Encrypting and authenticating communication between Winlogbeat and Logstash

Elastic Stack Logstash
2

I don't see anything in your configuration that would provide that protection.
Your TLS setup is:

  1. encrypting the communication
  2. ensuring that beats it talking to the real Logstash server

But it does not prevent additional (rogue) beats clients from connecting to that logstash port.

For that you want to enable (and enforce) client certifcates.
See

2 Likes