# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1334 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1335 --- ## [Indices Creation](https://discuss.elastic.co/t/indices-creation/277949)
**Author:** [@Ashwin\_Patil1](https://discuss.elastic.co/u/Ashwin_Patil1)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 10:46am UTC](https://discuss.elastic.co/t/indices-creation/277949 "2021-07-06T10:46:42Z")
I am trying to collect logs from linux, windows, network devices, firewall and Azure. How can I have separate index for each of these sources? what is the best practice? I have logstash configured but for now it is con… --- ## [How to make filebeat ship the missed logs of a period?](https://discuss.elastic.co/t/how-to-make-filebeat-ship-the-missed-logs-of-a-period/277873)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 10:30am UTC](https://discuss.elastic.co/t/how-to-make-filebeat-ship-the-missed-logs-of-a-period/277873 "2021-07-06T10:30:24Z")
Hi! I have an index retrieving data from logstash (which gets its data from filebeat itself). There are some logs that were missed by filebeat (because filebeat was installed later on the node) and the dashboards are not… --- ## [Filter data in Maps view with max field value](https://discuss.elastic.co/t/filter-data-in-maps-view-with-max-field-value/277435)
**Author:** [@MAvD](https://discuss.elastic.co/u/MAvD)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 10:04am UTC](https://discuss.elastic.co/t/filter-data-in-maps-view-with-max-field-value/277435 "2021-07-06T10:04:53Z")
Hi, In one of our Maps visualisation we want to show the data of the latest available measurement day. We would like to filter this data dynamically using a function similar to the Scaling option "Show top hits per enti… --- ## [What version a node is?](https://discuss.elastic.co/t/what-version-a-node-is/277821)
**Author:** [@Daniel\_Seixas](https://discuss.elastic.co/u/Daniel_Seixas)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 10:01am UTC](https://discuss.elastic.co/t/what-version-a-node-is/277821 "2021-07-06T10:01:55Z")
Hi, Hope you can help me here. I did an upgrade of ES a few months ago to ES7.x . I was creating a new index but wanted to maintain the old one. The problem I have is that I cannot use the older index, not sure what we… --- ## [Agent randomly stops sending data but still checks in to fleet](https://discuss.elastic.co/t/agent-randomly-stops-sending-data-but-still-checks-in-to-fleet/277704)
**Author:** [@greggailly](https://discuss.elastic.co/u/greggailly)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 9:05am UTC](https://discuss.elastic.co/t/agent-randomly-stops-sending-data-but-still-checks-in-to-fleet/277704 "2021-07-06T09:05:15Z")
Hi everybody, In case it might be related, the agents were enrolled according to the procedure described in the following topic https://discuss.elastic.co/t/agent-stuck-on-updating-when-enrolling/277703 as enroll proces… --- ## [Build-in users' passwords gone after service restart](https://discuss.elastic.co/t/build-in-users-passwords-gone-after-service-restart/277870)
**Author:** [@manfred](https://discuss.elastic.co/u/manfred)\ **Replies:** 9\ **Last updated:** [July 6, 2021, 8:46am UTC](https://discuss.elastic.co/t/build-in-users-passwords-gone-after-service-restart/277870 "2021-07-06T08:46:26Z")
Hi, ELK 7.13.2, ./elasticsearch-setup-passwords interactive curl -u elastic 'https://localhost:9200/\_xpack/security/\_authenticate?pretty' // here authentication as elastic works systemctl restart elasticsearch // af… --- ## [Configure Filebeats on Docker to read logs in Widnows Directory (C:/LogsESB/\*/\*.log)](https://discuss.elastic.co/t/configure-filebeats-on-docker-to-read-logs-in-widnows-directory-c-logsesb-log/277924)
**Author:** [@DockerEngineer](https://discuss.elastic.co/u/DockerEngineer)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 8:06am UTC](https://discuss.elastic.co/t/configure-filebeats-on-docker-to-read-logs-in-widnows-directory-c-logsesb-log/277924 "2021-07-06T08:06:27Z")
Hello Community, I need your help to understand how we can configure Filebeat running on Docker to read a Windows Directory path, I am attaching my Docker compose and Filebeat Yaml file. Thanks for your help. Filebeat… --- ## [How to index percolator field via logstash and json\_encode filter?](https://discuss.elastic.co/t/how-to-index-percolator-field-via-logstash-and-json-encode-filter/277860)
