tls.ciphersuites

TLS 1.3 cipher suite selection for the Elasticsearch connection.

This parameter applies to omelasticsearch: Elasticsearch Output Module.

Name:

tls.ciphersuites

Scope:

action

Type:

word

Default:

none (libcurl/OpenSSL default)

Required?:

no

Introduced:

8.2606.0

Description

Passes a colon-separated list of TLS 1.3 cipher suite names to libcurl (CURLOPT_TLS13_CIPHERS). The string is validated by OpenSSL at connection time; an invalid name causes the handshake to fail.

Requires libcurl 7.61.0 or later. If rsyslog was built against an older libcurl, configuring this parameter has no effect and a warning is logged at configuration load.

Action usage

action(type="omelasticsearch" tls.ciphersuites="TLS_AES_256_GCM_SHA384")

YAML usage

actions:
  - type: omelasticsearch
    tls.ciphersuites: "TLS_AES_256_GCM_SHA384"

See also

See also omelasticsearch: Elasticsearch Output Module, tls.tlsversion, tls.keyexchangegroups.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.