# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1343 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1344 --- ## [No matching indices found: No indices match pattern “winlogbeat-\*”](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/277300)
**Author:** [@Shivam\_Kalra2](https://discuss.elastic.co/u/Shivam_Kalra2)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 10:04pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-winlogbeat/277300 "2021-06-29T22:04:26Z")
Hello, I am getting the errors "No matching indices found: No indices match pattern "winlogbeat-\*" when I try to go to the Winlogbeat dashboard or Discover. There was a winlogbeat-\* index pattern created, just no traffi… --- ## [List of all ctx.\* / context.\* I can use in a Kibana webhook payload?](https://discuss.elastic.co/t/list-of-all-ctx-context-i-can-use-in-a-kibana-webhook-payload/277335)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 8:07pm UTC](https://discuss.elastic.co/t/list-of-all-ctx-context-i-can-use-in-a-kibana-webhook-payload/277335 "2021-06-29T20:07:27Z")
Dear all =) Does anyone know if there exist a list of all the info I can include in a Kibana rule/webhook payload? Right now I have "watch\_id":"{{ctx.watch\_id}}", "id":"{{ctx.id}}", "payload":"{{ctx.payload}}", "e… --- ## [Kibana Install in MAC OS using darwin package?](https://discuss.elastic.co/t/kibana-install-in-mac-os-using-darwin-package/277203)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 7:38pm UTC](https://discuss.elastic.co/t/kibana-install-in-mac-os-using-darwin-package/277203 "2021-06-29T19:38:11Z")
Since it was an urgency, i installed using tar.gz darwin package of kibana. Can darwin package for kibana & Elasticsearch be installed as standard in mac OS? Or should we always use homebrew? Regards --- ## [7.12 Kibana log alerting - pass log details to PagerDuty](https://discuss.elastic.co/t/7-12-kibana-log-alerting-pass-log-details-to-pagerduty/272506)
**Author:** [@tslattery](https://discuss.elastic.co/u/tslattery)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 7:15pm UTC](https://discuss.elastic.co/t/7-12-kibana-log-alerting-pass-log-details-to-pagerduty/272506 "2021-06-29T19:15:51Z")
7.12 Kibana alerting I am trying to get some details of a log message to propagate to PagerDuty. The Connector is working and events are created in PD. The alert configuration: I read these two threads and under… --- ## [Missing Fields when Creating Alert in Kibana](https://discuss.elastic.co/t/missing-fields-when-creating-alert-in-kibana/275448)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 7:05pm UTC](https://discuss.elastic.co/t/missing-fields-when-creating-alert-in-kibana/275448 "2021-06-29T19:05:56Z")
Hi guys, so i tried to setup a few simple Kibana Alerts combined with a log-connector. I'm running Elastic-Stack 7.11 on 3 CentOS 7 Servers. There was no problem in enabeling the alerts, but now when i try to create … --- ## [\[ERROR\] Ruby exception occurred: undefined method \`+' for nil:NilClass](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-for-nil-nilclass/277377)
**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\ **Replies:** 4\ **Last updated:** [June 29, 2021, 6:32pm UTC](https://discuss.elastic.co/t/error-ruby-exception-occurred-undefined-method-for-nil-nilclass/277377 "2021-06-29T18:32:35Z")
Hi everyone, I have a problem with a filter in ruby, I am doing an operation between 2 metrics, but I get the following error: \[ERROR\] 2021-06-29 14:02:24.847 \[\[main\]\>worker0\] ruby - Ruby exception occurred: undefined m… --- ## [You must enable Transport Layer Security](https://discuss.elastic.co/t/you-must-enable-transport-layer-security/276696)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 6:10pm UTC](https://discuss.elastic.co/t/you-must-enable-transport-layer-security/276696 "2021-06-29T18:10:20Z")
My Kibana version is 7.9.2. In my docker-compose.yaml file, when I change the path of source from conf to config- my Kibana alerts are disabled and it says to enable TLS: PS. I am changing the source path from conf … --- ## [30 Day Daily Average Gauge](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205)
