# Logstash can't connect to logstash **URL:** \ **Category:** Search Guard\ **Created:** [April 10, 2018, 7:21pm UTC](https://forum.search-guard.com/t/logstash-cant-connect-to-logstash/863 "2018-04-10T19:21:38Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Sergey\_Murashov](https://avatars.discourse-cdn.com/v4/letter/s/dbc845/32.png) [@Sergey\_Murashov](https://forum.search-guard.com/u/Sergey_Murashov)\ **Post date:** [April 10, 2018, 7:21pm UTC](https://forum.search-guard.com/t/logstash-cant-connect-to-logstash/863/1 "2018-04-10T19:21:38Z")
When asking questions, please provide the following information: - Search Guard and Elasticsearch version - Installed and used enterprise modules, if any - JVM version and operating system version - Search Guard configuration files - Elasticsearch log messages on debug level - Other installed Elasticsearch or Kibana plugins, if any - ELK version - 6.2.2 - SG version - 6.2.2-22.0 - JVM version - build 1.8.0\_161-b12 - Elasticsearch log: _[2018-04-10T22:17:59,143][ERROR][c.f.s.h.SearchGuardHttpServerTransport] [logsta] SSL Problem Received fatal alert: certificate\_unknown_ _javax.net.ssl.SSLException: Received fatal alert: certificate\_unknown_ - Logstash log: _[WARN][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>“[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)”, :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>“Elasticsearch Unreachable: [[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”}_ The information from the Logstash is loaded, but at the same time I see the connection error. Also, there is no Logstash in the Kibana. ---
**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\ **Post date:** [April 11, 2018, 8:02pm UTC](https://forum.search-guard.com/t/logstash-cant-connect-to-logstash/863/2 "2018-04-11T20:02:59Z")
Please post your logstash configuration. This is an TLS connection error, most likely you did not provide the your root certificate to logstash, so the certificate that Elasticsearch / Search Guard sends cannot be verified: truststore =\> “/path/to/truststore.jks” truststore\_password =\> changeit `` See also here: > **[Search Guard Documentation 404](https://docs.search-guard.com/latest/404.html)** > > Seems like the page you are looking for does not exist. We deeply and humbly apologize. If you are using demo/dummy certificates and the hostname in the certificates does not match the real hostname you also need to disable certificate verification. > **···** > > On Tuesday, April 10, 2018 at 9:21:38 PM UTC+2, Sergey Murashov wrote: > > > When asking questions, please provide the following information: > > > - Search Guard and Elasticsearch version > > > - Installed and used enterprise modules, if any > > > - JVM version and operating system version > > > - Search Guard configuration files > > > - Elasticsearch log messages on debug level > > > - Other installed Elasticsearch or Kibana plugins, if any > > > - ELK version - 6.2.2 > > > - SG version - 6.2.2-22.0 > > > - JVM version - build 1.8.0\_161-b12 > > > - Elasticsearch log: > > > _[2018-04-10T22:17:59,143][ERROR][c.f.s.h.SearchGuardHttpServerTransport] [logsta] SSL Problem Received fatal alert: certificate\_unknown_ > > > _javax.net.ssl.SSLException: Received fatal alert: certificate\_unknown_ > > > - Logstash log: > > > _[WARN][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>“[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)”, :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>“Elasticsearch Unreachable: [[[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)][Manticore::ClientProtocolException](https://logstash.taxnet.ru:9200/%5D%5BManticore::ClientProtocolException)] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”}_ > > > The information from the Logstash is loaded, but at the same time I see the connection error. Also, there is no Logstash in the Kibana. ---
