# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1394 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1395 --- ## [Unable to start and stop filebeat](https://discuss.elastic.co/t/unable-to-start-and-stop-filebeat/274232)
**Author:** [@msjsitl](https://discuss.elastic.co/u/msjsitl)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:10am UTC](https://discuss.elastic.co/t/unable-to-start-and-stop-filebeat/274232 "2021-05-28T09:10:13Z")
Hello team, I am unable to start and stop filebeat . getting error like failed to stop filebeat. Can you please help on this. PFB filebeat logs: 2021-05-26T14:08:56.070-0400 INFO instance/beat.go:640 Home path: \[/usr… --- ## [Filebeat Logstash "Invalid version of beats protocol: 69" error](https://discuss.elastic.co/t/filebeat-logstash-invalid-version-of-beats-protocol-69-error/274275)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:06am UTC](https://discuss.elastic.co/t/filebeat-logstash-invalid-version-of-beats-protocol-69-error/274275 "2021-05-28T09:06:48Z")
I am hosting the logstash in EC2. And filebeat is running on my windows environment. I consistently see this error in the logs. And what is tripping me is that filebeats is able to send to logstash. There is no loadba… --- ## [What's the correct value to set setup.dashboards.beat for o365 module?](https://discuss.elastic.co/t/whats-the-correct-value-to-set-setup-dashboards-beat-for-o365-module/274276)
**Author:** [@gschanuel](https://discuss.elastic.co/u/gschanuel)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 9:02am UTC](https://discuss.elastic.co/t/whats-the-correct-value-to-set-setup-dashboards-beat-for-o365-module/274276 "2021-05-28T09:02:23Z")
Hello there! I'm using ELK and filebeat, both v7.13.0 I enabled o365 module on filebeat configs and enabled setup.dashboards as below setup.dashboards: enabled: true index: "azure-\*" beat: "o365" setup.kibana: … --- ## [Filebeat 7.13 not compatible with elasticsearch-oss 7.10.2](https://discuss.elastic.co/t/filebeat-7-13-not-compatible-with-elasticsearch-oss-7-10-2/274037)
**Author:** [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Replies:** 3\ **Last updated:** [May 28, 2021, 8:58am UTC](https://discuss.elastic.co/t/filebeat-7-13-not-compatible-with-elasticsearch-oss-7-10-2/274037 "2021-05-28T08:58:40Z")
Filebeat 7.13 is not compatible with elastichsearch-oss 7.10.2. May 26 10:21:39 server1 filebeat\[24814\]: 2021-05-26T10:21:39.231+0200 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 … --- ## [Timelion](https://discuss.elastic.co/t/timelion/274147)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 8:45am UTC](https://discuss.elastic.co/t/timelion/274147 "2021-05-28T08:45:36Z")
how i can implement formula of simple interest in timelion graph? --- ## [Can a normal user get API read/write permissions?](https://discuss.elastic.co/t/can-a-normal-user-get-api-read-write-permissions/274066)
**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 8:35am UTC](https://discuss.elastic.co/t/can-a-normal-user-get-api-read-write-permissions/274066 "2021-05-28T08:35:08Z")
Dear all =) Is it possible for a normal Kibana user to have API read/write permissions? What I would like to be to do is create and delete Kibana Alerts, but when I do $ curl -u sandra -X POST "https://kibana.example.… --- ## [Filebeat Question](https://discuss.elastic.co/t/filebeat-question/274290)
**Author:** [@Alvinong](https://discuss.elastic.co/u/Alvinong)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 8:33am UTC](https://discuss.elastic.co/t/filebeat-question/274290 "2021-05-28T08:33:15Z")
Hi to all, I had faced 2 question. Is it possible to send a log file from server and transfer/synchronize to MSSQL Server Management Studio using filebeat? and is it possible to use filebeat only without using Elastic… --- ## [Filebeat agent to get s3 Logs](https://discuss.elastic.co/t/filebeat-agent-to-get-s3-logs/274303)
**Author:** [@AJ18](https://discuss.elastic.co/u/AJ18)\ **Replies:** 0\ **Last updated:** [May 28, 2021, 8:28am UTC](https://discuss.elastic.co/t/filebeat-agent-to-get-s3-logs/274303 "2021-05-28T08:28:40Z")
Hi Team, How many filebeat instances are ideally recommended to get 80 GBs of data per month from s3 buckets for various services like VPC Flow Logs, CLoudtrail Logs, OS logs, etc.? Is there are a way to ensure high av… --- ## [Filebeat agent to get Operating System Logs](https://discuss.elastic.co/t/filebeat-agent-to-get-operating-system-logs/274101)
**Author:** [@AJ18](https://discuss.elastic.co/u/AJ18)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 8:25am UTC](https://discuss.elastic.co/t/filebeat-agent-to-get-operating-system-logs/274101 "2021-05-28T08:25:24Z")
Hi Team, I am using Filebeat agent to get logs from an S3 bucket in my AWS Account and push them into Elasticsearch for visualisation. I wish to also collect some logs from EC2 instances of OS Linux or Windows (syslogs… --- ## [How to cut syslog/sophos filebeat output into pieces?](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301)
