# Need help - Windows Filebeat x509: certificate
**URL:** https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144
**Category:** Beats
**Tags:** filebeat
**Created:** [May 15, 2019, 10:18am UTC](https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144 "2019-05-15T10:18:36Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@retroisbest](https://discuss.elastic.co/u/retroisbest)
#### Post date: [May 15, 2019, 10:18am UTC](https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144/1 "2019-05-15T10:18:37Z")
Hi there,
I currently have winlogbeat logstash and elasticsearch (with kibana, all on version 7.01) working correctly, I have now installed filebeat (64bit windows client to try and parse some DHCP log files) and really struggling, I'm at the point where filebeat needs to talk my kibana instance (running on nginx) [https://mykibanaiphere:443](https://mykibanaiphere:443) which works fine.
filebeat -e gives me
> **INFO kibana/client.go:118 Kibana url: [https://mykibanaiphere:443](https://mykibanaiphere:443)
> 2019-05-15T11:07:01.618+0100 ERROR instance/beat.go:802 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to [https://mykibanaiphere:443/api/status](https://mykibanaiphere:443/api/status) fails: fail to execute the HTTP GET request: Get [https://mykibanaiphere:443/api/status:](https://mykibanaiphere:443/api/status:) x509: certificate signed by unknown authority**
Hitting [https://mykibanaiphere:443/api/status](https://mykibanaiphere:443/api/status) in a browser gives me the correct response back
Any help would be greatly appreciated!
---
### Author:  [@retroisbest](https://discuss.elastic.co/u/retroisbest)
#### Post date: [May 15, 2019, 11:02am UTC](https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144/2 "2019-05-15T11:02:05Z")
After some troubleshooting my filebeat.yml Kibana section looks like this
```
> #============================== Kibana =====================================
>
> # Starting with Beats version 6.0.0, the dashboards are loaded via the Kibana API.
> # This requires a Kibana endpoint configuration.
> setup.kibana:
> setup.kibana.host: "mykibanaiphere:443"
> setup.kibana.protocol: "https"
> setup.kibana.ssl.enabled: true
> setup.kibana.ssl.certificate_authorities: ["C:\\certpath\\ELK-Stack.crt"]
```
I now advance the certificate error but i can see som nginx text
> ERROR instance/beat.go:802 Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to [https://mykibanaip:443/api/status](https://mykibanaip:443/api/status) fails: parsing kib ./html\>nter\>nginx/1.14.0 (Ubuntu)\>d\>ng of value. Response:
> Exiting: error connecting to Kibana: fail to get the Kibana version: HTTP GET request to [https://mykibana:443/api/status](https://mykibana:443/api/status) fails: parsing kibana response: invalid character '\<' looking for beginning of val ./html\>nter\>nginx/1.14.0 (Ubuntu)\>d\>
---
### Author:  [@retroisbest](https://discuss.elastic.co/u/retroisbest)
#### Post date: [May 15, 2019, 11:52am UTC](https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144/3 "2019-05-15T11:52:26Z")
This is the guide im following
> **[Adding Windows DHCP logs to Elastic - part 1 - Security Distractions](https://www.securitydistractions.com/2019/01/02/adding-windows-dhcp-logs-to-elastic-part-1/)**
>
> How to add Windows DCHP Server logs to Elastic. Gives examples of filebeat and logstash configuration files.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 12, 2019, 11:52am UTC](https://discuss.elastic.co/t/need-help-windows-filebeat-x509-certificate/181144/4 "2019-06-12T11:52:38Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.