# How secure filebeat communication with logstash without SSL

**URL:** https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535
**Category:** Beats
**Tags:** filebeat
**Created:** [January 25, 2020, 5:46pm UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535 "2020-01-25T17:46:47Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![nino](https://avatars.discourse-cdn.com/v4/letter/n/b9bd4f/32.png) [@nino](https://discuss.elastic.co/u/nino)
#### Post date: [January 25, 2020, 5:46pm UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535/1 "2020-01-25T17:46:48Z")

</div>

Hello All,

i would like to know in case not using SSL between Filebeat and Logstash how secure is the communication?. Is log/file data travelling encrypted by default?

Best regards

---

<div class="post-metadata">

### Author: ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)
#### Post date: [January 27, 2020, 10:15am UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535/2 "2020-01-27T10:15:19Z")

</div>

Hi!

No, by default data will be travelling unencrypted over the wire. You will need ssl in order to have them encrypted -\> [https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html#configuring-ssl-logstash](https://www.elastic.co/guide/en/beats/filebeat/current/configuring-ssl-logstash.html#configuring-ssl-logstash)

C.

---

<div class="post-metadata">

### Author: ![nino](https://avatars.discourse-cdn.com/v4/letter/n/b9bd4f/32.png) [@nino](https://discuss.elastic.co/u/nino)
#### Post date: [January 27, 2020, 10:54am UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535/3 "2020-01-27T10:54:50Z")

</div>

Thank you ChrsMark,

i was just playing around with packet sniffer between filebeat and logstash and data seems not to be in plain text, maybe be lumberjack protocal uses some kind of encryption or data is compressed, isn't it?

---

<div class="post-metadata">

### Author: ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)
#### Post date: [January 27, 2020, 11:09am UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535/4 "2020-01-27T11:09:03Z")

</div>

Hi,

you are right. Lumberjack protocol is based on TCP (when TLS is not set up) so what you will see is most probably compressed data, but for sure these data are not encrypted and nobody can guarantee you that you can rely on this for securing your connections.

C.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 24, 2020, 11:09am UTC](https://discuss.elastic.co/t/how-secure-filebeat-communication-with-logstash-without-ssl/216535/5 "2020-02-24T11:09:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
