# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1273 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1274 --- ## [Unable to communicate with Fleet Server after Upgrade to 7.14](https://discuss.elastic.co/t/unable-to-communicate-with-fleet-server-after-upgrade-to-7-14/280388)
**Author:** [@thleh](https://discuss.elastic.co/u/thleh)\ **Replies:** 15\ **Last updated:** [August 20, 2021, 7:08am UTC](https://discuss.elastic.co/t/unable-to-communicate-with-fleet-server-after-upgrade-to-7-14/280388 "2021-08-20T07:08:18Z")
Hi, after Upgrading to 7.14 (elasticsearch and elastic-agent hosting fleet-server) i'm unable to start other elastic-agents version 7.14. 2021-08-04T09:11:32.489+0200 ERROR fleet/fleet\_gateway.go:205 Could not communic… --- ## [Packetbeat performance and sizing](https://discuss.elastic.co/t/packetbeat-performance-and-sizing/281769)
**Author:** [@gintek](https://discuss.elastic.co/u/gintek)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 6:04am UTC](https://discuss.elastic.co/t/packetbeat-performance-and-sizing/281769 "2021-08-20T06:04:43Z")
Hello, I'm planning to use packetbeat on dedicated servers, getting the traffic from mirror ports on switch. Dedicated server will Virtual Machine with Linux of course. I couldn't find in documentation what resources … --- ## [Ilm policy for existing index](https://discuss.elastic.co/t/ilm-policy-for-existing-index/282036)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 5:29am UTC](https://discuss.elastic.co/t/ilm-policy-for-existing-index/282036 "2021-08-20T05:29:08Z")
Hi Team, I am trying to understand how does ilm policy also setup new indices. I understand that one needs to first setup the ilm policy which is then assigned to a template e.g { "index\_patterns": \["test-\*"\], "t… --- ## [Winlogbeat authorization error on AWS ELK](https://discuss.elastic.co/t/winlogbeat-authorization-error-on-aws-elk/281757)
**Author:** [@Juan\_Gutierrez](https://discuss.elastic.co/u/Juan_Gutierrez)\ **Replies:** 14\ **Last updated:** [August 20, 2021, 4:53am UTC](https://discuss.elastic.co/t/winlogbeat-authorization-error-on-aws-elk/281757 "2021-08-20T04:53:43Z")
Hi there, I have an AWS Elasticsearch stack - version 7.10 and I would like to ship our fleet of EC2's Windows event logs to it. I've followed the documentation and used an earlier version of Winlogbeat - version 7.12.… --- ## [Convert elasticsearch query output of float fields( latitude & longtitude) to String](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001)
**Author:** [@Sagar\_kadu](https://discuss.elastic.co/u/Sagar_kadu)\ **Replies:** 3\ **Last updated:** [August 19, 2021, 8:59pm UTC](https://discuss.elastic.co/t/convert-elasticsearch-query-output-of-float-fields-latitude-longtitude-to-string/282001 "2021-08-19T20:59:18Z")
I'm using elasticsearch input plugin to fetch data from elasticsearch using scroll api and it returns JSON document which consists of \[customerAddresses\] array containing latitude & logitude fields of float type...I woul… --- ## [Remove hashtags "#" using gsub](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028)
**Author:** [@mario\_kazela](https://discuss.elastic.co/u/mario_kazela)\ **Replies:** 2\ **Last updated:** [August 20, 2021, 3:53am UTC](https://discuss.elastic.co/t/remove-hashtags-using-gsub/282028 "2021-08-20T03:53:02Z")
Hi, I have some trouble using gsub on logstash because I'm still new on logstash configuration. Just want to asking. Example I have data like "#ynwa". How to remove "#" and leave the word "ynwa" only using gsub ? mutat… --- ## [Connection reset by peer](https://discuss.elastic.co/t/connection-reset-by-peer/281667)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 1\ **Last updated:** [August 20, 2021, 12:58am UTC](https://discuss.elastic.co/t/connection-reset-by-peer/281667 "2021-08-20T00:58:31Z")
filebeat now emits the following error 2021-08-17T06:00:10.472+0900 ERROR \[logstash\] logstash/async.go:280 Failed to publish events caused by: write tcp XXX.XXX.XXX.XXX:XXX-\>XXX.XXX.XXX.XXX:XXX: write: conne… --- ## [Ability to remove blank range of dates from Kibana visualization](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864)
