Objective:
To get my systems with Filebeat on them to communicate with my logstash system using Certs.
License: Free
Environment Elasticsearch nodes: We have 3 ES 7.17 Linux nodes that are working together just fine.
Environment Kibana: Kabana is setup and working on our “Kabana / Logstash” server.
Environment Filebeat: We have both windows and Redhat Linux servers that we need to send the logs from. We need to send the files to the “Kabana / Logstash” server with a Cert .
What is working: One of the 3 ES nodes is configured not to be a data node. The logs are being sent from the logbeats host to the one ES node that is not configured as a datanode. The logs that are being sent to the ES nodes and show up in the Kibana server.
Details on my question:
- How do I get the certs to apply to the filebeat host filebeat.yml ?
- How do I get the cert to apply to the top of the logstash.yml file ?
- Would like to verify I use certs / logstash with the basic license ?
- Any other Suggestion / details I should be aware of ?