TLS enabled in logstash . NO certificates for Filebeat. Is it possible to connect

Elastic Stack Logstash
1

HI All ,

TLS enabled in logstash . But i dont have any certificates for filebeat.

Is it possible to connect filebeat to a TLS enabled logstash without a certificate.

I have certificates for logssash and certificate authorities (CA)

Thanks.

Logstash conf file:

input{

beats

  { port => "5044"

      tags => [ "Logstash1" ]
           codec => "json"

           ssl => true
           ssl_certificate_authorities => ["/etc/logstash/certs/CA.crt"]
           ssl_certificate => "/etc/logstash/certs/logstash.crt"
           ssl_key => "/etc/logstash/certs/logstash.key"
           ssl_verify_mode => "force_peer"

         }

 }

FileBeat:

  output.logstash:

         hosts: ["https://logstaship1:5044","https://logstaship2:5044"]
         loadbalance: true

         ssl.certificate_authorities: ["/etc/filebeat/certs/CA.crt"]
2

HI All ,

I go the solution . In Logstash conf file use ssl_verify_mode => "peer"

Sample:

input{

beats
{ port => "5044"

           tags => [ "Logstash1" ]
           codec => "json"
           ssl => true
           ssl_certificate_authorities => ["/etc/logstash/certs/CA.crt"]
          ssl_certificate => "/etc/logstash/certs/logstash.crt"
          ssl_key => "/etc/logstash/certs/logstash.key"
          ssl_verify_mode => "peer"


         }

}

This type of conf doesn ask certificates from FIlebeat.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.