Filebeat 9.0.4 failing to connect to elasticsearch on local machine

Elastic Stack Beats
1

Hi There,

I followed below documentation for setting up filebeat- 9.0.4 on local machine (Ubuntu 24.04.2 LTS)

Filebeat quick start: installation and configuration | Beats (self-managed tab)

I used below command to generate fingerprint
openssl x509 -fingerprint -sha256 -in config/certs/http_ca.crt

beats service coming up and trying to connect to Elasticsearch but getting below error.

> [2025-07-28T18:02:35,252][WARN ][o.e.h.AbstractHttpServerTransport] [HP-ENVY-5xxx] caught exception while handling client http traffic, closing connection Netty4HttpChannel{localAddress=/127.0.0.1:9200, remoteAddress=/127.0.0.1:52120}
> io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: (bad_certificate) Received fatal alert: bad_certificate
> 	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:500) ~[?:?]
> 	at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290) ~[?:?]
> 	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444) ~[?:?]
> 	at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420) ~[?:?]

**

filebeat.ymal configuration

**

output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["localhost:9200"]

  # Performance preset - one of "balanced", "throughput", "scale",
  # "latency", or "custom".
  preset: balanced

  # Protocol - either `http` (default) or `https`.
  protocol: "https"

  # Authentication credentials - either API key or username/password.
  #api_key: "id:api_key"
  username: "elastic"
  password: "<pasword>"
  ssl:
    enabled: true
    ca_trusted_fingerprint: "generated from command <openssl x509 -fingerprint -sha256 -in config/certs/http_ca.crt>"

I can access localhost:9200 from browser using same username and password that is configured for filebeat
Here is the browser response

name	"HP-ENVY-5xxx"
cluster_name	"elasticsearch"
cluster_uuid	"J9Zyf_YvRLyVr7nSzKOqyg"
version	
number	"9.0.3"
build_flavor	"default"
build_type	"deb"
build_hash	"cc7302afc8499e83262ba2ceaa96451681f0609d"
build_date	"2025-06-18T22:09:56.772581489Z"
build_snapshot	false
lucene_version	"10.1.0"
minimum_wire_compatibility_version	"8.18.0"
minimum_index_compatibility_version	"8.0.0"
tagline	"You Know, for Search"

I can connect to Kibana successfully.

Please help me understand on how to resolve this issue and let me know if you need any more details.