# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1322 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1323 --- ## [Adding MS Teams connector to an alert](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462)
**Author:** [@Kohlman](https://discuss.elastic.co/u/Kohlman)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 6:47pm UTC](https://discuss.elastic.co/t/adding-ms-teams-connector-to-an-alert/278462 "2021-07-14T18:47:40Z")
I was able to create a connector of type Microsoft Teams. I expected to find documentation for how to configure a watcher where the action would be "teams" or something. The only thing I have found is for Webhook action W… --- ## [Scripted fields: Coalesce](https://discuss.elastic.co/t/scripted-fields-coalesce/278515)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 6:46pm UTC](https://discuss.elastic.co/t/scripted-fields-coalesce/278515 "2021-07-14T18:46:47Z")
Hello!!! i want to write a scripted fields that do the following calculation. how should i do it. Procuser = coalesce (ProcUserExpanded, ProcUser) --- ## [Rules export in excel and exception search under rule](https://discuss.elastic.co/t/rules-export-in-excel-and-exception-search-under-rule/278703)
**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 6:29pm UTC](https://discuss.elastic.co/t/rules-export-in-excel-and-exception-search-under-rule/278703 "2021-07-14T18:29:08Z")
is there a way to download all elastic rules into excel and also exceptions under each rule into excel from ealsticsearch Also how to use search option under exceptions? --- ## [Need Help : To Parse XML and Json data received via TCP syslog in logstash](https://discuss.elastic.co/t/need-help-to-parse-xml-and-json-data-received-via-tcp-syslog-in-logstash/278650)
**Author:** [@Shruti\_Gupta](https://discuss.elastic.co/u/Shruti_Gupta)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 5:45pm UTC](https://discuss.elastic.co/t/need-help-to-parse-xml-and-json-data-received-via-tcp-syslog-in-logstash/278650 "2021-07-14T17:45:43Z")
I am receiving google apigee logs in syslog at 5444 port. Logs are being generating via multiple applications and format is also different like XML and Json. Need help how can we configure logstash.conf to parse both ty… --- ## [Logstash crashing](https://discuss.elastic.co/t/logstash-crashing/278590)
**Author:** [@cdhgold](https://discuss.elastic.co/u/cdhgold)\ **Replies:** 2\ **Last updated:** [July 14, 2021, 5:28pm UTC](https://discuss.elastic.co/t/logstash-crashing/278590 "2021-07-14T17:28:19Z")
I'm using OSS version 7.10 of both filebeat and logstash on RHEL 7.3 Elastisearch "destination" is a Elastisearch 7.10 AWS Elastisearch domain I can run a curl and insert data into the AWS ES however logstash keeps cra… --- ## [Is it possible to pass variables from init to script\_params?](https://discuss.elastic.co/t/is-it-possible-to-pass-variables-from-init-to-script-params/278680)
**Author:** [@davidpellerin](https://discuss.elastic.co/u/davidpellerin)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:45pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-variables-from-init-to-script-params/278680 "2021-07-14T16:45:28Z")
Just wondering if it's possible to pass along variables from the "init" section of the Ruby filter plugin to the script\_params? In my case the data I am looking up is something I only want to do once: ruby { init =\>… --- ## [Connection refused port 5044](https://discuss.elastic.co/t/connection-refused-port-5044/277149)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:35pm UTC](https://discuss.elastic.co/t/connection-refused-port-5044/277149 "2021-07-14T16:35:43Z")
Hi, When i want to validate the logstash server certificate with this command : curl -v --cacert /etc/logstash/config/certs/logstash.crt https://logstash.ad-it.fr:5044 Rebuilt URL to: https://192.168.1.30:5044/ \* Try… --- ## [ELK and Outsystems logs](https://discuss.elastic.co/t/elk-and-outsystems-logs/277504)
**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:31pm UTC](https://discuss.elastic.co/t/elk-and-outsystems-logs/277504 "2021-07-14T16:31:18Z")
Hi, I am just wondering if anyone has integrated outsystems logs with ELK stack. What is the best approach for this? I have come across logstash accelerators on Github which runs pipelines. But if I am already runnin… --- ## [Logstash email output](https://discuss.elastic.co/t/logstash-email-output/277538)