**Author:** [@3lastic](https://discuss.elastic.co/u/3lastic)\ **Replies:** 0\ **Last updated:** [May 28, 2021, 8:19am UTC](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301 "2021-05-28T08:19:06Z")
Hello all, I'm completely new to Elastic/ELK. Currently I'm playing arround with some syslog output from a Sophos UTM network firewall. I successfully get the data via filebeat module for sophos into the stack. But m… --- ## [SRE-Ansible To Install ELK Stack](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 8:13am UTC](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086 "2021-05-28T08:13:24Z")
Our task is related to SRE-Ansible To Install ELK Stack i.e. Write an ansible script to install ELK stack and filebeat locally. To do so, create a directory structure as mentioned below ansible\_ELK |\_site.yml |\_… --- ## [Sum 2 queries in Canvas element](https://discuss.elastic.co/t/sum-2-queries-in-canvas-element/272763)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 8:04am UTC](https://discuss.elastic.co/t/sum-2-queries-in-canvas-element/272763 "2021-05-28T08:04:36Z")
Hello, I need to sum up 2 numbers from 2 different queries. I read this post but was not able to achieve any result. Can someone please focus me on the solution? Need to achieve something like this: select amount fr… --- ## [Elasticsearch filter plugin and winlogbeat](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-winlogbeat/273794)
**Author:** [@fabryx87](https://discuss.elastic.co/u/fabryx87)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-and-winlogbeat/273794 "2021-05-28T07:43:00Z")
Goodmorning everyone, I am trying to use for the firts time the elasticsearch filter plugin for logstash. I am trying to searching the login event whenever you the log off event and enrich the log off event with necess… --- ## [Share canvas embed on website](https://discuss.elastic.co/t/share-canvas-embed-on-website/273006)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 26\ **Last updated:** [May 28, 2021, 7:32am UTC](https://discuss.elastic.co/t/share-canvas-embed-on-website/273006 "2021-05-28T07:32:30Z")
Hello, Isn't it really possible to embed a canvas workpad on a site, but it shows live data? Thank you --- ## [Threatintel anomali error: the requested root field is empty](https://discuss.elastic.co/t/threatintel-anomali-error-the-requested-root-field-is-empty/270841)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 7:26am UTC](https://discuss.elastic.co/t/threatintel-anomali-error-the-requested-root-field-is-empty/270841 "2021-05-28T07:26:54Z")
Hi, I gave the threatintel module a try. Successfully ingesting abuseurl, abusemalware and otx. I've a problem with getting anomali to work. First I figured, I have to uncomment the username/password fields to send def… --- ## [Filebeat ThreatIntel MISP Module](https://discuss.elastic.co/t/filebeat-threatintel-misp-module/274019)
**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 7:24am UTC](https://discuss.elastic.co/t/filebeat-threatintel-misp-module/274019 "2021-05-28T07:24:32Z")
Hi, I'm getting this error while trying to use the misp threat intel module: \[input.httpjson-cursor\] v2/request.go:186 error processing response: the requested root field is empty {"input\_sourc… --- ## [Native Authentication](https://discuss.elastic.co/t/native-authentication/274286)
**Author:** [@Ashwin\_Srivastav](https://discuss.elastic.co/u/Ashwin_Srivastav)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 6:32am UTC](https://discuss.elastic.co/t/native-authentication/274286 "2021-05-28T06:32:17Z")
I am new to Elasticsearch. I got the idea that in the Native Authentication realm, the user credentials are hashed and stored in the .security index. So the question which came in my mind is that for a multi-node cluste… --- ## [Geopoint based pie chart map for success and failed results?](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 10\ **Last updated:** [May 28, 2021, 6:31am UTC](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842 "2021-05-28T06:31:06Z")
Hello I have a index with geopoints and a result which is either "failure" or "success". I would like to draw points on the map with each result but red points are failures and green points are successful. The issue is… --- ## [Elastic Scripting caching issue](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511)
**Author:** [@Divy\_Garg](https://discuss.elastic.co/u/Divy_Garg)\ **Replies:** 7\ **Last updated:** [May 28, 2021, 6:30am UTC](https://discuss.elastic.co/t/elastic-scripting-caching-issue/273511 "2021-05-28T06:30:04Z")
I am facing caching issue while using scripts. So I am using below script in elasticsearch query. But when it runs multiple times it gives circuit breaker exception( Too many dynamic script compilations within, max: \[7… --- ## [Creating custom runtime field which does a reverse dns lookup of another field](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:57am UTC](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258 "2021-05-28T05:57:05Z")
Hello, Is it possible to do a (reverse) DNS lookup in a runtime field? How would I do this? Best regards, Willem --- ## [How to create onClick event in Kibana?](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:41am UTC](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039 "2021-05-28T05:41:20Z")
