# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1485

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1486

---

## [How to add count value to each csv value in logstash](https://discuss.elastic.co/t/how-to-add-count-value-to-each-csv-value-in-logstash/268770)

<div class="topic-metadata">

**Author:** [@ofitz](https://discuss.elastic.co/u/ofitz)\
**Replies:** 0\
**Last updated:** [March 30, 2021, 10:22am UTC](https://discuss.elastic.co/t/how-to-add-count-value-to-each-csv-value-in-logstash/268770 "2021-03-30T10:22:50Z")

</div>

I have some csv, and with ruby i convert it to array , like this: 11;22;33;44;55 66;77;88;99;100 ruby { code =\> ' m = event.get("message").split(";") m.each\_index { |x| m\[x\] = m\[x\].to\_f } …

---

## [Logstash - output csv plugin - all fields are strings](https://discuss.elastic.co/t/logstash-output-csv-plugin-all-fields-are-strings/268513)

<div class="topic-metadata">

**Author:** [@YaronB](https://discuss.elastic.co/u/YaronB)\
**Replies:** 6\
**Last updated:** [March 30, 2021, 10:11am UTC](https://discuss.elastic.co/t/logstash-output-csv-plugin-all-fields-are-strings/268513 "2021-03-30T10:11:55Z")

</div>

i'm trying to move some data to mongodb from elastic using elastic input plugin and csv ouput plugin and then mongoimport. how can i define the fields types , including nested fields? everything is showing up as string…

---

## [Week of the year / sunday of the week](https://discuss.elastic.co/t/week-of-the-year-sunday-of-the-week/267529)

<div class="topic-metadata">

**Author:** [@lachlann562](https://discuss.elastic.co/u/lachlann562)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 9:58am UTC](https://discuss.elastic.co/t/week-of-the-year-sunday-of-the-week/267529 "2021-03-30T09:58:53Z")

</div>

Week of the year is challenging when handling year rolling, etc. a previous article was: Week of the year aggregations using Painless - Elastic Stack / Elasticsearch - Discuss the Elastic Stack I found a simple solutio…

---

## [The \[0.0.0\] version of the \[jdbc\] client is not compatible with Elasticsearch version \[7.10.0\];\]](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462)

<div class="topic-metadata">

**Author:** [@yxmm-wxe](https://discuss.elastic.co/u/yxmm-wxe)\
**Replies:** 3\
**Last updated:** [March 30, 2021, 9:52am UTC](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462 "2021-03-30T09:52:28Z")

</div>

Hello, everyone, I have a strange problem with the JDBC driver version after packaging. \<dependency\> \<groupId\>org.elasticsearch.plugin\</groupId\> \<artifactId\>x-pack-sql-jdbc\</artifactId\> \<version\>7.10.0\</vers…

---

## [During maintenance all writes on new shards targeted one node leading to document rejections](https://discuss.elastic.co/t/during-maintenance-all-writes-on-new-shards-targeted-one-node-leading-to-document-rejections/268681)

<div class="topic-metadata">

**Author:** [@ssouris](https://discuss.elastic.co/u/ssouris)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 9:31am UTC](https://discuss.elastic.co/t/during-maintenance-all-writes-on-new-shards-targeted-one-node-leading-to-document-rejections/268681 "2021-03-30T09:31:43Z")

</div>

Hi Elasticsearch experts :slight\_smile: During one of our maintenances of the cluster, we needed to restart a node to add more disk space to it. So we made sure no shards were located on that node, and we performed th…

---

## [TLS implementation for Elasticsearch in Openshift](https://discuss.elastic.co/t/tls-implementation-for-elasticsearch-in-openshift/268287)

<div class="topic-metadata">

**Author:** [@Janakiraman](https://discuss.elastic.co/u/Janakiraman)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 9:26am UTC](https://discuss.elastic.co/t/tls-implementation-for-elasticsearch-in-openshift/268287 "2021-03-30T09:26:52Z")

</div>

Hi team, I am trying to implement TLS for single node elasticsearch(v 7.4.1) and when i try to run the elastic cert utility i am facing the below error. can you help me in providing a path to fix this? note: i do not ha…

---

## [Get filebeat latest version](https://discuss.elastic.co/t/get-filebeat-latest-version/268670)

<div class="topic-metadata">

**Author:** [@mirii1994](https://discuss.elastic.co/u/mirii1994)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 9:14am UTC](https://discuss.elastic.co/t/get-filebeat-latest-version/268670 "2021-03-30T09:14:35Z")

</div>

Hi there, Is there some kind of API or a URL that I can check with what's Filebeat's latest version from a script? Thanks!