**Author:** [@Khairul\_Anuar\_bin\_Ab](https://discuss.elastic.co/u/Khairul_Anuar_bin_Ab)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:29pm UTC](https://discuss.elastic.co/t/logstash-email-output/277538 "2021-07-14T16:29:30Z")
I'm trying to send an email using logstash, however logstash keep sending the same email every minutes. The output configuration as per below. Any ideas what went wrong? output { email { to =\> "zyx@gmail.com" body =\>… --- ## [Logstash running but not listening on input port](https://discuss.elastic.co/t/logstash-running-but-not-listening-on-input-port/277799)
**Author:** [@cuongnp](https://discuss.elastic.co/u/cuongnp)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:24pm UTC](https://discuss.elastic.co/t/logstash-running-but-not-listening-on-input-port/277799 "2021-07-14T16:24:03Z")
Hi community, I have a logstash pipeline, It works well when I start the pipeline with command line. But when start as a service , there is no input port listening even the service is running. Please have a look This i… --- ## [Why logstash shut down when I use output to log.txt?](https://discuss.elastic.co/t/why-logstash-shut-down-when-i-use-output-to-log-txt/277837)
**Author:** [@111418](https://discuss.elastic.co/u/111418)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:18pm UTC](https://discuss.elastic.co/t/why-logstash-shut-down-when-i-use-output-to-log-txt/277837 "2021-07-14T16:18:06Z")
I have a log index "log\_index\_0701" and there is about 9000000 logs in this index. I want to output this index log as a txt file but logstash always shut down when I output. Here is my config input{ elasti… --- ## [Winlogbeat failed to connect Logstash server after ssl configuration](https://discuss.elastic.co/t/winlogbeat-failed-to-connect-logstash-server-after-ssl-configuration/278542)
**Author:** [@Rojal\_Paul](https://discuss.elastic.co/u/Rojal_Paul)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/winlogbeat-failed-to-connect-logstash-server-after-ssl-configuration/278542 "2021-07-14T16:09:43Z")
I iam posting teh photos of my logstash pipeline, and result of winlogbear output when i tried the test, it's refusing the connection. cd .. --- ## [Why ILM is impractical for managing logs / what curator can and cannot do better](https://discuss.elastic.co/t/why-ilm-is-impractical-for-managing-logs-what-curator-can-and-cannot-do-better/276563)
**Author:** [@m.passing](https://discuss.elastic.co/u/m.passing)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/why-ilm-is-impractical-for-managing-logs-what-curator-can-and-cannot-do-better/276563 "2021-07-14T16:09:29Z")
In our setup we have been using curator since a long time, but recent features (namely cold nodes with searchable snapshots), are not supported by it. I want to point out the issues we are having with ILM and the workaro… --- ## [ILM stalled by waiting for shard to be active](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618)
**Author:** [@AdamZ](https://discuss.elastic.co/u/AdamZ)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 3:26pm UTC](https://discuss.elastic.co/t/ilm-stalled-by-waiting-for-shard-to-be-active/278618 "2021-07-14T15:26:45Z")
Hello! I have an ILM Policy configured but it stops at rollover phase. I checked one of the indexes with this query: GET /apm-7.10.0-error-000001/\_ilm/explain?human And the response is: { "indices" : { "apm-7.… --- ## [Could a Master node work as a Coordinating only-role?](https://discuss.elastic.co/t/could-a-master-node-work-as-a-coordinating-only-role/278626)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 3:25pm UTC](https://discuss.elastic.co/t/could-a-master-node-work-as-a-coordinating-only-role/278626 "2021-07-14T15:25:35Z")
hey there, I have an infrastructure composed by 3 MASTER + 3 DATA nodes and every client will communicate only with MASTER nodes. are MASTER nodes acting as a Coordinating or not? To relieve DATA nodes regarding resou… --- ## [Example showing how to best use fuzzy multiterm/phrase matching?](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598)
