509: certificate signed by unknown authority

Well you did not share your configurations so we can only guess

Assuming you are on 8.x

..

Perhaps

And perhaps this..

For testing you could set this in the filebeat.yml under the elasticsearch output.

ssl.verification_mode: none