Winlogbeat error connecting to Elasticsearch at https://ip:9200: Get "https://ip:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority cert

i just try to install winlogbeat, and i put the ip into elasticsearch-ca.pem. but have an error like this. please help

2022-06-29T11:25:47.925+0700    INFO    instance/beat.go:328    Setup Beat: winlogbeat; Version: 7.17.1
2022-06-29T11:25:47.925+0700    INFO    [index-management]      idxmgmt/std.go:184      Set output.elasticsearch.index to 'winlogbeat-7.17.1' as ILM is enabled.
2022-06-29T11:25:47.926+0700    WARN    [cfgwarn]       tlscommon/config.go:100 DEPRECATED: Treating the CommonName field on X.509 certificates as a host name when no Subject Alternative Names are present is going to be removed. Please update your certificates if needed. Will be removed in version: 8.0.0
2022-06-29T11:25:47.926+0700    INFO    [esclientleg]   eslegclient/connection.go:105   elasticsearch url: https://202.158.5.68:9200
2022-06-29T11:25:47.927+0700    INFO    [publisher]     pipeline/module.go:113  Beat name: lt03ali
2022-06-29T11:25:47.927+0700    INFO    [winlogbeat]    beater/winlogbeat.go:66 State will be read from and persisted to C:\winlogbeat\data\.winlogbeat.yml
2022-06-29T11:25:47.968+0700    WARN    [cfgwarn]       registered_domain/registered_domain.go:61       BETA: The registered_domain processor is beta.
2022-06-29T11:25:48.024+0700    WARN    [cfgwarn]       registered_domain/registered_domain.go:61       BETA: The registered_domain processor is beta.
2022-06-29T11:25:48.036+0700    INFO    [esclientleg]   eslegclient/connection.go:105   elasticsearch url: https://202.158.5.68:9200
2022-06-29T11:25:48.131+0700    ERROR   [esclientleg]   transport/logging.go:37 Error dialing x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")  {"network": "tcp", "address": "202.158.5.68:9200"}
2022-06-29T11:25:48.132+0700    ERROR   [esclientleg]   eslegclient/connection.go:231   error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")
2022-06-29T11:25:48.134+0700    ERROR   instance/beat.go:1015   Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")]
Exiting: couldn't connect to any of the configured Elasticsearch hosts. Errors: [error connecting to Elasticsearch at https://202.158.5.68:9200: Get "https://202.158.5.68:9200": x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Elastic Certificate Tool Autogenerated CA")]

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.