Hello guys, could anyone tell me the output configuration of the logstash for for forarding json to elastic search. I have used the following configuration but it does not work:
output {
if “openvas” in [tags] {
stdout {
codec => dots
}
elasticsearch {
hosts => [“:9200”, “:9200”, “:9200”]
index => “logstash-vulnwhisperer-%{+YYYY.MM}”
cacert => “/etc/logstash/certs/root-ca.pem”
user => “admin”
password => “admin”
ilm_enabled => false
ssl => true
ssl_certificate_verification => true
ssl_certificate => “/etc/logstash/certs/logstash.pem”
ssl_key => “/etc/logstash/certs/logstash.key”
}
}
}
I a not sure what is the correct configuration for this to work successfully. Any help would be great. Let me know if you need more information. Thanks a lot in advace