# Enrich logs with client certificate subject
**URL:** https://discuss.elastic.co/t/enrich-logs-with-client-certificate-subject/108698
**Category:** Logstash
**Created:** [November 22, 2017, 11:20am UTC](https://discuss.elastic.co/t/enrich-logs-with-client-certificate-subject/108698 "2017-11-22T11:20:26Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@cruscio](https://discuss.elastic.co/u/cruscio)
#### Post date: [November 22, 2017, 11:20am UTC](https://discuss.elastic.co/t/enrich-logs-with-client-certificate-subject/108698/1 "2017-11-22T11:20:26Z")
When Logstash is secured with SSL mutual authentication, is it possible to have Logstash add the client certificate's subject as a field in an event before forwarding to Elasticsearch?
---
### Author:  [@guyboertje](https://discuss.elastic.co/u/guyboertje)
#### Post date: [November 22, 2017, 3:41pm UTC](https://discuss.elastic.co/t/enrich-logs-with-client-certificate-subject/108698/2 "2017-11-22T15:41:43Z")
I don't think so. The SSL termination is negotiated well before the input ever receives the payload.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 20, 2017, 3:41pm UTC](https://discuss.elastic.co/t/enrich-logs-with-client-certificate-subject/108698/3 "2017-12-20T15:41:58Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.