Yes good it's finding the cert
But This is a SSL Certificate issue.
You are connecting to
elasticsearch.hosts: ["https://10.0.0.230:9200"]
And as the error says it is not part of the certificate, you will need to add those IPs when you create the cert if you want to use the CA without issue as configured OR see below.
From above... Looks like you did not enter any IPs during the process.
Enter all the IP addresses that you need, one per line.
When you are done, press once more to move on to the next step.You did not enter any IP addresses.
It works with metricbeat beacuse you set
verification_mode: "certificate"
certificateVerifies that the provided certificate is signed by a trusted authority (CA), but does not perform any hostname verification.
You can do the same with Kibana look at the settings here
elasticsearch.ssl.verificationMode:Controls the verification of the server certificate that Kibana receives when making an outbound SSL/TLS connection to Elasticsearch. Valid values are
"full","certificate", and"none". Using"full"performs hostname verification, using"certificate"skips hostname verification, and using"none"skips verification entirely. Default:"full"