**Author:** [@nahh](https://discuss.elastic.co/u/nahh)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 3:20pm UTC](https://discuss.elastic.co/t/example-showing-how-to-best-use-fuzzy-multiterm-phrase-matching/278598 "2021-07-14T15:20:30Z")
I'm looking for a complete example showing how you can effectively perform fuzzy phrase matching, to get useful results as a user types text. So far, the closest I've got is splitting the search query string into words … --- ## [Displaying ElasticSearch search results in a table with customizable onClick behavior](https://discuss.elastic.co/t/displaying-elasticsearch-search-results-in-a-table-with-customizable-onclick-behavior/278645)
**Author:** [@Manuel\_Pedro\_Gomez\_C](https://discuss.elastic.co/u/Manuel_Pedro_Gomez_C)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 2:44pm UTC](https://discuss.elastic.co/t/displaying-elasticsearch-search-results-in-a-table-with-customizable-onclick-behavior/278645 "2021-07-14T14:44:12Z")
Hello! I'm looking to present some aggregated information in the form of tables that do some custom actions when clicked on each row. While I was thinking that the EuiBasicTable component would work for my purposes, I'm… --- ## [How to install specific older version of elasticsearch in Mac OS](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 2:43pm UTC](https://discuss.elastic.co/t/how-to-install-specific-older-version-of-elasticsearch-in-mac-os/278683 "2021-07-14T14:43:38Z")
Hi all, I'm trying to install Elasticsearch using Homebrew version. I'm trying to install Elasticsearch 7.13.2 version. But when the use the below command, brew install elastic/tap/elasticsearch-full The latest vers… --- ## [Date histogram 6 months interval](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526)
**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\ **Replies:** 6\ **Last updated:** [July 14, 2021, 2:34pm UTC](https://discuss.elastic.co/t/date-histogram-6-months-interval/278526 "2021-07-14T14:34:02Z")
Hello, I just wonder whether I can draw the vertical bar with 6 months interval. I see that it supports other units but I cannot find an example of having half a year interval. Thank you! --- ## [Invalid SSL cert error when connecting to elasticsearch using DBeaver](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510)
**Author:** [@Fong\_Ng](https://discuss.elastic.co/u/Fong_Ng)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 1:46pm UTC](https://discuss.elastic.co/t/invalid-ssl-cert-error-when-connecting-to-elasticsearch-using-dbeaver/278510 "2021-07-14T13:46:43Z")
I have trouble using SSL keystore or truststore to connect to Elasticsearch client using DBeaver. This is an elastic stack on k8s installation on my local machine. I followed the official tutorial to set up a connection … --- ## [Kibana - Count on the data with filter condition is on last data category](https://discuss.elastic.co/t/kibana-count-on-the-data-with-filter-condition-is-on-last-data-category/278642)
**Author:** [@Hoai\_Le](https://discuss.elastic.co/u/Hoai_Le)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-count-on-the-data-with-filter-condition-is-on-last-data-category/278642 "2021-07-14T14:16:47Z")
Hi all. I am a newbie, I need your help. Let say i have the log like this: 14/Jul/2021:00:00:05 CONTRACT\_NO1 SUCESS content1 14/Jul/2021:00:00:06 CONTRACT\_NO1 SUCESS content2 14/Jul/2021:00:00:07 CONTRACT\_NO2 SUCESS co… --- ## [Index lifecycle policy does not apply to newly created timeseries indexes](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993)
**Author:** [@PMDubuc](https://discuss.elastic.co/u/PMDubuc)\ **Replies:** 17\ **Last updated:** [July 14, 2021, 2:03pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-does-not-apply-to-newly-created-timeseries-indexes/277993 "2021-07-14T14:03:21Z")
I'm using version 7.8.1 of the elastic stack for indexing log files with filebeat into daily logstash-yyyy-mm-dd indexes. I've created an index pattern and template for the indexes and a Logstash\_Index\_Retention policy … --- ## [Get contents of a array list of a document in aggregations](https://discuss.elastic.co/t/get-contents-of-a-array-list-of-a-document-in-aggregations/278674)
