# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1390 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1391 --- ## [Text Files received by Logstash from Filebeat is not same as Source Files](https://discuss.elastic.co/t/text-files-received-by-logstash-from-filebeat-is-not-same-as-source-files/274512)
**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/text-files-received-by-logstash-from-filebeat-is-not-same-as-source-files/274512 "2021-05-31T19:32:04Z")
Hi everyone... I am transferring text files from my Application Server to Logstash Server using below logstash config file. The files transmitted are received perfectly, but some of the lines in the received text files … --- ## [New Node in Docker Implementation](https://discuss.elastic.co/t/new-node-in-docker-implementation/274536)
**Author:** [@augandi](https://discuss.elastic.co/u/augandi)\ **Replies:** 0\ **Last updated:** [May 31, 2021, 4:24pm UTC](https://discuss.elastic.co/t/new-node-in-docker-implementation/274536 "2021-05-31T16:24:23Z")
Hi, I am new here and I hope you can help me with a frustrating issue :frowning: I have a Docker-based installation of the Elastic Stack. There were just two containers: es01 and kib01 Here the Docker-Compose yml File: … --- ## [Logstash don't execute my two Pipelines file](https://discuss.elastic.co/t/logstash-dont-execute-my-two-pipelines-file/274400)
**Author:** [@Denilson-Semedo](https://discuss.elastic.co/u/Denilson-Semedo)\ **Replies:** 4\ **Last updated:** [May 31, 2021, 5:49pm UTC](https://discuss.elastic.co/t/logstash-dont-execute-my-two-pipelines-file/274400 "2021-05-31T17:49:59Z")
i thease have two pipeline in the logstash pipeline folder logstash.conf : input { beats { port =\> 5066 } } filter { if \[cloud\]\[account\]\[id\] == "941682856883" { mutate { add\_field =\> { "ambiente" =\> "d… --- ## [Show udp source port](https://discuss.elastic.co/t/show-udp-source-port/274539)
**Author:** [@Alex\_Der](https://discuss.elastic.co/u/Alex_Der)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 5:49pm UTC](https://discuss.elastic.co/t/show-udp-source-port/274539 "2021-05-31T17:49:28Z")
I'm using Logstash to ingest the logs sent (via udp) by 5 different applications running on another machine. Each aplication sends its log to Logstash from a different port (e.g. application\_1 from port 1760, applicatio… --- ## [Node sync fails and cluster goes to "red"](https://discuss.elastic.co/t/node-sync-fails-and-cluster-goes-to-red/274409)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 21\ **Last updated:** [May 31, 2021, 4:58pm UTC](https://discuss.elastic.co/t/node-sync-fails-and-cluster-goes-to-red/274409 "2021-05-31T16:58:37Z")
Hello, I hope you and your loved ones are safe and healthy. I have a 3 node cluster with 2 data nodes and 1 voting only node. I accidentally deleted the separate disk that holds data for one of the data node. I separa… --- ## [Elastalert](https://discuss.elastic.co/t/elastalert/274353)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 3:33pm UTC](https://discuss.elastic.co/t/elastalert/274353 "2021-05-31T15:33:47Z")
Hi @Elastalert\_Yelp I would like to use elastalert in kibana 7.13? --- ## [How to change "type" keyword in clone plugin](https://discuss.elastic.co/t/how-to-change-type-keyword-in-clone-plugin/274499)
**Author:** [@rknd](https://discuss.elastic.co/u/rknd)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 3:14pm UTC](https://discuss.elastic.co/t/how-to-change-type-keyword-in-clone-plugin/274499 "2021-05-31T15:14:50Z")
clone plugin default use "type" keyword. In my logstash configuration I use multiple times "type" keyword and now i need to add clone filter plugin in my logstash configuration. How can i use this plugin without using "… --- ## [Else if condition not working](https://discuss.elastic.co/t/else-if-condition-not-working/274383)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 29, 2021, 3:31pm UTC](https://discuss.elastic.co/t/else-if-condition-not-working/274383 "2021-05-29T15:31:53Z")
