# Filebeat TCP input with SSL - Logs not received in correct format

**URL:** <https://discuss.elastic.co/t/filebeat-tcp-input-with-ssl-logs-not-received-in-correct-format/337994>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 10, 2023, 6:47am UTC](https://discuss.elastic.co/t/filebeat-tcp-input-with-ssl-logs-not-received-in-correct-format/337994 "2023-07-10T06:47:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wasimasif](https://avatars.discourse-cdn.com/v4/letter/w/a183cd/32.png) [@wasimasif](https://discuss.elastic.co/u/wasimasif)\
**Post date:** [July 10, 2023, 6:47am UTC](https://discuss.elastic.co/t/filebeat-tcp-input-with-ssl-logs-not-received-in-correct-format/337994/1 "2023-07-10T06:47:36Z")

</div>

I have created a TCP input but i have to secure communication using SSL. Following is my filebeat input configuration. This input starts and don't have any errors. Clients is also able to connect (verified via openssl ).

The issue is when log is received its not readable at all as shown in the following image. Need to know what is wrong with my config.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/f/1f4fb38c22920b3799cc31c531c52a7819ddd51f.png)

Here is my input configuration.

```auto
filebeat.inputs:
   - type: tcp
     enabled: true
     id: "tcp_tls_514"
     host: "0.0.0.0:514"
     ssl.enabled: true
     ssl.certificate_authorities: ["/assets/filebeat_certs/My_CA_Bundle.crt"]
     ssl.certificate: "/assets/filebeat_certs/star_my.crt"
     ssl.key: "/assets/filebeat_certs/star_my.key"
     ssl.verification_mode: "none"

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 7, 2023, 8:48am UTC](https://discuss.elastic.co/t/filebeat-tcp-input-with-ssl-logs-not-received-in-correct-format/337994/2 "2023-08-07T08:48:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.