# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1494 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1495 --- ## [Live updating file](https://discuss.elastic.co/t/live-updating-file/268089)
**Author:** [@Marc2](https://discuss.elastic.co/u/Marc2)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 12:07pm UTC](https://discuss.elastic.co/t/live-updating-file/268089 "2021-03-23T12:07:24Z")
Hi everyone, I need to update an inputed file which size doesn't change. It consists in a csv file that will be changing every 3 hours. I am doing a test changing manually the csv file by the new one (same size, but dif… --- ## [Documentation Suggestion | Secure communication with Logstash](https://discuss.elastic.co/t/documentation-suggestion-secure-communication-with-logstash/268146)
**Author:** [@lorenzop](https://discuss.elastic.co/u/lorenzop)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 10:11pm UTC](https://discuss.elastic.co/t/documentation-suggestion-secure-communication-with-logstash/268146 "2021-03-23T22:11:39Z")
In this guide, specifically the section for configuring Logstash to receive secure communications using an SSL certificate, we experienced difficulty getting this setup and were actually only able to get the server to … --- ## [Can't I send emails from my own server in elastic service?](https://discuss.elastic.co/t/cant-i-send-emails-from-my-own-server-in-elastic-service/268083)
**Author:** [@sireesha\_m](https://discuss.elastic.co/u/sireesha_m)\ **Replies:** 25\ **Last updated:** [March 23, 2021, 10:09pm UTC](https://discuss.elastic.co/t/cant-i-send-emails-from-my-own-server-in-elastic-service/268083 "2021-03-23T22:09:29Z")
I am not able to update the settings in Elasticsearch.yml file. Not able to include any settings in .yml file -\> Elasticsearch - 'xpack.notification.email.html.sanitization': is not allowed --- ## [Logstash Beats Input remote: undefined on SSL Errors](https://discuss.elastic.co/t/logstash-beats-input-remote-undefined-on-ssl-errors/268144)
**Author:** [@lorenzop](https://discuss.elastic.co/u/lorenzop)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 10:05pm UTC](https://discuss.elastic.co/t/logstash-beats-input-remote-undefined-on-ssl-errors/268144 "2021-03-23T22:05:50Z")
Wanted to bring conversation over to the discussion forum and see if anyone here might have experience with solving this problem. --- ## [Elasticsearch Optimization Automation](https://discuss.elastic.co/t/elasticsearch-optimization-automation/268123)
**Author:** [@Yashasvi\_Raj\_Pant](https://discuss.elastic.co/u/Yashasvi_Raj_Pant)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 5:23pm UTC](https://discuss.elastic.co/t/elasticsearch-optimization-automation/268123 "2021-03-23T17:23:06Z")
I am planning to do a thesis in the elasticsearch parameter optimization using some machine learning algorithm or optimization technique(automate the optimization of parameters based on current data/conditions). Which ML… --- ## [Pipeline error in logstash on windows 10](https://discuss.elastic.co/t/pipeline-error-in-logstash-on-windows-10/266072)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 9:13pm UTC](https://discuss.elastic.co/t/pipeline-error-in-logstash-on-windows-10/266072 "2021-03-23T21:13:20Z")
Hi, I setup logstash 7.11.1 pipeline on windows 10 but it is showing No configuration found in the configured sources I am running logstash by logstash --debug command with administrator in cmd. Below is my complete l… --- ## [Logstash an suricata](https://discuss.elastic.co/t/logstash-an-suricata/268133)
**Author:** [@lumi](https://discuss.elastic.co/u/lumi)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 9:05pm UTC](https://discuss.elastic.co/t/logstash-an-suricata/268133 "2021-03-23T21:05:01Z")
Hello I am getting Suricata Messages from Qradar which i need so save in a file. The suricata module on filebeat will add it to the elasticsearch. i have the following problem: This is what logstash writes into the f… --- ## [Logstash - do not starts when jdbc filter fails connection](https://discuss.elastic.co/t/logstash-do-not-starts-when-jdbc-filter-fails-connection/267545)
