# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1279 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1280 --- ## [Set elasticsearch initial password via docker-compose](https://discuss.elastic.co/t/set-elasticsearch-initial-password-via-docker-compose/281299)
**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:15am UTC](https://discuss.elastic.co/t/set-elasticsearch-initial-password-via-docker-compose/281299 "2021-08-17T01:15:05Z")
Can i know, how to set initial password for elasticsearch database using docker-compose bin/elasticsearch-setup-passwords auto -u "http://192.168.2.120:9200 We can use environment variable however, it will display duri… --- ## [Can't login in kibana on ECK with ldap](https://discuss.elastic.co/t/cant-login-in-kibana-on-eck-with-ldap/281345)
**Author:** [@kbi753](https://discuss.elastic.co/u/kbi753)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 1:10am UTC](https://discuss.elastic.co/t/cant-login-in-kibana-on-eck-with-ldap/281345 "2021-08-17T01:10:41Z")
Hello, We are trying to setup ldap authentication on our elasticsearch infra. Are are using ECK (elastic on kubernetes) I think I did a valid configuration, I don't find any error in the logs.. I even found this in t… --- ## [Sorting the response JSON](https://discuss.elastic.co/t/sorting-the-response-json/281532)
**Author:** [@Anubhav\_Singh1](https://discuss.elastic.co/u/Anubhav_Singh1)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:07am UTC](https://discuss.elastic.co/t/sorting-the-response-json/281532 "2021-08-17T01:07:36Z")
I'm using the below synonyms in my elasticsearch index. Road Types avenue,ave,boulevard,blvd,circle,cir,court,ct,drive,dr,highway,hwy,lane,ln,loop,lp,parkway,pkwy,place,pl,road,rd,route,rte,street,st,terrace,ter,trail… --- ## [ELK: NGINX logs analyze](https://discuss.elastic.co/t/elk-nginx-logs-analyze/281545)
**Author:** [@Wilford](https://discuss.elastic.co/u/Wilford)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:03am UTC](https://discuss.elastic.co/t/elk-nginx-logs-analyze/281545 "2021-08-17T01:03:40Z")
Hello to everyone, i have an strange issue. I'm running 2 nginx balancing units and it export it logs via filebeat to logstash and to elasticsearch index as a final destination. In a same time im running nignx stats mo… --- ## [Design Decision on Elastic Search - Replace Searchable Entity on Primary DB](https://discuss.elastic.co/t/design-decision-on-elastic-search-replace-searchable-entity-on-primary-db/281551)
**Author:** [@CharlieUPB](https://discuss.elastic.co/u/CharlieUPB)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 1:00am UTC](https://discuss.elastic.co/t/design-decision-on-elastic-search-replace-searchable-entity-on-primary-db/281551 "2021-08-17T01:00:16Z")
Hi guys I cant seem to find an answer to this question, can you please clarify my question. I have a normal database such as mongo where I store my domain related data, customers, products, prices. Now I came with the … --- ## [Elastic Seach: master not discovered or elected yet, an election requires at least 2 nodes with ids from](https://discuss.elastic.co/t/elastic-seach-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/281564)
**Author:** [@michelefa1988](https://discuss.elastic.co/u/michelefa1988)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 12:57am UTC](https://discuss.elastic.co/t/elastic-seach-master-not-discovered-or-elected-yet-an-election-requires-at-least-2-nodes-with-ids-from/281564 "2021-08-17T00:57:44Z")
Hello, Elastic search was running 7.10.1 was running successfully (via helm chart, however recently I got the following error The configuration is pretty standard (3 nodes 3x masters I would like to know what the corr… --- ## [Index-Pattern with mask in space, show more indexes that he has access to](https://discuss.elastic.co/t/index-pattern-with-mask-in-space-show-more-indexes-that-he-has-access-to/281613)
**Author:** [@solarcore](https://discuss.elastic.co/u/solarcore)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 11:33pm UTC](https://discuss.elastic.co/t/index-pattern-with-mask-in-space-show-more-indexes-that-he-has-access-to/281613 "2021-08-16T23:33:57Z")
Hello! I have two indexes its "test-index-one" and "test-index-two", and pattern "test-index-" and its placed in the space "One". And i have role on my user, that says i have index "test-index-one" as read, and no mentio… --- ## [Condition Section after Grok section not working](https://discuss.elastic.co/t/condition-section-after-grok-section-not-working/281600)
