tls.tlsversion

Minimum TLS protocol version for the Elasticsearch connection.

This parameter applies to omelasticsearch: Elasticsearch Output Module.

Name:

tls.tlsversion

Scope:

action

Type:

word

Default:

none (libcurl default)

Required?:

no

Introduced:

8.2606.0

Description

Sets the minimum (floor) TLS version accepted for the connection to Elasticsearch. Accepted values are TLSv1.2 and TLSv1.3.

An unknown value is rejected at configuration load time and prevents rsyslog from starting.

When omitted, libcurl negotiates the highest version supported by both sides, typically TLS 1.3 on modern systems.

Note

Setting this to TLSv1.2 downgrades the effective floor and should be avoided unless the server does not support TLS 1.3.

Action usage

action(type="omelasticsearch" tls.tlsversion="TLSv1.3")

YAML usage

actions:
  - type: omelasticsearch
    tls.tlsversion: "TLSv1.3"

See also

See also omelasticsearch: Elasticsearch Output Module, tls.ciphersuites, tls.keyexchangegroups.

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.