search

spujadas / elk-docker

Elasticsearch, Logstash, Kibana (ELK) Docker image
Other
2.16k stars 908 forks source link

filebeat x509 certificate signed by unknown authority when calling api endpoint #377

Open tom-morgan12 opened 1 year ago

tom-morgan12 commented 1 year ago

I am getting this error from filebeat:

2023-02-07 07:14:47 2023-02-07T15:14:47.204Z    ERROR   [input.httpjson-stateless]      v2/input.go:129 Error while processing http request: failed to execute http client.Do: failed to execute http client.Do: Get "https://abc.io/monitoring/logs/tail?source=newlog": Get "https://abc.io/monitoring/logs/tail?source=newlog": x509: certificate signed by unknown authority {"url": "https://abc.io/monitoring/logs/tail"}

I am running filebeat container image. So, I do not know how we can change the configuration or add some root ca chain so that the filebeat as a client can trust for the cert which is returned by server url https://abc.io/monitoring/logs/tail.

spujadas commented 1 year ago

General guidance on certificates for this image is provided here: https://elk-docker.readthedocs.io/#certificates Information on changing the configuration of the image can be found here: https://elk-docker.readthedocs.io/#tweaking-the-image Non-image-specific instructions on setting up certificates can be found here: https://www.elastic.co/guide/en/beats/filebeat/current/configuration-ssl.html