# Xpack Monitoring Pipeline: You have enabled encryption but DISABLED certificate verification

**URL:** <https://discuss.elastic.co/t/xpack-monitoring-pipeline-you-have-enabled-encryption-but-disabled-certificate-verification/166577>\
**Category:** Logstash\
**Created:** [January 31, 2019, 2:28pm UTC](https://discuss.elastic.co/t/xpack-monitoring-pipeline-you-have-enabled-encryption-but-disabled-certificate-verification/166577 "2019-01-31T14:28:20Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Evesy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/evesy/32/29520_2.png) [@Evesy](https://discuss.elastic.co/u/Evesy)\
**Post date:** [January 31, 2019, 2:28pm UTC](https://discuss.elastic.co/t/xpack-monitoring-pipeline-you-have-enabled-encryption-but-disabled-certificate-verification/166577/1 "2019-01-31T14:28:21Z")

</div>

I'm seeing the below in Logstash output when it starts up for the monitoring pipeline:

```auto
[INFO] 2019-01-31 14:16:49.047 [Converge PipelineAction::Create<.monitoring-logstash>] pipeline - Starting pipeline {:pipeline_id=>".monitoring-logstash", "pipeline.workers"=>1, "pipeline.batch.size"=>2, "pipeline.batch.delay"=>50}
[WARN] 2019-01-31 14:16:49.049 [[.monitoring-logstash]-pipeline-manager] elasticsearch - **WARNING** Detected UNSAFE options in elasticsearch output configuration!
**WARNING** You have enabled encryption but DISABLED certificate verification.
**WARNING** To make sure your data is secure change :ssl_certificate_verification to true

```

This pipeline is set up by Logstash and from the Xpack settings I have configured I don't see why SSL verification would be disabled:

`/usr/share/logstash/config/logstash.yml`:

```auto
xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch.url: https://search.elastic.company.tld:443
xpack.monitoring.elasticsearch.username: "elastic"
xpack.monitoring.elasticsearch.password: "${ES_PASSWORD}"
xpack.monitoring.elasticsearch.ssl.ca: "/usr/share/logstash/config/letsencrypt.pem"

```

These warnings only appear for the monitoring pipeline, are custom processing pipelines all seem OK. Any pointers would be appreciated, I can't find any options to control certificate verification for Xpack pipelines here: [https://www.elastic.co/guide/en/logstash/6.x/configuring-logstash.html#configuring-logstash](https://www.elastic.co/guide/en/logstash/6.x/configuring-logstash.html#configuring-logstash)

Cheers!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 28, 2019, 2:28pm UTC](https://discuss.elastic.co/t/xpack-monitoring-pipeline-you-have-enabled-encryption-but-disabled-certificate-verification/166577/2 "2019-02-28T14:28:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.