**Author:** [@BMGR](https://discuss.elastic.co/u/BMGR)\ **Replies:** 3\ **Last updated:** [August 19, 2021, 10:38pm UTC](https://discuss.elastic.co/t/ability-to-remove-blank-range-of-dates-from-kibana-visualization/281864 "2021-08-19T22:38:48Z")
Hey all, I'm trying to build a dashboard that hones in on two primary time frames - monthly and yearly. In order to view yearly values, it appears that my date range needs to be set to that year. For the monthly range… --- ## [How can I change the default Elasticsearch port that Kibana listens?](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860)
**Author:** [@raylight](https://discuss.elastic.co/u/raylight)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 10:14pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-default-elasticsearch-port-that-kibana-listens/281860 "2021-08-19T22:14:40Z")
I already have an instance of Logstash, Elasticsearch and Kibana running on my computer with the version 7.4.2... I'd like to run a different instance of them with the version 7.14.0... So, in these new instances, I've c… --- ## [Run Elasticsearch on port other than 9200](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830)
**Author:** [@mba](https://discuss.elastic.co/u/mba)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 10:12pm UTC](https://discuss.elastic.co/t/run-elasticsearch-on-port-other-than-9200/281830 "2021-08-19T22:12:55Z")
I want to run elasticsearch on port other than 9200, so I changed http.port=9220 in elasticsearch.yml but still it is running on port number 9200 --- ## [Filtering and ordering](https://discuss.elastic.co/t/filtering-and-ordering/282015)
**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 10:03pm UTC](https://discuss.elastic.co/t/filtering-and-ordering/282015 "2021-08-19T22:03:49Z")
I would like to know the reason for below case Case 1 : Consider, I have applied a filter on documents and the order of documents in response is 1,2,3,4. Case 2: I have updated a field in the document 2, then If I exec… --- ## [Metricbeat ZFS capture volume size](https://discuss.elastic.co/t/metricbeat-zfs-capture-volume-size/282012)
**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\ **Replies:** 0\ **Last updated:** [August 19, 2021, 9:26pm UTC](https://discuss.elastic.co/t/metricbeat-zfs-capture-volume-size/282012 "2021-08-19T21:26:10Z")
After a few hours I've been unable to get Metricbeat to read ZFS stats. It looks like GitHub - maireanu/zfsbeat has gone stale as the last work was 2 years ago. Seeing as ZFS is nodev in /proc/filesystems the default f… --- ## [Extration query for each item that has timestamps in each of the last three days](https://discuss.elastic.co/t/extration-query-for-each-item-that-has-timestamps-in-each-of-the-last-three-days/282011)
**Author:** [@Scott\_S](https://discuss.elastic.co/u/Scott_S)\ **Replies:** 0\ **Last updated:** [August 19, 2021, 9:20pm UTC](https://discuss.elastic.co/t/extration-query-for-each-item-that-has-timestamps-in-each-of-the-last-three-days/282011 "2021-08-19T21:20:51Z")
I'm trying to write an extraction query to get every timestamp for all items only if the item has timestamps in each of the last three days. For context, what I'm doing is tracking tests - if they've executed in each of … --- ## [How to customize Maps plugin in kibana?](https://discuss.elastic.co/t/how-to-customize-maps-plugin-in-kibana/281644)
**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 8:22pm UTC](https://discuss.elastic.co/t/how-to-customize-maps-plugin-in-kibana/281644 "2021-08-19T20:22:27Z")
Hi, I want to customize Maps plugin in kibana, but I can't find where sources are located. I mean this Maps plugin Looks like it is already pre-build and combined into one file in built\_assets/dlls folder. Is there … --- ## [Timezone logstash date filter](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791)
**Author:** [@Bigbad](https://discuss.elastic.co/u/Bigbad)\ **Replies:** 4\ **Last updated:** [August 19, 2021, 6:25pm UTC](https://discuss.elastic.co/t/timezone-logstash-date-filter/281791 "2021-08-19T18:25:50Z")
Hello, I want to have another date field in Europe/Paris timezone with logstash date filter. filter { mutate { add\_field =\>{ "my\_date" =\> "%{@timestamp}" } } date { match =\> \["my\_date", "yyyy-… --- ## [Use azure active directory with NEST/Elasticsearch.net](https://discuss.elastic.co/t/use-azure-active-directory-with-nest-elasticsearch-net/280893)
