Hi Team,
I am trying to connect my winlogbeat agent to ubuntu ELK with logstash by ssl authentication
Here is my winlogbeat.yml
####################################################
winlogbeat.event_logs:
- name: Application
ignore_older: 72h - name: Security
- name: System
- name: ForwardedEvents
#==================== Elasticsearch template setting ==========================
setup.template.settings:
index.number_of_shards: 3
#----------------------------- Logstash output --------------------------------
output.logstash:
The Logstash hosts
hosts:["serverip:5044"]
#ssl.enabled:true
#index: winlogbeat
Optional SSL. By default is off.
List of root certificates for HTTPS server verifications
tls:
- ssl.certificate_authorities:["C:\Program Files\winlogbeat-6.5.4-windows-x86_64\logstash-forwarder.crt"]
- ssl.verification_mode: none
processors:
- add_host_metadata: ~
- add_cloud_metadata: ~
##################################
Here is the error message while i running the configtest command
Exiting: error unpacking config data: can not convert 'string' into 'object' accessing 'output.logstash' (source:'winlog
beat.yml') accessing 'output' (source:'winlogbeat.yml')
Please help me on this
ELK-Server: Runs in Docker ubuntu 16.04
Winlogbeat Agent : Windows 2012r2