# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1033 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1034 --- ## [Elasticsearch response does not have desired fields/data](https://discuss.elastic.co/t/elasticsearch-response-does-not-have-desired-fields-data/298237)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 5\ **Last updated:** [February 28, 2022, 9:58pm UTC](https://discuss.elastic.co/t/elasticsearch-response-does-not-have-desired-fields-data/298237 "2022-02-28T21:58:16Z")
I have been using ElastAlert to monitor and alert on my Elasticsearch data. However the Elasticsearch response does not have the fields that I want to pull data from in my alerts. I have been using the DEBUG feature to v… --- ## [Logstash-plugin install logstash-output-influxdb error proxy](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451)
**Author:** [@bob\_monty](https://discuss.elastic.co/u/bob_monty)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 9:38pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-logstash-output-influxdb-error-proxy/298451 "2022-02-28T21:38:52Z")
Greetings im trying to logstash-plugin install logstash-output-influxdb but im behind a firewall and we have a proxy. i set the proxy at the command line with HTTP\_PROXY, and also tried setting it in logstash-7.16.1/vend… --- ## [Collecting logs with rsyslog instead of beats](https://discuss.elastic.co/t/collecting-logs-with-rsyslog-instead-of-beats/298425)
**Author:** [@Khammassi\_HoussemEdd](https://discuss.elastic.co/u/Khammassi_HoussemEdd)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 3:54pm UTC](https://discuss.elastic.co/t/collecting-logs-with-rsyslog-instead-of-beats/298425 "2022-02-28T15:54:45Z")
i got used to use beats (especially filebeat ) to collect logs from linux machines and send them to logstash where i do parsing and filtering .. there is a while since i have heard about rsyslog and i tried it and it's… --- ## [Two master nodes loose connection to the third master node, after its IP changes](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320)
**Author:** [@vibgy](https://discuss.elastic.co/u/vibgy)\ **Replies:** 7\ **Last updated:** [February 28, 2022, 8:59pm UTC](https://discuss.elastic.co/t/two-master-nodes-loose-connection-to-the-third-master-node-after-its-ip-changes/298320 "2022-02-28T20:59:01Z")
We are running 3 master nodes in k8s env (as a stateful set). When one of the master nodes dies and changes its IP, the other two master nodes are not able to find it. Any insights on what we can do better ? {"timesta… --- ## [Logstash installed on GCP compute engine having issues connecting to Mongo Atlas](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461)
**Author:** [@justjaidev](https://discuss.elastic.co/u/justjaidev)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 8:33pm UTC](https://discuss.elastic.co/t/logstash-installed-on-gcp-compute-engine-having-issues-connecting-to-mongo-atlas/296461 "2022-02-28T20:33:33Z")
Logstash installed on GCP compute engine is unable to connect Mongo Atlas.. Tried all the below 3 versions of mongo output plugin. 3.1.5 3.1.6 3.1.7 Below error observed with 3.1.5 version of mongo output plugin \[WA… --- ## [Support of mongodb+srv to connect with Atlas Mongo](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445)
**Author:** [@zvazquez](https://discuss.elastic.co/u/zvazquez)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 8:26pm UTC](https://discuss.elastic.co/t/support-of-mongodb-srv-to-connect-with-atlas-mongo/298445 "2022-02-28T20:26:55Z")
Hi, I am trying to push data coming into Logstash to MongoDB on Atlas. My output configuration is as following: mongodb { id =\> "logs" collection =\> "logentries" database =\> "logs" uri =\>… --- ## [Errors Setting all Password ElasticStack 7.16.3 running on IBM Cloud](https://discuss.elastic.co/t/errors-setting-all-password-elasticstack-7-16-3-running-on-ibm-cloud/298096)
