Issue With logsatsh ssl configuration

Elastic Stack Logstash
1

Hi Team,

I am trying to connect my winlogbeat agent to ubuntu ELK with logstash by ssl authentication

Here is my winlogbeat.yml
####################################################
winlogbeat.event_logs:

  • name: Application
    ignore_older: 72h
  • name: Security
  • name: System
  • name: ForwardedEvents

#==================== Elasticsearch template setting ==========================

setup.template.settings:
index.number_of_shards: 3
#----------------------------- Logstash output --------------------------------
output.logstash:

The Logstash hosts

hosts:["serverip:5044"]
#ssl.enabled:true
#index: winlogbeat

Optional SSL. By default is off.

List of root certificates for HTTPS server verifications

tls:

  • ssl.certificate_authorities:["C:\Program Files\winlogbeat-6.5.4-windows-x86_64\logstash-forwarder.crt"]
  • ssl.verification_mode: none

processors:

  • add_host_metadata: ~
  • add_cloud_metadata: ~
    ##################################

Here is the error message while i running the configtest command

Exiting: error unpacking config data: can not convert 'string' into 'object' accessing 'output.logstash' (source:'winlog
beat.yml') accessing 'output' (source:'winlogbeat.yml')

Please help me on this

ELK-Server: Runs in Docker ubuntu 16.04
Winlogbeat Agent : Windows 2012r2

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.