Error filebeat test output

[Karthikraja Anandhan]

Hi everyone , When I am changing the localhost into my local IP address as hosts: ["172.20.8.86:9200"]  in /etc/filebeat/filebeat.yml.I am getting the following error, can someone help me with this?

[root@host ~]# filebeat test output

elasticsearch: https://172.20.8.86:9200...

  parse url... OK

  connection...

    parse host... OK

    dns lookup... OK

    addresses: 172.20.8.86

    dial up... OK

  TLS...

    security: server's certificate chain verification is enabled

    handshake... ERROR x509: certificate is valid for 127.0.0.1, not 172.20.8.86

--

With Regards,
Karthikraja

[Sergio Garcia Prados]

Hi Karthikraja,

Which type of installation did you choose? Since the error outputs certificate is valid for 127.0.0.1, not 172.20.8.86  I may assume you selected all-in-one  In all-in-one install the generated certificates are only valid for localhost (127.0.0.1). If you need a distributed architecture environment, follow the distributed deployment documentation. In case you want to backup your wazuh-manager data, you should save the following folders:

1.  Wazuh Manager

/var/ossec/api/configuration
/var/ossec/etc
/var/ossec/logs
/var/ossec/queue/rootcheck
/var/ossec/queue/agent-groups
/var/ossec/queue/agent-info
/var/ossec/queue/agents-timestamp
/var/ossec/queue/agentless
/var/ossec/queue/cluster
/var/ossec/queue/rids
/var/ossec/queue/fts
/var/ossec/var/

The next two folders must be copied with the manager service stopped:

/var/ossec/var/
/var/ossec/queue/db

Regards,
Sergio García