# \[ERROR\]\[org.logstash.beats.BeatsHandler\] Exception: not an SSL/TLS record **URL:** \ **Category:** Logstash\ **Created:** [January 11, 2017, 11:16pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289 "2017-01-11T23:16:01Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![r1chardp](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@r1chardp](https://discuss.elastic.co/u/r1chardp)\ **Post date:** [January 11, 2017, 11:16pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/1 "2017-01-11T23:16:01Z")
my logstash config: input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" ssl\_key =\> "/etc/pki/tls/private/logstash-forwarder.key" } } My filebeat config Logstash as output logstash: # The Logstash hosts hosts: ["logstash\_node:5044"] ``` # List of root certificates for HTTPS server verifications certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] ``` ---
**Author:** ![r1chardp](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@r1chardp](https://discuss.elastic.co/u/r1chardp)\ **Post date:** [January 11, 2017, 11:17pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/2 "2017-01-11T23:17:18Z")
List of root certificates for HTTPS server verifications ssl.certificate\_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 12, 2017, 6:25pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/3 "2017-01-12T18:25:45Z")
Judging by the Logstash log Filebeat isn't using SSL when sending. The documentation indicates that you need to set `ssl.enabled: true` in addition to `ssl.certificate_authorities`. ---
**Author:** ![r1chardp](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@r1chardp](https://discuss.elastic.co/u/r1chardp)\ **Post date:** [January 12, 2017, 6:50pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/4 "2017-01-12T18:50:05Z")
SSL is enable in the configure file, my mistake it was not included in the post. ---
**Author:** ![jakommo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jakommo/32/6716_2.png) [@jakommo](https://discuss.elastic.co/u/jakommo)\ **Post date:** [January 12, 2017, 8:03pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/5 "2017-01-12T20:03:02Z")
Can you post your filebeat config? I had the same issue and was using the old `tls.` settings (migrated from 1.3) and after changing everything to `ssl.` the error seems to be gone. ---
**Author:** ![r1chardp](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@r1chardp](https://discuss.elastic.co/u/r1chardp)\ **Post date:** [January 12, 2017, 8:13pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/6 "2017-01-12T20:13:47Z")
``` filebeat.prospectors: # Each - is a prospector. Most options can be set at the prospector level, so # you can use different prospectors for various configurations. # Below are the prospector specific configurations. - input_type: log document_type: syslog # Paths that should be crawled and fetched. Glob based paths. paths: - /var/log/*.log - /var/log/messages #- c:\programdata\elasticsearch\logs\* output.logstash: # The Logstash hosts hosts: ["LOGSTASH-IP:5044"] # Optional SSL. By default is off. # List of root certificates for HTTPS server verifications #ssl.certificate_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] # Certificate for SSL client authentication #ssl.certificate: "/etc/pki/client/cert.pem" # Client Certificate Key #ssl.key: "/etc/pki/client/cert.key" ``` I want nodes A, B and C sending syslog's files to one Logstash server. ---
**Author:** ![r1chardp](https://avatars.discourse-cdn.com/v4/letter/r/aeb1de/32.png) [@r1chardp](https://discuss.elastic.co/u/r1chardp)\ **Post date:** [January 12, 2017, 8:17pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/7 "2017-01-12T20:17:11Z")
# List of root certificates for HTTPS server verifications ssl.certificate\_authorities: ["/etc/pki/tls/certs/logstash-forwarder.crt"] ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 12, 2017, 8:35pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/8 "2017-01-12T20:35:14Z")
But all your SSL settings are commented out. ---
**Author:** ![robertchen117](https://avatars.discourse-cdn.com/v4/letter/r/edb3f5/32.png) [@robertchen117](https://discuss.elastic.co/u/robertchen117)\ **Post date:** [February 3, 2017, 10:47pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/9 "2017-02-03T22:47:03Z")
anyone has a full step by step setup SSL between filebeat 5.1 to logstash 5.1, same the above way was for 4.x version which does not work anymore for 5.1. I got the same issue for 5.1, please help. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 3, 2017, 10:48pm UTC](https://discuss.elastic.co/t/error-org-logstash-beats-beatshandler-exception-not-an-ssl-tls-record/71289/10 "2017-03-03T22:48:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.