**Author:** [@Krishna\_Mohan\_K](https://discuss.elastic.co/u/Krishna_Mohan_K)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 1:59pm UTC](https://discuss.elastic.co/t/get-contents-of-a-array-list-of-a-document-in-aggregations/278674 "2021-07-14T13:59:41Z")
Hi All, I am new to ES. As a part of document we have dates, type and array objects. I have written an ES query with aggregations to date, type. I am trying to get list of array objects inside type aggregation. Please … --- ## [Kibana suddenly rounding number field to single digit](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 12\ **Last updated:** [July 14, 2021, 1:41pm UTC](https://discuss.elastic.co/t/kibana-suddenly-rounding-number-field-to-single-digit/276003 "2021-07-14T13:41:16Z")
Hi All, Apologies in advance as this is likely to be a stupid error on my part but it's got me stumped at the moment. I'm running Elasticsearch and Kibana 7.12 and for some months have been using Logstash to input logg… --- ## [Can you tell me on average what would be the consumption of the agent filebeat?](https://discuss.elastic.co/t/can-you-tell-me-on-average-what-would-be-the-consumption-of-the-agent-filebeat/278669)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 1:37pm UTC](https://discuss.elastic.co/t/can-you-tell-me-on-average-what-would-be-the-consumption-of-the-agent-filebeat/278669 "2021-07-14T13:37:09Z")
Can you tell me on average what would be the consumption of the agent filebeat? I know it depends on many things, but if there is an indication like this: if it's just a file that generates so many lines per second, the … --- ## [Logstash resarting with error](https://discuss.elastic.co/t/logstash-resarting-with-error/278666)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 1:17pm UTC](https://discuss.elastic.co/t/logstash-resarting-with-error/278666 "2021-07-14T13:17:12Z")
Hey, I have 3 logstash instances running but each gets restarted after a while with this error: \[2021-07-14T14:35:23,972\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>java.lang.IllegalStateEx… --- ## [ERROR Failed to complete action: restore. \: Exception encountered](https://discuss.elastic.co/t/error-failed-to-complete-action-restore-class-curator-exceptions-failedexecution-exception-encountered/278595)
**Author:** [@Es\_P\_T](https://discuss.elastic.co/u/Es_P_T)\ **Replies:** 1\ **Last updated:** [July 14, 2021, 1:03pm UTC](https://discuss.elastic.co/t/error-failed-to-complete-action-restore-class-curator-exceptions-failedexecution-exception-encountered/278595 "2021-07-14T13:03:30Z")
Hi ES, Below is my code and I am trying to take a snapshot from one cluster and restore it in different cluster using Elasticsearch Curator. 1: action: restore description: \>- Restore all indi… --- ## [How do I combine fields from 2 different docs (and indices) within Kibana?](https://discuss.elastic.co/t/how-do-i-combine-fields-from-2-different-docs-and-indices-within-kibana/277819)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 7\ **Last updated:** [July 14, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-do-i-combine-fields-from-2-different-docs-and-indices-within-kibana/277819 "2021-07-14T12:48:03Z")
Hello, We are trying to get an index with docs combining fields from 2 different (already existing) indices. We tried using the transform, but got an index with both docs, still separate however. We are not sure if we u… --- ## [Index operation rejected with Service Not Available error / Master Node Failed in logs](https://discuss.elastic.co/t/index-operation-rejected-with-service-not-available-error-master-node-failed-in-logs/278657)
**Author:** [@Steve\_Robinson](https://discuss.elastic.co/u/Steve_Robinson)\ **Replies:** 0\ **Last updated:** [July 14, 2021, 12:25pm UTC](https://discuss.elastic.co/t/index-operation-rejected-with-service-not-available-error-master-node-failed-in-logs/278657 "2021-07-14T12:25:09Z")
We noticed an index op fail with the error: {"ok":false,"message":"The requested resource is currently unavailable."} today. When investigating the server logs during this time, it appears as if the master node in our c… --- ## [Fix x-axis for a stacked bar chart](https://discuss.elastic.co/t/fix-x-axis-for-a-stacked-bar-chart/278216)
**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\ **Replies:** 3\ **Last updated:** [July 14, 2021, 12:09pm UTC](https://discuss.elastic.co/t/fix-x-axis-for-a-stacked-bar-chart/278216 "2021-07-14T12:09:44Z")
How can I fix my x-axis for a stacked bar chart? please help! i use kibana 7.13.2 [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1321) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1323)