# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1304 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1305 --- ## ["Kibana server is not ready yet" (running with docker-compose)](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-running-with-docker-compose/279627)
**Author:** [@kkireyev](https://discuss.elastic.co/u/kkireyev)\ **Replies:** 6\ **Last updated:** [July 28, 2021, 11:43am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-running-with-docker-compose/279627 "2021-07-28T11:43:21Z")
Hi! I'm trying to follow the tutorial here: After running "docker-compose up", I can access: localhost:9200/\_cat/nodes?v&pretty but when I go to http://localhost:5601/ I get: Kibana server is not ready yet Run… --- ## [Logstash lumberjack to beats certificate unknown](https://discuss.elastic.co/t/logstash-lumberjack-to-beats-certificate-unknown/279844)
**Author:** [@muffin](https://discuss.elastic.co/u/muffin)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 10:56am UTC](https://discuss.elastic.co/t/logstash-lumberjack-to-beats-certificate-unknown/279844 "2021-07-28T10:56:14Z")
Hi, We're using Logstash 7.12, we want to use the lumberjack output plugin to relay traffic to the Beats input of another Logstash instance (also 7.12). When using a self-signed certificate (identical on both sides) th… --- ## [How to mention elasticsearch credentials in logstash config?](https://discuss.elastic.co/t/how-to-mention-elasticsearch-credentials-in-logstash-config/279840)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 10:54am UTC](https://discuss.elastic.co/t/how-to-mention-elasticsearch-credentials-in-logstash-config/279840 "2021-07-28T10:54:12Z")
Hello, I recently enabled x-pack security on elasticsearch and set up passwords for built-in users successfully . However now i get an error when trying to ingest some logs \[2021-07-23T13:02:58,225\]\[WARN \]\[logstash.o… --- ## [Logstash JMS Input with Weblogic JMS server](https://discuss.elastic.co/t/logstash-jms-input-with-weblogic-jms-server/279838)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 10:15am UTC](https://discuss.elastic.co/t/logstash-jms-input-with-weblogic-jms-server/279838 "2021-07-28T10:15:17Z")
Hi, I'm having problems configuring the Logstash JMS input plugin in order to read messages from a queue on Oracle Weblogic JMS server. I'm using Logstash v7.9.3 and the version of the jms input plugin is v3.1.2 (the o… --- ## [Getting custom filebeat module into production](https://discuss.elastic.co/t/getting-custom-filebeat-module-into-production/275740)
**Author:** [@kelvins](https://discuss.elastic.co/u/kelvins)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 10:13am UTC](https://discuss.elastic.co/t/getting-custom-filebeat-module-into-production/275740 "2021-07-28T10:13:11Z")
I have created a new beats module (jde) which contain a couple of filesets. I have gone through the testing phases of the filebeat modules and all tests pass - Yeah! I am now trying to move this into production. To do… --- ## [EQL Help - Corrleation](https://discuss.elastic.co/t/eql-help-corrleation/278509)
**Author:** [@Cris\_Tian](https://discuss.elastic.co/u/Cris_Tian)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 8:52am UTC](https://discuss.elastic.co/t/eql-help-corrleation/278509 "2021-07-28T08:52:02Z")
I have the following code under the correlation event tab in kibana: sequence by @timestamp \[packetbeat where http.response.body.content == "\*" and network.direction == "\*"\] \[filebeat where nginx.access.respon… --- ## [Logstash on virtualbox/docker + cisco](https://discuss.elastic.co/t/logstash-on-virtualbox-docker-cisco/279828)
**Author:** [@Margo](https://discuss.elastic.co/u/Margo)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 8:40am UTC](https://discuss.elastic.co/t/logstash-on-virtualbox-docker-cisco/279828 "2021-07-28T08:40:59Z")
Hi! I've started ELK with docker-stack on virtualbox, ports has 514:5044. Pipeline input - udp/5044, output - stdout. Tcpdump catch syslog from cisco - 514/udp. But there is no stdout or index pattern in kibana. Can you… --- ## [Index command raises timeout error](https://discuss.elastic.co/t/index-command-raises-timeout-error/279761)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 8:25am UTC](https://discuss.elastic.co/t/index-command-raises-timeout-error/279761 "2021-07-28T08:25:04Z")
