Security between filebeat and logstash

Elastic Stack Beats
1

Hi,
I have setup ELK-stack without X-pack and it works great. Data is getting in to logstash and then sent to elasticsearch.
Now I wanted to add security so I have added x-pack to Elasticsearch, Kibana and Logstash. I can login to Kibana so the Elasticsearch and Kibana works well with security.

But when it comes to Filebeat and logstash I get problem.

First off, can I have Filebeat send information to Logstash without authentication? SSL off?
I get the below error message in Filebeat
Failed to publish events caused by: write tcp x.x.x.x:59939->x.x.x.x:5044: wsasend: An existing connection was forcibly closed by the remote host.

Do I need to use SSL authentication between Logstash and Filebeat?

Thanks for replies.

2

Hi Patrik,

Do you have SSL disabled in both the filebeat output and the Logstash input?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.