# Logstash TLS enabled

**URL:** <https://discuss.elastic.co/t/logstash-tls-enabled/379213>\
**Category:** Logstash\
**Created:** [June 16, 2025, 4:10pm UTC](https://discuss.elastic.co/t/logstash-tls-enabled/379213 "2025-06-16T16:10:55Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![devops\_training](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/devops_training/32/131845_2.png) [@devops\_training](https://discuss.elastic.co/u/devops_training)\
**Post date:** [June 16, 2025, 4:10pm UTC](https://discuss.elastic.co/t/logstash-tls-enabled/379213/1 "2025-06-16T16:10:55Z")

</div>

I have enabled TLS using the below config.

````auto
output {
  if [type] == "dba" {
    elasticsearch {
      ecs_compatibility => disabled
      hosts => ["https://${ ************** }:443"]
      ssl => true
      cacert => "${ES_CERT}"
      ssl_certificate_verification => true
      index => "dba-%{+YYYY.MM.dd}"
      document_id => "%{fingerprint}"
    }
  }
}```
however I see this line in logstash-plain.log [2025-06-16T05:44:43,569][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600
, :ssl_enabled=>false}

please help me understand why ssl_enabled is false
````

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 16, 2025, 4:15pm UTC](https://discuss.elastic.co/t/logstash-tls-enabled/379213/2 "2025-06-16T16:15:52Z")

</div>

This logline is unrelated to your output, it is related to the internal Logstash API used for monitoring logstash, the documentation is [here](https://www.elastic.co/docs/reference/logstash/monitoring-logstash).

---

<div class="post-metadata">

**Author:** ![Rios](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rios/32/95745_2.png) [@Rios](https://discuss.elastic.co/u/Rios)\
**Post date:** [June 16, 2025, 6:42pm UTC](https://discuss.elastic.co/t/logstash-tls-enabled/379213/3 "2025-06-16T18:42:37Z")

</div>

> [@devops\_training](#):
>
> please help me understand why ssl\_enabled is false

Most likely you are using [`Obsolete configuration`](https://www.elastic.co/docs/reference/logstash/plugins/plugins-outputs-elasticsearch#plugins-outputs-elasticsearch-obsolete-options)

Try with:

```auto
output {
  if [type] == "dba" {
    elasticsearch {
      ecs_compatibility => disabled
      hosts => ["https://${ ************** }:443"]
      ssl_enabled => true
      ssl_certificate_authorities => "${ES_CERT}"
      ssl_verification_mode => "full" # or set "none"
      index => "dba-%{+YYYY.MM.dd}"
      document_id => "%{fingerprint}"
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![devops\_training](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/devops_training/32/131845_2.png) [@devops\_training](https://discuss.elastic.co/u/devops_training)\
**Post date:** [June 25, 2025, 6:01am UTC](https://discuss.elastic.co/t/logstash-tls-enabled/379213/4 "2025-06-25T06:01:33Z")

</div>

Thank you @Rios and @leandrojmp