Secure auditbeat output

Elastic Stack Beats
1

I have logstash listening for encrypted data. If I set auditbeat output to logstash with ssl, I won't find the data later in elasticsearch. If I set auditbeat output to elasticsearch, I can't get it to encrypt data.

This is my output.elasticsearch in my auditbeat.yml : https://pastebin.com/1dpSBrx7 ( I copied it from my filebeat.yml in output.logstash which does work)

Does anyone know happen to know why it doesn't send encrypted data? Or why if I set auditbeat output to logstash, it won't appear in ES?

Huge thanks ahead.

2

It's easier for people to help you if you keep a single topic on your problem :slight_smile:
Let's continue the discussion here - Auditbeat encryption and dashboards