**Author:** [@cesar.hernandez.a3se](https://discuss.elastic.co/u/cesar.hernandez.a3se)\ **Replies:** 6\ **Last updated:** [March 23, 2021, 8:59pm UTC](https://discuss.elastic.co/t/logstash-do-not-starts-when-jdbc-filter-fails-connection/267545 "2021-03-23T20:59:04Z")
Hi I've created a logstash input filter: filter { jdbc\_static { loaders =\> \[ { id =\> "remote-ipsservers" query =\> "select address, display\_name from host\_list'" … --- ## [Sum aggs returning scientific value](https://discuss.elastic.co/t/sum-aggs-returning-scientific-value/267861)
**Author:** [@leela\_kumili](https://discuss.elastic.co/u/leela_kumili)\ **Replies:** 6\ **Last updated:** [March 23, 2021, 8:57pm UTC](https://discuss.elastic.co/t/sum-aggs-returning-scientific-value/267861 "2021-03-23T20:57:44Z")
Sum aggs gives scientific value as result as shown below. Expected value 11111108.6789 Actual value : 1.1111108625E7 Index Mapping { "sample-tx" : { "mappings" : { "properties" : { "Id" : { … --- ## [Aggregation only on hits returned](https://discuss.elastic.co/t/aggregation-only-on-hits-returned/268131)
**Author:** [@sidnei\_de\_souza](https://discuss.elastic.co/u/sidnei_de_souza)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 8:53pm UTC](https://discuss.elastic.co/t/aggregation-only-on-hits-returned/268131 "2021-03-23T20:53:00Z")
First question here, new on Elasticsearch. Is it possible to do an aggregation on the hits returned on a search? I mean, if there are 8000 docs that match my query but I limit the size to 200, is it possible to do an ag… --- ## [Canvas formatting options](https://discuss.elastic.co/t/canvas-formatting-options/265127)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 14\ **Last updated:** [March 23, 2021, 7:04pm UTC](https://discuss.elastic.co/t/canvas-formatting-options/265127 "2021-03-23T19:04:33Z")
Hello, is it possible to change the format (and orientation) of the legends in the X and Y axis in a canvas chart ?. Also, is it possible to change the format of a data in a table inside a canvas ?. An image is attache… --- ## [Scripted Field params.\_interval](https://discuss.elastic.co/t/scripted-field-params-interval/268113)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 3\ **Last updated:** [March 23, 2021, 6:35pm UTC](https://discuss.elastic.co/t/scripted-field-params-interval/268113 "2021-03-23T18:35:30Z")
Here's my current code for a scripted field: if (doc\['ifHCInOctets'\].size() != 0) { doc\['ifHCInOctets'\].value \* 8 / 60 } This part of my code: 8 / 60 } needs to be 8 / $interval } just like in TSVB with params.\_interva… --- ## [Kibana Status Code : 302](https://discuss.elastic.co/t/kibana-status-code-302/266048)
**Author:** [@vansh](https://discuss.elastic.co/u/vansh)\ **Replies:** 35\ **Last updated:** [March 23, 2021, 6:19pm UTC](https://discuss.elastic.co/t/kibana-status-code-302/266048 "2021-03-23T18:19:09Z")
Hi, I have installed Elasticsearch and Kibana on my server(calling it myserver). but i am unable to access Kibana through browser, it keeps saying This site can’t be reached myserver refused to connect. while browsing… --- ## [Kibana- Request/Connections](https://discuss.elastic.co/t/kibana-request-connections/267520)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 7\ **Last updated:** [March 23, 2021, 5:59pm UTC](https://discuss.elastic.co/t/kibana-request-connections/267520 "2021-03-23T17:59:35Z")
When you go to Stack Monitoring you can click on the Kibana tab to get additional metrics. There will be a "Request" and a "Connections" tally in the Overview tab 1a) I am wondering how are these officially counted? I… --- ## [Parse a comma separate value that contains a comma in it](https://discuss.elastic.co/t/parse-a-comma-separate-value-that-contains-a-comma-in-it/268026)
