Not working TCP input with TLS

Elastic Stack Logstash
1

Hi,
I want to send syslog events but with tls, unfortunately i have a problem with that. Logstash receive first event and that's all, i don't have any error logs.
Here is output config:

output {
  tcp {
      host => "x.x.x.x"
      port => 6514
      reconnect_interval => 1
      mode => "client"
      ssl_enable => true
      ssl_supported_protocols => "TLSv1.2"
  }
}

input:

input {
  tcp {
    host => "x.x.x.x"
       mode => "server"
       port => 6514
       ssl_enable => true
       ssl_verify => false
       ssl_key => "/etc/logstash/xyz-fe-pkcs8.key"
       ssl_cert => "/etc/logstash/xyz-fe.crt"
       ssl_supported_protocols => "TLSv1.2"
       tags => "test"
       type => syslog
  }
}

At the beginning I was trying with TLSv1.3 and after first sent event, logstash(sender) was buffering events. With TLSv1.2 after first sent event, logstash still is sending data but it's not visible in elastic. I think there is some problem with tcp input and events are being dropped.

Do you have any idea what's wrong? Logstash version 8.4.0

Best

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.