It is possible to create event when clicking on the table row in kibana, it send some data from that table to another index? --- ## [Logstash pipeline stopped inserting data into elasticsearch](https://discuss.elastic.co/t/logstash-pipeline-stopped-inserting-data-into-elasticsearch/274285)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 0\ **Last updated:** [May 28, 2021, 5:40am UTC](https://discuss.elastic.co/t/logstash-pipeline-stopped-inserting-data-into-elasticsearch/274285 "2021-05-28T05:40:56Z")
Logstash pipeline is not ingesting data into the elasticsearch index though the pipeline was running. This pipeline was deployed one year back and it was running well since then. But on 24th May 2021, it stopped ingesti… --- ## ['ElasticPressProvider' was not found in '@10up/elasticpress-react'](https://discuss.elastic.co/t/elasticpressprovider-was-not-found-in-10up-elasticpress-react/274196)
**Author:** [@Sharmeela\_Jaimalani](https://discuss.elastic.co/u/Sharmeela_Jaimalani)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:26am UTC](https://discuss.elastic.co/t/elasticpressprovider-was-not-found-in-10up-elasticpress-react/274196 "2021-05-28T05:26:05Z")
Hello, I have installed the elasticpress-react with following npm command in my gastby project - (GitHub - 10up/elasticpress-react: Use ElasticPress with React.) "npm install @10up/elasticpress-react --save" After in… --- ## [Enabling security in Kibana without X-pack](https://discuss.elastic.co/t/enabling-security-in-kibana-without-x-pack/274155)
**Author:** [@Ashwin\_Srivastav](https://discuss.elastic.co/u/Ashwin_Srivastav)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 5:12am UTC](https://discuss.elastic.co/t/enabling-security-in-kibana-without-x-pack/274155 "2021-05-28T05:12:37Z")
I am new to Elasticsearch and Kibana. I am using version 6.8.0 for both Kibana and Elasticsearch. I have a multi-node cluster and I want to add security to Kibana. So after reading the documentation, I got to know that i… --- ## [Update from 7.8 to 7.12.1](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172)
**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\ **Replies:** 1\ **Last updated:** [May 28, 2021, 3:36am UTC](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172 "2021-05-28T03:36:52Z")
Hello! I updated from 7.8 to 7.12.1 and imported by dashboards to the system. Everything seemed fine but some problems are showing: the filters are not applying globally but only on some map layers, I had to create … --- ## [Defining drill-downs per visualization a tad tedious?](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 3:03am UTC](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143 "2021-05-28T03:03:35Z")
...or am I just lazy? I have several dashboards that show various metrics, such as memory usage and CPU usage, by "job" name. Each dashboard has several "... by Job Name" visualizations. For each ".. by Job Name" viz, … --- ## [About Kibana version compatibility with ElasticSearch version upgrade](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176)
**Author:** [@k-narazaki](https://discuss.elastic.co/u/k-narazaki)\ **Replies:** 4\ **Last updated:** [May 28, 2021, 2:32am UTC](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176 "2021-05-28T02:32:20Z")
I have a question about compatibility between ElasticSearch and Kibana versions. ElasticSearch has been upgraded as follows. (Old) 6.5.4 (New) 7.8.0 I was wondering if it would be necessary to upgrade Kibana with the… --- ## [You do not have permission to access requested page Kibana: Help](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 3\ **Last updated:** [May 28, 2021, 2:16am UTC](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253 "2021-05-28T02:16:43Z")
Hi, I have followed the guide on this site for security integration. Now When I restarted Kibana I'm entering kibana\_system as the username and the password I created but after the login I get a message stating You do … --- ## [\[bug\] setup.dashboards.index not working for filebeat nor winlogbeat](https://discuss.elastic.co/t/bug-setup-dashboards-index-not-working-for-filebeat-nor-winlogbeat/274260)
**Author:** [@gschanuel](https://discuss.elastic.co/u/gschanuel)\ **Replies:** 2\ **Last updated:** [May 27, 2021, 11:45pm UTC](https://discuss.elastic.co/t/bug-setup-dashboards-index-not-working-for-filebeat-nor-winlogbeat/274260 "2021-05-27T23:45:25Z")
Hello there! I'm using ELK 7.13.0. After setting setup.dashboards.index and setup.dashboards.enabled: true, Dashboards, searches and visualizations are loaded, but Dashboads shows Could not locate that index-pattern (… --- ## [Ingesting evtx logs - error on setup.template.patterns](https://discuss.elastic.co/t/ingesting-evtx-logs-error-on-setup-template-patterns/274123)
**Author:** [@mikecmelanson](https://discuss.elastic.co/u/mikecmelanson)\ **Replies:** 3\ **Last updated:** [May 27, 2021, 11:51pm UTC](https://discuss.elastic.co/t/ingesting-evtx-logs-error-on-setup-template-patterns/274123 "2021-05-27T23:51:36Z")
I've been trying to make use of winlogbeats to ingest static event logs we get from various clients as we perform forensic investigations for them. I have a pretty nice little solution from Manually upload EVTX log file… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1393) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1395)