i saw a lot of problems with this issue, looks like it is impossible to disable the SSL in logstash when connecting to elasticsearch
i want to disable it , i don't what to use it this is an internal app.
this configuration doesn't work
output {
stdout { codec => rubydebug }
elasticsearch {
index => "logstash-%{[@metadata]}"
hosts => [ "https://myhost.elastic-namespace.svc:9200" ]
user => "elastic"
password => "xxxxxx"
ssl_certificate_verification => false
ssl => true
}
}
I can see here
that it is a bug ,
is there any way to create maybe tmp certificate or something similar? to make this logstash work ?
Im deploying to kubernetics
getting this error in logstash pod :
Elasticsearch Unreachable: [https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}
[WARN ] 2021-01-13 09:12:26.024 [Ruby-0-Thread-4: /usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.7.0-java/lib/logstash/outputs/elasticsearch/http_client/pool.rb:241] elasticsearch - Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [https://elastic:xxxxxx@myhost.elastic-namespace.svc:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"}