Hi all, I'm trying to write a scripted field. But I"m unable to execute else if condition as below: if (doc.containsKey("report\_card.grade") && !doc\["report\_card.grade"\].empty) { if (doc\["report\_card.grade"\].value ==… --- ## [Can't log into Elastic (self hosted) "Oops! Error. Try again."](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 4\ **Last updated:** [May 31, 2021, 2:40pm UTC](https://discuss.elastic.co/t/cant-log-into-elastic-self-hosted-oops-error-try-again/274433 "2021-05-31T14:40:57Z")
If I want to log in it just says "Oops! Error. Try again.". The credentials are definitely right (if I change the password to random it says that the login/password is wrong and doesn't give this error). I can't find a… --- ## [Kibana just shows "Kibana isn't ready yet"](https://discuss.elastic.co/t/kibana-just-shows-kibana-isnt-ready-yet/274372)
**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\ **Replies:** 3\ **Last updated:** [May 28, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-just-shows-kibana-isnt-ready-yet/274372 "2021-05-28T20:42:37Z")
Hello, I have restarted my server the other day but it just shows the message that Kibana isn't ready yet. But Kibana must be ready as this message is showing for hours now. In the Kibana.logs I found this one: index \[… --- ## [Delete docs by date](https://discuss.elastic.co/t/delete-docs-by-date/274493)
**Author:** [@Jose\_Manuel\_Tirado](https://discuss.elastic.co/u/Jose_Manuel_Tirado)\ **Replies:** 9\ **Last updated:** [May 31, 2021, 2:33pm UTC](https://discuss.elastic.co/t/delete-docs-by-date/274493 "2021-05-31T14:33:29Z")
HI! In the following index I have several days of data I want to delete the data from the 29th and 30th of the 5th of 2021 But when I launch the following command I obtain this messages: How cai I delete the dat… --- ## [Plugin build how to allow snake case name of folder](https://discuss.elastic.co/t/plugin-build-how-to-allow-snake-case-name-of-folder/274157)
**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 3:39am UTC](https://discuss.elastic.co/t/plugin-build-how-to-allow-snake-case-name-of-folder/274157 "2021-05-28T03:39:16Z")
Hi team, i m building my plugin and want it to be in snake case folder installed after installing on kibana rpm version. How to reach it ? After running bin/kibana-plugin install file:///local/path/to/custom\_plugin.zip i… --- ## [Metricbeat Kubernetes Timeout for all nodes except one](https://discuss.elastic.co/t/metricbeat-kubernetes-timeout-for-all-nodes-except-one/274515)
**Author:** [@kiqo](https://discuss.elastic.co/u/kiqo)\ **Replies:** 0\ **Last updated:** [May 31, 2021, 1:53pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-timeout-for-all-nodes-except-one/274515 "2021-05-31T13:53:12Z")
Hi, I’m running Metricbeat in Kubernetes from the yamls here: However I am having an issue where I get these kind of errors on all nodes except one, which work fine, but I get no kubernetes stats on these three nodes … --- ## [Get all fields of the pie chart to one filter](https://discuss.elastic.co/t/get-all-fields-of-the-pie-chart-to-one-filter/274509)
**Author:** [@HieuTranTH](https://discuss.elastic.co/u/HieuTranTH)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 1:50pm UTC](https://discuss.elastic.co/t/get-all-fields-of-the-pie-chart-to-one-filter/274509 "2021-05-31T13:50:53Z")
Hello everybody, I'm having this tedious issue which you may know solution for it. Normally I get this kind of pie chart after some filtering on the data set. And if I click on one of the field, it adds an extra fil… --- ## [Filebeat Multiline.Count\_Lines](https://discuss.elastic.co/t/filebeat-multiline-count-lines/274511)
**Author:** [@Beater](https://discuss.elastic.co/u/Beater)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-multiline-count-lines/274511 "2021-05-31T13:35:11Z")
Hello Community, I'm currently using Filebeat to stream my logs to Kafka. Everything works as expected besides the multiline option. I'd like to bulk several lines into one event to stream bigger messages to Kafka as th… --- ## [Kibana packaging with less files](https://discuss.elastic.co/t/kibana-packaging-with-less-files/274500)
