# Get info of SSL client certificate used for beats in logs send to Logstash
**URL:** https://discuss.elastic.co/t/get-info-of-ssl-client-certificate-used-for-beats-in-logs-send-to-logstash/312654
**Category:** Beats
**Tags:** filebeat, metricbeat, winlogbeat
**Created:** [August 22, 2022, 8:25pm UTC](https://discuss.elastic.co/t/get-info-of-ssl-client-certificate-used-for-beats-in-logs-send-to-logstash/312654 "2022-08-22T20:25:31Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@jeroen.antsec](https://discuss.elastic.co/u/jeroen.antsec)
#### Post date: [August 22, 2022, 8:25pm UTC](https://discuss.elastic.co/t/get-info-of-ssl-client-certificate-used-for-beats-in-logs-send-to-logstash/312654/1 "2022-08-22T20:25:31Z")
Hi.
I would like to have the CN of the certificate that is used to connect from winlogbeat/filebeat to logstash as seperate field in logstash/elastic. Does anybody know if this is possible?
I cannot find this anywhere in the documentation.
---
### Author:  [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [August 22, 2022, 9:45pm UTC](https://discuss.elastic.co/t/get-info-of-ssl-client-certificate-used-for-beats-in-logs-send-to-logstash/312654/2 "2022-08-22T21:45:42Z")
Logstash adds the CN under the `@metadata`. You'll need to add a filter to copy the value into the event given that `@metadata` does not get written to Elasticsearch.
See [Beats input plugin | Logstash Reference [8.3] | Elastic](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html#plugins-inputs-beats-ecs_metadata) for a complete list of available fields.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 19, 2022, 11:45pm UTC](https://discuss.elastic.co/t/get-info-of-ssl-client-certificate-used-for-beats-in-logs-send-to-logstash/312654/3 "2022-09-19T23:45:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.