# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1294

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1295

---

## [Failed to parse mapping \[\_doc\]: unknown parameter \[properties\] on mapper \[error\] of type \[text\]](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-unknown-parameter-properties-on-mapper-error-of-type-text/280322)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 6\
**Last updated:** [August 4, 2021, 3:43pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-unknown-parameter-properties-on-mapper-error-of-type-text/280322 "2021-08-04T15:43:42Z")

</div>

I am running filebeat aws module to fetch AWS cloudtrail logs, since 1st August I am getting this error and data is not getting indexed. I am using custom index name and using copied template and pipeline from Filebeat i…

---

## [How to choose optimal Point in Time for Elasticsearch Pagination with search\_after?](https://discuss.elastic.co/t/how-to-choose-optimal-point-in-time-for-elasticsearch-pagination-with-search-after/280427)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 3:41pm UTC](https://discuss.elastic.co/t/how-to-choose-optimal-point-in-time-for-elasticsearch-pagination-with-search-after/280427 "2021-08-04T15:41:27Z")

</div>

I have large datasets, for which I am trying to perform the pagination, while reading the documentation I came across the PIT(Point-In-Time) concepts, which will help to get the consistent results. I am using below API …

---

## [Kibana reverse proxy with nginx gives Empty Dashboard on Kubernetes](https://discuss.elastic.co/t/kibana-reverse-proxy-with-nginx-gives-empty-dashboard-on-kubernetes/279146)

<div class="topic-metadata">

**Author:** [@Nisha\_Shaik](https://discuss.elastic.co/u/Nisha_Shaik)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 3:26pm UTC](https://discuss.elastic.co/t/kibana-reverse-proxy-with-nginx-gives-empty-dashboard-on-kubernetes/279146 "2021-08-04T15:26:32Z")

</div>

Hi We have Deployed Kibana & Elastic Search on our Kubernetes Cluster. I want to access Kibana via my Nginx by configuring reverse proxy . I am able to configure the nginx.conf with kibana url but when I go to nginx\_url…

---

## [Custom logs Filebeat Index](https://discuss.elastic.co/t/custom-logs-filebeat-index/280454)

<div class="topic-metadata">

**Author:** [@marcosvmauri](https://discuss.elastic.co/u/marcosvmauri)\
**Replies:** 0\
**Last updated:** [August 4, 2021, 3:17pm UTC](https://discuss.elastic.co/t/custom-logs-filebeat-index/280454 "2021-08-04T15:17:50Z")

</div>

Hi! I have a Filebeat server configured to capture IIS logs. And I would like to capture custom logs, but after parameterizing the filebeat.yaml files and placing the logs in the indicated folder, I cannot view the log…

---

## [Authentication working with username/password but not with API key](https://discuss.elastic.co/t/authentication-working-with-username-password-but-not-with-api-key/280108)

<div class="topic-metadata">

**Author:** [@abhinavkulkarni](https://discuss.elastic.co/u/abhinavkulkarni)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 3:14pm UTC](https://discuss.elastic.co/t/authentication-working-with-username-password-but-not-with-api-key/280108 "2021-08-04T15:14:00Z")

</div>

Hi, I have set up a self-managed 3-node Elasticsearch cluster on Kubernetes using instructions here. I haven't yet added any extra bells and whistles, but pretty much used the YAML in the link. I am able to cURL for va…

---

## [Logstash input txt file received from filebeat is incorrect](https://discuss.elastic.co/t/logstash-input-txt-file-received-from-filebeat-is-incorrect/280393)

<div class="topic-metadata">

**Author:** [@Mohyden](https://discuss.elastic.co/u/Mohyden)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 3:07pm UTC](https://discuss.elastic.co/t/logstash-input-txt-file-received-from-filebeat-is-incorrect/280393 "2021-08-04T15:07:22Z")

</div>

Hello Community, I am new to the community, and I need help. I found that logstash is not receiving correctly from filebeat. Some of the lines are not in the correct order that they should be and other lines are missed…

---

## [Configure Fingerprint Processor within Elastic Cloud User Interface](https://discuss.elastic.co/t/configure-fingerprint-processor-within-elastic-cloud-user-interface/280440)

<div class="topic-metadata">

**Author:** [@lifeowl](https://discuss.elastic.co/u/lifeowl)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 2:45pm UTC](https://discuss.elastic.co/t/configure-fingerprint-processor-within-elastic-cloud-user-interface/280440 "2021-08-04T14:45:49Z")

