# Cannot disable certificate verification for logstash monitoring

**URL:** <https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294>\
**Category:** Logstash\
**Created:** [August 16, 2017, 4:00pm UTC](https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294 "2017-08-16T16:00:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bt\_scotth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bt_scotth/32/19313_2.png) [@bt\_scotth](https://discuss.elastic.co/u/bt_scotth)\
**Post date:** [August 16, 2017, 4:00pm UTC](https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294/1 "2017-08-16T16:00:04Z")

</div>

I am setting up my cluster with encryption and need to disable certificate verification. All settings work correctly except for xpack monitoring of logstash. There is no setting to disable certification verification for xpack monitoring of logstash.

Neither pages about Logstash and SSL mention any way to do this:  
[https://www.elastic.co/guide/en/x-pack/current/monitoring-logstash.html](https://www.elastic.co/guide/en/x-pack/current/monitoring-logstash.html)  
[https://www.elastic.co/guide/en/logstash/current/settings-xpack.html](https://www.elastic.co/guide/en/logstash/current/settings-xpack.html)

The error that I get is:  
[2017-08-16T15:41:32,259][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck\_url=\>[https://logstash:xxxxxx@localhost:9200/](https://logstash:xxxxxx@localhost:9200/), :path=\>"/"}  
[2017-08-16T15:41:32,464][ERROR][logstash.pipeline] Error registering plugin {:plugin=\>"#\<LogStash::OutputDelegator:0x2ff130eb @namespaced\_metric=#\<LogStash::Instrument::NamespacedNullMetric:0x7e2a808e @metric=#\<LogStash::Instrument::NullMetric:0x10ded5c1 ...", :error=\>"Host name 'localhost' does not match the certificate subject provided by the peer ([CN=cert.elk.xxxx.com](http://CN=cert.elk.xxxx.com))"}  
[2017-08-16T15:41:32,478][ERROR][logstash.agent] Pipeline aborted due to error {:exception=\>#\<Manticore::UnknownException: Host name 'localhost' does not match the certificate subject provided by the peer ([CN=cert.elk.xxxx.com](http://CN=cert.elk.xxxx.com))\> ...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 13, 2017, 4:00pm UTC](https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294/2 "2017-09-13T16:00:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.