**Author:** [@Abhishek\_Tripathi](https://discuss.elastic.co/u/Abhishek_Tripathi)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 6:23pm UTC](https://discuss.elastic.co/t/use-azure-active-directory-with-nest-elasticsearch-net/280893 "2021-08-19T18:23:52Z")
We are working on a project where we are authenticating users with Azure Active Directory. Upon the successful authentication, the user's browsers receive an Id and Access token, and then we use the same access token to … --- ## [Bool From JDBC](https://discuss.elastic.co/t/bool-from-jdbc/280850)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 6:22pm UTC](https://discuss.elastic.co/t/bool-from-jdbc/280850 "2021-08-19T18:22:02Z")
Is it possible to query a SQL database and, if the results have a column value matching a given string, return a boolean? I am wanting to query a table whose results will return multiple rows. I want to check the colum… --- ## [Is there a way to deploy a custom logstash input when using Elastic Cloud?](https://discuss.elastic.co/t/is-there-a-way-to-deploy-a-custom-logstash-input-when-using-elastic-cloud/281874)
**Author:** [@Mrc0113](https://discuss.elastic.co/u/Mrc0113)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 5:17pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-deploy-a-custom-logstash-input-when-using-elastic-cloud/281874 "2021-08-19T17:17:52Z")
Is there a way to deploy a custom logstash input when using Elastic Cloud? I would like to be able to ingest messages into Elasticsearch from a Solace Event Broker. Options would be via MQTT, JMS or a custom Solace (SMF)… --- ## [Kibana Stack Managent Built-In Alerts Missing](https://discuss.elastic.co/t/kibana-stack-managent-built-in-alerts-missing/280088)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 5\ **Last updated:** [August 19, 2021, 5:02pm UTC](https://discuss.elastic.co/t/kibana-stack-managent-built-in-alerts-missing/280088 "2021-08-19T17:02:37Z")
We are in the process of migrating to a new cluster, and I noticed on the new cluster that Stack Monitoring in Kibana is missing the default alert rules in the Space I would like to configure Actions for them. I do see t… --- ## [Show more categories Y-axis in the vega plot](https://discuss.elastic.co/t/show-more-categories-y-axis-in-the-vega-plot/279895)
**Author:** [@Nanelastic](https://discuss.elastic.co/u/Nanelastic)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 4:52pm UTC](https://discuss.elastic.co/t/show-more-categories-y-axis-in-the-vega-plot/279895 "2021-08-19T16:52:18Z")
I have the written custom code for boxplots. On Y axis I have categories of type "nominal" and on X axis I have values which are type "Quantitative" I have a total of 100 categories and I want to display all the categor… --- ## [How To Perform Certain Operations If Filter Is Not Exist in Vega Visualisation](https://discuss.elastic.co/t/how-to-perform-certain-operations-if-filter-is-not-exist-in-vega-visualisation/279866)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 4:40pm UTC](https://discuss.elastic.co/t/how-to-perform-certain-operations-if-filter-is-not-exist-in-vega-visualisation/279866 "2021-08-19T16:40:54Z")
Is it possible to code Vega in such a way as to perform certain operations if filter is not applied? objective: if the filter is applied, then perform code given below, if filter is not applied then perform sum of a dif… --- ## [Customization in Data table](https://discuss.elastic.co/t/customization-in-data-table/281162)
**Author:** [@Mathu](https://discuss.elastic.co/u/Mathu)\ **Replies:** 2\ **Last updated:** [August 19, 2021, 4:28pm UTC](https://discuss.elastic.co/t/customization-in-data-table/281162 "2021-08-19T16:28:10Z")
Hi, Is it possible to achieve these dots in table based on a condition (eg:\>50 -green, \<50 -Red) through vega or any other feature? --- ## [Yarn build fails](https://discuss.elastic.co/t/yarn-build-fails/281849)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 3:59pm UTC](https://discuss.elastic.co/t/yarn-build-fails/281849 "2021-08-19T15:59:08Z")
