logstash

# /etc/logstash/conf.d/input.conf

   input {
      beats {
        port                        => 5044
        ssl                         => true
        ssl_certificate_authorities => ["/path/to/ca.pem"]
        ssl_certificate             => "/path/to/cert.pem"
        ssl_key                     => "/path/to/key.pem"
        ssl_verify_mode             => "force_peer"
        tls_min_version             => "1.2"
      }
    }