and ssl_verification_mode in client mode |
We’ve deprecated the Logstash Enterprise_search integration plugin, and its component App Search and Workplace Search plugins. These plugins will receive only security updates and critical fixes moving forward.
We recommend using our native Elasticsearch tools for your Search use cases. For more details, please visit Search UI with Elasticsearch.