# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1041

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1042

---

## [Index alias](https://discuss.elastic.co/t/index-alias/297921)

<div class="topic-metadata">

**Author:** [@Eran\_Hadad](https://discuss.elastic.co/u/Eran_Hadad)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 8:27am UTC](https://discuss.elastic.co/t/index-alias/297921 "2022-02-23T08:27:00Z")

</div>

Hi all, I am a beginner in elastic and I've inherited an environment in elastic cloud. I have an index that ends with a dash, let's call it indexname- Developers wrote code to insert records to this index name. There…

---

## [Why curl command is not showing o/p in proxy server](https://discuss.elastic.co/t/why-curl-command-is-not-showing-o-p-in-proxy-server/297854)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 21\
**Last updated:** [February 23, 2022, 8:25am UTC](https://discuss.elastic.co/t/why-curl-command-is-not-showing-o-p-in-proxy-server/297854 "2022-02-23T08:25:13Z")

</div>

curl os not responding in proxy side, i have restarted ES nodes and then start working fine but again stopped from first response , but get the output in devtools. kindly let me know what all steps need to perform for…

---

## [Overall Min with metric Filter Ratio not showing results on Metric TSVB](https://discuss.elastic.co/t/overall-min-with-metric-filter-ratio-not-showing-results-on-metric-tsvb/295712)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 8:24am UTC](https://discuss.elastic.co/t/overall-min-with-metric-filter-ratio-not-showing-results-on-metric-tsvb/295712 "2022-02-23T08:24:30Z")

</div>

Hi Team, I'm trying to create a metric in TSVB. First, I'm choosing a filter ratio to divide two counts. It's working fine until here. Then, I choose an Overall Min with the metric Filter Ratio, here is when the probl…

---

## [Elasticsearch explicit field mappings in template not taken when data is logged from filebeat through ingest pipeline](https://discuss.elastic.co/t/elasticsearch-explicit-field-mappings-in-template-not-taken-when-data-is-logged-from-filebeat-through-ingest-pipeline/297946)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 2\
**Last updated:** [February 23, 2022, 6:28am UTC](https://discuss.elastic.co/t/elasticsearch-explicit-field-mappings-in-template-not-taken-when-data-is-logged-from-filebeat-through-ingest-pipeline/297946 "2022-02-23T06:28:43Z")

</div>

sir, I have created an index life cycle policy with name lp\_ilp\_fgnew1 Created index template lp\_templateforotherfgutmwaf7 as follows PUT \_index\_template/lp\_templateforotherfgutmwaf7 { "index\_patterns": \["lp\_inde…

---

## [Open Kibana Dashboard on a specific slug](https://discuss.elastic.co/t/open-kibana-dashboard-on-a-specific-slug/297593)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 6:27am UTC](https://discuss.elastic.co/t/open-kibana-dashboard-on-a-specific-slug/297593 "2022-02-23T06:27:01Z")

</div>

We have Kibana running on a VM listening on localhost:5601. Also, we are using an Nginx proxy pass to access the Kibana dashboard over the privateip:80. We are trying to access a specific kibana dashboard on a custom slu…

---

## [Logstash input from Elasticsearch wrong configuration](https://discuss.elastic.co/t/logstash-input-from-elasticsearch-wrong-configuration/297868)

<div class="topic-metadata">

**Author:** [@Syed\_Saqlain\_Hussain](https://discuss.elastic.co/u/Syed_Saqlain_Hussain)\
**Replies:** 2\
**Last updated:** [February 23, 2022, 6:12am UTC](https://discuss.elastic.co/t/logstash-input-from-elasticsearch-wrong-configuration/297868 "2022-02-23T06:12:11Z")

</div>

I want my logstash to take data from Elasticsearch on some server. This is my logstash configuration for input from Elasticsearch input { elasticsearch{ hosts =\> "127.0.0.1" index =\> "alerts-\*" …

---

## [How are interger numbers treated in ElasticSearch?](https://discuss.elastic.co/t/how-are-interger-numbers-treated-in-elasticsearch/297745)

<div class="topic-metadata">

**Author:** [@jordane95](https://discuss.elastic.co/u/jordane95)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 6:07am UTC](https://discuss.elastic.co/t/how-are-interger-numbers-treated-in-elasticsearch/297745 "2022-02-23T06:07:07Z")

