We keep getting the following errors and warnings when trying to send auditd logs to logstash. We assume it is an ssl issue but how can we get logstash to ignore ssl verification when receiving data from a standalone elastic agent?
{"log.level":"warn","@timestamp":"2024-07-02T11:01:34.409-0700","message":"read token request for getting IMDSv2 token returns empty: Put \"http://169.254.169.254/latest/api/token\": context deadline exceeded (Client.Timeout exceeded while awaiting headers). No token in the metadata request will be used.","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"log-default","type":"log"},"log":{"source":"log-default"},"log.logger":"add_cloud_metadata","log.origin":{"file.line":81,"file.name":"add_cloud_metadata/provider_aws_ec2.go"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-07-02T11:02:04.694-0700","message":"Failed to publish events caused by: write tcp xx.xx.xx.xx:xx->xx.xx.xx.xx:5044: i/o timeout","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"log-default","type":"log"},"log":{"source":"log-default"},"service.name":"filebeat","ecs.version":"1.6.0","log.logger":"logstash","log.origin":{"file.line":280,"file.name":"logstash/async.go"},"ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-07-02T11:02:06.566-0700","message":"failed to publish events: write tcp xx.xx.xx.xx:xx->xx.xx.xx.xx:5044: i/o timeout","component":{"binary":"filebeat","dataset":"elastic_agent.filebeat","id":"log-default","type":"log"},"log":{"source":"log-default"},"log.logger":"publisher_pipeline_output","log.origin":{"file.line":176,"file.name":"pipeline/client_worker.go"},"service.name":"filebeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}
{"log.level":"error","@timestamp":"2024-07-02T11:02:08.491-0700","message":"Failed to publish events caused by: client is not connected","component":{"binary":"metricbeat","dataset":"elastic_agent.metricbeat","id":"beat/metrics-monitoring","type":"beat/metrics"},"log":{"source":"beat/metrics-monitoring"},"log.logger":"logstash","log.origin":{"file.line":280,"file.name":"logstash/async.go"},"service.name":"metricbeat","ecs.version":"1.6.0","ecs.version":"1.6.0"}