# Filebeat in windows is unable to send logs to logstash in Ubuntu server **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [May 27, 2017, 6:12pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344 "2017-05-27T18:12:21Z")\ **Posts on this page:** 13\ **Page:** 2
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/21 "2017-05-29T12:37:34Z")
The full log is not telling much either. I agree that it is from your last successful execution. Are you using a different configuration file that contain this `ssl.certificate_authorities` setting? If so can you simply upload the file to [uploadfiles.io](http://uploadfiles.io) and paste link here? ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 1:14pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/22 "2017-05-29T13:14:08Z")
I am removing comments when i try using ssl.certificate\_authorities and when it does not work, I apply comment to that line and restart filebeat. I don't have a seperate file that uses ssl.certificate\_authorities. ---
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 1:19pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/23 "2017-05-29T13:19:43Z")
Can you please upload the file to [uploadfiles.io](http://uploadfiles.io) so I can take a look? ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 1:22pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/24 "2017-05-29T13:22:45Z")
> **[Uploadfiles.io - filebeat.yml](https://uploadfiles.io/mgheh)** > > Upload files, for free, securely, anonymously, without limits. @UploadFilesFree here is the link to my file. Hope it helps. ---
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 1:44pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/25 "2017-05-29T13:44:42Z")
Can you try setting `C:\\Program Files\\filebeat\\logstash.crt` (with double slashes) instead? ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 2:05pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/26 "2017-05-29T14:05:50Z")
That worked but it generates a new error saying this : "ERR Connecting error publishing events (retrying): x509: cannot validate certificate for 172.16.1.84 because it doesn't contain any IP SANs" ---
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 2:07pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/27 "2017-05-29T14:07:22Z")
So now filebeat is working and this is an issue with the certificate itself. You need to verify with whoever issued it. ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 2:11pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/28 "2017-05-29T14:11:18Z")
That certificate is the same one that we generate while installing logstash using "cd /etc/logstash/ openssl req -subj /CN=elk-master -x509 -days 3650 -batch -nodes -newkey rsa:4096 -keyout logstash.key -out logstash.crt" this command. Is there any issue with this command? ---
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 2:21pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/29 "2017-05-29T14:21:45Z")
I am not really sure. Maybe @json can evaluate that? ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/30 "2017-05-29T14:45:52Z")
i even tried adding "SAN = ip" into the v3\_ca but it is not working ---
**Author:** ![sasanka\_mourya](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@sasanka\_mourya](https://discuss.elastic.co/u/sasanka_mourya)\ **Post date:** [May 29, 2017, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/31 "2017-05-29T15:24:48Z")
Update: I regenerated the certificate with openssl req -subj /CN=elk-master -x509 -days 3650 -batch -nodes -newkey rsa:4096 -keyout logstash.key -out logstash.crt and replacing CN=IP of the machine that runs logstash. now everything works with ssl in filebeat config file. Thanks a lot @thiago .. ---
**Author:** ![thiago](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thiago/32/32096_2.png) [@thiago](https://discuss.elastic.co/u/thiago)\ **Post date:** [May 29, 2017, 3:31pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/32 "2017-05-29T15:31:00Z")
I am glad your problem is solved! 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 26, 2017, 3:31pm UTC](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344/33 "2017-06-26T15:31:14Z")
Closed on June 26, 2017, 3:31pm UTC This topic was automatically closed 28 days after the last reply. New replies are no longer allowed. [Previous page](https://discuss.elastic.co/t/filebeat-in-windows-is-unable-to-send-logs-to-logstash-in-ubuntu-server/87344.md?page=1)