I am new to elasticsearch and I have some problem when I try to index a document (a python dictionary) into elasticsearch. Could someone please help? I used this command to create and instance of Elasticsearch in my code… --- ## [Replicas](https://discuss.elastic.co/t/replicas/279727)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 8:21am UTC](https://discuss.elastic.co/t/replicas/279727 "2021-07-28T08:21:39Z")
setup.template.settings: index.number\_of\_shards: 3 index.number\_of\_replicas: 3 If i use above configuration in beats, is it create 3 replicas for each shards. or one replica for each shards. I used 3 shards an… --- ## [Filebeat cannot connect to kibana: error loading index pattern: parsing kibana response](https://discuss.elastic.co/t/filebeat-cannot-connect-to-kibana-error-loading-index-pattern-parsing-kibana-response/279328)
**Author:** [@outranker](https://discuss.elastic.co/u/outranker)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 8:12am UTC](https://discuss.elastic.co/t/filebeat-cannot-connect-to-kibana-error-loading-index-pattern-parsing-kibana-response/279328 "2021-07-28T08:12:10Z")
I have set up Kibana and Elasticsearch and they work fine so far. I have also set up Filebeat on another aws ec2 instance to send logs to Elasticsearch and monitor from Kibana But for some reason Filebeat cannot connec… --- ## [Using wildcard in must\_not is not working](https://discuss.elastic.co/t/using-wildcard-in-must-not-is-not-working/279812)
**Author:** [@tux\_boi](https://discuss.elastic.co/u/tux_boi)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 7:08am UTC](https://discuss.elastic.co/t/using-wildcard-in-must-not-is-not-working/279812 "2021-07-28T07:08:08Z")
Hi I am new to elasticsearch, i am having issues using wildcard with must\_not clause. I tried to put it in both query and filter context. Example to text I am trying to exclude is "Error reported by EQRMS for GetSwaps(.… --- ## [Exact match query not returning expected results](https://discuss.elastic.co/t/exact-match-query-not-returning-expected-results/279668)
**Author:** [@muns](https://discuss.elastic.co/u/muns)\ **Replies:** 7\ **Last updated:** [July 28, 2021, 8:01am UTC](https://discuss.elastic.co/t/exact-match-query-not-returning-expected-results/279668 "2021-07-28T08:01:50Z")
I am trying to implement an exact match query with NEST for ElasticSearch. My expected results are to retrieve owner names that exactly matches the search criteria. However, that actual results of my query are partial ma… --- ## [Kibana ECS Dashboards](https://discuss.elastic.co/t/kibana-ecs-dashboards/279709)
**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\ **Replies:** 3\ **Last updated:** [July 28, 2021, 7:48am UTC](https://discuss.elastic.co/t/kibana-ecs-dashboards/279709 "2021-07-28T07:48:05Z")
Does anyone know if it's possible to create dashboards using the elastic common schema and not be restricted to logstash or filebeat logs? We currently have the majority of our data comming in via logstash (logs-) howev… --- ## [Error while starting Elasticsearch on windows 10](https://discuss.elastic.co/t/error-while-starting-elasticsearch-on-windows-10/279809)
**Author:** [@Ekta\_Thakur](https://discuss.elastic.co/u/Ekta_Thakur)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 7:16am UTC](https://discuss.elastic.co/t/error-while-starting-elasticsearch-on-windows-10/279809 "2021-07-28T07:16:20Z")
Hi, I have installed elasticsearch - 7.13.4 on my windows 10 machine with Openjdk and trying to start it but getting error of "null pointer exception" --- ## [Monitoring Logstash using Metricbeat](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [July 28, 2021, 7:04am UTC](https://discuss.elastic.co/t/monitoring-logstash-using-metricbeat/277934 "2021-07-28T07:04:25Z")
Hi I have a cluster with 4 nodes of Elasticsearch. 3 of them have Logstash and Metricbeat running for data ship and monitoring the pipelines and Logstash nodes. When I config the Metricbeat , I see Pipelines of 3 Logst… --- ## [Path\_style\_acces option for V6.2](https://discuss.elastic.co/t/path-style-acces-option-for-v6-2/279586)