**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\ **Replies:** 4\ **Last updated:** [August 16, 2021, 9:28pm UTC](https://discuss.elastic.co/t/condition-section-after-grok-section-not-working/281600 "2021-08-16T21:28:48Z")
Hello Everyone! I am trying to modify my pipeline to allow me to create few additional fields based on certain conditions. However, that section alone is not working and I don't see any errors in my log. I had used simi… --- ## [How does everyone feel about Amazon's prerolled ES service and how they have forked Elasticsearch?](https://discuss.elastic.co/t/how-does-everyone-feel-about-amazons-prerolled-es-service-and-how-they-have-forked-elasticsearch/281417)
**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 9:02pm UTC](https://discuss.elastic.co/t/how-does-everyone-feel-about-amazons-prerolled-es-service-and-how-they-have-forked-elasticsearch/281417 "2021-08-16T21:02:49Z")
First, I wanted to get other's opinions on Amazon's Elasticsearch service. While they do provide some nice features like nightly snapshots, etc. -- I'm discovering each day more annoying issues with their service. There… --- ## [Xpack: How to clean monitoring-es-7\*?](https://discuss.elastic.co/t/xpack-how-to-clean-monitoring-es-7/281267)
**Author:** [@Ajordao](https://discuss.elastic.co/u/Ajordao)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 8:47pm UTC](https://discuss.elastic.co/t/xpack-how-to-clean-monitoring-es-7/281267 "2021-08-16T20:47:06Z")
Hi, everyone! I'm beginner in ES, but I already have some tasks to be accomplished. I have two deploys in Elastic's Cloud, one of them is to stored monitoring data (Deploy 2). I can't understand the reason why for the … --- ## [Winlogbeat Sysmon Configuration Registry fields seems to map the wrong value of the registry](https://discuss.elastic.co/t/winlogbeat-sysmon-configuration-registry-fields-seems-to-map-the-wrong-value-of-the-registry/281521)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 7:42pm UTC](https://discuss.elastic.co/t/winlogbeat-sysmon-configuration-registry-fields-seems-to-map-the-wrong-value-of-the-registry/281521 "2021-08-16T19:42:47Z")
Third attempt to escalate this... Can someone please verify and confirm this bug? Same issue in 7.13.1.. Willem --- ## [Update a field if it does not contain any value](https://discuss.elastic.co/t/update-a-field-if-it-does-not-contain-any-value/281565)
**Author:** [@Derya\_Sayar](https://discuss.elastic.co/u/Derya_Sayar)\ **Replies:** 5\ **Last updated:** [August 16, 2021, 7:34pm UTC](https://discuss.elastic.co/t/update-a-field-if-it-does-not-contain-any-value/281565 "2021-08-16T19:34:02Z")
I have log files generated from some applications. Some of applications produces messages in following format. So there is "logContent" in message field. {"instant":{"epochSecond":1628692763,"nanoOfSecond":792000000},"t… --- ## [Master not discovered in the bootstrap cluster](https://discuss.elastic.co/t/master-not-discovered-in-the-bootstrap-cluster/281586)
**Author:** [@kadiveti](https://discuss.elastic.co/u/kadiveti)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 7:24pm UTC](https://discuss.elastic.co/t/master-not-discovered-in-the-bootstrap-cluster/281586 "2021-08-16T19:24:40Z")
Hello All, I tried to set up a simple 3 node elastic cluster. I tried almost the same setup 10 times. Every I see a new issue will come up when setting this. Every time I create this setup from Azure and delete the set… --- ## [Saving y laptop](https://discuss.elastic.co/t/saving-y-laptop/281577)
**Author:** [@testingHackerone](https://discuss.elastic.co/u/testingHackerone)\ **Replies:** 0\ **Last updated:** [August 16, 2021, 5:16pm UTC](https://discuss.elastic.co/t/saving-y-laptop/281577 "2021-08-16T17:16:49Z")
cool --- ## [Failed to execute watch - Timeout waiting for task](https://discuss.elastic.co/t/failed-to-execute-watch-timeout-waiting-for-task/280256)
