# Filebeat x509 certificate signed by unknown authority when calling api endpoint

**URL:** <https://discuss.elastic.co/t/filebeat-x509-certificate-signed-by-unknown-authority-when-calling-api-endpoint/325086>\
**Category:** Beats\
**Tags:** docker, filebeat\
**Created:** [February 9, 2023, 5:16am UTC](https://discuss.elastic.co/t/filebeat-x509-certificate-signed-by-unknown-authority-when-calling-api-endpoint/325086 "2023-02-09T05:16:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tom\_morgan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tom_morgan/32/116999_2.png) [@tom\_morgan](https://discuss.elastic.co/u/tom_morgan)\
**Post date:** [February 9, 2023, 5:16am UTC](https://discuss.elastic.co/t/filebeat-x509-certificate-signed-by-unknown-authority-when-calling-api-endpoint/325086/1 "2023-02-09T05:16:27Z")

</div>

I am getting this error from filebeat:

```auto
2023-02-07 07:14:47 2023-02-07T15:14:47.204Z    
ERROR [input.httpjson-stateless] v2/input.go:129 Error while processing http request: failed to execute http client.Do: failed to execute http client.Do: Get "https://abc.io/monitoring/logs/tail?source=newlog": 
Get "https://abc.io/monitoring/logs/tail?source=newlog": x509: certificate signed by unknown authority
{"url": "https://abc.io/monitoring/logs/tail"}

```

I am running filebeat container image. So, I do not know how we can change the configuration or add some root ca chain so that the filebeat as a client can trust for the cert which is returned by server url [https://abc.io/monitoring/logs/tail.Can](https://abc.io/monitoring/logs/tail.Can) anyone help me with this.

Also sharing below github repo which I am using to run the container for file beat and elk.

[https://github.com/atomicsamurai/elk-docker](https://github.com/atomicsamurai/elk-docker)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 9, 2023, 7:16am UTC](https://discuss.elastic.co/t/filebeat-x509-certificate-signed-by-unknown-authority-when-calling-api-endpoint/325086/2 "2023-03-09T07:16:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.