Provide option to disable SSL hostname verification

[n0othing]

Currently, there is no option to disable hostname verification when connection to an cluster with SSL enabled.

https://www.elastic.co/guide/en/logstash/current/plugins-filters-elasticsearch.html#_synopsis_119

While insecure (and should not be used for production), it would be nice to allow a configuration option to disable hostname verification for testing/debug purposes. This is similar to the logstash-output-elasticsearch which exposes such an option.

[MohMaz]

+1

[jordansissel]

Please don't disable SSL verification. If you don't want security, please turn SSL off on your cluster.

[nithril]

Elasticsearch default way of generating node certificates does not include the hostname. Instead it is based on a CA.

To not be able to disable hostname verification is not compatible with the elasticsearch documentation.

[nicenemo]

Since Version 8 Elastic provides a nice docker-compose.yml which generates certificates an puts elasticsearch on https://. Awesome!
The Logstash Elasticsearch input/output plugin do have an option to disable certificate checking. The filter plugin does not.
That is not consistent.

Please either make it consistent by:

• Removing this option from the input/output plugin and provide some glue to use the certificate generated by the docker-compose with Logstash not running in Docker.

• Or just add this option to the Elasticsearch filter plugin too.

  Not having this option on the filter plugin surprised me.