Need help - Windows Filebeat x509: certificate

Elastic Stack Beats
1

Hi there,
I currently have winlogbeat logstash and elasticsearch (with kibana, all on version 7.01) working correctly, I have now installed filebeat (64bit windows client to try and parse some DHCP log files) and really struggling, I'm at the point where filebeat needs to talk my kibana instance (running on nginx) https://mykibanaiphere:443 which works fine.

filebeat -e gives me

INFO kibana/client.go:118 Kibana url: https://mykibanaiphere:443
2019-05-15T11:07:01.618+0100 ERROR instance/beat.go:802 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to https://mykibanaiphere:443/api/status fails: fail to execute the HTTP GET request: Get https://mykibanaiphere:443/api/status: x509: certificate signed by unknown authority

Hitting https://mykibanaiphere:443/api/status in a browser gives me the correct response back
Any help would be greatly appreciated!

2

After some troubleshooting my filebeat.yml Kibana section looks like this

> #============================== Kibana =====================================
> 
> # Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
> # This requires a Kibana endpoint configuration.
> setup.kibana:
> setup.kibana.host: "mykibanaiphere:443"
> setup.kibana.protocol: "https"
> setup.kibana.ssl.enabled: true
> setup.kibana.ssl.certificate_authorities: ["C:\\certpath\\ELK-Stack.crt"]

I now advance the certificate error but i can see som nginx text

ERROR instance/beat.go:802 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to https://mykibanaip:443/api/status fails: parsing kib ./html>nter>nginx/1.14.0 (Ubuntu)>d>ng of value. Response:
Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to https://mykibana:443/api/status fails: parsing kibana response: invalid character '<' looking for beginning of val ./html>nter>nginx/1.14.0 (Ubuntu)>d>

3

This is the guide im following

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.