Hi,
I have setup ELK-stack without X-pack and it works great. Data is getting in to logstash and then sent to elasticsearch.
Now I wanted to add security so I have added x-pack to Elasticsearch, Kibana and Logstash. I can login to Kibana so the Elasticsearch and Kibana works well with security.
But when it comes to Filebeat and logstash I get problem.
First off, can I have Filebeat send information to Logstash without authentication? SSL off?
I get the below error message in Filebeat
Failed to publish events caused by: write tcp x.x.x.x:59939->x.x.x.x:5044: wsasend: An existing connection was forcibly closed by the remote host.
Do I need to use SSL authentication between Logstash and Filebeat?
Thanks for replies.