Log Exporter is not using https; but using user authentication with plaintext – How To Solve Related Issues

Log Exporter is not using https; but using user authentication with plaintext – How To Solve Related Issues

Updated: Jan-20

Elasticsearch Version: 1.7-8.0

Background

To resolve issues causing many log errors you can try our Elasticsearch Check-Up it analyses ES configuration to provide actionable recommendations (no installation required) 


To troubleshoot log “Exporter is not using https; but using user authentication with plaintext” it’s important to understand a few problems related to Elasticsearch concepts plugin. See bellow important tips and explanations on these concepts

Log Context

Log”Exporter [{}] is not using https; but using user authentication with plaintext” classname is HttpExporter.java
We extracted the following from Elasticsearch source code for those seeking an in-depth context :

         }
        final CredentialsProvider credentialsProvider = createCredentialsProvider(config);
        List hostList = HOST_SETTING.getConcreteSettingForNamespace(config.name()).get(config.settings());
        // sending credentials in plaintext!
        if (credentialsProvider != null && hostList.stream().findFirst().orElse("").startsWith("https") == false) {
            logger.warn("exporter [{}] is not using https; but using user authentication with plaintext " +
                    "username/password!"; config.name());
        }

        if (sslStrategy != null) {
            builder.setHttpClientConfigCallback(new SecurityHttpClientConfigCallback(sslStrategy; credentialsProvider));




Related issues to this log

We have gathered selected Q&A from the community and issues from Github, that can help fix related issues please review the following for further information :

1 Is there any way in Elasticsearch to get results as CSV file in curl API?

55.54 K 45

Ecognized Ssl Message Plaintext Con  

 

About Opster

Opster detects, resolves, optimizes, automates and prevents incidents in Elasticsearch. Opster’s line of products delivers a fundamentally more effective Elasticsearch operation and backs it up with superb production support and consulting.

Find Configuration Errors

Analyze Now