Not retrieving any data after configuring ELK Stack with certificates from our own CA

Elastic Search
1

Hello dear people,

I don't really know if this is the right place to ask this but now after dealing with it since this morning, I had to ask about this.

So we implemented the ELK-Stack a while ago as part of a project. We took it as a testing environment to see, how and what type of data flows with the integrations we want to use.

We now have an important appointment coming for which we had to implement certificates for the site and node-to-node communication, for this we used our own CA and generated pairs of certificates for Kibana and ES. On our elastic node, we also have our fleet server installed for which I used the ES certificate (same domain, same CN).

Now after everything worked access-wise, somehow there is no data flowing anymore. I don't receive any data from our Elastic Node where for example the System Integration is implemented in.

Is there anything you can tell me about when installing Elastic Agents/Fleet Server with no self signed certificates?

Thank you for all your responses in advance and if you need any information for better understanding,, please tell me!

2

What tools are sending data? Just Elastic Agent?

Did you configure the certificates in the Elastic Agent output configuration? Are you using Fleet Managed agents or standalone agents?

3

Yes, just the Elastic Agent.

I am using Fleet managed agents and I didn't configure the output config. Is that mandatory if it is fleet managed?

4

The issue has been solved. One of the reasons it didn't work was the disk space which was nearly at its end right now.