**Author:** [@Bryan\_Kribbs](https://discuss.elastic.co/u/Bryan_Kribbs)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 7:13pm UTC](https://discuss.elastic.co/t/errors-setting-all-password-elasticstack-7-16-3-running-on-ibm-cloud/298096 "2022-02-28T19:13:40Z")
Hi, I have been working on setting up the basic security for elastic and kibana, but when I follow this guide. When I run the "Elasticsearch-setup-passwords" command. I am receiving the following error - "could not find… --- ## [Unable to get issuer certificate with TLS enabled Kibana & Elasticsearch in k8s](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779)
**Author:** [@Scottapotamus](https://discuss.elastic.co/u/Scottapotamus)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate-with-tls-enabled-kibana-elasticsearch-in-k8s/296779 "2022-02-28T18:42:29Z")
I am trying to enable TLS on Elasticsearch and kibana in kubernetes using the ECK operator. But when kibana tries to connect to Elasticsearch I get {"type":"log","@timestamp":"\*\*\*\*\*\*\*\*\*\*","tags":\["error","elasticsearch-… --- ## [Create geopoint from lat, lon values in nested json file to be visible in Kibana maps](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147)
**Author:** [@sylar11](https://discuss.elastic.co/u/sylar11)\ **Replies:** 5\ **Last updated:** [February 28, 2022, 6:35pm UTC](https://discuss.elastic.co/t/create-geopoint-from-lat-lon-values-in-nested-json-file-to-be-visible-in-kibana-maps/298147 "2022-02-28T18:35:29Z")
Hi all, I have the following json file where there are different locations with their own coordinates. { "A001": { "X": 503744.7, "Y": 4726339.0, "Z": 458.84, "LON": -2.9542869569135… --- ## [\[ERROR\] Logstash JDBC plugin - PKIX path building failed](https://discuss.elastic.co/t/error-logstash-jdbc-plugin-pkix-path-building-failed/298439)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 6:25pm UTC](https://discuss.elastic.co/t/error-logstash-jdbc-plugin-pkix-path-building-failed/298439 "2022-02-28T18:25:29Z")
Hi, I have an issue with logstash jdbc plugin configuration for MSSQL. My config file: input { jdbc { jdbc\_driver\_library =\> "/opt/elastic/drivers/mssql-jdbc-10.2.0.jre11.jar" jdbc\_driver\_class =\> "com… --- ## [Kibana SSL/Certificate - Service Auto-Restarts & Fails to Start](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195)
**Author:** [@Adventures\_Of\_Arch](https://discuss.elastic.co/u/Adventures_Of_Arch)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 5:39pm UTC](https://discuss.elastic.co/t/kibana-ssl-certificate-service-auto-restarts-fails-to-start/296195 "2022-02-28T17:39:41Z")
Hey all - Unsure where to turn with this one. Running Elasticsearch 7.16.3 and Kibana 7.16.3 on Ubuntu Server 20.04 Elasticsearch is configured and running successfully as a single-node deployment, currently with... x… --- ## [Remove kibana deprecation warnings](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438)
**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 5:21pm UTC](https://discuss.elastic.co/t/remove-kibana-deprecation-warnings/296438 "2022-02-28T17:21:16Z")
I am trying to remove kibana deprecation warnings. I am using kibana 7.10.2. There were some configurations that have been deprecated and I fixed those warnings. There is another deprecation warning that is still appeari… --- ## [Want to create a nest query to filter on optional field](https://discuss.elastic.co/t/want-to-create-a-nest-query-to-filter-on-optional-field/298433)
**Author:** [@tony\_sid](https://discuss.elastic.co/u/tony_sid)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 4:50pm UTC](https://discuss.elastic.co/t/want-to-create-a-nest-query-to-filter-on-optional-field/298433 "2022-02-28T16:50:02Z")
{ { "id": 8, "teamId": 0, "experience": 1, "companyName": "MyCompany" }, { "id": 9, "teamId": 0, "experience": 1, }, { "id": 10, … --- ## [Heartbeat HTTP pings fails with 403](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 4:32pm UTC](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289 "2022-02-28T16:32:05Z")
Hi Team, Strange heartbeat is failing with 403 response but we are getting valid 200 responses via CURL & Browser . Below is the configuration used for setting up the heartbeat any advice here will be helpful. I have … --- ## [Difference between two aggregations](https://discuss.elastic.co/t/difference-between-two-aggregations/294405)
