# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1145

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1146

---

## [Logstash + Redis](https://discuss.elastic.co/t/logstash-redis/289100)

<div class="topic-metadata">

**Author:** [@Claudio\_Ract\_Costa](https://discuss.elastic.co/u/Claudio_Ract_Costa)\
**Replies:** 8\
**Last updated:** [November 30, 2021, 8:44pm UTC](https://discuss.elastic.co/t/logstash-redis/289100 "2021-11-30T20:44:38Z")

</div>

Hi guys, I am trying to figure out how to use Logstash with Redis Does anyone know how to configure logstash to insert a specific field in message in Redis ? For example, I have a json message with some fields, like: …

---

## [Nessus XML Parsing Errors and No output](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599)

<div class="topic-metadata">

**Author:** [@James\_Doherty](https://discuss.elastic.co/u/James_Doherty)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 8:19pm UTC](https://discuss.elastic.co/t/nessus-xml-parsing-errors-and-no-output/290599 "2021-11-30T20:19:30Z")

</div>

I am having a really difficult time getting my Nessus files to parse correctly if at all. This is my Logstash config: input { file { path =\> "/opt/nessus/\*" mode =\> "read" start\_position =\> "beginning" …

---

## [About the timeout of elasticsearch](https://discuss.elastic.co/t/about-the-timeout-of-elasticsearch/290555)

<div class="topic-metadata">

**Author:** [@zekaifeng](https://discuss.elastic.co/u/zekaifeng)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 12:14pm UTC](https://discuss.elastic.co/t/about-the-timeout-of-elasticsearch/290555 "2021-11-30T12:14:10Z")

</div>

When using the Java highlevel API to execute a query, the timeout is specified. The client timeout is abnormal, but the server is still querying. This timeout only be for the client? Or another way of saying that the …

---

## [Some networks were defined but are not used by any service: elastic](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480)

<div class="topic-metadata">

**Author:** [@iruushi\_lol](https://discuss.elastic.co/u/iruushi_lol)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 6:43pm UTC](https://discuss.elastic.co/t/some-networks-were-defined-but-are-not-used-by-any-service-elastic/290480 "2021-11-30T18:43:36Z")

</div>

hey, i have a little problem with elastic, i have a error message : some networks were defined but are not used by any service: elastic, i have install kibana and this error appeared. i want to create ELK server on doc…

---

## [ES 1.7.1 - Node health chcks](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562)

<div class="topic-metadata">

**Author:** [@Deepak\_Soni](https://discuss.elastic.co/u/Deepak_Soni)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 8:23pm UTC](https://discuss.elastic.co/t/es-1-7-1-node-health-chcks/290562 "2021-11-30T20:23:09Z")

</div>

Hello, We have a ES cluster using very old version of Elasticsearch 1.7.1. We are hosting it using EC2. We had a data node failure caused by EBS impairment. This failure was not detected as node failure by the data node …

---

## [Multiple Data Formats in TSVB causes display raw value](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/multiple-data-formats-in-tsvb-causes-display-raw-value/290454 "2021-11-30T19:49:45Z")

</div>

Hello, I recently upgraded to elastic stack 7.15 and one of my TSVB visualizations seems to have broke. the problem seems to come from adding a second type of data format to the graph see here the working graph ( using…

---

## [Creating different indexes for different modules from filebeat](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499)

<div class="topic-metadata">

**Author:** [@Lenny](https://discuss.elastic.co/u/Lenny)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 7:47pm UTC](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499 "2021-11-30T19:47:50Z")

</div>

Hello, I'm very new to elk stack so please bear with me. I'm learning Elastic Stack from scratch and I have paid for and taken a few classes, but none of the classes I have gone through seem to go very in depth for the i…

---

## [Heartbeat automatic import dashboards failed](https://discuss.elastic.co/t/heartbeat-automatic-import-dashboards-failed/290572)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 7:25pm UTC](https://discuss.elastic.co/t/heartbeat-automatic-import-dashboards-failed/290572 "2021-11-30T19:25:36Z")

</div>

Hey there, using ELK v.7.15.2 I was trying to import Heartbeat dashboards into Kibana. I set the following parameters: setup.dashboards.enabled: true but I am facing the following error: Exiting: Error importing Ki…

