# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1398 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1399 --- ## [Geo-bounding box query does not support \`topLeft\` & \`bottomLeft\`](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 11:36am UTC](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792 "2021-05-26T11:36:55Z")
The documentation states that: More over the names topLeft , bottomRight , topRight and bottomLeft are supported However, using topLeft & bottomRight causes an error: { "error": { "root\_cause": \[ { … --- ## [Time filter resets to 15min in dashboard links](https://discuss.elastic.co/t/time-filter-resets-to-15min-in-dashboard-links/273768)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 11:15am UTC](https://discuss.elastic.co/t/time-filter-resets-to-15min-in-dashboard-links/273768 "2021-05-26T11:15:36Z")
Hi, I am using markdown viz in Kibana to link my dashboards. I would expect that the time range selected in the first dashboard will get passed down to the next one. But this isn't happening. Every time I click on a lin… --- ## [Rubydocs for Logstash Event API](https://discuss.elastic.co/t/rubydocs-for-logstash-event-api/273996)
**Author:** [@Robert\_Labrie](https://discuss.elastic.co/u/Robert_Labrie)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 11:14am UTC](https://discuss.elastic.co/t/rubydocs-for-logstash-event-api/273996 "2021-05-26T11:14:11Z")
I'm trying to find the actual RubyDocs for the Event class and I can't find them. Seems they moved at one point from logstash-lib to logstash-core but the references I can find don't even mention the get and set methods … --- ## [CyberArk filebeat xsl translator file](https://discuss.elastic.co/t/cyberark-filebeat-xsl-translator-file/260664)
**Author:** [@PersonaZ](https://discuss.elastic.co/u/PersonaZ)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 11:06am UTC](https://discuss.elastic.co/t/cyberark-filebeat-xsl-translator-file/260664 "2021-05-26T11:06:27Z")
We are trying to send from CyberArk vault to filebeat. Has anyone been able to use a xsl translator file for the vault to send to appropriate information to ELK filebeat? We seen it communicating but I believe the xsl fi… --- ## [Browser was closed unexpectedly error when sending report](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 10:56am UTC](https://discuss.elastic.co/t/browser-was-closed-unexpectedly-error-when-sending-report/270671 "2021-05-26T10:56:57Z")
Hi In ElasticCloud 7.12 and I have a watcher with a reporting action which sends a report at 5pm each day. It works about 50% of the time with the other times producing the following error "Reporting generation failed… --- ## [CLA checking in Pull Request for Elasticsearch](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989)
**Author:** [@bhargavkn](https://discuss.elastic.co/u/bhargavkn)\ **Replies:** 1\ **Last updated:** [May 26, 2021, 10:55am UTC](https://discuss.elastic.co/t/cla-checking-in-pull-request-for-elasticsearch/273989 "2021-05-26T10:55:58Z")
Hi, I have created a Pull Request and signed Contributors License Agreement but the cla-checker-service bot is failing. I tried closing the PR as well as creating a new one, but the CLA checker still fails. Can someone … --- ## [Fleet - add fields](https://discuss.elastic.co/t/fleet-add-fields/274044)
**Author:** [@probson](https://discuss.elastic.co/u/probson)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 10:39am UTC](https://discuss.elastic.co/t/fleet-add-fields/274044 "2021-05-26T10:39:08Z")
Hi, We currently use winlogbeats and logstash, within the winlogbeats.yml processors, we add fields to help identify the organization as well as use that within the elasticsearch output as the format of the index name s… --- ## [Plugin versions](https://discuss.elastic.co/t/plugin-versions/273787)
