# Winlog beat set up returning the following error

**URL:** <https://discuss.elastic.co/t/winlog-beat-set-up-returning-the-following-error/294999>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security, docker\
**Created:** [January 20, 2022, 10:30pm UTC](https://discuss.elastic.co/t/winlog-beat-set-up-returning-the-following-error/294999 "2022-01-20T22:30:07Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kgood517](https://avatars.discourse-cdn.com/v4/letter/k/a3d4f5/32.png) [@kgood517](https://discuss.elastic.co/u/kgood517)\
**Post date:** [January 20, 2022, 10:30pm UTC](https://discuss.elastic.co/t/winlog-beat-set-up-returning-the-following-error/294999/1 "2022-01-20T22:30:07Z")

</div>

Hi all, I'm getting the following error trying to setup my winlogbeat following along the directions from [Winlogbeat quick start: installation and configuration | Winlogbeat Reference [7.16] | Elastic](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-installation-configuration.html).

```auto
ERROR	[esclientleg]	transport/logging.go:37	Error dialing x509: certificate signed by unknown authority	{"network": "tcp", "address": "192.168.1.30:9200"}
2022-01-20T16:27:16.188-0600	ERROR	[esclientleg]	eslegclient/connection.go:220	error connecting to Elasticsearch at https://192.168.1.30:9200: Get "https://192.168.1.30:9200": x509: certificate signed by unknown authority
2022-01-20T16:27:16.188-0600	ERROR	instance/beat.go:989	Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://192.168.1.30:9200: Get "https://192.168.1.30:9200": x509: certificate 
signed by unknown authority]
Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://192.168.1.30:9200: Get "https://192.168.1.30:9200": x509: certificate signed by unknown authority]

```

How do I fix the certificate error? This is a self hosted security onion elk stack

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [January 24, 2022, 6:46pm UTC](https://discuss.elastic.co/t/winlog-beat-set-up-returning-the-following-error/294999/2 "2022-01-24T18:46:27Z")

</div>

I recommend taking a look at these links:

[Winlogbeat etup error: x509 certificate](https://stackoverflow.com/questions/66950356/winlogbeat-setup-error-x509-certificate-is-valid-for-ip-not-same-ip)

[Configure SSL](https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-ssl.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 21, 2022, 6:46pm UTC](https://discuss.elastic.co/t/winlog-beat-set-up-returning-the-following-error/294999/3 "2022-02-21T18:46:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.