Logstash TLS enabled

Elastic Stack Logstash
1

I have enabled TLS using the below config.

output {
  if [type] == "dba" {
    elasticsearch {
      ecs_compatibility => disabled
      hosts => ["https://${**************}:443"]
      ssl => true
      cacert => "${ES_CERT}"
      ssl_certificate_verification => true
      index => "dba-%{+YYYY.MM.dd}"
      document_id => "%{fingerprint}"
    }
  }
}```
however I see this line in logstash-plain.log [2025-06-16T05:44:43,569][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600
, :ssl_enabled=>false}

please help me understand why ssl_enabled is false
2

This logline is unrelated to your output, it is related to the internal Logstash API used for monitoring logstash, the documentation is here.

1 Like
3

Most likely you are using Obsolete configuration

Try with:

output {
  if [type] == "dba" {
    elasticsearch {
      ecs_compatibility => disabled
      hosts => ["https://${**************}:443"]
      ssl_enabled => true
      ssl_certificate_authorities => "${ES_CERT}"
      ssl_verification_mode => "full" # or set "none"
      index => "dba-%{+YYYY.MM.dd}"
      document_id => "%{fingerprint}"
    }
  }
}
4

Thank you @Rios and @leandrojmp

1 Like