# Logstash configuration issue

**URL:** <https://discuss.elastic.co/t/logstash-configuration-issue/193140>\
**Category:** Logstash\
**Created:** [July 31, 2019, 2:28pm UTC](https://discuss.elastic.co/t/logstash-configuration-issue/193140 "2019-07-31T14:28:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ch0k](https://avatars.discourse-cdn.com/v4/letter/c/c89c15/32.png) [@ch0k](https://discuss.elastic.co/u/ch0k)\
**Post date:** [July 31, 2019, 2:28pm UTC](https://discuss.elastic.co/t/logstash-configuration-issue/193140/1 "2019-07-31T14:28:52Z")

</div>

Hi,

I have problems to configure my logstash config file (output) and I would like to know if someone can help me with that?

I think my problem is related to the SSL encryption but I'm not sure...  
I created an encrypted Elasticsearch cluster with certificates from elasticsearch-certutil and now I try to configure Logstash to connect to this cluster with the following configuration :

```
input {
  beats {
    port => 5044
  }
}

output {
    elasticsearch {
        hosts => ["https://SELC01.groups.local:9200","https://SELC02.groups.local:9200","https://SELC03.groups.local:9200"]
        index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
        user => elastic
        password => changeme
        ssl => true
        ssl_certificate_verification => true
        cacert => "C:\logstash-7.2.0\config\certs\elastic-stack-ca.pem"
    }
}

```

But I receive the following errors :

```
[2019-07-31T15:58:41,950][ERROR][logstash.javapipeline] anticore/client.rb)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.manticore_minus_0_dot_6_dot_4_minus_java.lib.manticore.client.pool(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/manticore-0.6.4-java/lib/manticore/client.rb:405)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.manticore_minus_0_dot_6_dot_4_minus_java.lib.manticore.client.initialize(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/manticore-0.6.4-java/lib/manticore/client.rb:209)", "org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:915)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.manticore_adapter.initialize(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client/manticore_adapter.rb:26)", "org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:915)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.build_adapter(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:282)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.RUBY$method$build_adapter$0$ __VARARGS__ (C_3a_/logstash_minus_7_dot_2_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.build_pool(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:286)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.RUBY$method$build_pool$0$ __VARARGS__ (C_3a_/logstash_minus_7_dot_2_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client.initialize(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client.rb:64)", "org.jruby.RubyClass.newInstance(org/jruby/RubyClass.java:915)", "org.jruby.RubyClass$INVOKER$i$newInstance.call(org/jruby/RubyClass$INVOKER$i$newInstance.gen)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.create_http_client(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:103)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.RUBY$method$create_http_client$0$ __VARARGS__ (C_3a_/logstash_minus_7_dot_2_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.build(C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb:99)", "C_3a_.logstash_minus_7_dot_2_dot_0.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java.lib.logstash.outputs.elasticsearch.http_client_builder.RUBY$method$build$0$ __VARARGS__ (C_3a_/logstash_minus_7_dot_2_dot_0/vendor/bundle/jruby/$2_dot_5_dot_0/gems/logstash_minus_output_minus_elasticsearch_minus_10_dot_1_dot_0_minus_java/lib/logstash/outputs/elasticsearch/C:/logstash-7.2.0/vendor/bundle/jruby/2.5.0/gems/logstash-output-elasticsearch-10.1.0-java/lib/logstash/outputs/elasticsearch/http_client_builder.rb)", ....
[2019-07-31T15:58:41,996][ERROR][logstash.agent] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}

```

Thanks in advance for your help 🙂

Ps : Sorry but I can't post the all log due to the 7000 characters restriction.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [July 31, 2019, 2:41pm UTC](https://discuss.elastic.co/t/logstash-configuration-issue/193140/2 "2019-07-31T14:41:15Z")

</div>

You have not included the error message, just part of the stack trace.

---

<div class="post-metadata">

**Author:** ![ch0k](https://avatars.discourse-cdn.com/v4/letter/c/c89c15/32.png) [@ch0k](https://discuss.elastic.co/u/ch0k)\
**Post date:** [August 1, 2019, 7:08am UTC](https://discuss.elastic.co/t/logstash-configuration-issue/193140/3 "2019-08-01T07:08:13Z")

</div>

Is it located elsewhere because all i have is this at the end of the line :

> :thread=\>"#\<Thread:0x595b1520 run\>"

 ![log_logstash](https://us1.discourse-cdn.com/elastic/original/3X/a/a/aa3f44a6ab25da18d1ba1a8329d67a7781808c66.jpeg)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 29, 2019, 7:08am UTC](https://discuss.elastic.co/t/logstash-configuration-issue/193140/4 "2019-08-29T07:08:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.