**Author:** [@akb](https://discuss.elastic.co/u/akb)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 8:26am UTC](https://discuss.elastic.co/t/how-to-index-percolator-field-via-logstash-and-json-encode-filter/277860 "2021-07-06T08:26:44Z")
I'm trying to index documents and populate a percolator field via logstash: Index definition PUT test\_percolate { "mappings": { "\_doc": { "properties": { "search\_name": { "type": "text" … --- ## [APM for Kibana](https://discuss.elastic.co/t/apm-for-kibana/277813)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 8:06am UTC](https://discuss.elastic.co/t/apm-for-kibana/277813 "2021-07-06T08:06:22Z")
Hi there, I wonder if it is possibile to use APM agent to monitor Kibana to use the user experience metrics for tuning the environment. Beacuse often the monitoring metric are not enough to do an analysis. Thank you ve… --- ## [How to change kibana http to https](https://discuss.elastic.co/t/how-to-change-kibana-http-to-https/277914)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 7:58am UTC](https://discuss.elastic.co/t/how-to-change-kibana-http-to-https/277914 "2021-07-06T07:58:38Z")
Hi team, I installed elasticsearch and kibana in my local machine. And elasticsearch kibana is secured with searchguard. now elasticsearch is enabled with https. but kibana in http. how to change kibana into https. --- ## [Where does host.name come from?](https://discuss.elastic.co/t/where-does-host-name-come-from/277855)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 7:50am UTC](https://discuss.elastic.co/t/where-does-host-name-come-from/277855 "2021-07-06T07:50:23Z")
Hi! I have fileabeat and logstash to send Nginx data to elasticsearch. I do not have “host.name” field in my logs, but when I discover my index patterns, I see this field. Where does it come from? How does elasticsearch … --- ## [How to get same ordered data from elasticsearch as it was indexed](https://discuss.elastic.co/t/how-to-get-same-ordered-data-from-elasticsearch-as-it-was-indexed/277843)
**Author:** [@user11](https://discuss.elastic.co/u/user11)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 7:02am UTC](https://discuss.elastic.co/t/how-to-get-same-ordered-data-from-elasticsearch-as-it-was-indexed/277843 "2021-07-06T07:02:37Z")
I would like to retrieve documents from elasticsearch in the same order as it was indexed. Timestamp won't work because there will be collisions. Sequence number won't work because it is unique only per shard. Does ela… --- ## [CRL or OCSP in Elastic Stack](https://discuss.elastic.co/t/crl-or-ocsp-in-elastic-stack/277557)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 6:40am UTC](https://discuss.elastic.co/t/crl-or-ocsp-in-elastic-stack/277557 "2021-07-06T06:40:24Z")
Hi, I have a question that relates to the October 2019 thread: The topic was also brought up: When configuring SSL/TLS in Elasticsearch, is it possible to somehow add support for CRL or OCSP so that the system aut… --- ## [Remove heading](https://discuss.elastic.co/t/remove-heading/277792)
**Author:** [@ANKITA\_SAHA](https://discuss.elastic.co/u/ANKITA_SAHA)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 6:39am UTC](https://discuss.elastic.co/t/remove-heading/277792 "2021-07-06T06:39:19Z")
I want to remove the headings of columns that come under keyword when pushing dataset in kibana. For eg - I have column named 'Hour' with values as 1,2,3,4.... Now in 'Hour.keyword' values that i am getting are Hour,1… --- ## [Custom plug-in how to implement Map and Set types of Settings](https://discuss.elastic.co/t/custom-plug-in-how-to-implement-map-and-set-types-of-settings/277719)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 6\ **Last updated:** [July 6, 2021, 6:12am UTC](https://discuss.elastic.co/t/custom-plug-in-how-to-implement-map-and-set-types-of-settings/277719 "2021-07-06T06:12:54Z")
