# Nxlog - https - logstash error

**URL:** <https://discuss.elastic.co/t/nxlog-https-logstash-error/26159>\
**Category:** Logstash\
**Created:** [July 23, 2015, 1:29pm UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159 "2015-07-23T13:29:49Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![quejinho](https://avatars.discourse-cdn.com/v4/letter/q/3bc359/32.png) [@quejinho](https://discuss.elastic.co/u/quejinho)\
**Post date:** [July 23, 2015, 1:29pm UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/1 "2015-07-23T13:29:49Z")

</div>

So i have configured nxlog with https to talk with logstash.  
I got an error on nxlog side " ERROR unexpected data from server (64 bytes)"  
I looked it up and it looks like nxlog got [https://github.com/lamby/pkg-nxlog-ce/blob/master/src/modules/output/http/om\_http.c#L646](https://github.com/lamby/pkg-nxlog-ce/blob/master/src/modules/output/http/om_http.c#L646)

So i did check up the http input on logstash side , but i have not understand it

> **[logstash-plugins/logstash-input-http](https://github.com/logstash-plugins/logstash-input-http#L118)**
>
> Contribute to logstash-input-http development by creating an account on GitHub.

  
Looks like logstash should send respond code, but i dont see it. Remember i dont have ruby skills.  
Can someone explain to me what might be wrong here ? Or how to fix this issue ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 23, 2015, 9:28pm UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/2 "2015-07-23T21:28:08Z")

</div>

Providing your config would help 🙂

---

<div class="post-metadata">

**Author:** ![quejinho](https://avatars.discourse-cdn.com/v4/letter/q/3bc359/32.png) [@quejinho](https://discuss.elastic.co/u/quejinho)\
**Post date:** [July 24, 2015, 6:10am UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/3 "2015-07-24T06:10:03Z")

</div>

sure thing .

nxlog  
  
Exec $raw\_event = to\_json();  
Module om\_http  
HTTPSCertFile /home/test/test/test/zbx.crt  
HTTPSCAFile /home/test/test/test/ca/certs/cacert.pem  
HTTPSKeyPass 'test123'  
HTTPSCertKeyFile /home/test/test/test/zbxkey.pem  
URL [https://xxx](https://xxx):xxx:xxx:xxx:5001/  
HTTPSAllowUntrusted FALSE  
Exec to\_json();

logstash input

http{  
port =\> 5001  
type =\> "nxlog"  
format =\> 'json'  
ssl =\> true  
codec =\> 'json'  
debug =\> true  
keystore =\> "/home/test/test/test/node01.jks"  
keystore\_password =\> "test123"  
}

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 24, 2015, 6:26am UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/4 "2015-07-24T06:26:52Z")

</div>

Try running LS with --debug or --verbose and see if it provides more info?

---

<div class="post-metadata">

**Author:** ![quejinho](https://avatars.discourse-cdn.com/v4/letter/q/3bc359/32.png) [@quejinho](https://discuss.elastic.co/u/quejinho)\
**Post date:** [July 24, 2015, 6:28am UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/5 "2015-07-24T06:28:16Z")

</div>

already did . no info. Logstash recived data , send it futher etc. no errors no nothing.  
additional info =\> turning the ssl off for that . still have the same problem.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:33am UTC](https://discuss.elastic.co/t/nxlog-https-logstash-error/26159/6 "2017-07-06T05:33:53Z")

</div>