**Author:** [@walshe06](https://discuss.elastic.co/u/walshe06)\ **Replies:** 10\ **Last updated:** [February 28, 2022, 4:17pm UTC](https://discuss.elastic.co/t/difference-between-two-aggregations/294405 "2022-02-28T16:17:02Z")
Hi all I am looking for some help with a watcher that I am trying to run. Basically I am trying to run a search query that will return a value if there is a difference between two aggregations. Below is the script I am… --- ## [Adding site error logs to elastic stack](https://discuss.elastic.co/t/adding-site-error-logs-to-elastic-stack/298363)
**Author:** [@Shorthills](https://discuss.elastic.co/u/Shorthills)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 4:07pm UTC](https://discuss.elastic.co/t/adding-site-error-logs-to-elastic-stack/298363 "2022-02-28T16:07:02Z")
Hi, New user here. My installation is properly pulling error logs from: /var/log/nginx/error.log\* But how do I make it so it also pulls the individual error log data from the sites as in this pattern: /var/log/nginx… --- ## [Logstash Even Hub input. error when running as a service, but not when I run single pipeline](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 3:43pm UTC](https://discuss.elastic.co/t/logstash-even-hub-input-error-when-running-as-a-service-but-not-when-i-run-single-pipeline/298423 "2022-02-28T15:43:10Z")
Hi Im trying to consume data from Azure Event Hub, I have 15 different logstash pipelines pointing to different storages, and Even Hubs, they all work well,and I can get data when I run the single pipelines alone, but wh… --- ## [How do I get a percolator query to use the same analyzer as the mapped fields?](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421)
**Author:** [@sanoj85](https://discuss.elastic.co/u/sanoj85)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 3:42pm UTC](https://discuss.elastic.co/t/how-do-i-get-a-percolator-query-to-use-the-same-analyzer-as-the-mapped-fields/298421 "2022-02-28T15:42:50Z")
--- ## [Impossible to overwrite "host.ip" when using Custom Logs integration](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348)
**Author:** [@Twyzz](https://discuss.elastic.co/u/Twyzz)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 3:25pm UTC](https://discuss.elastic.co/t/impossible-to-overwrite-host-ip-when-using-custom-logs-integration/298348 "2022-02-28T15:25:01Z")
Hi, I'm trying to get the correct IP for the host.ip property in my logs documents, to be able to utilize all the built in links in kibana but unfortunately I cannot get it to work. The setup is quite easy. I'm running… --- ## [Date indexes as yesterday](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192)
**Author:** [@SKraine](https://discuss.elastic.co/u/SKraine)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 3:16pm UTC](https://discuss.elastic.co/t/date-indexes-as-yesterday/298192 "2022-02-28T15:16:10Z")
Hey Everyone, I am trying to index some statistics into my self-hosted elastic stack. I am using the python API to index the document which has a very simple mapping that is dynamically mapped from a dictionary in pytho… --- ## [Fleet agent - Kubernetes Dashboard](https://discuss.elastic.co/t/fleet-agent-kubernetes-dashboard/298282)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 3:03pm UTC](https://discuss.elastic.co/t/fleet-agent-kubernetes-dashboard/298282 "2022-02-28T15:03:51Z")
i dont have any dashboard, how i add it ? --- ## [Jdbc\_driver\_library default folder in old versions](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416)
**Author:** [@serfisar](https://discuss.elastic.co/u/serfisar)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 2:56pm UTC](https://discuss.elastic.co/t/jdbc-driver-library-default-folder-in-old-versions/298416 "2022-02-28T14:56:49Z")
Hello! Could someone suggest where is default folder for jars in logstash version 2.4.1? I know that beginning from 6 version it is - /usr/share/logstash/logstash-core/lib/jars/ but previous versions had another pa… --- ## [Disable search function in Kibana dashboard and visualisation](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 2:40pm UTC](https://discuss.elastic.co/t/disable-search-function-in-kibana-dashboard-and-visualisation/298133 "2022-02-28T14:40:50Z")
