Logstash breaking changes

Before you upgrade, carefully review the Logstash breaking changes and take the necessary steps to mitigate any issues.

To learn how to upgrade, check out <uprade docs>.

9.0.0

Release date: March 25, 2025

Changes to SSL settings in Logstash plugins

We’ve removed deprecated SSL settings in some Logstash plugins, and have replaced them with updated settings. If your plugin configuration contains any of these obsolete options, the plugin may fail to start.

Setting	Replaced by
cipher_suites	`ssl_cipher_suites`
ssl	`ssl_enabled`
ssl_peer_metadata	`ssl_peer_metadata` option of `enrich`
ssl_verify_mode	`ssl_client_authentication`
tls_min_version	`ssl_supported_protocols`
tls_max_version	`ssl_supported_protocols`

Setting	Replaced by
cipher_suites	`ssl_cipher_suites`
ssl	`ssl_enabled`
ssl_peer_metadata	`ssl_peer_metadata` option of `enrich`
ssl_verify_mode	`ssl_client_authentication`
tls_min_version	`ssl_supported_protocols`
tls_max_version	`ssl_supported_protocols`

Setting	Replaced by
ca_file	`ssl_certificate_authorities`
ssl	`ssl_enabled`
ssl_certificate_verification	`ssl_verification_mode`

Setting	Replaced by
ssl	`ssl_enabled`

Setting	Replaced by
cipher_suites	`ssl_cipher_suites`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
ssl	`ssl_enabled`
ssl_verify_mode	`ssl_client_authentication`
tls_max_version	`ssl_supported_protocols`
tls_min_version	`ssl_supported_protocols`
verify_mode	`ssl_client_authentication`

Setting	Replaced by
cacert	`ssl_certificate_authorities`
client_cert	`ssl_certificate`
client_key	`ssl_key`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
keystore_type	`ssl_keystore_password`
truststore	`ssl_truststore_path`
truststore_password	`ssl_truststore_password`
truststore_type	`ssl_truststore_type`

Setting	Replaced by
ssl_cert	`ssl_certificate`
ssl_enable	`ssl_enabled`
ssl_verify	`ssl_client_authentication` in `server` mode and `ssl_verification_mode` in `client` mode

Setting	Replaced by
ca_file	`ssl_certificate_authorities`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
ssl	`ssl_enabled`

Setting	Replaced by
cacert	`ssl_certificate_authorities`
client_cert	`ssl_certificate`
client_key	`ssl_key`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
keystore_type	`ssl_keystore_type`
truststore	`ssl_truststore_path`
truststore_password	`ssl_truststore_password`
truststore_type	`ssl_truststore_type`

Setting	Replaced by
cacert	`ssl_certificate_authorities`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
ssl	`ssl_enabled`
ssl_certificate_verification	`ssl_verification_mode`
truststore	`ssl_truststore_path`
truststore_password	`ssl_truststore_password`

Setting	Replaced by
cacert	`ssl_certificate_authorities`
client_cert	`ssl_certificate`
client_key	`ssl_key`
keystore	`ssl_keystore_path`
keystore_password	`ssl_keystore_password`
keystore_type	`ssl_keystore_password`
truststore	`ssl_truststore_path`
truststore_password	`ssl_truststore_password`
truststore_type	`ssl_truststore_type`

Setting	Replaced by
ssl_cacert	`ssl_certificate_authorities`
ssl_cert	`ssl_certificate`
ssl_enable	`ssl_enabled`
ssl_verify	`ssl_client_authentication` in `server` mode and `ssl_verification_mode` in `client` mode

Enterprise_search integration plugin is deprecated

We’ve deprecated the Logstash Enterprise_search integration plugin, and its component App Search and Workplace Search plugins. These plugins will receive only security updates and critical fixes moving forward.

We recommend using our native Elasticsearch tools for your Search use cases. For more details, please visit the Search solution and use case documentation.