# Logstash output to elasticsearch - SSL

**URL:** <https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305>\
**Category:** Logstash\
**Created:** [December 10, 2019, 1:28pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305 "2019-12-10T13:28:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RichardH](https://avatars.discourse-cdn.com/v4/letter/r/9de0a6/32.png) [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Post date:** [December 10, 2019, 1:28pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305/1 "2019-12-10T13:28:39Z")

</div>

Hello,

I am trying to get a Logstash output to Elasticsearch going. My output conf looks like this:

output {  
elasticsearch {  
hosts =\> "[https://mdbxd1veel1pr](https://mdbxd1veel1pr).**.net:9200"  
ssl =\> true  
ssl\_certificate\_verification =\> false  
user =\> "elastic"  
password =\> "**\*\*\*\*\*"  
cacert =\> "/home/mddadmin/mdbxd1vels1pr/ca.crt"  
index =\> "Logstash"  
}  
}

The ca.crt I am using was created using the elastic certutil on one of my elasticsearch servers.

When I start Logstash I get "Path does not chain with any of the trust anchors" but when I open up the CA crt it doesn't show me any paths below current one.

I am happy to leave certificate verification off if necessary.

Any ideas?

---

<div class="post-metadata">

**Author:** ![RichardH](https://avatars.discourse-cdn.com/v4/letter/r/9de0a6/32.png) [@RichardH](https://discuss.elastic.co/u/RichardH)\
**Post date:** [December 11, 2019, 12:27pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305/2 "2019-12-11T12:27:07Z")

</div>

Sorted - went back to basics and reconfigured SSL in my Elasticsearch cluster step by step using this reference - [https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash](https://www.elastic.co/blog/configuring-ssl-tls-and-https-to-secure-elasticsearch-kibana-beats-and-logstash)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 8, 2020, 12:28pm UTC](https://discuss.elastic.co/t/logstash-output-to-elasticsearch-ssl/211305/3 "2020-01-08T12:28:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.