# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1476 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1477 --- ## [Alerting throws "node \[es-client1\] does not have the \[remote\_cluster\_client\] role"](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073)
**Author:** [@hrak](https://discuss.elastic.co/u/hrak)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 1:15pm UTC](https://discuss.elastic.co/t/alerting-throws-node-es-client1-does-not-have-the-remote-cluster-client-role/267073 "2021-04-06T13:15:34Z")
Hi all, My cluster consists of the following nodes: 2x coordinating node (empty node.roles) 3x master (node.roles = \['master'\]) 5x data (node.roles = \['data', 'ingest', 'ml', 'transform'\]) I have recently upgraded f… --- ## [Dropping network events for private IP range through Winlogbeat yml config](https://discuss.elastic.co/t/dropping-network-events-for-private-ip-range-through-winlogbeat-yml-config/269027)
**Author:** [@Psyhil](https://discuss.elastic.co/u/Psyhil)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 1:22pm UTC](https://discuss.elastic.co/t/dropping-network-events-for-private-ip-range-through-winlogbeat-yml-config/269027 "2021-04-06T13:22:28Z")
Hi there, We are forwarding system network event logs via winlogbeat generated by sysmon and was attempting at dropping internal traffic events using private IP ranges. Seems yml config does not supports wildcard hence… --- ## [Initial JDBC input for a tracking column type of timestamp](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 12:25pm UTC](https://discuss.elastic.co/t/initial-jdbc-input-for-a-tracking-column-type-of-timestamp/269163 "2021-04-06T12:25:11Z")
I am trying to pull data from an MS SQL Server database. The data is refreshed on the hour and I want to pull at 15 minutes after the top of the hour. The input looks like this: input { jdbc { jdbc\_driver\_library … --- ## [How to configure apache.yml in filebeat with multiple paths in var.paths](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980)
**Author:** [@Shriram\_Wasule](https://discuss.elastic.co/u/Shriram_Wasule)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 10:59am UTC](https://discuss.elastic.co/t/how-to-configure-apache-yml-in-filebeat-with-multiple-paths-in-var-paths/268980 "2021-04-06T10:59:59Z")
i am not getting on how i can add multiple paths in var.paths parameter in apache.yml? i have configured one path but i have multiple log files with different names so how can add those paths too? # ====================… --- ## [Filters set not impacting graph?](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 10:56am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512 "2021-04-06T10:56:05Z")
I have two filters on a workpad, one for time and one for customer in this case. timefilterControl compact=true column="startTime" filterGroup="perfGroup" | render esdocs index="dynatrace-problems-" fields="customer" … --- ## [Grok filter](https://discuss.elastic.co/t/grok-filter/269194)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 10\ **Last updated:** [April 6, 2021, 10:54am UTC](https://discuss.elastic.co/t/grok-filter/269194 "2021-04-06T10:54:51Z")
Hi, I have a csv file which has currently three rows in it which are as follow: name,age,ip A,12,10.11.1.12 B,13,10.11.1 Now I want to check during the data ingestion via this csv that whether the IP is in proper fo… --- ## [Use beats to read multiline event excluding some lines in-between](https://discuss.elastic.co/t/use-beats-to-read-multiline-event-excluding-some-lines-in-between/268990)
**Author:** [@lukiovas](https://discuss.elastic.co/u/lukiovas)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 10:52am UTC](https://discuss.elastic.co/t/use-beats-to-read-multiline-event-excluding-some-lines-in-between/268990 "2021-04-06T10:52:59Z")
I have a log: server.name 2021-03-28 10:03:28.648 INFO ... --------------------------- ID: 3974 Address: https://www... Encoding: UTF-8 Http-Method: POST Content-Type: text/xml Headers: {Accept=\[\*/\*\], ... Payload: \ **Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:44am UTC](https://discuss.elastic.co/t/export-all-records-from-12m-index/269221 "2021-04-06T10:44:18Z") the problem is with the index.max\_result\_window, we have an index of 12M records , how can we query/get all data using a script? (logstash not relevant) --- ## [How to configure logstash file to make nested object inside another nested filed from sql query?](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077 "2021-04-06T10:28:12Z")
