Logstash cheat sheet: Difference between revisions

Line 216: Line 216:


     # Optional TLS. By default is off.
     # Optional TLS. By default is off.
     tls:
     ssl:
       # List of root certificates for HTTPS server verifications
       # List of root certificates for HTTPS server verifications
       certificate_authorities: ["/etc/logstash/logstash-forwarder.crt"]
       certificate_authorities: ["/etc/logstash/logstash-forwarder.crt"]
Line 224: Line 224:


       # Client Certificate Key
       # Client Certificate Key
       #certificate_key: "/etc/logstash/logstash-forwarder.key"
       #key: "/etc/logstash/logstash-forwarder.key"


       # Controls whether the client verifies server certificates and host name.
       #verification_mode: none
      # If insecure is set to true, all server host names and certificates will be
       verification_mode: none
      # accepted. In this mode TLS based connections are susceptible to
      # man-in-the-middle attacks. Use only for testing.
       #insecure: true


       # Configure cipher suites to be used for TLS connections
       # Configure cipher suites to be used for TLS connections