**Author:** [@Brandon\_Sollins](https://discuss.elastic.co/u/Brandon_Sollins)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 6:22pm UTC](https://discuss.elastic.co/t/failed-to-execute-watch-timeout-waiting-for-task/280256 "2021-08-16T18:22:37Z")
I am noticing random watch timeouts on my cluster that is returning the following traceback: \[2021-07-31T05:08:11,951\]\[DEBUG\]\[o.e.x.w.e.ExecutionService\] failed to execute watch \[\\] org.elasti… --- ## [Export to CSV shows blank fields](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/280357)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 3\ **Last updated:** [August 16, 2021, 4:25pm UTC](https://discuss.elastic.co/t/export-to-csv-shows-blank-fields/280357 "2021-08-16T16:25:36Z")
Hi , I have a saved object in Kibana. When I run this object I get the results I want, it shows all the information for the columns proposed. However when I export it to CSV alot of the columns are blank? I have opened… --- ## [Add agent wrong documentation](https://discuss.elastic.co/t/add-agent-wrong-documentation/281512)
**Author:** [@Lucas\_Van\_den\_Abbeel](https://discuss.elastic.co/u/Lucas_Van_den_Abbeel)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 4:10pm UTC](https://discuss.elastic.co/t/add-agent-wrong-documentation/281512 "2021-08-16T16:10:03Z")
./elastic-agent install -f --kibana-url=xxxx --enrollment-token=xxxxx is not working unknown flag: --kibana-url --- ## [Create new field "Year" from a complete date](https://discuss.elastic.co/t/create-new-field-year-from-a-complete-date/281332)
**Author:** [@Raptoresse](https://discuss.elastic.co/u/Raptoresse)\ **Replies:** 3\ **Last updated:** [August 16, 2021, 3:13pm UTC](https://discuss.elastic.co/t/create-new-field-year-from-a-complete-date/281332 "2021-08-16T15:13:29Z")
Hi everybody ! I have a probleme : I have a field "date". I want to select juste the year, and create a vizualisation "controls" type (Add dropdown menus and range sliders to your dashboard) with the new field. For thi… --- ## [Logstash ip protocol enriching](https://discuss.elastic.co/t/logstash-ip-protocol-enriching/281496)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 3:07pm UTC](https://discuss.elastic.co/t/logstash-ip-protocol-enriching/281496 "2021-08-16T15:07:42Z")
Hello community. I was busy with the task of collecting netflow using logstash. So I noticed that the netflow data after the "netflow" codec contains the "protocol" field, which is actually the protocol number. But there… --- ## [Simple Central log monitoring with ELK](https://discuss.elastic.co/t/simple-central-log-monitoring-with-elk/280488)
**Author:** [@Prabhath\_samarasingh](https://discuss.elastic.co/u/Prabhath_samarasingh)\ **Replies:** 20\ **Last updated:** [August 16, 2021, 2:32pm UTC](https://discuss.elastic.co/t/simple-central-log-monitoring-with-elk/280488 "2021-08-16T14:32:49Z")
Need to ship my servers logs (Linux system logs " /var/logs/\*" and windows server logs) to logstash to ELK and display in KIbana dash board. Please guide to perform this task. --- ## [Where is the object mapping for \[host\] defined?](https://discuss.elastic.co/t/where-is-the-object-mapping-for-host-defined/281541)
**Author:** [@antoineco](https://discuss.elastic.co/u/antoineco)\ **Replies:** 14\ **Last updated:** [August 16, 2021, 2:26pm UTC](https://discuss.elastic.co/t/where-is-the-object-mapping-for-host-defined/281541 "2021-08-16T14:26:42Z")
Context Since the release of Elastic v8.0.0 (alpha), the elasticsearch output of Logstash started throwing the following error, even on a fresh installation: object mapping for \[host\] tried to parse field \[host\] as obj… --- ## [Logstash extract additional fields from message field of Json](https://discuss.elastic.co/t/logstash-extract-additional-fields-from-message-field-of-json/281373)
**Author:** [@Derya\_Sayar](https://discuss.elastic.co/u/Derya_Sayar)\ **Replies:** 2\ **Last updated:** [August 16, 2021, 2:18pm UTC](https://discuss.elastic.co/t/logstash-extract-additional-fields-from-message-field-of-json/281373 "2021-08-16T14:18:15Z")
I have logs files with json format.Here you can find single line of log. {"instant":{"epochSecond":1628692763,"nanoOfSecond":792000000},"thread":"AWT-EventQueue-0","level":"INFO","loggerName":"com.client.logon… --- ## [Parse Logstash message field into multiple field](https://discuss.elastic.co/t/parse-logstash-message-field-into-multiple-field/281425)
