Securing Elastic Stack: Logstash

[warkolm (Mark Walkom)]

Please don't create multiple topics on the same question, it makes it harder to help you

Problem securing entire stack

I have been trying to secure communications within (and connections to) my elastic stack, and am running into issues. I will just go through my configuration and what I've done so far. I have three servers (let's call them elk1, elk2, and elk3), each with an Elasticsearch data node that is eligible to be master. Each of the servers also has logstash and kibana running on it. First, I created a CA for the cluster (called elk-stack-ca.p12): /usr/share/elasticsearch/bin/elasticsearch-certutil ca …