</div>

Hi there, Is the Ingest Pipeline Fingerprint Processor not available/configurable within the Elastic Cloud user interface? When I go to Stack Management \> Ingest Node Pipelines \> \[Click on my Pipeline\] \> Add a Processor,…

---

## [Logstash exec plugin error directory not found](https://discuss.elastic.co/t/logstash-exec-plugin-error-directory-not-found/280444)

<div class="topic-metadata">

**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\
**Replies:** 0\
**Last updated:** [August 4, 2021, 2:19pm UTC](https://discuss.elastic.co/t/logstash-exec-plugin-error-directory-not-found/280444 "2021-08-04T14:19:49Z")

</div>

I am working with logstash for syslog processing. Right now, I have logstash and elastic search for data processing and grafana for visualisation. Those data that I am receiving, I am saving them to local disk as csv an…

---

## [Logstash logging problem](https://discuss.elastic.co/t/logstash-logging-problem/280329)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 1:50pm UTC](https://discuss.elastic.co/t/logstash-logging-problem/280329 "2021-08-04T13:50:53Z")

</div>

using 7.13.4 having problem with logstash logging. I need two thing I want is to keep my log at my location . second I don't want all stdout message that comes out from conf file when it runs via pipeline. starting …

---

## [Filebeat HttpJson Input Plugin Didnt Work Correctly](https://discuss.elastic.co/t/filebeat-httpjson-input-plugin-didnt-work-correctly/280435)

<div class="topic-metadata">

**Author:** [@kolten](https://discuss.elastic.co/u/kolten)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 1:37pm UTC](https://discuss.elastic.co/t/filebeat-httpjson-input-plugin-didnt-work-correctly/280435 "2021-08-04T13:37:03Z")

</div>

Hi everyone, I want to try httpjson plugin but it didnt work correctly. Filebeat transfer data with binary format so that data didn't correct. I followed this article: HTTP JSON input | Filebeat Reference \[7.14\] | Elas…

---

## [Moving of Ingest pipelines from one deployment to another](https://discuss.elastic.co/t/moving-of-ingest-pipelines-from-one-deployment-to-another/280436)

<div class="topic-metadata">

**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 1:28pm UTC](https://discuss.elastic.co/t/moving-of-ingest-pipelines-from-one-deployment-to-another/280436 "2021-08-04T13:28:43Z")

</div>

Hi All, Are there any possibility to move all the ingest pipelines from one deployment to another? Both deloyments are running with ES 7.13.4 version. Thanks, Peter

---

## [Monitor packet loss with Heartbeat](https://discuss.elastic.co/t/monitor-packet-loss-with-heartbeat/280294)

<div class="topic-metadata">

**Author:** [@Bilanda](https://discuss.elastic.co/u/Bilanda)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 1:06pm UTC](https://discuss.elastic.co/t/monitor-packet-loss-with-heartbeat/280294 "2021-08-04T13:06:25Z")

</div>

Hello, I'm currently testing heartbeat at company level in order to replace Smokeping. Is there any way to monitor packet loss with heartbeat, like Smokeping does ? It's a much needed feature for us, but didn't find t…

---

## [Json import using data visualizer , json array shows values comma seperates](https://discuss.elastic.co/t/json-import-using-data-visualizer-json-array-shows-values-comma-seperates/279531)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 5\
**Last updated:** [August 4, 2021, 12:23pm UTC](https://discuss.elastic.co/t/json-import-using-data-visualizer-json-array-shows-values-comma-seperates/279531 "2021-08-04T12:23:19Z")

</div>

Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se…

---

## [Fleet Check Point Integration](https://discuss.elastic.co/t/fleet-check-point-integration/280324)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 5\
**Last updated:** [August 4, 2021, 11:58am UTC](https://discuss.elastic.co/t/fleet-check-point-integration/280324 "2021-08-04T11:58:01Z")

</div>

I´ve been trying to play around with the check point integration but it looks like is going nowhere!!! Can someone help me out??? The Elastic documentation related to this integration does not help.... Really appreciate…

---

## [Start a plugin action on elasticsearch start](https://discuss.elastic.co/t/start-a-plugin-action-on-elasticsearch-start/280398)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 3\
**Last updated:** [August 4, 2021, 11:31am UTC](https://discuss.elastic.co/t/start-a-plugin-action-on-elasticsearch-start/280398 "2021-08-04T11:31:47Z")

</div>

I am trying to create a new ActionPlugin. On ES starting, I want to create a NodeClient and do some work with it. How can I do that?