**Author:** [@nmalocic](https://discuss.elastic.co/u/nmalocic)\ **Replies:** 6\ **Last updated:** [May 26, 2021, 10:12am UTC](https://discuss.elastic.co/t/plugin-versions/273787 "2021-05-26T10:12:01Z")
Hi everyone, What is the best way of versioning plugins. If we plan to have multiple versions of our plugin, and support multiple versions of ElasticSearch how would we do that? Is there anyway that we say that our pl… --- ## [READ ONLY LATEST RECORDS FROM AN INDEX USING SPARK-SCALA API](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 9:49am UTC](https://discuss.elastic.co/t/read-only-latest-records-from-an-index-using-spark-scala-api/274035 "2021-05-26T09:49:59Z")
i want to read only the latest records from an index so i am passing the below query in my spark-scala code conf.set("es.query","""{ "query": { "match\_all": {} }, "sort": \[ { "@timestamp": { "order": "desc" } } … --- ## [Sharing files among different folders in kibana 7.10.2](https://discuss.elastic.co/t/sharing-files-among-different-folders-in-kibana-7-10-2/273813)
**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 9:36am UTC](https://discuss.elastic.co/t/sharing-files-among-different-folders-in-kibana-7-10-2/273813 "2021-05-26T09:36:27Z")
Hi Team, I had created a new file inside src\\core\\server\\core\_app\\refresh\_service.ts and trying to access it at src\\plugins\\data\\public\\ui\\search\_bar\\search\_bar.tsx I am getting linting errors, even I am not able to b… --- ## [An existing connection was forcibly closed on remote host](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-on-remote-host/274031)
**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 9:28am UTC](https://discuss.elastic.co/t/an-existing-connection-was-forcibly-closed-on-remote-host/274031 "2021-05-26T09:28:39Z")
Hi, I have Elk setup of 3 nodes version 7.11.1. It's a new setup and currently I am testing few beats and modules. I have a central server where logs are present and i am using heartbeat, metricbeat, filebeat for same. … --- ## [Data not updating automatically when I change my MySQL table](https://discuss.elastic.co/t/data-not-updating-automatically-when-i-change-my-mysql-table/273536)
**Author:** [@pablixelastic](https://discuss.elastic.co/u/pablixelastic)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 9:25am UTC](https://discuss.elastic.co/t/data-not-updating-automatically-when-i-change-my-mysql-table/273536 "2021-05-26T09:25:05Z")
Hi! I'm having some issues at the moment of updating my data in Kibana when I change any info from MySQL table. I don't really know if it's possible. Can someone help me? Thanks! --- ## [Possible goroutine leak in sql module when database is not available](https://discuss.elastic.co/t/possible-goroutine-leak-in-sql-module-when-database-is-not-available/273850)
**Author:** [@simioa](https://discuss.elastic.co/u/simioa)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 9:22am UTC](https://discuss.elastic.co/t/possible-goroutine-leak-in-sql-module-when-database-is-not-available/273850 "2021-05-26T09:22:05Z")
Used metricbeat Version: 7.12.1 Hello, we're using the metricbeat sql module to gather some metrics. During Downtime of our Database, I observed slowly increasing memory consumption from metricbeat. I tried to reprodu… --- ## [Increasing number of pending tasks despite small number of shards](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562)
**Author:** [@crl](https://discuss.elastic.co/u/crl)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 9:16am UTC](https://discuss.elastic.co/t/increasing-number-of-pending-tasks-despite-small-number-of-shards/273562 "2021-05-26T09:16:46Z")
Hi I'm fairly new to Elasticsearch and I'm trying to maintain a small cluster. Currently I'm having trouble with a growing number of pending tasks. In all other threads that I have looked at the issue have been caused … --- ## [Kafka 2.4.1 compatiblity with Logstash and Filebeat 7.10.2](https://discuss.elastic.co/t/kafka-2-4-1-compatiblity-with-logstash-and-filebeat-7-10-2/274029)
**Author:** [@Thilak1](https://discuss.elastic.co/u/Thilak1)\ **Replies:** 0\ **Last updated:** [May 26, 2021, 8:51am UTC](https://discuss.elastic.co/t/kafka-2-4-1-compatiblity-with-logstash-and-filebeat-7-10-2/274029 "2021-05-26T08:51:44Z")
Hi , I am planning to use ELK 7.10.2 with Kafka 2.4.1. Are filebeat-7.10.2 and logstash-7.10.2 input/output plugins are compatible with Kafka-2.4.1. --- ## [Is it ok to use Kibana's saved\_objects optionJSON for custom attributes?](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435)
