Security between filebeat and logstash

I have setup ELK-stack without X-pack and it works great. Data is getting in to logstash and then sent to elasticsearch.
Now I wanted to add security so I have added x-pack to Elasticsearch, Kibana and Logstash. I can login to Kibana so the Elasticsearch and Kibana works well with security.

But when it comes to Filebeat and logstash I get problem.

First off, can I have Filebeat send information to Logstash without authentication? SSL off?
I get the below error message in Filebeat
Failed to publish events caused by: write tcp x.x.x.x:59939->x.x.x.x:5044: wsasend: An existing connection was forcibly closed by the remote host.

Do I need to use SSL authentication between Logstash and Filebeat?

Thanks for replies.

Hi Patrik,

Do you have SSL disabled in both the filebeat output and the Logstash input?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.