**Author:** [@d-ring](https://discuss.elastic.co/u/d-ring)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 4:52pm UTC](https://discuss.elastic.co/t/parse-a-comma-separate-value-that-contains-a-comma-in-it/268026 "2021-03-23T16:52:53Z")
Evening All, I am trying to parse out a log entry that is comma separated, but if the SOMEUSER field exists will have a comma in it as well that should be ignored. The fields that exist in some fashion are SOMEUSER, SO… --- ## [How to get hits count as a filed value](https://discuss.elastic.co/t/how-to-get-hits-count-as-a-filed-value/268078)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 4:27pm UTC](https://discuss.elastic.co/t/how-to-get-hits-count-as-a-filed-value/268078 "2021-03-23T16:27:33Z")
Hello Experts, When i search a query it gives total hits count in the kibana, How to get the same count as a filed which i want to use to Triger the mail. It would be great if someone helps Regards, Suresh --- ## [Share Public URL Option Not Present](https://discuss.elastic.co/t/share-public-url-option-not-present/266843)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 10\ **Last updated:** [March 23, 2021, 4:16pm UTC](https://discuss.elastic.co/t/share-public-url-option-not-present/266843 "2021-03-23T16:16:26Z")
I've configured anonymous access, but the Share Public URL option mentioned here does not appear. If I visit the resource I want to make available, I can access it anonymously. Elasticsearch config: security: en… --- ## [After switching Elasticsearch Output - Logstash says it cannot reach old Elasticsearch Output Host](https://discuss.elastic.co/t/after-switching-elasticsearch-output-logstash-says-it-cannot-reach-old-elasticsearch-output-host/268116)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 4:01pm UTC](https://discuss.elastic.co/t/after-switching-elasticsearch-output-logstash-says-it-cannot-reach-old-elasticsearch-output-host/268116 "2021-03-23T16:01:10Z")
Hello Community, we've recently added a Node to our Cluster - which is supposed to handle the all the Logs which are processed by Logstash. Information: Elasticsearch 7.10 Logstash 7.10 OS: CentOS 7 So i reconfigur… --- ## [Unable to create account for E;astic Cloud Managed Services on Microsoft Azure](https://discuss.elastic.co/t/unable-to-create-account-for-e-astic-cloud-managed-services-on-microsoft-azure/267988)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 3:36pm UTC](https://discuss.elastic.co/t/unable-to-create-account-for-e-astic-cloud-managed-services-on-microsoft-azure/267988 "2021-03-23T15:36:54Z")
We are trying to create an Account for Elastic Cloud Managed Services on Azure. The Create Account option redirects us to the Elastic.co site. How do we create an Elastic Cloud Managed Service instance on Azure Cloud? … --- ## [Painless Script - Access Interval Variable](https://discuss.elastic.co/t/painless-script-access-interval-variable/268000)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 3:15pm UTC](https://discuss.elastic.co/t/painless-script-access-interval-variable/268000 "2021-03-23T15:15:05Z")
Using Scripted Fields, I'm trying to do some math and I need to divide the current interval / 1000. Interval is dynamic as we zoom in and out of graphs, could be per minute, per 5 minutes, for hour, etc. In TSVB, Bucke… --- ## [Cannot get Beats to monitor with Metricbeat](https://discuss.elastic.co/t/cannot-get-beats-to-monitor-with-metricbeat/266293)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 9\ **Last updated:** [March 23, 2021, 3:04pm UTC](https://discuss.elastic.co/t/cannot-get-beats-to-monitor-with-metricbeat/266293 "2021-03-23T15:04:57Z")
Hi Elastic 7.11.1 I have configured metricbeat, and I have got rid of this legacy monitoring, but I cannot seem to get rid of this message: I click onto "Monitor with Metricbeat" I have done: metricbeat modules en… --- ## [Mapping conflict](https://discuss.elastic.co/t/mapping-conflict/268088)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 2:58pm UTC](https://discuss.elastic.co/t/mapping-conflict/268088 "2021-03-23T14:58:20Z")
Im having this error: And Im not sure how to fully fix this issue. Ive been able to specify it when I create the mapping for a future index but it doesnt seem to work this time around. --- ## [Index default pipeline](https://discuss.elastic.co/t/index-default-pipeline/268103)
