Client certificate validation is currently not supported, i.e. TLS only helps with message integrity and privacy, not authentication. See How to Setup FileBeat with Basic Auth for LogStash Output? and https://github.com/logstash-plugins/logstash-input-beats/issues/8.