Cannot disable certificate verification for logstash monitoring


(Scott) #1

I am setting up my cluster with encryption and need to disable certificate verification. All settings work correctly except for xpack monitoring of logstash. There is no setting to disable certification verification for xpack monitoring of logstash.

Neither pages about Logstash and SSL mention any way to do this:
https://www.elastic.co/guide/en/x-pack/current/monitoring-logstash.html
https://www.elastic.co/guide/en/logstash/current/settings-xpack.html

The error that I get is:
[2017-08-16T15:41:32,259][INFO ][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>https://logstash:xxxxxx@localhost:9200/, :path=>"/"}
[2017-08-16T15:41:32,464][ERROR][logstash.pipeline ] Error registering plugin {:plugin=>"#<LogStash::OutputDelegator:0x2ff130eb @namespaced_metric=#<LogStash::Instrument::NamespacedNullMetric:0x7e2a808e @metric=#<LogStash::Instrument::NullMetric:0x10ded5c1 ...", :error=>"Host name 'localhost' does not match the certificate subject provided by the peer (CN=cert.elk.xxxx.com)"}
[2017-08-16T15:41:32,478][ERROR][logstash.agent ] Pipeline aborted due to error {:exception=>#<Manticore::UnknownException: Host name 'localhost' does not match the certificate subject provided by the peer (CN=cert.elk.xxxx.com)> ...


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.