</div>

Hey, I'm new to this. I have some questions about Elasticsearch. How are interger numbers treated in this lib? For example, year, age, month...etc. Can I build the index with BERT-tokenizer tokenized documents where ea…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/297938)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 7\
**Last updated:** [February 23, 2022, 6:05am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/297938 "2022-02-23T06:05:07Z")

</div>

we are getting "kibana server not ready yet " error in browser level, below are the kibana logs {"type":"log","@timestamp":"2022-02-22T17:41:26Z","tags":\["error","savedobjects-service"\],"pid":22996,"message":"Unable to…

---

## [Elasticsearch 5.6 scroll query takes longer](https://discuss.elastic.co/t/elasticsearch-5-6-scroll-query-takes-longer/297971)

<div class="topic-metadata">

**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 5:47am UTC](https://discuss.elastic.co/t/elasticsearch-5-6-scroll-query-takes-longer/297971 "2022-02-23T05:47:50Z")

</div>

We are using a scroll query to load all the documents from ES 2.4. It took less than 2 minutes to load 3 million documents. We recently upgrade to ES 5.6 and it takes 10-12 minutes on average. We are using \_doc for sort …

---

## [Grok Parsing numeric field as "NUMBER:field\_name:float" , still Kibana showing string field](https://discuss.elastic.co/t/grok-parsing-numeric-field-as-numberfloat-still-kibana-showing-string-field/297970)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 0\
**Last updated:** [February 23, 2022, 5:29am UTC](https://discuss.elastic.co/t/grok-parsing-numeric-field-as-numberfloat-still-kibana-showing-string-field/297970 "2022-02-23T05:29:01Z")

</div>

HI Team , In my logstash conf file i am parsing fields with grok , and numeric field with - "NUMBER:field\_name:float". But Kibana is still showing this field as string in my index . Value coming in this field will be …

---

## [Error calling webhook \[DEPTH\_ZERO\_SELF\_SIGNED\_CERT\]](https://discuss.elastic.co/t/error-calling-webhook-depth-zero-self-signed-cert/297065)

<div class="topic-metadata">

**Author:** [@angelolol](https://discuss.elastic.co/u/angelolol)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 3:05am UTC](https://discuss.elastic.co/t/error-calling-webhook-depth-zero-self-signed-cert/297065 "2022-02-23T03:05:15Z")

</div>

Hi, I´m working with webhook action where I´m trying to send a request to Jira but I get this error "error calling webhook \[DEPTH\_ZERO\_SELF\_SIGNED\_CERT\]", I change "xpack.actions.ssl.verificationMode : none" in the kiba…

---

## [Profile time cost stat differ profile detail](https://discuss.elastic.co/t/profile-time-cost-stat-differ-profile-detail/297961)

<div class="topic-metadata">

**Author:** [@mxq-151](https://discuss.elastic.co/u/mxq-151)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 2:43am UTC](https://discuss.elastic.co/t/profile-time-cost-stat-differ-profile-detail/297961 "2022-02-23T02:43:26Z")

</div>

{ "took" : 7510, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "skipped" : 0, "failed" : 0 }, "hits" : { "total" : { "value" : 1545576, "relation" : "eq" …

---

## [EQL increase the eql\_sequence memory limit](https://discuss.elastic.co/t/eql-increase-the-eql-sequence-memory-limit/297926)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 1\
**Last updated:** [February 23, 2022, 2:48am UTC](https://discuss.elastic.co/t/eql-increase-the-eql-sequence-memory-limit/297926 "2022-02-23T02:48:28Z")

</div>

Hi all How can i increase the limit of the eql\_sequence in the elastic breaker settings. I constantly got this error while using sequence in eql { "error" : { "root\_cause" : \[ { "type" : "circuit\_b…

---

## [Winlogbeat Index](https://discuss.elastic.co/t/winlogbeat-index/297803)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 3\
**Last updated:** [February 23, 2022, 2:33am UTC](https://discuss.elastic.co/t/winlogbeat-index/297803 "2022-02-23T02:33:26Z")

</div>

Hello there, I´m trying the elk stack 8 and I´m a bit lost. Configured the security portion and when I send the logs over to the Elasticsearch cluster, I cannot see the index on index management. But I can see after tick…

---

## [Enable and configure the apache2 module](https://discuss.elastic.co/t/enable-and-configure-the-apache2-module/297882)

<div class="topic-metadata">

**Author:** [@Mariem](https://discuss.elastic.co/u/Mariem)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 11:08pm UTC](https://discuss.elastic.co/t/enable-and-configure-the-apache2-module/297882 "2022-02-22T23:08:11Z")

</div>

Hi , i'm installing apache logs and i'm stuck here because i'm using docker can someone help me ?

