Configure SSL/TLS beats for Windows

Hello. I can not configure metricbeat for Windows. It is required to configure ssl / tsl connection before logstash. but the agent does not accept system paths (C: \ path \ to \ beats \ sslCA.pem). therefore I can not specify either the root certificate or the client keys.
found nothing in the documentation on this topic.

when starting the agent, it either closes with an error or does not establish a connection to logstash. in the logs it gives out:
x509: certificate signed by unknown authority

imported root cert into certBox Windows but the situation hasn't changed

metricbeat.yml:
"
metricbeat.config.modules:
path: ${path.config}/modules.d/*.yml
reload.enabled: false
output.logstash:

The Logstash hosts

hosts: ["logstash.example.net:9815"]
ssl.enabled: true
certificate_authorities: "C:\ProgramData\Beats\metricbeat\sslclientCA.crt"
"

logstash.conf:
input { beats { port => 9815 codec => "json_lines" ssl => true ssl_certificate_authorities => ["/etc/logstash/sslclientCA.pem"] ssl_certificate => "/etc/logstash/logstash.pem" ssl_key => "/etc/logstash/logstash.pkcs8.key" ssl_verify_mode => "none" }}

found a solution for myself.

Windows Beats:

...
output.logstash:
hosts: ["logstash.example.net:9815"]
ssl.enabled: true
ssl.certificate_authorities: C:\ProgramData\Beats\metricbeat\sslclientCA.crt
ssl.certificate: C:\ProgramData\Beats\metricbeat\metricbeat.crt
ssl.key: C:\ProgramData\Beats\metricbeat\metricbeat.key
...

it's all \ " ...

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.