Connecting logstash to Elasticsearch via SSL

dsilvera · July 4, 2022, 4:38pm

So I have read that since v8.0 Elasticsearch has encryption turned on by default for connections from Logstash, Kabana, Beats.

But I'm not finding a guide on how to setup the certificate and connect to Elasticsearch from Logstash in the output section of the conf file.

I see Elasticsearch on installation, has created a self-signed certificate, but how do I use that with logstash?

Appreciate the help.

stephenb · July 4, 2022, 5:12pm

So You need to make that CA certificate That was generated by Elasticsearch available for logstash... Copy it to where logstash is running.

In short in the elasticsearch output section you will set

"cacert => /path/to/cert/http_ca.crt"

Or you can disable the check which is discouraged using

ssl_certificate_verification => false

dsilvera · July 4, 2022, 5:41pm

Thanks @stephenb .
Will try this and report back.

dsilvera · July 10, 2022, 1:53am

Thank you Stephen. That worked for me.

stephenb · July 10, 2022, 1:55am

Which One Worked? Did you get the cert to work?

dsilvera · July 10, 2022, 2:01am

I copied the cert from the elasticsearch folder and placed it in the logstash folder and added the:

cacert => "\path\to\cert\http_ca.crt"

to my logstash.conf output section.

system · August 7, 2022, 2:02am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.