{"action":"created","issue":{"url":"https://api.github.com/repos/wazuh/wazuh/issues/197","repository_url":"https://api.github.com/repos/wazuh/wazuh","labels_url":"https://api.github.com/repos/wazuh/wazuh/issues/197/labels{/name}","comments_url":"https://api.github.com/repos/wazuh/wazuh/issues/197/comments","events_url":"https://api.github.com/repos/wazuh/wazuh/issues/197/events","html_url":"https://github.com/wazuh/wazuh/issues/197","id":259301765,"number":197,"title":"[org.logstash.beats.BeatsHandler] Exception: not an SSL/TLS record","user":{"login":"hafeezy2j","id":31100825,"avatar_url":"https://avatars2.githubusercontent.com/u/31100825?v=4","gravatar_id":"","url":"https://api.github.com/users/hafeezy2j","html_url":"https://github.com/hafeezy2j","followers_url":"https://api.github.com/users/hafeezy2j/followers","following_url":"https://api.github.com/users/hafeezy2j/following{/other_user}","gists_url":"https://api.github.com/users/hafeezy2j/gists{/gist_id}","starred_url":"https://api.github.com/users/hafeezy2j/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hafeezy2j/subscriptions","organizations_url":"https://api.github.com/users/hafeezy2j/orgs","repos_url":"https://api.github.com/users/hafeezy2j/repos","events_url":"https://api.github.com/users/hafeezy2j/events{/privacy}","received_events_url":"https://api.github.com/users/hafeezy2j/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-09-20T21:05:26Z","updated_at":"2017-09-22T21:25:14Z","closed_at":null,"author_association":"NONE","body":"Hello there,\r\n\r\nI have folloed [Setting up SSL for filebeat and Logstash](https://documentation.wazuh.com/current/installation-guide/optional-configurations/elastic_ssl.html) but for some reason I can not get logs in to Kubana. I have recently installed everything through RPM and executed upgrade process to make sure that I have everything latest.\r\n\r\n**Logstash Config:**\r\ninput {\r\n    beats {\r\n        port => 5000\r\n        codec => \"json_lines\"\r\n        ssl => true\r\n        ssl_certificate => \"/etc/logstash/logstash.crt\"\r\n        ssl_key => \"/etc/logstash/logstash.key\"\r\n\r\n\r\n**Logstash Logs:**\r\n\r\n[2017-09-20T16:50:12,376][INFO ][org.logstash.beats.BeatsHandler] Exception: not an SSL/TLS record: 325700000001324300000591785e8c56516fdb3812ce3ddf9f1810fb9000922ad97192f2695d275be4da0605eca2c01d16014d8d656e24524b52767d41fec2fde6c39092e2a4b9c33ec5208733f37df37da34cfe717272f2b79393bfffe791fddaa017a5f082f147e60f2d32ce96283babfc81256c8dc233ce36aac6350acf9e12d65a5359d1dc6bd150f077a56f76feb3a958c26a5331cec20f29bc329a71767c5fa234255a2ad50a8b9a52ef952ecddeb184f5098783a78409294da7fd7d7ff365b548e7d7d78b342f96bfb084fdea5583ce8ba6659c4df2e232cddfa7937c35c9f964c6f359965f4effc91216e1b12f4a5ae3ccc6a7df63cd74009acebb5279a50983d96c1c7ac68b7c329d5c4d2fa609135568f591a9927196e7c573b3c72db18429eaa4b89c64d33c2ba6d92c27c2dcc1796cde0291392f2aa5abac3652d423dd8f03158d97e95efcbbdba679410c6d8df33d17afaf76685d247c965d64a16e23b4a822db6f3e7a4a98c338e9fb806c9916699ee62c61ff83d8e222103b4df3f39cc29ce9ac2411bcdb09fbce3887f25d6d2af74ed468fdf027fbc3194d497f5297d26de7ef7bd5917812563adf396a9a9d6a03f4f32c0acbe82170ca9e95519a462892d97235ff787bf79125cc7635068549755f3ac7f8bf589167936cc67e4f588d3bac199f26ac4427ad6afda85252217c3695