# CA Certificate Path Incorrect

The collector's log indicates that the certificate file path for an output is incorrect with an error including `file_if_set` validation.

### SYMPTOM

The collector's log indicates a message similar to the following:

```json
{"level":"panic","ts":"2023-08-25T11:34:48.953Z","logger":"flowcoll","caller":"elasticsearch/instance_registration.go:33","msg":"failed to instantiate config","code":"elasticsearch/conf-error","reason":"ENV: 'EF_OUTPUT_ELASTICSEARCH_TLS_CA_CERT_FILEPATH' Value: '/root/http_ca.crt' Error: failed 'file_if_set' validation"
```

Note the message `Error: failed 'file_if_set' validation`.

### PROBLEM

The collector cannot find a file at the path specified for the output. For Elasticsearch this would be `EF_OUTPUT_ELASTICSEARCH_TLS_CA_CERT_FILEPATH`. If this setting is not blank, it must be set to a valid certificate file or the collector will not run.

### SOLUTION

You must do ONE of the following:

* Set `EF_OUTPUT_<output name>_TLS_CA_CERT_FILEPATH` to the full path of a valid certificate file.
* Set `EF_OUTPUT_<output name>_TLS_SKIP_VERIFICATION` to `true`

### REFERENCE

* Cribl Output
  * EF\_OUTPUT\_CRIBL\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_CRIBL\_TLS\_SKIP\_VERIFICATION
* Elasticsearch Output
  * EF\_OUTPUT\_ELASTICSEARCH\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_ELASTICSEARCH\_TLS\_SKIP\_VERIFICATION
* Generic HTTP Output
  * EF\_OUTPUT\_GENERIC\_HTTP\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_GENERIC\_HTTP\_TLS\_SKIP\_VERIFICATION
* Kafka Output
  * EF\_OUTPUT\_KAFKA\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_KAFKA\_TLS\_SKIP\_VERIFICATION
* OpenSearch Output
  * EF\_OUTPUT\_OPENSEARCH\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_OPENSEARCH\_TLS\_SKIP\_VERIFICATION
* Splunk HEC Output
  * EF\_OUTPUT\_SPLUNK\_HEC\_TLS\_CA\_CERT\_FILEPATH
  * EF\_OUTPUT\_SPLUNK\_HEC\_TLS\_SKIP\_VERIFICATION
