Error starting filebeat reading CA certificate

I'm unable to start filebeat
This is the log file

2018-09-05T06:04:27-07:00 INFO Home path: [/usr/share/filebeat] Config path: [/etc/filebeat] Data path: [/var/lib/filebeat] Logs path: [/var/log/filebeat]
2018-09-05T06:04:27-07:00 INFO Setup Beat: filebeat; Version: 5.1.1
2018-09-05T06:04:27-07:00 CRIT Failed reading CA certificate: open /etc/pki/tls/certs/logstash-forwarder.crt: no such file or directory
2018-09-05T06:04:27-07:00 ERR failed to initialize logstash plugin as output: 1 error: open /etc/pki/tls/certs/logstash-forwarder.crt: no such file or directory reading /etc/pki/tls/certs/logstash-forwarder.crt
2018-09-05T06:04:27-07:00 CRIT Exiting: error initializing publisher: 1 error: open /etc/pki/tls/certs/logstash-forwarder.crt: no such file or directory reading /etc/pki/tls/certs/logstash-forwarder.crt

So if i understand correctly the program can't locate my logstash-forwarder.

this is my 'ls' output:

jabu@ubuntu: /etc/pki/tls/certs$ ls
logstash-forwarder.crt

Not sure what the problem is..

Does Filebeat have access to the cert? What are the permissions of the file?

1 Like

-rw-r--r-- 1 root root 1241 Sep 5 06:25 /etc/pki/tls/certs/logstash-forwarder.crt

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.