alexus  
                
               
                 
              
                  
                    November 5, 2016,  8:50pm
                   
                   
              1 
               
             
            
              I'm trying to resolve my own topic:
  
  
    I'm using Elasticsearch, Logstash, Kibana (ELK) Docker image (elk-docker) @ following environment: 
# cat /etc/redhat-release 
CentOS Linux release 7.2.1511 (Core) 
# uname -a
Linux X 3.10.0-327.36.3.el7.x86_64 #1 SMP Mon Oct 24 16:09:20 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
# rpm -q filebeat
filebeat-5.0.0-1.x86_64
# 
and getting following error while trying to run filebeat (output to logstash): 
2016/11/05 19:17:34.996020 sync.go:85: ERR Failed to publish events caused by: EOF 
2016/11/05 …
   
 
I'm getting following inside of my logstash's log:
[2016-11-05T20:44:42,999][ERROR][org.logstash.beats.BeatsHandler] Exception: not an SSL/TLS record: X
 
something to do with SSL/TLS? but where? I left all defaults..
             
            
               
               
               
            
                
            
           
          
            
              
                ironbeast  
                (Koen Vanoppen)
               
              
                  
                    November 10, 2016, 12:25pm
                   
                   
              2 
               
             
            
              Same here. Anyone? 
[ERROR][org.logstash.beats.BeatsHandler] Exception: not an SSL/TLS record
             
            
               
               
               
            
            
           
          
            
              
                alexus  
                
               
              
                  
                    November 10, 2016,  8:10pm
                   
                   
              3 
               
             
            
              after making following change on filebeat:
$ grep ssl.certificate_authorities /etc/filebeat/filebeat.yml 
  ssl.certificate_authorities: ["/etc/pki/tls/certs/logstash-beats.crt"]
$ 
 
that error went away for me
             
            
               
               
               
            
            
           
          
            
              
                system  
                (system)
                  Closed 
               
              
                  
                    December 8, 2016,  8:10pm
                   
                   
              4 
               
             
            
              This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.