I am new in Elasticsearch and logstash and I have an issue with nested objects. So what I want to ask is how can I create index with multiple nested fields inside another nested fields. How can I build the data inside l… --- ## [Nested fields ElasticSearch and Logstash](https://discuss.elastic.co/t/nested-fields-elasticsearch-and-logstash/269306)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 9:04am UTC](https://discuss.elastic.co/t/nested-fields-elasticsearch-and-logstash/269306 "2021-04-06T09:04:39Z")
Hello, I am new in ES and logstash so I need some help I need to perform an indexation of data from postgres in ES My problem is that there are many relationships in the database, and I don't know how to perform many n… --- ## [Time filter not getting persisted across dashboard navigation in ELK 7.10.2](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation-in-elk-7-10-2/268181)
**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 9:02am UTC](https://discuss.elastic.co/t/time-filter-not-getting-persisted-across-dashboard-navigation-in-elk-7-10-2/268181 "2021-04-06T09:02:58Z")
Continuing the discussion from Time filter not getting persisted across dashboard navigation: Hi, I upgraded to v7.10.2 and I am still facing this issue. Can someone please tell me if this is an outstanding bug? Shoul… --- ## [Vsphere metricbeat perf manager api](https://discuss.elastic.co/t/vsphere-metricbeat-perf-manager-api/269298)
**Author:** [@blambo10](https://discuss.elastic.co/u/blambo10)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 8:27am UTC](https://discuss.elastic.co/t/vsphere-metricbeat-perf-manager-api/269298 "2021-04-06T08:27:12Z")
Hi All, I've Noticed that the current metricbeat for vsphere, uses the quick stats from the managed objects. Im just wondering if there has been any initiative to write a metric beat that queried the performance manage… --- ## [1 Hour Difference on showing Logs in ELK/Kibana](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744)
**Author:** [@radu990](https://discuss.elastic.co/u/radu990)\ **Replies:** 11\ **Last updated:** [April 6, 2021, 8:24am UTC](https://discuss.elastic.co/t/1-hour-difference-on-showing-logs-in-elk-kibana/268744 "2021-04-06T08:24:14Z")
Hello, I have set a Filebeat agent on a server for Apache logs (using apache module), and observed that the logs are appearing on Kibana/ELK with 1 hour delay. Any idea what can be the problem? The time/timezone settin… --- ## [Count matched words](https://discuss.elastic.co/t/count-matched-words/269294)
**Author:** [@ndkmath1](https://discuss.elastic.co/u/ndkmath1)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 7:51am UTC](https://discuss.elastic.co/t/count-matched-words/269294 "2021-04-06T07:51:33Z")
I'm doing something with ES Learning to rank. I want to count how many words in a query matched with a document and take it as a feature (number\_of\_matched\_words) for LTR. Ex: q = "iphone 11", d = "iphone 11 64gb". In t… --- ## [Logstash email output using linux sendmail](https://discuss.elastic.co/t/logstash-email-output-using-linux-sendmail/269295)
**Author:** [@crazy\_coder](https://discuss.elastic.co/u/crazy_coder)\ **Replies:** 0\ **Last updated:** [April 6, 2021, 7:53am UTC](https://discuss.elastic.co/t/logstash-email-output-using-linux-sendmail/269295 "2021-04-06T07:53:02Z")
Hi i want to use Linux sendmail service to send email using Logstash email output plugin. how can i do it. email { to =\> "crazy@noreply.com" codec =\> "plain" body =\> "hi how are you" via =\> "sendmail" } Is these… --- ## [Change monitoring index name for Kibana UI](https://discuss.elastic.co/t/change-monitoring-index-name-for-kibana-ui/268530)