---

## [Heartbeat processors variable in docker-compose file](https://discuss.elastic.co/t/heartbeat-processors-variable-in-docker-compose-file/290582)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 7:16pm UTC](https://discuss.elastic.co/t/heartbeat-processors-variable-in-docker-compose-file/290582 "2021-11-30T19:16:59Z")

</div>

Hi, is it possible to provide variable required by a specific processor (i.e. add\_observer\_metadata) directly into docker-compose file? Something like: command: \> heartbeat -e -E processors.add\_observer\_meta…

---

## [Mapping conflict](https://discuss.elastic.co/t/mapping-conflict/290571)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 7:16pm UTC](https://discuss.elastic.co/t/mapping-conflict/290571 "2021-11-30T19:16:08Z")

</div>

I have mapping conflict. I know which field it has it. and I know what happen. using 7.14.1 basically one of the field which suppose to be float 0.0 become text "0.0" I scan whole index and updated about 17,000 docume…

---

## [Copy String field to new Integer Field gives error](https://discuss.elastic.co/t/copy-string-field-to-new-integer-field-gives-error/290590)

<div class="topic-metadata">

**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 6:31pm UTC](https://discuss.elastic.co/t/copy-string-field-to-new-integer-field-gives-error/290590 "2021-11-30T18:31:07Z")

</div>

Hello I have a keyword field that it should be a numeric instead. To avoid reindexing all my data I created a new field with the right numeric mapping. I would like to add the old data to the new mapping I am trying th…

---

## [Import and load HTML+Js in Kibana as a visualization panel](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834)

<div class="topic-metadata">

**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 5:03pm UTC](https://discuss.elastic.co/t/import-and-load-html-js-in-kibana-as-a-visualization-panel/50834 "2021-11-30T17:03:25Z")

</div>

Hi, I have created a JS+HTML package which interacts with Elasticsearch and displays data in the format I want. I just want to display it on my Kibana dashboard. It's okay if it does not interact with other panels, but…

---

## [Canvas pointseries not working with csv](https://discuss.elastic.co/t/canvas-pointseries-not-working-with-csv/290424)

<div class="topic-metadata">

**Author:** [@mmR](https://discuss.elastic.co/u/mmR)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:43pm UTC](https://discuss.elastic.co/t/canvas-pointseries-not-working-with-csv/290424 "2021-11-30T16:43:09Z")

</div>

Hi there, I have a problem with kibana canvas pointseries. one of the example codes do not work. csv "fruit,stock kiwi,10 banana,5" | clog | pointseries color=fruit size=stock | clog | pie | render The first clog…

---

## [Best practice for handling \_ids in get and search results](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500)

<div class="topic-metadata">

**Author:** [@davestewart](https://discuss.elastic.co/u/davestewart)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500 "2021-11-30T16:19:52Z")

</div>

Hello, Frontend engineer here, slowly improving at using Elasticsearch. Does anyone have any advice on how to best work with document \_ids, specifically with regards to sending them to the front end after a \_search or \_…

---

## [Attachment Pipeline Support for Old MS Word and Excel Format](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141)

<div class="topic-metadata">

**Author:** [@David\_Chan](https://discuss.elastic.co/u/David_Chan)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 4:14pm UTC](https://discuss.elastic.co/t/attachment-pipeline-support-for-old-ms-word-and-excel-format/290141 "2021-11-30T16:14:23Z")

</div>

Hi All! I'm uploading a Microsoft Word in .doc format, instead of .docx, to Elasticsearch using attachment pipeline, and I receive the following response. { "error": { "root\_cause": \[ { …

---

## [FScrawler does not scans the \`/tmp/es\`](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417)

<div class="topic-metadata">

**Author:** [@ehsan\_kabiri\_33](https://discuss.elastic.co/u/ehsan_kabiri_33)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 4:01pm UTC](https://discuss.elastic.co/t/fscrawler-does-not-scans-the-tmp-es/290417 "2021-11-30T16:01:32Z")

</div>

Using Debian 10, Elasticsearch7,Java jdk 11 and FScrawler, when I run the crawler, it only index the files in /tmp/es directory at first lunch after first setup of \_settings.yaml. At first initialize, it seems good cau…

---

## [File ingest timestamp question](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566)

<div class="topic-metadata">

**Author:** [@hagaluly](https://discuss.elastic.co/u/hagaluly)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 3:25pm UTC](https://discuss.elastic.co/t/file-ingest-timestamp-question/290566 "2021-11-30T15:25:45Z")

</div>

by default when i ingest a single json file kibana present timestamp at the time of the ingesting process. is there a way to use a timestamp record within the json and present it in kibana as the ingesting time?