**Author:** [@shuber](https://discuss.elastic.co/u/shuber)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 8:44am UTC](https://discuss.elastic.co/t/is-it-ok-to-use-kibanas-saved-objects-optionjson-for-custom-attributes/273435 "2021-05-26T08:44:35Z")
Hello, I'm working with Kibana dashboards that I'm embedding in pages. I'd like to add metadata to the dashboards and I noticed there is a structure called optionJSON in the saved\_objects structure for dashboards. Is it… --- ## [Auditbeat auditd module vs. elastic agent auditd integration](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983)
**Author:** [@lepepa9493](https://discuss.elastic.co/u/lepepa9493)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 8:07am UTC](https://discuss.elastic.co/t/auditbeat-auditd-module-vs-elastic-agent-auditd-integration/273983 "2021-05-26T08:07:47Z")
What is the difference between using the auditbeat auditd module and using the elastic agent auditd integration? How can I use the elastic agent auditd integration with a custom auditd rules file or any other configurat… --- ## [Watcher Error](https://discuss.elastic.co/t/watcher-error/273951)
**Author:** [@Simon\_Arbel](https://discuss.elastic.co/u/Simon_Arbel)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 7:27am UTC](https://discuss.elastic.co/t/watcher-error/273951 "2021-05-26T07:27:31Z")
Hi I'm using the new Kibana ver 7.12. Im trying to setup a new API watcher for sending alerts to BMC trusight manager. I've configured the parameters depicted in the attached screenshot, however I'm getting this error… --- ## [Version 7.12 does not work on Windows](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203)
**Author:** [@Andrey\_Tomilin](https://discuss.elastic.co/u/Andrey_Tomilin)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 7:24am UTC](https://discuss.elastic.co/t/version-7-12-does-not-work-on-windows/271203 "2021-05-26T07:24:52Z")
Can't install version 7.12 on Windows 10 Pro, getting this error: Error: Could not find or load main class org.elasticsearch.tools.java\_version\_checker.JavaVersionChecker Caused by: java.lang.ClassNotFoundException: o… --- ## [Different time field instead of @timestamp and filters](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:48am UTC](https://discuss.elastic.co/t/different-time-field-instead-of-timestamp-and-filters/273924 "2021-05-26T06:48:26Z")
Hi, I've recently inherited an ELK instance where all indexes are mapped with @timestamp as time field. Users are complaining a lot because the meaningful timestamp is not @timestamp, but some @event\_time field instead.… --- ## [Send logs to multiples spaces](https://discuss.elastic.co/t/send-logs-to-multiples-spaces/273912)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 3\ **Last updated:** [May 26, 2021, 6:15am UTC](https://discuss.elastic.co/t/send-logs-to-multiples-spaces/273912 "2021-05-26T06:15:25Z")
Good morning. I would like to know if it's possible to send logs from a logstash server to multiples spaces in a same elastic cloud (kibana). If this is possible, what have I to add in logstash.yml file to send the info… --- ## [Change value of a datum field using signal](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158)
**Author:** [@Dzious](https://discuss.elastic.co/u/Dzious)\ **Replies:** 2\ **Last updated:** [May 26, 2021, 6:03am UTC](https://discuss.elastic.co/t/change-value-of-a-datum-field-using-signal/273158 "2021-05-26T06:03:51Z")
Hi, I'm trying to have data that are relative to each one of my data. I've tried to use signal's data but i didn't managed to make them relative to one and only one value of my data. i decided to add a field in my data… --- ## [Unable to read logs files](https://discuss.elastic.co/t/unable-to-read-logs-files/273891)