---

## [Creating snapshot every six months](https://discuss.elastic.co/t/creating-snapshot-every-six-months/297870)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 11:05pm UTC](https://discuss.elastic.co/t/creating-snapshot-every-six-months/297870 "2022-02-22T23:05:56Z")

</div>

Hi, I have lot of records in only one index so I want to create snapshots backup of index every six months and point those to different index pattern so that I can have different dashboards for every six months and one …

---

## [Fleet Elasticsearch CA trusted fingerprint](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200)

<div class="topic-metadata">

**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\
**Replies:** 7\
**Last updated:** [February 22, 2022, 10:05pm UTC](https://discuss.elastic.co/t/fleet-elasticsearch-ca-trusted-fingerprint/297200 "2022-02-22T22:05:59Z")

</div>

Hello community, i am trying to setup my first fleet server and figured out that i can set the ca fingerprint as default. So I tried under fFleet \> Settings \> Output to set as wanted but i am getting the error: CA tru…

---

## [Kibana not found error when accessing Fleet on 8.0.0](https://discuss.elastic.co/t/kibana-not-found-error-when-accessing-fleet-on-8-0-0/297827)

<div class="topic-metadata">

**Author:** [@samiusan](https://discuss.elastic.co/u/samiusan)\
**Replies:** 2\
**Last updated:** [February 22, 2022, 9:10pm UTC](https://discuss.elastic.co/t/kibana-not-found-error-when-accessing-fleet-on-8-0-0/297827 "2022-02-22T21:10:45Z")

</div>

Hi, I’ve recently started to upgrade my lab environment to 8.0.0. After the upgrade I can no longer access the Fleet console under Kibana (Kibana -\> Management -\> Fleet). When accessing it I receive an error message of…

---

## [Json { source =\> "message" } not parsing all of it](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430)

<div class="topic-metadata">

**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\
**Replies:** 20\
**Last updated:** [February 22, 2022, 8:47pm UTC](https://discuss.elastic.co/t/json-source-message-not-parsing-all-of-it/297430 "2022-02-22T20:47:34Z")

</div>

Hello, I'm new to Logstash and was wondering if someone could help with my filter and how can I parse the rest of my json fields the intent is to bring out the other fields in "message" such that I can map them to ECS: h…

---

## [Kibana Clone Rule/Alert](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 2\
**Last updated:** [February 22, 2022, 8:26pm UTC](https://discuss.elastic.co/t/kibana-clone-rule-alert/297639 "2022-02-22T20:26:31Z")

</div>

Hi All, Is it possible to clone a rule under Stack Management -\> Rules? Currently on 7.17.0, but don't seem to see any option for cloning an existing rule. Would be very helpful in reducing the time it takes to build si…

---

## [Is there a way to automatically connect to another ES Node when the connected ES Node stops?](https://discuss.elastic.co/t/is-there-a-way-to-automatically-connect-to-another-es-node-when-the-connected-es-node-stops/296596)

<div class="topic-metadata">

**Author:** [@Simon\_Benjamin](https://discuss.elastic.co/u/Simon_Benjamin)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 8:10pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-automatically-connect-to-another-es-node-when-the-connected-es-node-stops/296596 "2022-02-22T20:10:12Z")

</div>

Hi all. There are three ES Nodes, each of which is a master eligible node. Kibana is connected to one of them (192.168.20.100), and the hosts are configured in kibana.yml as follows. elasticsearch.hosts: \["http://192.…

---

## [Why restart kibana error?](https://discuss.elastic.co/t/why-restart-kibana-error/296926)

<div class="topic-metadata">

**Author:** [@XuShall](https://discuss.elastic.co/u/XuShall)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 8:01pm UTC](https://discuss.elastic.co/t/why-restart-kibana-error/296926 "2022-02-22T20:01:37Z")

</div>

I am using the latest version of Elasticsearch and kibana, start Elasticsearch successfully, start kibana successfully, but when I cancel the kibana process with ctrl+c and restart it again, an error will be reported. Th…

---

## [Login Failed error . giving : A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/login-failed-error-giving-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/297937)

<div class="topic-metadata">

**Author:** [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 7:56pm UTC](https://discuss.elastic.co/t/login-failed-error-giving-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/297937 "2022-02-22T19:56:55Z")