d1b0eca444e7329a68c9382bae8afc92256ca32c96811bc62f2fae12d6085533be11b5c38455d6746da8f7ac69d1f92d6aafa21dee5d4ccc7e27eebdf09d639ccdbf5ddfaeee97df168b9be592aa74757d1fad44a28625b630c9a1277f02a3a3380c02e6f022c9e9f9c5e4fc8cc35f503c8791670eda402494c3b1b05fca94c35c43ef4cd80b073da84d57d707a84d55610946670000cb6efd074acfe9672f35b8bde600bdd400601e3d0e77a2410e901e1d5d87e1f6877132e171fe23a7e4f1647568e91d4ce9e80ef771846f579ca5c5d5cf258fa1fef256f95e5b00bd3cfa26a6c57b71519e8fc71fbf858bc79bcbfc623efbb0488b0f3737e922ffed7dfae1727a9e4e16f3f3df1657c5d5e47cf644dd7eb5866406b77a636c131626f53d1e135111eb70744412dca1df1bfbf0faf577631f9c0fc9064e0196c1a8e39379595a748e03e7058d26de7e359626352b2edfcfa8bd6bf442d558c2fc85885f178c63e83be4009fd0aed11a474cbe7cf855c80751213f0e5959a19df258c212ed4e49743c68a08f0d10e0f46ef5f90b185d1fcee2ed273cc067d495df72802086d55639c01d6a0fca41851aada0acfb2d6a10244ba3c1a1a3254911d222dd6770fbea81d1e0b708d2346de7d182df0a1f642ec24ec032087bb5457051dcb05158970e942ec9e6189e0ffee8b385fd0ef14300fbad925bb0f867878e5aa47235ed9d0c020ae5a031ce53\r\n\r\n**Filebeat Logs**\r\n\r\n2017-09-20T16:49:04-04:00 INFO No non-zero metrics in the last 30s\r\n2017-09-20T16:49:12-04:00 ERR Failed to publish events caused by: read tcp 172.30.13.60:37164->172.XX.XX.67:5000: read: connection reset by peer\r\n2017-09-20T16:49:12-04:00 INFO Error publishing events (retrying): read tcp 172.30.13.60:37164->172.XX.XX.67:5000: read: connection reset by peer\r\n2017-09-20T16:49:34-04:00 INFO Non-zero metrics in the last 30s: libbeat.logstash.call_count.PublishEvents=1 libbeat.logstash.publish.read_errors=1 libbeat.logstash.publish.write_bytes=1459 libbeat.logstash.published_but_not_acked_events=3\r\n\r\n**Filebeat Config**\r\n\r\noutput:\r\n logstash:\r\n   # The Logstash hosts\r\n   hosts: [\"172.XX.XX.67:5000\"]\r\nssl:\r\n certificate: \"/etc/filebeat/logstash.crt\"\r\n\r\n\r\nIf I disable SSL, logs are appearing properly on Kibana without any errors. \r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/wazuh/wazuh/issues/comments/331564276","html_url":"https://github.com/wazuh/wazuh/issues/197#issuecomment-331564276","issue_url":"https://api.github.com/repos/wazuh/wazuh/issues/197","id":331564276,"user":{"login":"hafeezy2j","id":31100825,"avatar_url":"https://avatars2.githubusercontent.com/u/31100825?v=4","gravatar_id":"","url":"https://api.github.com/users/hafeezy2j","html_url":"https://github.com/hafeezy2j","followers_url":"https://api.github.com/users/hafeezy2j/followers","following_url":"https://api.github.com/users/hafeezy2j/following{/other_user}","gists_url":"https://api.github.com/users/hafeezy2j/gists{/gist_id}","starred_url":"https://api.github.com/users/hafeezy2j/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hafeezy2j/subscriptions","organizations_url":"https://api.github.com/users/hafeezy2j/orgs","repos_url":"https://api.github.com/users/hafeezy2j/repos","events_url":"https://api.github.com/users/hafeezy2j/events{/privacy}","received_events_url":"https://api.github.com/users/hafeezy2j/received_events","type":"User","site_admin":false},"created_at":"2017-09-22T21:25:14Z","updated_at":"2017-09-22T21:25:14Z","author_association":"NONE","body":"@mjflve  Would you be able to help me on this?"}}
{"actor":{"display_login":"hafeezy2j"}}