**Author:** [@Ryan\_Kapsak](https://discuss.elastic.co/u/Ryan_Kapsak)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 4:33pm UTC](https://discuss.elastic.co/t/30-day-daily-average-gauge/277205 "2021-06-29T16:33:00Z")
Hi! I am having some trouble setting up a gauge accurately for a visualization in Kibana. I want to display a Daily # of orders that is sold over a 30 day period. My variables are 'order\_qty' and 'date' for the timestamp… --- ## [Cannot connect to kibana through port 5601](https://discuss.elastic.co/t/cannot-connect-to-kibana-through-port-5601/277288)
**Author:** [@cfiske1](https://discuss.elastic.co/u/cfiske1)\ **Replies:** 4\ **Last updated:** [June 29, 2021, 4:31pm UTC](https://discuss.elastic.co/t/cannot-connect-to-kibana-through-port-5601/277288 "2021-06-29T16:31:20Z")
I am trying to implement kibana and elasticsearch on an azure VM, and while I can get both of them running, I am unable to connect with kibana. After starting both programs, kibana gives me the message " log \[05:14:15… --- ## [Lucene Query Language using now date time](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 4:19pm UTC](https://discuss.elastic.co/t/lucene-query-language-using-now-date-time/275579 "2021-06-29T16:19:56Z")
In Lucene for a date range its possible to do date:{\* TO 2012-01-01}, is it possible to use the now date time such as date:{now-60d/d TO now/d} --- ## [TSVB Aggregation filter](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 5\ **Last updated:** [June 29, 2021, 4:18pm UTC](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477 "2021-06-29T16:18:58Z")
I want to show a gauge with a value that is calculated via an aggregation, the issue is i want the aggregations to be based on a filter, such that I have a count value that is (number of docs with attribute:A) I have a… --- ## [Use script in aggregation](https://discuss.elastic.co/t/use-script-in-aggregation/275873)
**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\ **Replies:** 4\ **Last updated:** [June 29, 2021, 4:18pm UTC](https://discuss.elastic.co/t/use-script-in-aggregation/275873 "2021-06-29T16:18:31Z")
I think im almost there so hopefully this should be an easy fix, im trying to get a percentage value Percentage of docs that meet the filtered\_docs criteria out of all the docs in the index. Calculation should be - (to… --- ## [Data table :hide column Count](https://discuss.elastic.co/t/data-table-hide-column-count/277292)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 4:17pm UTC](https://discuss.elastic.co/t/data-table-hide-column-count/277292 "2021-06-29T16:17:02Z")
Hello Team, In a data table, is it possible to hide column Count ? I have to display response code and its percentage in table. But data table visualization forcing me to enable metric. Thanks --- ## [Metricbeat not pulling logs from AWS CWAgent namespace](https://discuss.elastic.co/t/metricbeat-not-pulling-logs-from-aws-cwagent-namespace/277119)
**Author:** [@sumeshms](https://discuss.elastic.co/u/sumeshms)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 3:58pm UTC](https://discuss.elastic.co/t/metricbeat-not-pulling-logs-from-aws-cwagent-namespace/277119 "2021-06-29T15:58:26Z")
Hello I am trying to pull logs from AWS Cloudwatch metricset with the below configuration. Unfortunately no logs received at the metricbeat end. - module: aws period: 300s access\_key\_id: 'xxxxxxx' secret\_access\_… --- ## [Kibana 7.10.2 Lens not showing](https://discuss.elastic.co/t/kibana-7-10-2-lens-not-showing/277362)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 3:04pm UTC](https://discuss.elastic.co/t/kibana-7-10-2-lens-not-showing/277362 "2021-06-29T15:04:49Z")
Hi all, When i try to create new visualization, Lens option not showing. According to documentation, Lens should be available in 7.10.2. Any settings or config to be made? --- ## [Line break not working on Slack notification message](https://discuss.elastic.co/t/line-break-not-working-on-slack-notification-message/276824)