</div>

Hi ALL, Inside my logs of logstash i am receiving the error as such : \[2022-02-22T17:00:11,265\]\[ERROR\]\[logstash.javapipeline \] A plugin had an unrecoverable error. Will restart this plugin. Pipeline\_id:doordash\_aut…

---

## [Hostname/IP does not match certificate's altnames](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/297928)

<div class="topic-metadata">

**Author:** [@Emile\_Plas](https://discuss.elastic.co/u/Emile_Plas)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 7:33pm UTC](https://discuss.elastic.co/t/hostname-ip-does-not-match-certificates-altnames/297928 "2022-02-22T19:33:40Z")

</div>

I am trying to set up Elasticsearch and kibana 8 on a new machine. For one or another reason kibana gives me the following error: Hostname/IP does not match certificate's altnames. IP: ... is not in the certificate's al…

---

## [Keep getting Socket hang up](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 7:09pm UTC](https://discuss.elastic.co/t/keep-getting-socket-hang-up/296245 "2022-02-22T19:09:56Z")

</div>

I keep getting socket hang up. I have all hosts accessible from each other.Telnet works. Still end up with socket hang up and econnreset {"type":"log","@timestamp":"2022-02-04T01:40:36Z","tags":\["error","elasticsearch"…

---

## [Unable to log in after installation](https://discuss.elastic.co/t/unable-to-log-in-after-installation/297933)

<div class="topic-metadata">

**Author:** [@Nestoter](https://discuss.elastic.co/u/Nestoter)\
**Replies:** 1\
**Last updated:** [February 22, 2022, 7:02pm UTC](https://discuss.elastic.co/t/unable-to-log-in-after-installation/297933 "2022-02-22T19:02:27Z")

</div>

Hi, I'm installing Elastic following this: https://www.elastic.co/guide/en/elasticsearch/reference/8.0/deb.html Step 1. wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.0.0-amd64.deb Step 2. s…

---

## [How to enable security APi](https://discuss.elastic.co/t/how-to-enable-security-api/297259)

<div class="topic-metadata">

**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\
**Replies:** 7\
**Last updated:** [February 22, 2022, 6:31pm UTC](https://discuss.elastic.co/t/how-to-enable-security-api/297259 "2022-02-22T18:31:25Z")

</div>

how to enable security APi , please guide with steps

---

## [ILM, creation\_date and reindexing](https://discuss.elastic.co/t/ilm-creation-date-and-reindexing/297469)

<div class="topic-metadata">

**Author:** [@nisow95612](https://discuss.elastic.co/u/nisow95612)\
**Replies:** 4\
**Last updated:** [February 22, 2022, 6:19pm UTC](https://discuss.elastic.co/t/ilm-creation-date-and-reindexing/297469 "2022-02-22T18:19:15Z")

</div>

Hello Elastic people, this is a follow-up to Is it possible change creation\_date on reindexed Indexes to get Life cycle Management to work on old indexes My usecase - so to say - is learning to use ES while trying to b…

---

## [\[Logstash\] Grok Filter does not work \_grokparsefailure](https://discuss.elastic.co/t/logstash-grok-filter-does-not-work-grokparsefailure/297823)

<div class="topic-metadata">

**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\
**Replies:** 15\
**Last updated:** [February 22, 2022, 5:54pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-does-not-work-grokparsefailure/297823 "2022-02-22T17:54:26Z")

</div>

Hi, I am trying to parse this: # Time: 2022-02-21T21:06:30.359422Z\\n# User@Host: backoffice\[backoffice\] @ \[0.0.0.0\] Id: 5373\\n# Query\_time: 13.690075 Lock\_time: 0.000000 Rows\_sent: 0 Rows\_examined: 189879\\nSET tim…

---

## [Failed to locate that index-pattern](https://discuss.elastic.co/t/failed-to-locate-that-index-pattern/296844)

<div class="topic-metadata">

**Author:** [@Kirk\_Sutherland](https://discuss.elastic.co/u/Kirk_Sutherland)\
**Replies:** 4\
**Last updated:** [February 22, 2022, 5:27pm UTC](https://discuss.elastic.co/t/failed-to-locate-that-index-pattern/296844 "2022-02-22T17:27:45Z")

</div>

I'm very new to elastic and through my many attempts at setup, I think I may have deleted something I shouldn't have - possibly an index or an index pattern, maybe both. Whenever I click on the "logs" link in kibana I a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1040)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1042)