Hi there, we activated X-Pack for our Elasticsearch and Kibana and created different users, roles and spaces. That works great. However, we would like to disable the search for specific users, roles or spaces. Is that … --- ## [Secret in Azure module Metricbeat](https://discuss.elastic.co/t/secret-in-azure-module-metricbeat/298412)
**Author:** [@legos765](https://discuss.elastic.co/u/legos765)\ **Replies:** 0\ **Last updated:** [February 28, 2022, 2:34pm UTC](https://discuss.elastic.co/t/secret-in-azure-module-metricbeat/298412 "2022-02-28T14:34:14Z")
Hello, I'm trying to implement Azure module in Metricbeat version 7.17. And im getting error when it is connecting to Azure: Refresh request failed. Status Code = '401'. Response body: {"error":"invalid\_client","error\_… --- ## [How to use parameters in a stored script that's executed using logstash output plugin](https://discuss.elastic.co/t/how-to-use-parameters-in-a-stored-script-thats-executed-using-logstash-output-plugin/298336)
**Author:** [@Rui\_Goncalves](https://discuss.elastic.co/u/Rui_Goncalves)\ **Replies:** 2\ **Last updated:** [February 28, 2022, 2:34pm UTC](https://discuss.elastic.co/t/how-to-use-parameters-in-a-stored-script-thats-executed-using-logstash-output-plugin/298336 "2022-02-28T14:34:08Z")
Hi, I've a stored script : POST \_scripts/1\_jd\_job\_domain { "script": { "lang": "painless", "params": { "generic\_domain": "generic domain" \[...\] }, "source" : """if ( ctx.\_source.car?.current\_assignmen… --- ## [Sorting and bucket\_selector not working on pipeline aggregation](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 4\ **Last updated:** [February 28, 2022, 2:25pm UTC](https://discuss.elastic.co/t/sorting-and-bucket-selector-not-working-on-pipeline-aggregation/298353 "2022-02-28T14:25:17Z")
Hi Team, I have an index "order" that has order data with seller detail, status, and order value. { sId:1, name: "John", orderId:123 gov:100, rtsStatus:"BRECHED" }, { sId:1, name: "John", orderId:456 gov:150, rtsStatus… --- ## [Chinese Analyzer: Simplified and Traditional (stconvert)](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812)
**Author:** [@Karuna](https://discuss.elastic.co/u/Karuna)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 2:20pm UTC](https://discuss.elastic.co/t/chinese-analyzer-simplified-and-traditional-stconvert/297812 "2022-02-28T14:20:24Z")
I'm creating a search engine for my non-profit org that uses 21 languages, so I also need to support traditional and simplified Chinese as these are our second largest set of readers. I have read a few articles (你们好 - E… --- ## [Readiness probe failed: Error: Got HTTP code 503 but expected a 200](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 1:30pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571 "2022-02-28T13:30:29Z")
Hello, I have an issue where Kibana is not coming up due to a failed status check. I'm using the Helm charts for Elasticsearch and Kibana with some changes that are reflected by the values below. There was a similar is… --- ## [Switch from scripted fields to runtime fields?](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295)
**Author:** [@glushkov](https://discuss.elastic.co/u/glushkov)\ **Replies:** 7\ **Last updated:** [February 28, 2022, 1:22pm UTC](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295 "2022-02-28T13:22:40Z")
Hi, Kibana is warning me since ever when I look at Management \> Index patterns \> \ \> Scripted fields that "Scripted fields" are deprecated and one should use "runtime fields" instead. To be prepared, … --- ## [Unable to retrieve version information from Elasticsearch nodes. unable to verify the first certificate](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-unable-to-verify-the-first-certificate/298371 "2022-02-28T12:54:15Z")
I'm running a one node Elastic cluster with Elasticsearch and Kibana. The configuration worked before on an earlier version about a year ago, however, after Kibanas version automatically updated due to new container imag… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1032) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1034)