logstash 双向加密

openssl req -x509 -batch -nodes -newkey rsa:2048 -keyout lumberjack.key -out lumberjack.cert -subj /CN=localhost

    lumberjack.key      #  name of the SSL key to be created
    lumberjack.cert     #  name of the SSL certificate to be created
    localhost           #  name of the upstream Logstash compute

# -----------------------------------------------------------------------------------------------

# 将SSL证书复制到上游Logstash
# 将SSL证书和密钥复制到下游Logstash

# Start the upstream Logstash instance
# 使用提供的SSL证书将事件发送到 mydownstreamhost:5000
bin/logstash -e 'input { generator { count => 5 } } 
output {
    lumberjack {
        codec => json
        hosts => "mydownstreamhost"
        ssl_certificate => "lumberjack.cert"
        port => 5000
    }
}'

# Start the downstream Logstash instance
# 将端口5000设为侦听传入的Beats输入
bin/logstash -e '
    input {
        beats {
            codec => json
            port => 5000
            ssl => true
            ssl_certificate => "lumberjack.cert"
            ssl_key => "lumberjack.key"
    } 
}'