# Beats input: SSL Certificate will not be used and deprecated config setting "document\_type"

**URL:** <https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374>\
**Category:** Beats\
**Created:** [February 18, 2018, 11:14pm UTC](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374 "2018-02-18T23:14:53Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ralfr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ralfr/32/27875_2.png) [@ralfr](https://discuss.elastic.co/u/ralfr)\
**Post date:** [February 18, 2018, 11:14pm UTC](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374/1 "2018-02-18T23:14:53Z")

</div>

Hi Everyone,

I'm pretty new to the ELK stack and love it so far. However, I'm running into some subtle issues and hope you guys can help.

I'm on Elasticsearch Version 6.2.1 with the latest Kibana, Logstash and Filebeat versions and X-Pack successfully installed.

1.) When starting Logstash, I do see the following in the logs:

```
You are using a deprecated config setting "document_type" set in elasticsearch.

```

I don't know where I am supposed to have `document_type` configured.

`/etc/logstash/conf.d/logstash.conf`:

```
input {
  beats {
    port => 5044
    ssl_certificate => "/etc/pki/tls/certs/logstash-forwarder.crt"
    ssl_key => "/etc/pki/tls/certs/logstash-forwarder.key"
  }
}

filter {
  if [type] == "syslog" {
    grok {
      match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" }
      add_field => ["received_at", "%{@timestamp}"]
      add_field => ["received_from", "%{host}"]
    }
    syslog_pri { }
    date {
      match => ["syslog_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]
    }
  }
}

output {
  elasticsearch {
    hosts => "localhost:9200"
    manage_template => false
    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
    user => filebeat_internal
    password => ***
  }
}

```

So there is no `document_type` in the configuration.

2.) When starting Logstash, I see

```
[2018-02-18T23:03:28,980][WARN][logstash.inputs.beats] Beats input: SSL Certificate will not be used
[2018-02-18T23:03:28,980][WARN][logstash.inputs.beats] Beats input: SSL Key will not be used

```

Why is that? I have configured cert and key for the input and made sure the files are available.

Any help is greatly appreciated!

---

<div class="post-metadata">

**Author:** ![pierhugues](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pierhugues/32/48383_2.png) [@pierhugues](https://discuss.elastic.co/u/pierhugues)\
**Post date:** [February 19, 2018, 3:11am UTC](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374/2 "2018-02-19T03:11:30Z")

</div>

You need to set “ssl=\> true” in the beats input configuration.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 11, 2018, 11:14pm UTC](https://discuss.elastic.co/t/beats-input-ssl-certificate-will-not-be-used-and-deprecated-config-setting-document-type/120374/3 "2018-03-11T23:14:55Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.