**Author:** [@sonujatav35](https://discuss.elastic.co/u/sonujatav35)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 7:00am UTC](https://discuss.elastic.co/t/path-style-acces-option-for-v6-2/279586 "2021-07-28T07:00:13Z")
Hi, Any work around for Elasticsearch v6.2. My s3 compatible storage only accept path\_style\_access request and this option does not exist in ES v6. How can i make it work so s3 plugin can use path\_style\_access instead o… --- ## [ECS recommended data types](https://discuss.elastic.co/t/ecs-recommended-data-types/279707)
**Author:** [@jancodenew](https://discuss.elastic.co/u/jancodenew)\ **Replies:** 4\ **Last updated:** [July 28, 2021, 6:49am UTC](https://discuss.elastic.co/t/ecs-recommended-data-types/279707 "2021-07-28T06:49:22Z")
Hi, What will be the impact if i change the ECS recommended data type for ECS fields. For example what if i map the event.action field as 'text' datatype instead of keyword. I am receiving the following values in event… --- ## [Kibana saved search with grouping visualized](https://discuss.elastic.co/t/kibana-saved-search-with-grouping-visualized/279786)
**Author:** [@dotaneli](https://discuss.elastic.co/u/dotaneli)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 5:52am UTC](https://discuss.elastic.co/t/kibana-saved-search-with-grouping-visualized/279786 "2021-07-28T05:52:10Z")
Hi all. I have a system log with some hirarchy. Each request in my system can flow through various points (approx 10 stops per single flow). Each flow has its unique id I want Discover to have like a grouping collaps… --- ## [Error using https in filter section](https://discuss.elastic.co/t/error-using-https-in-filter-section/279793)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 0\ **Last updated:** [July 28, 2021, 4:47am UTC](https://discuss.elastic.co/t/error-using-https-in-filter-section/279793 "2021-07-28T04:47:05Z")
Hi All, I've gotten my logstash script working without https to port 9200. However, I have turned on encryption but I cannot figure out why the filter section fails but the output section for the https works. … --- ## [User Account Details](https://discuss.elastic.co/t/user-account-details/279636)
**Author:** [@pradeepvj](https://discuss.elastic.co/u/pradeepvj)\ **Replies:** 6\ **Last updated:** [July 28, 2021, 3:48am UTC](https://discuss.elastic.co/t/user-account-details/279636 "2021-07-28T03:48:07Z")
Hi All, I'm new to ELK...how to we get information about user accounts like user account creation or expiration? something similar to a table in Database I can see \_security/user api has only username,fullname,email and… --- ## [Adding more information on legends on Timelion chart](https://discuss.elastic.co/t/adding-more-information-on-legends-on-timelion-chart/276955)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 10:02pm UTC](https://discuss.elastic.co/t/adding-more-information-on-legends-on-timelion-chart/276955 "2021-07-27T22:02:06Z")
Hi, I am using Timelion chart to show some measurement data as in the screenshot. When I move the mouse to one of the points, it will show the data on the legend as Measurement (18.0) along with timestamps. Is it possib… --- ## [Configuring Filebeat to use proxy for any input request that goes out](https://discuss.elastic.co/t/configuring-filebeat-to-use-proxy-for-any-input-request-that-goes-out/279485)
**Author:** [@code4purpose](https://discuss.elastic.co/u/code4purpose)\ **Replies:** 7\ **Last updated:** [July 27, 2021, 8:16pm UTC](https://discuss.elastic.co/t/configuring-filebeat-to-use-proxy-for-any-input-request-that-goes-out/279485 "2021-07-27T20:16:55Z")
I am running Elasticsearch, Kibana and Filebeats on my office windows laptop. I am trying to use filebeat -microsoft module. All outgoing http/s requests go via a proxy. How do I Configure Filebeat to use proxy for an… --- ## [Elasticsearch snapshot repository fails validation](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-fails-validation/279638)
**Author:** [@amfournda](https://discuss.elastic.co/u/amfournda)\ **Replies:** 24\ **Last updated:** [July 27, 2021, 8:07pm UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-repository-fails-validation/279638 "2021-07-27T20:07:53Z")
I have a three node Elasticsearch cluster with a shared NFS volume. I have set a path.repo value in elasticsearch.yml and restarted elasticsearch (one node at a time, my cluster needs to stay up). I have confirmed all th… --- ## [Use all incoming document fields as param for Upsert operation](https://discuss.elastic.co/t/use-all-incoming-document-fields-as-param-for-upsert-operation/279771)