I want to develop a plugin that needs to use the Settings API to save some state across the cluster, these states are of Set type and Map type, but I can't find the relevant API to set, can anyone help me to see how to d… --- ## [Processor network\_direction in filebeat](https://discuss.elastic.co/t/processor-network-direction-in-filebeat/277900)
**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 5:16am UTC](https://discuss.elastic.co/t/processor-network-direction-in-filebeat/277900 "2021-07-06T05:16:46Z")
Hi, Actually we want to implement the network\_direction in filebeat processor for that we added below lines # ================================= Processors ================================= processors: - add\_host\_meta… --- ## [Winlogbeat Secrets Key Store](https://discuss.elastic.co/t/winlogbeat-secrets-key-store/276457)
**Author:** [@inf](https://discuss.elastic.co/u/inf)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 5:37am UTC](https://discuss.elastic.co/t/winlogbeat-secrets-key-store/276457 "2021-07-06T05:37:53Z")
Hi there! (Reference link that I used for what I tried: Secrets keystore for secure settings) Here's with I did to setup my Winlogbeat's communication with Elasticsearch, with the use of an API key (instead of credenti… --- ## [Searchable snapshots xpack feature or available in oss distribution as well?](https://discuss.elastic.co/t/searchable-snapshots-xpack-feature-or-available-in-oss-distribution-as-well/277899)
**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 5:27am UTC](https://discuss.elastic.co/t/searchable-snapshots-xpack-feature-or-available-in-oss-distribution-as-well/277899 "2021-07-06T05:27:05Z")
Hi, I am looking at upgrading to elasticsearch-oss 7.10.2 and noticed that searchable snapshots is introduced as a beta feature in 7.10 (Ref - searchable-snapshots) This page does not have an X-Pack label, however the… --- ## [Alerting kibana](https://discuss.elastic.co/t/alerting-kibana/277800)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 13\ **Last updated:** [July 6, 2021, 3:47am UTC](https://discuss.elastic.co/t/alerting-kibana/277800 "2021-07-06T03:47:04Z")
how to make alerting kibana? and then where do i find xpack.encryptedSavedObjects.encryptionKey ? --- ## [Change default filebeat index name](https://discuss.elastic.co/t/change-default-filebeat-index-name/277646)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 3:45am UTC](https://discuss.elastic.co/t/change-default-filebeat-index-name/277646 "2021-07-06T03:45:33Z")
Hi! I am using the Suricata filebeat module to send Suricata logs directly to ES. I am using all the default filebeat indexes. I want to change the default index and index patterns names to be suricata instead of fileb… --- ## [Authorization headers leaked on failed config check](https://discuss.elastic.co/t/authorization-headers-leaked-on-failed-config-check/277662)
**Author:** [@nefta-kanilmaz-by](https://discuss.elastic.co/u/nefta-kanilmaz-by)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 3:42am UTC](https://discuss.elastic.co/t/authorization-headers-leaked-on-failed-config-check/277662 "2021-07-06T03:42:40Z")
Hi everyone, I am using the heartbeat hint based auto discovery feature. I have configured a HTTP monitor and added headers (including the authorization part) to the heartbeat.yml. When the auto discover config check f… --- ## [ES terminated without any error message](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771)
**Author:** [@Jennny06](https://discuss.elastic.co/u/Jennny06)\ **Replies:** 2\ **Last updated:** [July 6, 2021, 3:25am UTC](https://discuss.elastic.co/t/es-terminated-without-any-error-message/277771 "2021-07-06T03:25:58Z")
Hi, I am using version 7.13.2. I am setting up ES on remote server. ES worked for me last week, however, today when I tried to start it, it won't open anymore. It always shows Terminated or stop right after it shows JVM … --- ## [Unable to Connect Logstash with Elastic](https://discuss.elastic.co/t/unable-to-connect-logstash-with-elastic/277723)