**Author:** [@baptiste](https://discuss.elastic.co/u/baptiste)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 2:38pm UTC](https://discuss.elastic.co/t/line-break-not-working-on-slack-notification-message/276824 "2021-06-29T14:38:15Z")
Hi! I'm using a Trigger to send a slack message. Since couple of days all the line break (\\n) seems to have disappeared in the resulting message in slack. Therefore the message previous and the actual message on slack … --- ## [Can't start kibana when enabling preconfigured alert history](https://discuss.elastic.co/t/cant-start-kibana-when-enabling-preconfigured-alert-history/276946)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 2:17pm UTC](https://discuss.elastic.co/t/cant-start-kibana-when-enabling-preconfigured-alert-history/276946 "2021-06-29T14:17:21Z")
I am using elastic stack 7.12.0 and enabled alerting specifying a value for xpack.encryptedSavedObjects.encryptionKey in kibana.yml. At this stage alerting works well with Server log connector. When I tried to activate A… --- ## [Ingest pipeline "Failed to parse content to map"](https://discuss.elastic.co/t/ingest-pipeline-failed-to-parse-content-to-map/276812)
**Author:** [@Louis1](https://discuss.elastic.co/u/Louis1)\ **Replies:** 6\ **Last updated:** [June 29, 2021, 2:05pm UTC](https://discuss.elastic.co/t/ingest-pipeline-failed-to-parse-content-to-map/276812 "2021-06-29T14:05:35Z")
Why is this log causing an error and what is the meaning of "Failed to parse content to map". I am pretty new to pipelines and ES in general so any help would be greatly appreciated: INPUT POST \_ingest/pipeline/\_simula… --- ## [Ctx" variables in Alerts](https://discuss.elastic.co/t/ctx-variables-in-alerts/276403)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 2:02pm UTC](https://discuss.elastic.co/t/ctx-variables-in-alerts/276403 "2021-06-29T14:02:48Z")
Hello, I am trying to create an generic alert. I would like to send a message to my telegram bot. Currently I have this script: { "text": " {{ctx.monitor.name}}: Please investigate the issue. Severity: {{ctx.trigge… --- ## [Настройки маппинга](https://discuss.elastic.co/t/topic/277223)
**Author:** [@\_LA](https://discuss.elastic.co/u/_LA)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 1:57pm UTC](https://discuss.elastic.co/t/topic/277223 "2021-06-29T13:57:58Z")
Подскажите пожалуйста, где настраивается маппинг для входящих json файлов? --- ## [Kibana Elastic Search Alerting not firing](https://discuss.elastic.co/t/kibana-elastic-search-alerting-not-firing/276401)
**Author:** [@scrappedprince](https://discuss.elastic.co/u/scrappedprince)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 1:56pm UTC](https://discuss.elastic.co/t/kibana-elastic-search-alerting-not-firing/276401 "2021-06-29T13:56:07Z")
0 Hi All, I am currently working on Kibana Alerting and what I wanted to perform is basically "Log threshold". Please see attached for the details of the alert rule. I wanted to match phrase of the word "warnings"… --- ## [Zscaler Module issue](https://discuss.elastic.co/t/zscaler-module-issue/277354)
**Author:** [@Sunflower](https://discuss.elastic.co/u/Sunflower)\ **Replies:** 0\ **Last updated:** [June 29, 2021, 1:10pm UTC](https://discuss.elastic.co/t/zscaler-module-issue/277354 "2021-06-29T13:10:56Z")
Hi, I enabled the Zscaler module and edited its YAML file module: zscaler zia: enabled: true # Set which input to use between udp (default), tcp or file. var.input: tcp var.syslog\_host: 0.0.0.0 var.syslog\_port… --- ## [Logstash Periodically Failing](https://discuss.elastic.co/t/logstash-periodically-failing/277353)
