SSL certificate error for sending logs from Filebeat to Graylog using logstash output


(Umesh Dc) #1

Hi,

Currently I am planning to use TLS certificate for sending logs using filebeat to Graylog.

I am using below command to generate server certificate and private key,
openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout logstash.key -out logstash.crt

Filebeat Configuration is as below,
output.logstash:
hosts: ["graylog-host:5046"]
compression_level: 9
tls:
certificate_authorities: ["/tmp/tls-keys/graylog-server-tls.crt"]

Filebeat error is as below,

2018-02-07T14:41:37Z ERR Failed to publish events caused by: EOF
2018-02-07T14:41:37Z INFO Error publishing events (retrying): EOF

Please help with how we can create self signed TLS certificate that will work for Graylog input.

Thanks in Advance


(Steffen Siering) #2

Please format logs, configs and terminal input/output using the </>-Button or markdown code fences. This forum uses Markdown to format posts. Without proper formatting, it can be very hard to read your posts.

Config files using YAML are sensitive to formatting and indentation. Without proper formatting it is difficult to spot any errors in your configs.

Which filebeat version are you using? I think it should say ssl not tls in your config.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.