Extract Common Name from incoming ssl connection and add field in LogStash

Elastic Stack Logstash
1

I am using ssl connections from client (FileBeat/syslog-ng/other) to send logs to LogStash.
I would like to extract the Common Name from the ssl connection to identify the client.
How can I extract the required information?

I cannot rely on client inserting the Common Name in the log lines as some clients may not have the capability to modify the input logs.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.