Documentation fix request: Beats encryption

[jaredatobe]

Several people have noticed a mistake in the 2.3 documentation for Beats encryption.

#2503
#3692
#4652 (comment)
#4946

The correct information:

Put the certs and key in the following directory: /opt/so/saltstack/local/salt/logstash/etc/certs

Then run "so-logstash-restart" and the files will be placed permanently in "/opt/so/conf/logstash/etc/certs" and can be accessed in the docker container of logstash via "/usr/share/logstash/certs".

[weslambert]

This has been updated: Security-Onion-Solutions/securityonion-docs@32c2410

https://docs.securityonion.net/en/latest/beats.html?highlight=beats#using-the-beats-default-port-5044-with-encryption