---

## [Error when querying on search\_as\_you\_type subfields (.\_2gram, .\_3gram)](https://discuss.elastic.co/t/error-when-querying-on-search-as-you-type-subfields-2gram-3gram/268751)

<div class="topic-metadata">

**Author:** [@mariskaas](https://discuss.elastic.co/u/mariskaas)\
**Replies:** 0\
**Last updated:** [March 30, 2021, 8:56am UTC](https://discuss.elastic.co/t/error-when-querying-on-search-as-you-type-subfields-2gram-3gram/268751 "2021-03-30T08:56:42Z")

</div>

Hi there. I've been trying to use search\_as\_you\_type for an autocomplete solution. I've mapped a field as the "search\_as\_you\_type" type, however when trying to query on the field, the .\_2gram and .\_3gram field, as descri…

---

## [Generating a CSV file from curl with Kibana, results in just 'Processing' in the output csv file](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 3\
**Last updated:** [March 30, 2021, 8:02am UTC](https://discuss.elastic.co/t/generating-a-csv-file-from-curl-with-kibana-results-in-just-processing-in-the-output-csv-file/268374 "2021-03-30T08:02:00Z")

</div>

I am using the following shell snipped to download csvs for a a series of queries that I have collected up in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing que…

---

## [Logstash failed to start after plugin update](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472)

<div class="topic-metadata">

**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 8:00am UTC](https://discuss.elastic.co/t/logstash-failed-to-start-after-plugin-update/268472 "2021-03-30T08:00:42Z")

</div>

After updating beats input plugin from 6.0.5 to 6.1.0 on logstash(7.5.2), the service stopped to work & keeps on throwing the following error - \`logstash\[22854\]: \[ERROR\] 2021-03-26 10:35:57.423 \[main\] Logstash - java.la…

---

## [\[SMTP-Alert Settings\] using hosts file static IP instead of DNS lookup](https://discuss.elastic.co/t/smtp-alert-settings-using-hosts-file-static-ip-instead-of-dns-lookup/267909)

<div class="topic-metadata">

**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 7:55am UTC](https://discuss.elastic.co/t/smtp-alert-settings-using-hosts-file-static-ip-instead-of-dns-lookup/267909 "2021-03-30T07:55:24Z")

</div>

In Alert scenario How to force KIaban to use hosts file instead of DNS Lookup to define SMTP server.

---

## ["Content-Type header \[text/plain; charset=ISO-8859-1\] is not supported","status":406](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309)

<div class="topic-metadata">

**Author:** [@Dan4](https://discuss.elastic.co/u/Dan4)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 7:47am UTC](https://discuss.elastic.co/t/content-type-header-text-plain-charset-iso-8859-1-is-not-supported-status-406/268309 "2021-03-30T07:47:33Z")

</div>

Hello together, I am new to the elastic stack and have no further experience than just google a solution. In my environment I have to use Logstash on a remote server. I have no control and influence over the version whi…

---

## [Scripted field to calculate a machine score](https://discuss.elastic.co/t/scripted-field-to-calculate-a-machine-score/268657)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 7:37am UTC](https://discuss.elastic.co/t/scripted-field-to-calculate-a-machine-score/268657 "2021-03-30T07:37:18Z")

</div>

Hallo !!! i want to write a scripted field that can calculate a machine score in kibana.. Please any idea how i can resolve it. Thank you in advance.

---

## [Filebeat error failed to publish events caused connection reset by peer](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-connection-reset-by-peer/268400)

<div class="topic-metadata">

**Author:** [@aneeshansari](https://discuss.elastic.co/u/aneeshansari)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 7:31am UTC](https://discuss.elastic.co/t/filebeat-error-failed-to-publish-events-caused-connection-reset-by-peer/268400 "2021-03-30T07:31:26Z")

</div>

Hello Everyone, Need help for following error in filebeat with logstash. error failed to publish events caused by: write tcp 127.0.0.1:random\_port-\>127.0.0.1:5044 write: connection reset by peer I already increased …

---

## [Error deleting entry from .triggered\_watches for watch](https://discuss.elastic.co/t/error-deleting-entry-from-triggered-watches-for-watch/268734)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 7:30am UTC](https://discuss.elastic.co/t/error-deleting-entry-from-triggered-watches-for-watch/268734 "2021-03-30T07:30:23Z")