---

## [How to find all parents where child property exist](https://discuss.elastic.co/t/how-to-find-all-parents-where-child-property-exist/280136)

<div class="topic-metadata">

**Author:** [@ANKIT\_BHARTI](https://discuss.elastic.co/u/ANKIT_BHARTI)\
**Replies:** 3\
**Last updated:** [August 4, 2021, 11:30am UTC](https://discuss.elastic.co/t/how-to-find-all-parents-where-child-property-exist/280136 "2021-08-04T11:30:50Z")

</div>

Hi All , I am trying to solve a reverse query problem and reaching out to find the best possible way. I have an existing index which contains A : \[1,2,3,4\] B : \[2,3\] C : \[3,5,6\] ..... 10000 entries Parent is A , B ,…

---

## [Hyperlinked values](https://discuss.elastic.co/t/hyperlinked-values/280396)

<div class="topic-metadata">

**Author:** [@ranimsaidi](https://discuss.elastic.co/u/ranimsaidi)\
**Replies:** 5\
**Last updated:** [August 4, 2021, 11:28am UTC](https://discuss.elastic.co/t/hyperlinked-values/280396 "2021-08-04T11:28:40Z")

</div>

Hello , I am having some key value documents where the value are hyperlinked to external URLs , Is there a way to keep those hyperlinks active when bulked into elasticsearch? Thank you

---

## [The bulk request must be terminated by a newline](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline/280403)

<div class="topic-metadata">

**Author:** [@DrJHD](https://discuss.elastic.co/u/DrJHD)\
**Replies:** 4\
**Last updated:** [August 4, 2021, 11:25am UTC](https://discuss.elastic.co/t/the-bulk-request-must-be-terminated-by-a-newline/280403 "2021-08-04T11:25:02Z")

</div>

Despite reading the answers to the many variants of this question, I am stuck. I have tried 1, 2 and 3 "0a" characters at the end of my file (cut down - I have \>40 files) and get the same results. I must be missing somet…

---

## [Logstash - Nested aggregation](https://discuss.elastic.co/t/logstash-nested-aggregation/280308)

<div class="topic-metadata">

**Author:** [@MattQDev](https://discuss.elastic.co/u/MattQDev)\
**Replies:** 0\
**Last updated:** [August 3, 2021, 12:23pm UTC](https://discuss.elastic.co/t/logstash-nested-aggregation/280308 "2021-08-03T12:23:28Z")

</div>

Hey, I am trying to aggregate some data from a SQL DB with Logstash. The data that I am trying to import has the following structure: Category Type Product Where each category can have multiple types, and…

---

## [Bug? Heartbeat Browsermonitoring ignoring SSL settings?](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943)

<div class="topic-metadata">

**Author:** [@Simon\_Becker](https://discuss.elastic.co/u/Simon_Becker)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 10:48am UTC](https://discuss.elastic.co/t/bug-heartbeat-browsermonitoring-ignoring-ssl-settings/279943 "2021-08-04T10:48:08Z")

</div>

Hello all, I am currently setting up the new Browser Monitoring feature for synthetic checks since this is a great new feature. I use heartbeat in docker. I try to ping an internal site in my network. The error messag…

---

## [TCC Information Request](https://discuss.elastic.co/t/tcc-information-request/280416)

<div class="topic-metadata">

**Author:** [@Praful\_Kulkarni](https://discuss.elastic.co/u/Praful_Kulkarni)\
**Replies:** 0\
**Last updated:** [August 4, 2021, 10:45am UTC](https://discuss.elastic.co/t/tcc-information-request/280416 "2021-08-04T10:45:54Z")

</div>

Hi, We need the following Trade & Customs Compliance information for Elasticsearch. Please provide the following. What is the ECCN Does a license exception apply? (e.g. ENC) If reporting is required – do you perform …

---

## [How to create new visualisation component from fields dissected from log in logstash?](https://discuss.elastic.co/t/how-to-create-new-visualisation-component-from-fields-dissected-from-log-in-logstash/280381)

<div class="topic-metadata">

**Author:** [@ckong](https://discuss.elastic.co/u/ckong)\
**Replies:** 3\
**Last updated:** [August 4, 2021, 10:32am UTC](https://discuss.elastic.co/t/how-to-create-new-visualisation-component-from-fields-dissected-from-log-in-logstash/280381 "2021-08-04T10:32:26Z")

</div>

Hi, I am currently into Elasticsearch. I created a filter inside logstash.conf to extract several fields from log message. File path: /usr/share/logstash/pipeline/logstash.conf: Configuration: input { beats { …

---

## [Number of document of all indices with a single request](https://discuss.elastic.co/t/number-of-document-of-all-indices-with-a-single-request/280405)