**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 2:47pm UTC](https://discuss.elastic.co/t/index-default-pipeline/268103 "2021-03-23T14:47:54Z")
I would like to create an ingest pipeline that will create a field called "free\_ratio". The pipeline has to be applied on current ".monitoring-es" index. The definition of the pipeline is following: { "free\_ratio" : … --- ## [Some considerations about Kibana 7.11](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 2:40pm UTC](https://discuss.elastic.co/t/some-considerations-about-kibana-7-11/268099 "2021-03-23T14:40:15Z")
Hello, We updated to Elastic 7.11.2 last week and I need to tell you about some functionalities that are sub-optimal.. We can no longer right-click on a lot of stuff... Not on dashboard right click open in another pag… --- ## [Can a Filter be Applied with "OR" Logic?](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 4\ **Last updated:** [March 23, 2021, 2:37pm UTC](https://discuss.elastic.co/t/can-a-filter-be-applied-with-or-logic/266959 "2021-03-23T14:37:52Z")
I'm trying to mimic the functionality of another search engine. The functionality I want is that when a user selects a filter it first limits a search, as expected. However, I want to still return all possible aggregatio… --- ## [Unexpected match when using edgeNgram filter](https://discuss.elastic.co/t/unexpected-match-when-using-edgengram-filter/268105)
**Author:** [@matt4](https://discuss.elastic.co/u/matt4)\ **Replies:** 0\ **Last updated:** [March 23, 2021, 2:15pm UTC](https://discuss.elastic.co/t/unexpected-match-when-using-edgengram-filter/268105 "2021-03-23T14:15:27Z")
I encountered some unexpected matches when I set up a field with an analyzer that contains an edgeNgram filter. This is how I set up the mappings and the settings: PUT test-index { "mappings": { "properties": { … --- ## [Data in Dashboard Kibana](https://discuss.elastic.co/t/data-in-dashboard-kibana/268066)
**Author:** [@Weathmious](https://discuss.elastic.co/u/Weathmious)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:50pm UTC](https://discuss.elastic.co/t/data-in-dashboard-kibana/268066 "2021-03-23T13:50:55Z")
Hello, I currently have a graylog server on which I installed kibana to better visualize the data I would like to create a dashboard on which we could see the users who make the most AD connection errors As you can se… --- ## [Documents not being replicated to replica shards](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093)
**Author:** [@zeljko-bal](https://discuss.elastic.co/u/zeljko-bal)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:46pm UTC](https://discuss.elastic.co/t/documents-not-being-replicated-to-replica-shards/268093 "2021-03-23T13:46:23Z")
Hi, I have a problem where for the same query executed multiple times, for some indices in my cluster, I get alternating different results (two sets of results alternating between each other with each subsequent request… --- ## [Elastic: ilm-history-3-000004 index created with wrong number\_of\_replicas according to template](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 12\ **Last updated:** [March 23, 2021, 1:39pm UTC](https://discuss.elastic.co/t/elastic-ilm-history-3-000004-index-created-with-wrong-number-of-replicas-according-to-template/268071 "2021-03-23T13:39:09Z")
Elastic 7.11.1 Today, two of my elastic hosts (where there is 0 replicas), somehow created this index with number\_of\_replicas=1 yellow open ilm-history-3-000004 That is why it is in yellow state. When I look index … --- ## [Elasticsearch security with a multiple Helm charts cluster](https://discuss.elastic.co/t/elasticsearch-security-with-a-multiple-helm-charts-cluster/268081)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 1\ **Last updated:** [March 23, 2021, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-with-a-multiple-helm-charts-cluster/268081 "2021-03-23T13:24:14Z")
We are running elasticsearch on kubernetes, via official elastic Helm chart. As per elastic recommandation, we run 3 Helm releases with dedicated role: master data client Usually, I deploy master release first, then d… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1493) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1495)