Hello there, I am trying to build archive for my custom plugin. I am following the process in the link below. So, I generated the plugin with the generate\_plugin script but then it says that in order to use my plugin… --- ## [This site can’t provide a secure connection (URGENT)](https://discuss.elastic.co/t/this-site-can-t-provide-a-secure-connection-urgent/281988)
**Author:** [@shenzam](https://discuss.elastic.co/u/shenzam)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 3:47pm UTC](https://discuss.elastic.co/t/this-site-can-t-provide-a-secure-connection-urgent/281988 "2021-08-19T15:47:08Z")
Hi firend, earlier, i am able to access elasticsearch with port 9200. However in my docker compose i change the port mappong. After change i am hitting below error 192.168.1.108 didn’t accept your login certificate, or … --- ## [Grok Pattern](https://discuss.elastic.co/t/grok-pattern/281878)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 4\ **Last updated:** [August 19, 2021, 2:54pm UTC](https://discuss.elastic.co/t/grok-pattern/281878 "2021-08-19T14:54:53Z")
What is the correct syntax to incorporate raw regex expressions in between grok patterns? Ex (Cisco device): LOG: Aug 1 22:15:10 abc-hostname tcp GROK pattern: %{CISCOTIMESTAMP:timestamp} \\b\\w+-\\w+\\b %{WORD:protocol} … --- ## [Exporting & Importing Saved objects across different kibana versions](https://discuss.elastic.co/t/exporting-importing-saved-objects-across-different-kibana-versions/281968)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 2:53pm UTC](https://discuss.elastic.co/t/exporting-importing-saved-objects-across-different-kibana-versions/281968 "2021-08-19T14:53:20Z")
Hi all, I'm trying to export saved objects from 7.10 to kibana 7.9 version. But it is giving error saying :thinking: " Sorry, there was an error The file could not be processed." Someone told that we cannot import s… --- ## [Drilldown is not working with Visualization](https://discuss.elastic.co/t/drilldown-is-not-working-with-visualization/281925)
**Author:** [@Srinivas25](https://discuss.elastic.co/u/Srinivas25)\ **Replies:** 1\ **Last updated:** [August 19, 2021, 8:44am UTC](https://discuss.elastic.co/t/drilldown-is-not-working-with-visualization/281925 "2021-08-19T08:44:10Z")
We are using v 7.10.2, Created a visualization - line chart based on ActionName.Keyword field Made the same field as URL and linked it with URL of above visualization Created a search on that field. finally added the s… --- ## [Collapse within top hit aggregation results](https://discuss.elastic.co/t/collapse-within-top-hit-aggregation-results/281977)
**Author:** [@bhimawan](https://discuss.elastic.co/u/bhimawan)\ **Replies:** 0\ **Last updated:** [August 19, 2021, 2:03pm UTC](https://discuss.elastic.co/t/collapse-within-top-hit-aggregation-results/281977 "2021-08-19T14:03:33Z")
I'm trying to do this (two level collapse) but with top\_hits aggregation. Essentially I want to be able to have a collapse inside of the top\_hits aggregation but it's not supported. Is there any way to make this w… --- ## [Custom transactions in checkout process](https://discuss.elastic.co/t/custom-transactions-in-checkout-process/281970)
**Author:** [@anjaneyulu\_nagineni](https://discuss.elastic.co/u/anjaneyulu_nagineni)\ **Replies:** 0\ **Last updated:** [August 19, 2021, 1:20pm UTC](https://discuss.elastic.co/t/custom-transactions-in-checkout-process/281970 "2021-08-19T13:20:15Z")
I have a checkout with different steps, each step i want to send some custom data to apm server which we can do with transactions, spans and add additional data using add labels to the span but the question is when shoul… --- ## [Okta filebeat module ingest pipeline not running](https://discuss.elastic.co/t/okta-filebeat-module-ingest-pipeline-not-running/281917)
**Author:** [@LiamSennitt](https://discuss.elastic.co/u/LiamSennitt)\ **Replies:** 3\ **Last updated:** [August 19, 2021, 1:39pm UTC](https://discuss.elastic.co/t/okta-filebeat-module-ingest-pipeline-not-running/281917 "2021-08-19T13:39:08Z")
The Okta filebeat module doesn't appear to be executing the ingest pipeline as expected and returns events in the structure below. { "@timestamp": "", "@metadata": { "beat": "filebeat", "type": "\_doc… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1272) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1274)