**Author:** ![Sergey\_Murashov](https://avatars.discourse-cdn.com/v4/letter/s/dbc845/32.png) [@Sergey\_Murashov](https://forum.search-guard.com/u/Sergey_Murashov)\ **Post date:** [April 12, 2018, 9:26am UTC](https://forum.search-guard.com/t/logstash-cant-connect-to-logstash/863/3 "2018-04-12T09:26:38Z")
I turned off the x-pack monitoring and the error went away > **···** > > среда, 11 апреля 2018 г., 23:03:00 UTC+3 пользователь Jochen Kressin написал: > > > Please post your logstash configuration. This is an TLS connection error, most likely you did not provide the your root certificate to logstash, so the certificate that Elasticsearch / Search Guard sends cannot be verified: > > > truststore =\> “/path/to/truststore.jks” > > > truststore\_password =\> changeit > > > `` > > > See also here: > > > > > > [https://docs.search-guard.com/latest/logstash](https://docs.search-guard.com/latest/logstash) > > > > > > If you are using demo/dummy certificates and the hostname in the certificates does not match the real hostname you also need to disable certificate verification. > > > > On Tuesday, April 10, 2018 at 9:21:38 PM UTC+2, Sergey Murashov wrote: > > > > > When asking questions, please provide the following information: > > > > - Search Guard and Elasticsearch version > > > > - Installed and used enterprise modules, if any > > > > - JVM version and operating system version > > > > - Search Guard configuration files > > > > - Elasticsearch log messages on debug level > > > > - Other installed Elasticsearch or Kibana plugins, if any > > > > - ELK version - 6.2.2 > > > > - SG version - 6.2.2-22.0 > > > > - JVM version - build 1.8.0\_161-b12 > > > > - Elasticsearch log: > > > > _[2018-04-10T22:17:59,143][ERROR][c.f.s.h.SearchGuardHttpServerTransport] [logsta] SSL Problem Received fatal alert: certificate\_unknown_ > > > > _javax.net.ssl.SSLException: Received fatal alert: certificate\_unknown_ > > > > - Logstash log: > > > > _[WARN][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>“[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)”, :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>“Elasticsearch Unreachable: [[[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)][Manticore::ClientProtocolException](https://logstash.taxnet.ru:9200/%5D%5BManticore::ClientProtocolException)] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”}_ > > > > The information from the Logstash is loaded, but at the same time I see the connection error. Also, there is no Logstash in the Kibana. ---
**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\ **Post date:** [April 19, 2018, 6:28pm UTC](https://forum.search-guard.com/t/logstash-cant-connect-to-logstash/863/4 "2018-04-19T18:28:11Z")
do you disabled x-pack monitoring in logstash or in elasticsearch? > **···** > > On Thursday, 12 April 2018 11:26:38 UTC+2, Sergey Murashov wrote: > > > I turned off the x-pack monitoring and the error went away > > > > среда, 11 апреля 2018 г., 23:03:00 UTC+3 пользователь Jochen Kressin написал: > > > > > Please post your logstash configuration. This is an TLS connection error, most likely you did not provide the your root certificate to logstash, so the certificate that Elasticsearch / Search Guard sends cannot be verified: > > > > truststore =\> “/path/to/truststore.jks” > > > > truststore\_password =\> changeit > > > > `` > > > > See also here: > > > > > > > > [https://docs.search-guard.com/latest/logstash](https://docs.search-guard.com/latest/logstash) > > > > > > > > If you are using demo/dummy certificates and the hostname in the certificates does not match the real hostname you also need to disable certificate verification. > > > > > > On Tuesday, April 10, 2018 at 9:21:38 PM UTC+2, Sergey Murashov wrote: > > > > > > > When asking questions, please provide the following information: > > > > > - Search Guard and Elasticsearch version > > > > > - Installed and used enterprise modules, if any > > > > > - JVM version and operating system version > > > > > - Search Guard configuration files > > > > > - Elasticsearch log messages on debug level > > > > > - Other installed Elasticsearch or Kibana plugins, if any > > > > > - ELK version - 6.2.2 > > > > > - SG version - 6.2.2-22.0 > > > > > - JVM version - build 1.8.0\_161-b12 > > > > > - Elasticsearch log: > > > > > _[2018-04-10T22:17:59,143][ERROR][c.f.s.h.SearchGuardHttpServerTransport] [logsta] SSL Problem Received fatal alert: certificate\_unknown_ > > > > > _javax.net.ssl.SSLException: Received fatal alert: certificate\_unknown_ > > > > > - Logstash log: > > > > > _[WARN][logstash.licensechecker.licensereader] Attempted to resurrect connection to dead ES instance, but got an error. {:url=\>“[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)”, :error\_type=\>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=\>“Elasticsearch Unreachable: [[[https://logstash.taxnet.ru:9200/](https://logstash.taxnet.ru:9200/)][Manticore::ClientProtocolException](https://logstash.taxnet.ru:9200/%5D%5BManticore::ClientProtocolException)] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”}_ > > > > > The information from the Logstash is loaded, but at the same time I see the connection error. Also, there is no Logstash in the Kibana.