**Author:** [@iraed91](https://discuss.elastic.co/u/iraed91)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 3:14am UTC](https://discuss.elastic.co/t/unable-to-connect-logstash-with-elastic/277723 "2021-07-06T03:14:41Z")
Hi All! I just enabled X-PACK on my elasticsearch and was able to do all required config for elastic and kibana. Now, I have logstash installed in another host and communicating to logstash over the internet on HTTPs pr… --- ## [ElasticSearch username as Null](https://discuss.elastic.co/t/elasticsearch-username-as-null/277081)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 6\ **Last updated:** [July 6, 2021, 2:58am UTC](https://discuss.elastic.co/t/elasticsearch-username-as-null/277081 "2021-07-06T02:58:48Z")
Hi, We configured ElasticSearch with Oracle CMS(WCC 12c) for a Single Node Elasticsearch on Linux. and migrated ~4 Million contents to this newer CMS. The configurations seems correct and username is set however noticed … --- ## [Elastic search consuming so much Memory](https://discuss.elastic.co/t/elastic-search-consuming-so-much-memory/277892)
**Author:** [@choudharykartik](https://discuss.elastic.co/u/choudharykartik)\ **Replies:** 1\ **Last updated:** [July 6, 2021, 2:58am UTC](https://discuss.elastic.co/t/elastic-search-consuming-so-much-memory/277892 "2021-07-06T02:58:02Z")
I have an EC2 instance having 32 GB RAM and I am using Django Elasticsearch DSL to use elastic search in Django for searching in Model objects. I have containerized the elastic search server. Below is the code from the … --- ## [Ingest data via Modbus and BACnet communication protocols to Elastic](https://discuss.elastic.co/t/ingest-data-via-modbus-and-bacnet-communication-protocols-to-elastic/277598)
**Author:** [@Valdos116](https://discuss.elastic.co/u/Valdos116)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 8:56pm UTC](https://discuss.elastic.co/t/ingest-data-via-modbus-and-bacnet-communication-protocols-to-elastic/277598 "2021-07-01T20:56:08Z")
Hi Team, I'm trying to ingest data from field devices that talk Modbus TCP and BACnet IP to Elastic Logstash. Any help would be appreciated. Thanks --- ## [Disk usage threshold](https://discuss.elastic.co/t/disk-usage-threshold/277328)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 1:35am UTC](https://discuss.elastic.co/t/disk-usage-threshold/277328 "2021-07-06T01:35:29Z")
I'm planning integrate Elasticsearch as a single node cluster per application server. Application server is getting hosted in customer environment. For disk threshold, I'm planning to use only disk flood\_stage configura… --- ## [Problems getting filebeat to connect to logstash container running in kubernetes](https://discuss.elastic.co/t/problems-getting-filebeat-to-connect-to-logstash-container-running-in-kubernetes/277754)
**Author:** [@RyanCherry](https://discuss.elastic.co/u/RyanCherry)\ **Replies:** 3\ **Last updated:** [July 6, 2021, 12:48am UTC](https://discuss.elastic.co/t/problems-getting-filebeat-to-connect-to-logstash-container-running-in-kubernetes/277754 "2021-07-06T00:48:30Z")
Hi there, I have used the helm chart to install logstash onto my kubernetes cluster, however I am having problems getting filebeat to send logs to logstash. Filebeat is running on a windows server as a service on that s… --- ## [Lifecycle policies don't work](https://discuss.elastic.co/t/lifecycle-policies-dont-work/276218)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 13\ **Last updated:** [July 5, 2021, 11:40pm UTC](https://discuss.elastic.co/t/lifecycle-policies-dont-work/276218 "2021-07-05T23:40:49Z")
As per the title, ILM simply does not work, or at least it doesn't work according to what Kibana or the docs make you believe should work. I can create a lifecycle policy and attach a index but it will never roll over. … --- ## [Elasticsearch index size less then dataset disk space](https://discuss.elastic.co/t/elasticsearch-index-size-less-then-dataset-disk-space/277872)
**Author:** [@Fradi](https://discuss.elastic.co/u/Fradi)\ **Replies:** 1\ **Last updated:** [July 5, 2021, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-index-size-less-then-dataset-disk-space/277872 "2021-07-05T23:28:29Z")
Hello there, I have elasticsearch version 7.10.1, I work on the file from MeDAL Dataset | Kaggle full\_data.csv 14.12 GB I divided it into 179 csv files containing 300,000 lines each and loaded them into elasticsearch. H… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1333) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1335)