---

## [Elasticsearch multiple connections using python](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458)

<div class="topic-metadata">

**Author:** [@Zouhair](https://discuss.elastic.co/u/Zouhair)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-multiple-connections-using-python/290458 "2021-11-30T15:00:50Z")

</div>

Hi, I am using python to connect to my Elasticsearch and execute a search query. I have noticed that the python Elasticsearch module is making 2 connexion to the specified cluster. is that normal ? if not how can i co…

---

## [Unable to bind specific network interface to logstash](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556)

<div class="topic-metadata">

**Author:** [@hari97](https://discuss.elastic.co/u/hari97)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 2:32pm UTC](https://discuss.elastic.co/t/unable-to-bind-specific-network-interface-to-logstash/290556 "2021-11-30T14:32:12Z")

</div>

I have two interfaces eth0 and eth2. Network traffic of systems reaching to eth2 interface. I have Logstash instance which was working good for network traffic of default network interface (eth0). My requirement is log…

---

## [Kiaban - Controls (Option list) on date field use timestamp](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409)

<div class="topic-metadata">

**Author:** [@SalvoDM91](https://discuss.elastic.co/u/SalvoDM91)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 2:31pm UTC](https://discuss.elastic.co/t/kiaban-controls-option-list-on-date-field-use-timestamp/290409 "2021-11-30T14:31:27Z")

</div>

Hi All, I'm new on Kibana and I have a question about controls. In Discovery section I can see the list of my fields and one of them is important for me: dt\_reference\_date which is in this format YYYY-MM-DD HH:ii:ss. …

---

## [Fleet server - debug logs](https://discuss.elastic.co/t/fleet-server-debug-logs/290441)

<div class="topic-metadata">

**Author:** [@FALEN](https://discuss.elastic.co/u/FALEN)\
**Replies:** 3\
**Last updated:** [November 30, 2021, 2:00pm UTC](https://discuss.elastic.co/t/fleet-server-debug-logs/290441 "2021-11-30T14:00:23Z")

</div>

Hi all, Just updated to 7.15.1, and trying to configure fleet. Having some problems, but cannot find logs and spesific errors to trace. So i need to learn how to enable debug logging for Fleet Server Just found debug …

---

## [\[WARN\] Received plaintext http traffic on an https channel](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495)

<div class="topic-metadata">

**Author:** [@devashishsingh](https://discuss.elastic.co/u/devashishsingh)\
**Replies:** 5\
**Last updated:** [November 30, 2021, 12:55pm UTC](https://discuss.elastic.co/t/warn-received-plaintext-http-traffic-on-an-https-channel/290495 "2021-11-30T12:55:48Z")

</div>

Elasticsearch.log file error \[WARN \]\[o.e.x.s.t.n.SecurityNetty4HttpServerTransport\] \[node-1\] received plaintext http traffic on an https channel, closing connection Netty4HttpChannel{localAddress=/:9200, remoteAddress=/…

---

## [Issue while running FSCrawler on new install of Windows Server 2016](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524)

<div class="topic-metadata">

**Author:** [@Steveh15](https://discuss.elastic.co/u/Steveh15)\
**Replies:** 2\
**Last updated:** [November 30, 2021, 12:42pm UTC](https://discuss.elastic.co/t/issue-while-running-fscrawler-on-new-install-of-windows-server-2016/290524 "2021-11-30T12:42:36Z")

</div>

Hello, My apologies if I have missed any data but I am new to ES. I get the following error when trying to run FSCrawler: Error: Could not find or load main class Files\\Elasticsearch\\fscrawler-es7-2.7.config.log4j2.xm…