**Author:** [@jtillman2020](https://discuss.elastic.co/u/jtillman2020)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 1:42pm UTC](https://discuss.elastic.co/t/logstash-periodically-failing/277353 "2021-06-29T13:42:33Z")
Every few days I notice my logstash stops ingesting data. When I check the log I find this: \[2021-06-29T03:30:39,236\]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline worker error, the pipeline will be stopped {:pipeli… --- ## [How to split array or string with "Ingest Node Pipeline"](https://discuss.elastic.co/t/how-to-split-array-or-string-with-ingest-node-pipeline/277052)
**Author:** [@HaKuNa](https://discuss.elastic.co/u/HaKuNa)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 12:23pm UTC](https://discuss.elastic.co/t/how-to-split-array-or-string-with-ingest-node-pipeline/277052 "2021-06-29T12:23:33Z")
Hi I'm new to ECE and have a filebeat pipeline which sends data to ECE. This is the format of the message field which I have in ECE (separator would be -\> \\t): 2021-06-25T13:08:39.559+0200 INFO 12409 com.l7tech.tra… --- ## ["Copy as cURL" greyed out](https://discuss.elastic.co/t/copy-as-curl-greyed-out/277338)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 1\ **Last updated:** [June 29, 2021, 12:14pm UTC](https://discuss.elastic.co/t/copy-as-curl-greyed-out/277338 "2021-06-29T12:14:27Z")
Hi, On one instance of Kibana the option "Copy as cURL" is greyed out, on another Kibana on another stack it is available. How do I restore this functionality? Best regards, Robert --- ## [Elastic Score differs in search vs explain](https://discuss.elastic.co/t/elastic-score-differs-in-search-vs-explain/277345)
**Author:** [@Mohammed\_Ajil](https://discuss.elastic.co/u/Mohammed_Ajil)\ **Replies:** 0\ **Last updated:** [June 29, 2021, 11:57am UTC](https://discuss.elastic.co/t/elastic-score-differs-in-search-vs-explain/277345 "2021-06-29T11:57:59Z")
--- ## [Cross cluster replication security. Mutual TLS query](https://discuss.elastic.co/t/cross-cluster-replication-security-mutual-tls-query/277340)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 0\ **Last updated:** [June 29, 2021, 11:47am UTC](https://discuss.elastic.co/t/cross-cluster-replication-security-mutual-tls-query/277340 "2021-06-29T11:47:31Z")
ClusterA (leader) keystore (includes server certificate with principal cn=ClusterA, signed by company CA) truststore (company CA) ClusterB (follower) keystore (includes server certificate with principal cn=ClusterB, … --- ## [Canvas element spacing/snapping](https://discuss.elastic.co/t/canvas-element-spacing-snapping/277332)
**Author:** [@qlikq](https://discuss.elastic.co/u/qlikq)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 11:24am UTC](https://discuss.elastic.co/t/canvas-element-spacing-snapping/277332 "2021-06-29T11:24:01Z")
Hello, is it possible somehow to make an element to be positioned right next to other element ? I don't know how to move my markdown element to the top markdown element, so that, there is no space between them ? Now it … --- ## [Filebeat Modules](https://discuss.elastic.co/t/filebeat-modules/276949)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 10:51am UTC](https://discuss.elastic.co/t/filebeat-modules/276949 "2021-06-29T10:51:55Z")
We inherited a cluster and are trying to update the ingest pipeline (ES version 7.6) Context: When we do GET ingest/pipeline there is a 15k line pipeline. It has all the processors from the filebeat modules they have up… --- ## [How to send logs to multiple UDP destination using logstash from elasticsearch](https://discuss.elastic.co/t/how-to-send-logs-to-multiple-udp-destination-using-logstash-from-elasticsearch/277308)
**Author:** [@Vedagiri\_Balaji](https://discuss.elastic.co/u/Vedagiri_Balaji)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 10:04am UTC](https://discuss.elastic.co/t/how-to-send-logs-to-multiple-udp-destination-using-logstash-from-elasticsearch/277308 "2021-06-29T10:04:20Z")
Hi , Currently we sending logs to a UDP destination, we intend send the same logs to multiple UDP destination ( logs are read from elasticsearch ) udp { id =\> "udp\_exporter" codec =\> plain { format =\> "%{message}" … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1342) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1344)