</div>

Hello, recently we have experienced this issue: \[2021-03-30T08:08:54,049\]\[ERROR\]\[o.e.x.w.e.ExecutionService\] \[logstashatp4\] Error deleting entry from .triggered\_watches for watch \[bYsk9A5mRbimxYswp5ogTg\_xpack\_license\_e…

---

## [Elasticsearch directory permission](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 8\
**Last updated:** [March 30, 2021, 5:48am UTC](https://discuss.elastic.co/t/elasticsearch-directory-permission/268611 "2021-03-30T05:48:10Z")

</div>

Hello, I just installed elasticsearch 7.12.0 rpm package on AWS Linux AMI, when I try to access the config directory, it says "permission denied". this is the directory detail. $ ls -l drwxr-s--- 3 root elasticsearc…

---

## [Using NEST](https://discuss.elastic.co/t/using-nest/268724)

<div class="topic-metadata">

**Author:** [@S\_Y](https://discuss.elastic.co/u/S_Y)\
**Replies:** 0\
**Last updated:** [March 30, 2021, 5:22am UTC](https://discuss.elastic.co/t/using-nest/268724 "2021-03-30T05:22:09Z")

</div>

Hello guys I'm using version is elasticsearch 7.11 and NEST 7.0.0 / Elasticsearch.Net 7.0.0 in .Net stendard 2.0 Unity3D but I can't used this client package because this error " Assets\\Script\\BulkScript.cs(10,7): erro…

---

## [ElasticSearch security set up documentation is Byzantine](https://discuss.elastic.co/t/elasticsearch-security-set-up-documentation-is-byzantine/268722)

<div class="topic-metadata">

**Author:** [@lachlan.simpson](https://discuss.elastic.co/u/lachlan.simpson)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 4:41am UTC](https://discuss.elastic.co/t/elasticsearch-security-set-up-documentation-is-byzantine/268722 "2021-03-30T04:41:45Z")

</div>

I am setting up a testing instance in house. Single node, with proof of concept reporting. Elastic, Kibana, Beats, using the free software only. There is no indication that ElasticSearch is securable on the free license…

---

## [Logstash persistent queue empty but all events coming in fine](https://discuss.elastic.co/t/logstash-persistent-queue-empty-but-all-events-coming-in-fine/268619)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 5\
**Last updated:** [March 30, 2021, 4:11am UTC](https://discuss.elastic.co/t/logstash-persistent-queue-empty-but-all-events-coming-in-fine/268619 "2021-03-30T04:11:49Z")

</div>

I have configured logstash to use persistent queue. As per documentation, "When an input has events ready to process, it writes them to the queue." I was expecting to see some files in the folder '/Data/logstash/data/…

---

## [Winlogbeat communicate](https://discuss.elastic.co/t/winlogbeat-communicate/268720)

<div class="topic-metadata">

**Author:** [@raj\_mouriya](https://discuss.elastic.co/u/raj_mouriya)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 3:57am UTC](https://discuss.elastic.co/t/winlogbeat-communicate/268720 "2021-03-30T03:57:29Z")

</div>

Winlogbeat not communicate my elastic search cluster if elastic search master is down . winlogbeat not send logs in my backup elastic search server.

---

## [Error in Logstash Pipeline](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930)

<div class="topic-metadata">

**Author:** [@caitlyn.carlisle](https://discuss.elastic.co/u/caitlyn.carlisle)\
**Replies:** 4\
**Last updated:** [March 30, 2021, 3:32am UTC](https://discuss.elastic.co/t/error-in-logstash-pipeline/267930 "2021-03-30T03:32:55Z")

</div>

I am getting this error when trying to run my Logstash pipeline. I would appreciate any help!! Thanks so much! \[2021-03-21T22:02:58,827\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file becaus…

---

## [Clarification on multiple indices](https://discuss.elastic.co/t/clarification-on-multiple-indices/268705)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 3:18am UTC](https://discuss.elastic.co/t/clarification-on-multiple-indices/268705 "2021-03-30T03:18:54Z")

</div>

I'm new to creating ILM on Elasticsearch version 7.3.2 and have a noob question as follow: The setup: I have two indices index\_a & index\_b, I want to use the same index lifecycle policy. The question: Wouild I create…