<div class="topic-metadata">

**Author:** [@ELJIE](https://discuss.elastic.co/u/ELJIE)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 10:00am UTC](https://discuss.elastic.co/t/number-of-document-of-all-indices-with-a-single-request/280405 "2021-08-04T10:00:06Z")

</div>

Hello, I'm trying to find a tip to retrieve the document count of each index in elastic with a single request Ex: in elastic there is: Index1 with 10 document, Index2 with 20 document, Index3 with 30 document, Ind…

---

## [\[LogStash::Runner\] runner - Logstash shut down](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406)

<div class="topic-metadata">

**Author:** [@travlest](https://discuss.elastic.co/u/travlest)\
**Replies:** 0\
**Last updated:** [August 4, 2021, 9:29am UTC](https://discuss.elastic.co/t/logstash-runner-runner-logstash-shut-down/280406 "2021-08-04T09:29:16Z")

</div>

I am trying to configure http\_poller for logstash. But I've encountered this error. location : /etc/logstash/conf.d/logstash\_http\_poller input { http\_poller { urls =\> {\* urlname =\> "https://randomu…

---

## [SMB as path.repo for snapshotg](https://discuss.elastic.co/t/smb-as-path-repo-for-snapshotg/280346)

<div class="topic-metadata">

**Author:** [@cheapsupps](https://discuss.elastic.co/u/cheapsupps)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 9:28am UTC](https://discuss.elastic.co/t/smb-as-path-repo-for-snapshotg/280346 "2021-08-04T09:28:23Z")

</div>

I have pointed the path.repo to my windows smb share. However, this smb share requires username and password. Is there anyway I can add the username and password to the elasticsearch.yml file? I am using docker.

---

## [\[7.10.2\] Querying for "fields" produces HTML entities despite use of "html\_strip"](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348)

<div class="topic-metadata">

**Author:** [@jamesjenkins](https://discuss.elastic.co/u/jamesjenkins)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 9:08am UTC](https://discuss.elastic.co/t/7-10-2-querying-for-fields-produces-html-entities-despite-use-of-html-strip/280348 "2021-08-04T09:08:35Z")

</div>

We are currently indexing using this analyzer for our text fields: lowercase\_keyword: { type: 'custom', char\_filter: \['html\_strip'\], tokenizer: 'keyword', filter: \['asciifolding',…

---

## [Differences between light\_spanish and spanish stemmers](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366)

<div class="topic-metadata">

**Author:** [@Daniel\_Rojas](https://discuss.elastic.co/u/Daniel_Rojas)\
**Replies:** 1\
**Last updated:** [August 4, 2021, 9:07am UTC](https://discuss.elastic.co/t/differences-between-light-spanish-and-spanish-stemmers/280366 "2021-08-04T09:07:08Z")

</div>

We're using the light\_spanish stemmer, but we've had some issues with some specific words, for example, if I search "papa", it doesn't show results that contain "papas". So, I tested the spanish stemmer, and it solves th…

---

## [Find removed IPs from list in new data](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067)

<div class="topic-metadata">

**Author:** [@YASH\_SHARMA7766](https://discuss.elastic.co/u/YASH_SHARMA7766)\
**Replies:** 3\
**Last updated:** [August 4, 2021, 8:54am UTC](https://discuss.elastic.co/t/find-removed-ips-from-list-in-new-data/280067 "2021-08-04T08:54:07Z")

</div>

I have a file containing list of IPs and i want to check in the new data if there is any missing IP.

---

## [Elasticsearch wont start after implementing TLS](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306)

<div class="topic-metadata">

**Author:** [@azxqw](https://discuss.elastic.co/u/azxqw)\
**Replies:** 10\
**Last updated:** [August 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306 "2021-08-04T08:52:13Z")

</div>

Hi all, I have a bit of a problem. I implemented TLS im my stack as per the instructions. Hoewever - now elasticsearch wont start, and it's throwing this exception: java.security.NoSuchAlgorithmException: Algorithm Hm…

---

## [Kibana install and run](https://discuss.elastic.co/t/kibana-install-and-run/279534)

<div class="topic-metadata">

**Author:** [@eeeun23](https://discuss.elastic.co/u/eeeun23)\
**Replies:** 2\
**Last updated:** [August 4, 2021, 8:46am UTC](https://discuss.elastic.co/t/kibana-install-and-run/279534 "2021-08-04T08:46:39Z")

</div>

After Elasticsearch runs well, an error message appears when running Kibana. "Cannot delete files/directories outside the current working directory. Can be overridden with the force option." So I entered the code. bi…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1293)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1295)