**Author:** [@buulq90](https://discuss.elastic.co/u/buulq90)\ **Replies:** 8\ **Last updated:** [August 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/parse-logstash-message-field-into-multiple-field/281425 "2021-08-16T14:13:24Z")
Hello all, I'm firstly using log stash and got some issue when parsing the JSON log on the message field into multiple field for visualizing in the Kibana dashboard. Below is my message log appear in Elasticsearch me… --- ## [IPFIX processing Setup plan & queries](https://discuss.elastic.co/t/ipfix-processing-setup-plan-queries/281558)
**Author:** [@Saravana\_Maadavan](https://discuss.elastic.co/u/Saravana_Maadavan)\ **Replies:** 0\ **Last updated:** [August 16, 2021, 2:02pm UTC](https://discuss.elastic.co/t/ipfix-processing-setup-plan-queries/281558 "2021-08-16T14:02:11Z")
Hi Everyone, I have few questions reg. processing of IPFIX logs originating from "Thunder CFW | A10 network" exporter. Would not be able to change different network exporter product or any installation in source side si… --- ## [How to sort and aggs the result in nested element](https://discuss.elastic.co/t/how-to-sort-and-aggs-the-result-in-nested-element/281549)
**Author:** [@OmarBO](https://discuss.elastic.co/u/OmarBO)\ **Replies:** 0\ **Last updated:** [August 16, 2021, 1:31pm UTC](https://discuss.elastic.co/t/how-to-sort-and-aggs-the-result-in-nested-element/281549 "2021-08-16T13:31:19Z")
Hello, I'm new to the Elasticsearch and I faced a problem while developing an ES Query. I have an index of reports of patients that every doc is like this one. So each report of one patient { "patient": { "gender… --- ## [Exceptions for Rename Ingest Processor](https://discuss.elastic.co/t/exceptions-for-rename-ingest-processor/281399)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 12:21pm UTC](https://discuss.elastic.co/t/exceptions-for-rename-ingest-processor/281399 "2021-08-16T12:21:25Z")
Hi, I'm trying to create an ingest pipeline to rename fields, if they exist. I see there is an if statement option for the Rename processor, but I'm unsure of how to implement it. I want to do "if" : "ctx.containsKey('… --- ## [Exclude Unicode symbol in Grok pattern](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540)
**Author:** [@Avesalon\_Novinsky](https://discuss.elastic.co/u/Avesalon_Novinsky)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 11:59am UTC](https://discuss.elastic.co/t/exclude-unicode-symbol-in-grok-pattern/280540 "2021-08-16T11:59:55Z")
Hi, Is there any option to exclude Unicode symbol from line directly in grok pattern. I'm trying to read json data line by line thought AWS Glue "getSourceWithFormat" method which use grok pattern for string parsing. l… --- ## [Re-create Fleet System Integration Data Streams](https://discuss.elastic.co/t/re-create-fleet-system-integration-data-streams/281443)
**Author:** [@tomukasteris](https://discuss.elastic.co/u/tomukasteris)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 11:45am UTC](https://discuss.elastic.co/t/re-create-fleet-system-integration-data-streams/281443 "2021-08-16T11:45:10Z")
Hello, By mistake did delete System integration Data Streams. How reinstall/re-create missing data streams for System integration? --- ## [Logstash :Config file to parse nested json](https://discuss.elastic.co/t/logstash-config-file-to-parse-nested-json/281528)
**Author:** [@ippo](https://discuss.elastic.co/u/ippo)\ **Replies:** 1\ **Last updated:** [August 16, 2021, 11:26am UTC](https://discuss.elastic.co/t/logstash-config-file-to-parse-nested-json/281528 "2021-08-16T11:26:13Z")
hello i 'm new to elk and i seeking help for my mission. i want to export the data from the log of json file below so that i have visualizations related to the number of successful builds . im trying to remove the fields… --- ## [How to run Elasticsearch 7.10.2 as root user](https://discuss.elastic.co/t/how-to-run-elasticsearch-7-10-2-as-root-user/281354)
**Author:** [@mba](https://discuss.elastic.co/u/mba)\ **Replies:** 7\ **Last updated:** [August 16, 2021, 11:21am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-7-10-2-as-root-user/281354 "2021-08-16T11:21:14Z")
I know we can not run elastic search as root user but still my requirement is to run Elasticsearch 7.10.2 as root user then how to run it ?? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1278) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1280)