**Author:** [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)\ **Replies:** 5\ **Last updated:** [May 26, 2021, 5:48am UTC](https://discuss.elastic.co/t/unable-to-read-logs-files/273891 "2021-05-26T05:48:37Z")
Good morning, I'm trying to read log files from a concrete path. My configuration is the following input { file { path =\> "/path/proxy/access2.log" start\_position =\> "beginning" … --- ## [Cannot search new documents after reindexing](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911)
**Author:** [@Andrey2](https://discuss.elastic.co/u/Andrey2)\ **Replies:** 4\ **Last updated:** [May 26, 2021, 3:10am UTC](https://discuss.elastic.co/t/cannot-search-new-documents-after-reindexing/273911 "2021-05-26T03:10:11Z")
Hi all, I'm having a problem with reindexing. I have an index called emails, after reindexing, I can get/post documents to this index normally. But for new documents, I cannot get these when search by property or show… --- ## [Nest - Search path](https://discuss.elastic.co/t/nest-search-path/273946)
**Author:** [@silentw](https://discuss.elastic.co/u/silentw)\ **Replies:** 10\ **Last updated:** [May 26, 2021, 1:18am UTC](https://discuss.elastic.co/t/nest-search-path/273946 "2021-05-26T01:18:28Z")
I am trying to use the Nest client to consume an Elasticsearch instance. However, the /\_search endpoint is in fact /search . Is there any possible way to change the behavior of the client to reflect this change? I hav… --- ## [Single node, large database index performance](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865)
**Author:** [@twbarr](https://discuss.elastic.co/u/twbarr)\ **Replies:** 8\ **Last updated:** [May 26, 2021, 12:34am UTC](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865 "2021-05-26T00:34:12Z")
I have a set of documents that I'm trying to load into a single large index on a single node. About seven million documents, about 400gb of text. The fields are in different files, so I'm just using a script that loads e… --- ## [Prebuilt Rule Reference](https://discuss.elastic.co/t/prebuilt-rule-reference/273991)
**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:55pm UTC](https://discuss.elastic.co/t/prebuilt-rule-reference/273991 "2021-05-25T23:55:08Z")
Hi, I finally have setup my lab environment and fully working now. I'm ready to use prebuilt rules, my question is how, how do I start? I was able to use one rule because it clearly stated in the documentation copy xxxx… --- ## [Cannot restore index](https://discuss.elastic.co/t/cannot-restore-index/273910)
**Author:** [@Tuyen](https://discuss.elastic.co/u/Tuyen)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:08pm UTC](https://discuss.elastic.co/t/cannot-restore-index/273910 "2021-05-25T23:08:04Z")
Backup and index to a gzip using stdout: elasticdump --input=http://production.es.com:9200/my\_index --output=$ | gzip \> /data/my\_index.json.gz After dump index to my\_index.json.gz success I cannot restore them. So… --- ## [Security Vulnerability in ELK stack during docker scan by twistlock](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 1\ **Last updated:** [May 25, 2021, 11:02pm UTC](https://discuss.elastic.co/t/security-vulnerability-in-elk-stack-during-docker-scan-by-twistlock/273927 "2021-05-25T23:02:52Z")
Hello, Below vulnerabilities are flagged during docker image scan. Is there any official response/statement on the docker scan vulnerabilities check from elastic? CVE-2020-25649 CVE-2020-28491 CVE-2017-18640 CVE-202… --- ## [Python module - use master nodes or data nodes?](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 3\ **Last updated:** [May 25, 2021, 10:58pm UTC](https://discuss.elastic.co/t/python-module-use-master-nodes-or-data-nodes/273848 "2021-05-25T22:58:28Z")
When using python bulk load should I open connection with master node or data node? elastic\_output = Elasticsearch(\[master1,master2\], http\_auth=(elastic\_admin\_user, elastic\_admin\_passwd),port=9200) and then write data … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1397) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1399)