---

## [Logstash to elasticsearch service](https://discuss.elastic.co/t/logstash-to-elasticsearch-service/268626)

<div class="topic-metadata">

**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\
**Replies:** 12\
**Last updated:** [March 30, 2021, 2:50am UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-service/268626 "2021-03-30T02:50:50Z")

</div>

Hi everyone, I'm on my trial to test elasticcloud. But now I got problem to create pipeline from logstash to elasticcloud. Here is my logstash.conf output output { stdout{codec=\>rubydebug} elasticsearch…

---

## [SSL error from Elastic webhook. What does it mean?](https://discuss.elastic.co/t/ssl-error-from-elastic-webhook-what-does-it-mean/268471)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 3:01am UTC](https://discuss.elastic.co/t/ssl-error-from-elastic-webhook-what-does-it-mean/268471 "2021-03-30T03:01:22Z")

</div>

Dear all =) I have created a webhook in Elastic, but when Elastic connects to the client it logs SSL\_accept: ssl/record/ssl3\_record.c:322: error:1408F09C:SSL routines:ssl3\_get\_record:http request Can anyone explain wh…

---

## [Vega Kibana Maps Offline Implementation](https://discuss.elastic.co/t/vega-kibana-maps-offline-implementation/268680)

<div class="topic-metadata">

**Author:** [@gerardo\_dutan](https://discuss.elastic.co/u/gerardo_dutan)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 2:45am UTC](https://discuss.elastic.co/t/vega-kibana-maps-offline-implementation/268680 "2021-03-30T02:45:28Z")

</div>

I've noticed that the implementation of Vega maps have changed in the latest version of kibana, 12.0. I submitted an issue on Github, elastic/kibana/issues/87853, a while ago to fix a bug in the previous implementation …

---

## [Easy way to transfer data from one node to another?](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 2:34am UTC](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711 "2021-03-30T02:34:44Z")

</div>

From time to time, we know that we have to shutdown nodes (remove a node from a cluster) and add a new one. Normally, we shutdown the node, add a new one, and just let the cluster determine the best way to re-allocate ev…

---

## [Kibana Dashboard Two Charts Within a Single Panel](https://discuss.elastic.co/t/kibana-dashboard-two-charts-within-a-single-panel/268708)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 4\
**Last updated:** [March 29, 2021, 10:42pm UTC](https://discuss.elastic.co/t/kibana-dashboard-two-charts-within-a-single-panel/268708 "2021-03-29T22:42:33Z")

</div>

Hi there, I came across the below image while I was browsing the forum and I wonder if you can give some info on the following 2 things... 1 - What are the steps for placing two charts, see User Authentications, within…

---

## [Field\_masking\_span - Not working as expected with span queries](https://discuss.elastic.co/t/field-masking-span-not-working-as-expected-with-span-queries/268704)

<div class="topic-metadata">

**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\
**Replies:** 1\
**Last updated:** [March 29, 2021, 10:30pm UTC](https://discuss.elastic.co/t/field-masking-span-not-working-as-expected-with-span-queries/268704 "2021-03-29T22:30:53Z")

</div>

Hi, I am using field\_masking\_span to find spans across two different fields, a stemmed field (text) and an unstemmed field (text.unstemed). In particular, I am trying to search for the word loss in the text field, and …

---

## [How can I change the font size of the x-axis and y-axis](https://discuss.elastic.co/t/how-can-i-change-the-font-size-of-the-x-axis-and-y-axis/268663)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 1\
**Last updated:** [March 29, 2021, 10:15pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-font-size-of-the-x-axis-and-y-axis/268663 "2021-03-29T22:15:15Z")

</div>

please How can I change the font size of the x-axis and y-axis, it can be through css or another way.

---

## [Doubts about the use of StopWords](https://discuss.elastic.co/t/doubts-about-the-use-of-stopwords/268707)

<div class="topic-metadata">

**Author:** [@RabBit\_BR](https://discuss.elastic.co/u/RabBit_BR)\
**Replies:** 0\
**Last updated:** [March 29, 2021, 9:36pm UTC](https://discuss.elastic.co/t/doubts-about-the-use-of-stopwords/268707 "2021-03-29T21:36:25Z")

</div>

Hi. I would like to ask a question about what is the best use of stop words. I have a filter (option A) with passing all stopwords and the other option is to create a filter for each language (option B). In any case wou…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1484)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1486)
