# Logstash forwarder cant TLS handshake

**URL:** <https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312>\
**Category:** Logstash\
**Created:** [September 22, 2016, 8:42pm UTC](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312 "2016-09-22T20:42:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![xon](https://avatars.discourse-cdn.com/v4/letter/x/838e76/32.png) [@xon](https://discuss.elastic.co/u/xon)\
**Post date:** [September 22, 2016, 8:42pm UTC](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312/1 "2016-09-22T20:42:18Z")

</div>

Hi there,

I am new to ELK. I want to setup an OSSEC monitoring solution (potentially by adding also other sensors such as splunk/etc) but it looks it is a bit complicated...

I have followed several links about this error but it is already 2 days that I cant resolve it and I have tried several things. So in summary:

I am running logstash version 2.0.0

And the error is the following:

![](https://us1.discourse-cdn.com/elastic/original/2X/6/65584d4bc77450ebec2436b799d1c11c8e5cfe11.png)

 ![](https://us1.discourse-cdn.com/elastic/original/2X/f/f75436eb82af87ab1a54eb01b72dbc64f034e02d.png)

I followed this --\>

> <https://github.com/elastic/logstash-forwarder/issues/91>

and that --\>

> <https://github.com/elastic/logstash-forwarder/issues/230>

and that --\>

> <https://github.com/elastic/logstash-forwarder/issues/495>

to conclude that there is nothing I can do (?). I also tried to disable the two ssl related values (hoping that it would work without SSL) but ofcourse it didnt.

Is there any help? Should I just dont care about logstash forwarder and switch to something else?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [September 25, 2016, 7:26pm UTC](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312/2 "2016-09-25T19:26:28Z")

</div>

logstash-forwarder is deprecated so regardless of this problem you're having it's time to switch to something else. Have a look at Filebeat.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:37am UTC](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312/3 "2017-07-06T04:37:02Z")

</div>