**Author:** [@Ehbraheem](https://discuss.elastic.co/u/Ehbraheem)\ **Replies:** 0\ **Last updated:** [July 27, 2021, 7:25pm UTC](https://discuss.elastic.co/t/use-all-incoming-document-fields-as-param-for-upsert-operation/279771 "2021-07-27T19:25:47Z")
I am using the elasticsearch Hadoop driver to do an upsert operation. I need all the fields of my incoming document in my painless script. How do I specify wildcard operator that will copy the values from the incoming do… --- ## [Running Logstash on cloud](https://discuss.elastic.co/t/running-logstash-on-cloud/279678)
**Author:** [@Rickenson\_Robert](https://discuss.elastic.co/u/Rickenson_Robert)\ **Replies:** 6\ **Last updated:** [July 27, 2021, 6:56pm UTC](https://discuss.elastic.co/t/running-logstash-on-cloud/279678 "2021-07-27T18:56:53Z")
Hi all, I am new to Logstash and was wondering if there was a way to use the program in a hosted environment? It’s my understanding that the binaries must be downloaded to a machine and executed from it. Is there a way … --- ## [File permissions on ES certificate files in Docker](https://discuss.elastic.co/t/file-permissions-on-es-certificate-files-in-docker/279764)
**Author:** [@braddre](https://discuss.elastic.co/u/braddre)\ **Replies:** 0\ **Last updated:** [July 27, 2021, 5:31pm UTC](https://discuss.elastic.co/t/file-permissions-on-es-certificate-files-in-docker/279764 "2021-07-27T17:31:36Z")
I've set up a three node ES cluster under Docker using these instructions: Encrypting communications in an Elasticsearch Docker Container | Elasticsearch Guide \[7.13\] | Elastic I'm using ES 7.6.2 In this set up, the ce… --- ## [No 'Access-Control-Allow-Origin' header is present on the requested resource](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/279763)
**Author:** [@JBianchi](https://discuss.elastic.co/u/JBianchi)\ **Replies:** 0\ **Last updated:** [July 27, 2021, 5:25pm UTC](https://discuss.elastic.co/t/no-access-control-allow-origin-header-is-present-on-the-requested-resource/279763 "2021-07-27T17:25:48Z")
Hello, I'm trying to connect to an third party API so I don't have access to the API code. I have this CORS issue. I tried everthing that I looked at google but I really don't know how to fix this. I know some Chrome plu… --- ## [Logstash configure custom ilm policy per elasticsearch datastream output](https://discuss.elastic.co/t/logstash-configure-custom-ilm-policy-per-elasticsearch-datastream-output/279757)
**Author:** [@anupshrestha](https://discuss.elastic.co/u/anupshrestha)\ **Replies:** 0\ **Last updated:** [July 27, 2021, 5:20pm UTC](https://discuss.elastic.co/t/logstash-configure-custom-ilm-policy-per-elasticsearch-datastream-output/279757 "2021-07-27T17:20:11Z")
Is there a way to specify a custom ilm policy when using datastream with elasticsearch output in logstash. The goal here is to have separate data retention period per datastream in elasticsearch. Any help or feedback is… --- ## [Elastic High Response Time](https://discuss.elastic.co/t/elastic-high-response-time/279650)
**Author:** [@mrjayarajj](https://discuss.elastic.co/u/mrjayarajj)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 4:19pm UTC](https://discuss.elastic.co/t/elastic-high-response-time/279650 "2021-07-27T16:19:47Z")
I see often average response time was going beyond 1 second , the traffic coming is only10 hits i couldn't able find the root cause yet, Need some guidance to point out where i am going wrong if i execute the same re… --- ## [Current date jdbc plugin](https://discuss.elastic.co/t/current-date-jdbc-plugin/279154)
**Author:** [@Jakub\_Kaczmarek](https://discuss.elastic.co/u/Jakub_Kaczmarek)\ **Replies:** 9\ **Last updated:** [July 27, 2021, 4:12pm UTC](https://discuss.elastic.co/t/current-date-jdbc-plugin/279154 "2021-07-27T16:12:38Z")
Hi, is it possible to filter query inside jdbc input by CURRENT\_DATE? I have the following config: input { jdbc { statement =\> "SELECT userId, timestamp FROM users;" schedule =\> "\* \* \* \* \*" tags … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1303) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1305)