**Author:** [@cedric.dutoit](https://discuss.elastic.co/u/cedric.dutoit)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 1:28pm UTC](https://discuss.elastic.co/t/kibana-packaging-with-less-files/274500 "2021-05-31T13:28:07Z")
Hi, Kibana 7.12.1 is 64150 files. Is it a way to package Kibana so that I can deploy much less files in production ? less node\_modules, or Kibana bundle or... ? I found nothing in the documentation. Thanks for your h… --- ## [Update logstash to specific version](https://discuss.elastic.co/t/update-logstash-to-specific-version/274503)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 0\ **Last updated:** [May 31, 2021, 12:43pm UTC](https://discuss.elastic.co/t/update-logstash-to-specific-version/274503 "2021-05-31T12:43:06Z")
Hello, I'm upgrading my stack from 7.9.3 to 7.12.1 using yum. For elasticsearch and filebeat I can update for the specific version without any problem using: yum install filebeat-7.12.1 yum install elasticsearch-7.12.… --- ## [Reporting](https://discuss.elastic.co/t/reporting/274501)
**Author:** [@marcio\_lima](https://discuss.elastic.co/u/marcio_lima)\ **Replies:** 4\ **Last updated:** [May 31, 2021, 1:15pm UTC](https://discuss.elastic.co/t/reporting/274501 "2021-05-31T13:15:32Z")
Good Morning! I would like if you could help me with the Available fields, because when I select them, the report comes out without information? If you print without the Available fields, everything will be normal. … --- ## [Exclude lines isn't working with multiline pattern](https://discuss.elastic.co/t/exclude-lines-isnt-working-with-multiline-pattern/274211)
**Author:** [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 12:58pm UTC](https://discuss.elastic.co/t/exclude-lines-isnt-working-with-multiline-pattern/274211 "2021-05-31T12:58:56Z")
this is my filebeat.yml exclude\_lines: \['^\[\[:space:\]\]'\] multiline.pattern: '^(3\[01\]|0\[1-9\]|\[12\]\[0-9\])(-?)(1\[0-2\]|0\[1-9\])(-?)(\[0-9\]{4})' multiline.negate: true multiline.match: after i want to exclude the lines… --- ## [Canvas: compare count from two indices](https://discuss.elastic.co/t/canvas-compare-count-from-two-indices/274458)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 12:55pm UTC](https://discuss.elastic.co/t/canvas-compare-count-from-two-indices/274458 "2021-05-31T12:55:41Z")
I'm trying to compare two counts using Canvas. My queries are a straight count of documents from one index: SELECT COUNT(\*) AS c1 FROM index1 And the count of a particular field value in another index: SELECT COUNT(\*… --- ## [Updating an index setting](https://discuss.elastic.co/t/updating-an-index-setting/274126)
**Author:** [@Cesidio\_DiBenedetto](https://discuss.elastic.co/u/Cesidio_DiBenedetto)\ **Replies:** 6\ **Last updated:** [May 31, 2021, 12:50pm UTC](https://discuss.elastic.co/t/updating-an-index-setting/274126 "2021-05-31T12:50:04Z")
Currently I have the following on one of my indexes. ... "analysis": { "filter": { "custom\_edge\_ngram": { "type": "edge\_ngram", "min\_gram": "1", … --- ## [Save index data when index rollover](https://discuss.elastic.co/t/save-index-data-when-index-rollover/274484)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 12:48pm UTC](https://discuss.elastic.co/t/save-index-data-when-index-rollover/274484 "2021-05-31T12:48:39Z")
Hi there! My problem is this: This data is just from 3 days! I'm trying to save my data when i do an index rollover. Is there any configuration to do it? I mean, saving it on a .xls, .txt... or just a simple snapsh… --- ## [Kibana](https://discuss.elastic.co/t/kibana/274478)
**Author:** [@miklin](https://discuss.elastic.co/u/miklin)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 12:41pm UTC](https://discuss.elastic.co/t/kibana/274478 "2021-05-31T12:41:12Z")
Hi, may I know if there's any tool in Kibana that can help me to find out which variable can distinguish abnormal traffic? The example below shows the daily traffic is around 10k, but it rose to 40k since May 28th. Afte… --- ## [Enable "basic" ES features on local ES rpm installation](https://discuss.elastic.co/t/enable-basic-es-features-on-local-es-rpm-installation/274469)
