If you have a read endpoint, you can write as well, the. Use file beat configured on the tls server