Ref T15 fixed ssl to use logstash_group ips, not group[0]