Logstash 找不到请求的目标日志存储的有效证书路径

我在我们的elk堆栈上启用ssl，在将logstash连接到elasticsearch时遇到错误消息

`

}

---

如果您能帮助解决此错误，我们将不胜感激。

看来logstash客户端无法验证ES提供的证书。3件事，确保ES通过SSL在端口9200上运行。其次，包含以下命令的输出将很有帮助

echo'| openssl s_client-connect elastic.local:9200 1>/dev/null

。这是为了验证ES服务器提供的链。第三，

instance.crt

file contents.xml文件看起来好像logstash客户端无法验证ES提供的证书。3件事，确保ES通过SSL在端口9200上运行。其次，包含以下命令的输出将很有帮助

echo'| openssl s_client-connect elastic.local:9200 1>/dev/null

。这是为了验证ES服务器提供的链。第三是

instance.crt

文件内容。

enter code here`2019-08-29T13:38:43,822][WARN ][logstash.outputs.elasticsearch] Attempted to resurrect connection to dead ES instance, but got an error. {:url=>"https://logstash_internal:xxxxxx@elastic.local:9200/", :error_type=>LogStash::Outputs::ElasticSearch::HttpClient::Pool::HostUnreachableError, :error=>"Elasticsearch Unreachable: [https://logstash_internal:xxxxxx@elastic.local:9200/][Manticore::ClientProtocolException] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

The self signed certificate is installed in the trusted on the local machine. If you know what is causing the issue and how to resolve let me know.

my logstash config is

output {
elasticsearch {
hosts => ["https://elastic.local:9200"]
index => "logstash-%{+YYYY.MM.dd}"
ssl => true
keystore => '\config\logstash.keystore'
keystore_password => "keystore.pass"
cacert => '\config\certs\instance.crt'
ssl_certificate_verification => true
user => "{ES_USER}" password => "{ES_PWD}"
}
stdout { codec => rubydebug }