This can be best explained by example: In filebeat.yml
we set the receiving hosts to a fact of all Logstash hosts (e.g. ansible.fqdn
). We need to make sure that the same fact is part of the DN or SAN of all certificates on the receiving end.
This will make certificate creation way more robust for different setups