---

## [Custom Logs integration on Fleet: Select custom index](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542)

<div class="topic-metadata">

**Author:** [@alessio.dalbianco](https://discuss.elastic.co/u/alessio.dalbianco)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 12:16pm UTC](https://discuss.elastic.co/t/custom-logs-integration-on-fleet-select-custom-index/290542 "2021-11-30T12:16:25Z")

</div>

Hello, we are trying to setup a Custom Log integration in order to grab some logs from our servers. The logs are correctly captured, however there is no way to specify a custom index, Fleet creates its own data stream w…

---

## [Is there a way to clean .kibana\* indices? I got 22 of them!](https://discuss.elastic.co/t/is-there-a-way-to-clean-kibana-indices-i-got-22-of-them/290287)

<div class="topic-metadata">

**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\
**Replies:** 4\
**Last updated:** [November 30, 2021, 11:07am UTC](https://discuss.elastic.co/t/is-there-a-way-to-clean-kibana-indices-i-got-22-of-them/290287 "2021-11-30T11:07:03Z")

</div>

I'm running a cluster on Elastic Cloud, in which I have 3 index. But my cluster is also filled with plenty of "system indices" I never really wanted: .kibana-event-log-7.15.2-000001 .kibana\_task\_manager\_7.15.2\_001 .se…

---

## [How can I use "AnalyticsPlugin" to build my own Elasticsearch Node?](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548)

<div class="topic-metadata">

**Author:** [@ZheHu](https://discuss.elastic.co/u/ZheHu)\
**Replies:** 0\
**Last updated:** [November 30, 2021, 10:29am UTC](https://discuss.elastic.co/t/how-can-i-use-analyticsplugin-to-build-my-own-elasticsearch-node/290548 "2021-11-30T10:29:49Z")

</div>

Hi, community! I'm a freshman to Elasticsearch, recently, when I tried to build embedded test environment through InternalSettingsPreparer.prepareEnvironment(), I found that AnalyticsPlugin cannot be used (I want to use…

---

## [Field available in Discover is not available in Visualizations](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987)

<div class="topic-metadata">

**Author:** [@WimM](https://discuss.elastic.co/u/WimM)\
**Replies:** 6\
**Last updated:** [November 30, 2021, 10:06am UTC](https://discuss.elastic.co/t/field-available-in-discover-is-not-available-in-visualizations/287987 "2021-11-30T10:06:56Z")

</div>

Hi We've setup ELK/Kibana for one of our applications and using the Discover "Top 5" feature we could quickly identify a specific issue: I wanted to get this exact same thing (top 5 of field "message") in a Visualiza…

---

## [How to send data via Logstash](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947)

<div class="topic-metadata">

**Author:** [@smam](https://discuss.elastic.co/u/smam)\
**Replies:** 10\
**Last updated:** [November 30, 2021, 9:30am UTC](https://discuss.elastic.co/t/how-to-send-data-via-logstash/289947 "2021-11-30T09:30:13Z")

</div>

Hello, yes. This should be very common but I cannot send data to Elasticsearch-or I cannot find it there. Either way I am haven trouble using the data. What I am doing: Filebeat sends a collection of Log-Files to Logst…

---

## [Custom watcher - new document inserted](https://discuss.elastic.co/t/custom-watcher-new-document-inserted/290284)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 1\
**Last updated:** [November 30, 2021, 9:05am UTC](https://discuss.elastic.co/t/custom-watcher-new-document-inserted/290284 "2021-11-30T09:05:01Z")

</div>

Hi, how can I create an alert triggered when a document is inserted in a particular index? The alert should trigger an email with the content of the document. Someone can help me with a custom watcher? Thanks

---

## [How to merge aggregation bucket in Elasticsearch?](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230)

<div class="topic-metadata">

**Author:** [@hyun](https://discuss.elastic.co/u/hyun)\
**Replies:** 7\
**Last updated:** [November 30, 2021, 9:04am UTC](https://discuss.elastic.co/t/how-to-merge-aggregation-bucket-in-elasticsearch/290230 "2021-11-30T09:04:53Z")

</div>

Query GET /\_search { "size" : 0, "query" : { "ids" : { "types" : \[ \], "values" : \[ "someId1", "someId2", "someId3" ... \] } }, "aggregations" : { "how\_to\_merge" : { "terms" : { …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1144)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1146)