**Author:** [@Agraphie\_holidu](https://discuss.elastic.co/u/Agraphie_holidu)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 7:52am UTC](https://discuss.elastic.co/t/change-monitoring-index-name-for-kibana-ui/268530 "2021-04-06T07:52:35Z")
Hi, I was wondering if it is possible to change the index (pattern) which Kibana uses for the UI under "Stack Monitoring". As far as I see we can already do this for filebeat (for Kibana) via monitoring.ui.logs.index so… --- ## [Kibana Search Error - Service Unavailable](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634)
**Author:** [@mpavelka](https://discuss.elastic.co/u/mpavelka)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 7:43am UTC](https://discuss.elastic.co/t/kibana-search-error-service-unavailable/268634 "2021-04-06T07:43:30Z")
Hello, cluster setup: 3 master data nodes, 1 coordinator. versions of ES and Kibana: 7.10.1, status green. I am trying to create a table visualization and I am getting for the particular index pattern Search Error - S… --- ## [Creating multiple indexes or just one?](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346)
**Author:** [@Andrea92](https://discuss.elastic.co/u/Andrea92)\ **Replies:** 4\ **Last updated:** [April 6, 2021, 7:18am UTC](https://discuss.elastic.co/t/creating-multiple-indexes-or-just-one/268346 "2021-04-06T07:18:40Z")
Good morning everyone, I have a question about the creation of a single index or multiple indexes. I am dealing with computer vulnerabilities, so I save the information of the files in a single index and then I compare… --- ## [Starting kibana failed](https://discuss.elastic.co/t/starting-kibana-failed/269282)
**Author:** [@lxia](https://discuss.elastic.co/u/lxia)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 4:32am UTC](https://discuss.elastic.co/t/starting-kibana-failed/269282 "2021-04-06T04:32:17Z")
Hello, after power-off, I get problems with kibana start. elasticsearch plus kibana. I use version 7.12.0 for both. I have no problem with elasticsearch. The log showing: -sh-4.2$ log \[19:00:06.537\] \[info\]\[plug… --- ## [I dont see the records which has few missing values](https://discuss.elastic.co/t/i-dont-see-the-records-which-has-few-missing-values/269248)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 5:28am UTC](https://discuss.elastic.co/t/i-dont-see-the-records-which-has-few-missing-values/269248 "2021-04-06T05:28:27Z")
Hi Team, I have created data table, I could able to see the results only when the object has the value of all the column. If any of hte object does not have value of the column, then those records are not qualified for … --- ## [Not accept logs when beats pointing to logstash](https://discuss.elastic.co/t/not-accept-logs-when-beats-pointing-to-logstash/268859)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 9\ **Last updated:** [April 6, 2021, 4:58am UTC](https://discuss.elastic.co/t/not-accept-logs-when-beats-pointing-to-logstash/268859 "2021-04-06T04:58:52Z")
i have 3 beats winlogbeat (server os windows), filebeat and auditbeat (server os linux). when i pointing winlogbeat to logstash there's no problem to receive log. but when i pointing filebeat and auditbeat to logstash, … --- ## [Snapshot lifecycle policy is not showing in my Kibana console](https://discuss.elastic.co/t/snapshot-lifecycle-policy-is-not-showing-in-my-kibana-console/269208)
**Author:** [@Anshumanabhishek](https://discuss.elastic.co/u/Anshumanabhishek)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:54am UTC](https://discuss.elastic.co/t/snapshot-lifecycle-policy-is-not-showing-in-my-kibana-console/269208 "2021-04-06T04:54:49Z")
Snapshot Lifecycle Policy is not showing in my Kibana console. I have to automate backup. My ES version is 7.2.1. Thanks --- ## [Kibana visualize metric I'm not able to subtract with \_value](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 3\ **Last updated:** [April 6, 2021, 4:10am UTC](https://discuss.elastic.co/t/kibana-visualize-metric-im-not-able-to-subtract-with-value/269259 "2021-04-06T04:10:48Z")