**Author:** [@eliase](https://discuss.elastic.co/u/eliase)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 12:38pm UTC](https://discuss.elastic.co/t/enable-basic-es-features-on-local-es-rpm-installation/274469 "2021-05-31T12:38:30Z")
Hi, I installed elasticsearch via the rpm repository. However, it is unclear to me what steps I need to take to switch from the OSS to the " Basic - free and open" version as advertised here. (I want to use the dense v… --- ## [How to disable Kibana security warning message](https://discuss.elastic.co/t/how-to-disable-kibana-security-warning-message/274421)
**Author:** [@csaltos](https://discuss.elastic.co/u/csaltos)\ **Replies:** 11\ **Last updated:** [May 31, 2021, 12:38pm UTC](https://discuss.elastic.co/t/how-to-disable-kibana-security-warning-message/274421 "2021-05-31T12:38:11Z")
Kibana shows this message: Elasticsearch built-in security features are not enabled. Without authentication, your cluster could be accessible to anyone. See https://www.elastic.co/guide/en/elasticsearch/reference/7.13/s… --- ## [Fleet AWS Cloudtrail integration stops working after upgrading elastic agent to 7.12.0](https://discuss.elastic.co/t/fleet-aws-cloudtrail-integration-stops-working-after-upgrading-elastic-agent-to-7-12-0/269120)
**Author:** [@nugroho-expereo](https://discuss.elastic.co/u/nugroho-expereo)\ **Replies:** 10\ **Last updated:** [May 31, 2021, 12:05pm UTC](https://discuss.elastic.co/t/fleet-aws-cloudtrail-integration-stops-working-after-upgrading-elastic-agent-to-7-12-0/269120 "2021-05-31T12:05:22Z")
Hi all, We have a working AWS CloudTrail integration with Elastic agent 7.10.1. After upgrading to 7.12 the cloud trail data stops working without any error in the log. I have tried to enabled debug level on agent but … --- ## [Is the any way to present in dashboart visualization based on two indices?](https://discuss.elastic.co/t/is-the-any-way-to-present-in-dashboart-visualization-based-on-two-indices/274488)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 11:55am UTC](https://discuss.elastic.co/t/is-the-any-way-to-present-in-dashboart-visualization-based-on-two-indices/274488 "2021-05-31T11:55:03Z")
Hi, I'd like to build a dashboard with visualizations. In first index I have sales details. Let say: product, sale\_value, quantity, sale\_date. In other index I have: purchase\_price, price\_date In visualization I'd l… --- ## [Multiple time-based charts in a dashboard: TSVB or Lens?](https://discuss.elastic.co/t/multiple-time-based-charts-in-a-dashboard-tsvb-or-lens/274480)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 11:44am UTC](https://discuss.elastic.co/t/multiple-time-based-charts-in-a-dashboard-tsvb-or-lens/274480 "2021-05-31T11:44:32Z")
My vote (possibly ill-informed, hence this topic): Make 'em all TSVB. My reason (just the one): when you mouse over a TSVB viz, a red line appears in every TSVB viz in the dashboard, showing that same point in time. You… --- ## [Control Panel: Size option](https://discuss.elastic.co/t/control-panel-size-option/274034)
**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\ **Replies:** 1\ **Last updated:** [May 31, 2021, 11:34am UTC](https://discuss.elastic.co/t/control-panel-size-option/274034 "2021-05-31T11:34:04Z")
Hi, i'm creating a Dashboard in Kibana in wich i want to insert some control panels. In the options of these control there is the voice "Size" wich limitate the number of items shown in the control panel. I just want to … --- ## [Upgrade elasticsearch version from 7.10 to 7.13 error](https://discuss.elastic.co/t/upgrade-elasticsearch-version-from-7-10-to-7-13-error/274459)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 6\ **Last updated:** [May 31, 2021, 11:22am UTC](https://discuss.elastic.co/t/upgrade-elasticsearch-version-from-7-10-to-7-13-error/274459 "2021-05-31T11:22:05Z")
Hey guys, I am trying to update the version of elasticsearch to 7.13 from 7.10 and I am following the instructions from Rolling upgrades | Elasticsearch Guide \[7.13\] | Elastic but in the final when i procced with the i… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1389) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1391)