Filebeat Misp Module Ceritifcate Problem

Hi all,

I am trying to get data from MISP using filebeat but i am having trouble making filebeat work because it doesn't want to establish connection to MISP due to it being self signed.

Things i have tried:

In Filebeat.yml
ssl.verification_mode: "none"
This did not do anything.

In Filebeat Misp Module:
var.ssl.verification_mode: "none" or var.ssl.verification_mode: none

Gives the error:

2020-04-30T09:39:53.962+0700    ERROR   instance/beat.go:933    Exiting: (assert) value of type 'string' not convertible into unsupported go type 'tlscommon.Config' accessing 'ssl'
Trace:goroutine 1 [running]:
runtime/debug.Stack(0x32ef81f, 0xb, 0xc000936078)
        /usr/local/go/src/runtime/debug/stack.go:24 +0x9d
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.raiseCritical(0x36e3760, 0xc0000e90b0, 0xc0002b2460, 0x6b, 0x52, 0xc0007bd498)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/error.go:153 +0x66
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.raiseToTypeNotSupported(0xc00015fb80, 0x378b660, 0xc000448fc0, 0x37a75c0, 0x31a8040, 0x2e7dea0, 0x0)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/error.go:286 +0x232
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.doReifyPrimitive(0xc00015fb80, 0x0, 0x0, 0x0, 0x0, 0x378b660, 0xc000448fc0, 0x37a75c0, 0x31a8040, 0x18304db, ...)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:729 +0x89c
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyPrimitive(0xc00015fb80, 0x0, 0x0, 0x0, 0x0, 0x378b660, 0xc000448fc0, 0x37a75c0, 0x2f8fea0, 0x37a75c0, ...)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:631 +0x5fb
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyValue(0xc00015fb80, 0x0, 0x0, 0x0, 0x0, 0x37a75c0, 0x2f8fea0, 0x378b660, 0xc000448fc0, 0xc0008e7d70, ...)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:360 +0x990
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyMergeValue(0xc00015fb80, 0x0, 0x0, 0x0, 0x0, 0x2f8fea0, 0xc00025dda8, 0x196, 0x378b660, 0xc000448fc0, ...)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:410 +0xfbf
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyGetField(0xc00064f680, 0xc00015fb80, 0x0, 0x0, 0x0, 0x0, 0x2d0c320, 0x3, 0x2f8fea0, 0xc00025dda8, ...)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:318 +0x248
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyStruct(0xc00015fb80, 0x31fba20, 0xc00025dce0, 0x199, 0xc00064f680, 0x0, 0x0)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:281 +0x5e0
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.reifyInto(0xc00015fb80, 0x2f4b640, 0xc00025dce0, 0x16, 0xc00064f680, 0x70, 0x31fba20)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:161 +0x3fb
github.com/elastic/beats/vendor/github.com/elastic/go-ucfg.(*Config).Unpack(0xc00064f680, 0x2f4b640, 0xc00025dce0, 0xc000568a00, 0x4, 0x4, 0x10, 0xc000936c28)
        /go/src/github.com/elastic/beats/vendor/github.com/elastic/go-ucfg/reify.go:144 +0x103
github.com/elastic/beats/libbeat/common.(*Config).Unpack(...)
        /go/src/github.com/elastic/beats/libbeat/common/config.go:168
github.com/elastic/beats/x-pack/filebeat/input/httpjson.NewInput(0xc00064f680, 0x37135a0, 0xc0007e4dc0, 0xc000630000, 0x72, 0x72, 0xc0008410e0, 0xc000840000, 0x0, 0x0, ...)
        /go/src/github.com/elastic/beats/x-pack/filebeat/input/httpjson/input.go:67 +0xe5
github.com/elastic/beats/filebeat/input.New(0xc00064f680, 0x37135a0, 0xc0007e4dc0, 0xc000840000, 0xc000630000, 0x72, 0x72, 0x0, 0x0, 0x2f48798, ...)
        /go/src/github.com/elastic/beats/filebeat/input/input.go:102 +0x392
github.com/elastic/beats/filebeat/fileset.(*Factory).Create(0xc000550000, 0x3733c20, 0xc0008dadc0, 0xc00099fa70, 0x0, 0x0, 0x4, 0x0, 0x0)
        /go/src/github.com/elastic/beats/filebeat/fileset/factory.go:103 +0x2af
github.com/elastic/beats/libbeat/cfgfile.(*Reloader).Check(0xc000252cc0, 0x36e38a0, 0xc000550000, 0xc000252cc0, 0xc00061e000)
        /go/src/github.com/elastic/beats/libbeat/cfgfile/reload.go:163 +0x2e6
github.com/elastic/beats/filebeat/crawler.(*Crawler).Start(0xc0006621b0, 0x3733c20, 0xc0008dadc0, 0xc0002527e0, 0x0, 0xc0002bb560, 0xc0001a7d90, 0xc00099a000, 0xc0002527e0, 0x0)
        /go/src/github.com/elastic/beats/filebeat/crawler/crawler.go:97 +0x428
github.com/elastic/beats/filebeat/beater.(*Filebeat).Run(0xc0007038c0, 0xc000607440, 0x0, 0x0)
        /go/src/github.com/elastic/beats/filebeat/beater/filebeat.go:375 +0xa9d
github.com/elastic/beats/libbeat/cmd/instance.(*Beat).launch(0xc000607440, 0x32eab08, 0x8, 0x32eab08, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, ...)
        /go/src/github.com/elastic/beats/libbeat/cmd/instance/beat.go:445 +0x700
github.com/elastic/beats/libbeat/cmd/instance.Run.func1(0x32eab08, 0x8, 0x32eab08, 0x8, 0x0, 0x0, 0xc000b17c58, 0x33f0e98, 0x0, 0x0)
        /go/src/github.com/elastic/beats/libbeat/cmd/instance/beat.go:188 +0x56b
github.com/elastic/beats/libbeat/cmd/instance.Run(0x32eab08, 0x8, 0x32eab08, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, ...)
        /go/src/github.com/elastic/beats/libbeat/cmd/instance/beat.go:189 +0x148
github.com/elastic/beats/libbeat/cmd.genRunCmd.func1(0xc000289680, 0xc0006fd830, 0x0, 0x9)
        /go/src/github.com/elastic/beats/libbeat/cmd/run.go:36 +0x9d
github.com/elastic/beats/vendor/github.com/spf13/cobra.(*Command).execute(0xc000289680, 0xc00004e0b0, 0x9, 0x9, 0xc000289680, 0xc00004e0b0)
        /go/src/github.com/elastic/beats/vendor/github.com/spf13/cobra/command.go:704 +0x285
github.com/elastic/beats/vendor/github.com/spf13/cobra.(*Command).ExecuteC(0xc000289680, 0x0, 0xd6e00, 0xc000116058)
        /go/src/github.com/elastic/beats/vendor/github.com/spf13/cobra/command.go:785 +0x2c9
github.com/elastic/beats/vendor/github.com/spf13/cobra.(*Command).Execute(...)
        /go/src/github.com/elastic/beats/vendor/github.com/spf13/cobra/command.go:738
main.main()
        /go/src/github.com/elastic/beats/x-pack/filebeat/main.go:22 +0x2f

Thank You.

In the latest filebeat it shows how to do this as follows:

    # You can also pass SSL options. For example:
    var.ssl: |-
      {
        verification_mode: none
      }

Not sure if this is how you have it configured, does seem to work for me.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.