I'm trying to do a simple calculation but the value is different: { "script": "\_value" } { "script": "\_value - 10" } Let me explain what the purpose is: this metrics returns me the time that some asset was … --- ## [Doing periodic searches via API](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [April 6, 2021, 4:04am UTC](https://discuss.elastic.co/t/doing-periodic-searches-via-api/269268 "2021-04-06T04:04:31Z")
I have an application where I need to run searches on an index periodically picking up "new" entries from the index and I am wondering the best way of doing this. I assume that \_id is serial and simply saving the \_id of… --- ## [Slow search and tiny segments memory\_in\_bytes after upgrade \>= es7.9](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174)
**Author:** [@MihaylovNikitos](https://discuss.elastic.co/u/MihaylovNikitos)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:57am UTC](https://discuss.elastic.co/t/slow-search-and-tiny-segments-memory-in-bytes-after-upgrade-es7-9/269174 "2021-04-06T03:57:11Z")
Hi After upgrading from ES 7.8.x to ES \>=7.9, I noticed that segments \*\_memory\_in\_bytes became very small and search is very slow It is seen by stats: ES 7.8.1 /\_nodes/stats segments: { count: 7, memory\_in\_bytes: 2… --- ## [ECE On premise 7.12 Fleet failure to Enroll, windows 10 system](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929)
**Author:** [@Nicholas\_Rowe](https://discuss.elastic.co/u/Nicholas_Rowe)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 3:00am UTC](https://discuss.elastic.co/t/ece-on-premise-7-12-fleet-failure-to-enroll-windows-10-system/268929 "2021-04-06T03:00:09Z")
I just setup an ECE instance using 7.9 (which I believe is the latest) and spun up a cluster for security using version 7.12. I setup a new agent and tried to enroll a windows 10 target workstation as outlined, but an ge… --- ## [I need help to access http.request.headers.X-Client-Name](https://discuss.elastic.co/t/i-need-help-to-access-http-request-headers-x-client-name/269244)
**Author:** [@Eduardo\_Bubniak](https://discuss.elastic.co/u/Eduardo_Bubniak)\ **Replies:** 1\ **Last updated:** [April 6, 2021, 2:01am UTC](https://discuss.elastic.co/t/i-need-help-to-access-http-request-headers-x-client-name/269244 "2021-04-06T02:01:38Z")
Hi, i need build a report about only one client, through the metadata i can found http.request.headers.X-Client-Name, but in visualization i can´t take this value, how i can resolve this --- ## [Elasticsearch node js search\_after](https://discuss.elastic.co/t/elasticsearch-node-js-search-after/268880)
**Author:** [@111452](https://discuss.elastic.co/u/111452)\ **Replies:** 0\ **Last updated:** [March 31, 2021, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-node-js-search-after/268880 "2021-03-31T08:53:32Z")
Hello everyone! Does anyone know how to properly use search\_after in the elastic query in node js? I've tried like : '''const body = { "query": { "geo\_shape": { "geometry": { "relation": "within", … --- ## [Filebeat problem with creating own index](https://discuss.elastic.co/t/filebeat-problem-with-creating-own-index/268802)
**Author:** [@lumi](https://discuss.elastic.co/u/lumi)\ **Replies:** 0\ **Last updated:** [March 30, 2021, 2:16pm UTC](https://discuss.elastic.co/t/filebeat-problem-with-creating-own-index/268802 "2021-03-30T14:16:57Z")
I have problems with creating an index with filebeat i want to create an index for every running module when i add setup.template.enabled: false setup.template.name: "filebeat-%{\[event.module\]}" setup.template.patte… --- ## [How to update the dashboard automatically](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188)
**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\ **Replies:** 7\ **Last updated:** [April 6, 2021, 1:25am UTC](https://discuss.elastic.co/t/how-to-update-the-dashboard-automatically/269188 "2021-04-06T01:25:03Z")
I want my dashboard to get updated automatically. Whenever I insert data in my csv file and as soon as I press the refresh button it should get updated. I know there is a time filter on the top and I tried using that, b… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1475) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1477)