# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1517

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1518

---

## [Getting log":{"message":"Exception during establishing a SSL connection: HttpRequestOnTransportException\[This is not an HTTP port\]"}}](https://discuss.elastic.co/t/getting-log-message-exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266627)

<div class="topic-metadata">

**Author:** [@Mayank\_Srivastava](https://discuss.elastic.co/u/Mayank_Srivastava)\
**Replies:** 0\
**Last updated:** [March 9, 2021, 3:56am UTC](https://discuss.elastic.co/t/getting-log-message-exception-during-establishing-a-ssl-connection-httprequestontransportexception-this-is-not-an-http-port/266627 "2021-03-09T03:56:01Z")

</div>

Hi , we are getting this ERROR flooding logs in elasticsearch ,Can you please help us on this why its coming. ''' {"type":"log","host":"btel-belk-elasticsearch-master-0","level":"ERROR","systemid":"2106a117733f42d69728…

---

## [I want to output log to elasticsearch index from only specific "host.ip"](https://discuss.elastic.co/t/i-want-to-output-log-to-elasticsearch-index-from-only-specific-host-ip/266494)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 4\
**Last updated:** [March 9, 2021, 3:51am UTC](https://discuss.elastic.co/t/i-want-to-output-log-to-elasticsearch-index-from-only-specific-host-ip/266494 "2021-03-09T03:51:57Z")

</div>

"host.ip" is at "\_source" displayed on Kibana. Please teach me how to resolve. logstash config input { beats { port =\> 5044 } } filter { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:Time} %{HO…

---

## [Cannot seem to get ingest pipelines to work, please help!](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 11\
**Last updated:** [March 9, 2021, 3:16am UTC](https://discuss.elastic.co/t/cannot-seem-to-get-ingest-pipelines-to-work-please-help/264259 "2021-03-09T03:16:25Z")

</div>

I am trying to understand ES ingest pipelines and Filebeat. I am using version 7.11 ES and K and FB in docker containers. If I do not add the pipeline, I get the log lines in ES/K from FB, but they are not formatted …

---

## [Kibana isnot converting over https in windows](https://discuss.elastic.co/t/kibana-isnot-converting-over-https-in-windows/266562)

<div class="topic-metadata">

**Author:** [@shharukh](https://discuss.elastic.co/u/shharukh)\
**Replies:** 2\
**Last updated:** [March 9, 2021, 1:51am UTC](https://discuss.elastic.co/t/kibana-isnot-converting-over-https-in-windows/266562 "2021-03-09T01:51:18Z")

</div>

hello everyone, I have successfully convert http to https in elasticsearch but the communication between elastic search and kibana is having the possible error can you help me out . I'm doing it in windows and on my…

---

## [Elasticsearch SSL/TLS PKI realm setup](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790)

<div class="topic-metadata">

**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\
**Replies:** 13\
**Last updated:** [March 9, 2021, 1:18am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-tls-pki-realm-setup/265790 "2021-03-09T01:18:45Z")

</div>

Hello, I am trying to setup PKI realm on my onpremise ELK stack on a k8s cluster and I am using helm as the package manager Elasticsearch version: 7.11.1 I have created an organization signed server certificate, using…

---

## [Exclude and include not working on script\_score](https://discuss.elastic.co/t/exclude-and-include-not-working-on-script-score/266498)

<div class="topic-metadata">

**Author:** [@Min-Young](https://discuss.elastic.co/u/Min-Young)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 2:12am UTC](https://discuss.elastic.co/t/exclude-and-include-not-working-on-script-score/266498 "2021-03-08T02:12:05Z")

</div>

Hi guys, if query is something like that... { "size": 30, "\_source": { "includes": "source\_sentence", "excludes": \["source\_embedding", "target\_embedding"\] }, "query": { "script\_score": { "quer…

---

## [Logstash elastic as input](https://discuss.elastic.co/t/logstash-elastic-as-input/266280)

<div class="topic-metadata">

**Author:** [@Kiyoka](https://discuss.elastic.co/u/Kiyoka)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 11:47pm UTC](https://discuss.elastic.co/t/logstash-elastic-as-input/266280 "2021-03-08T23:47:27Z")

</div>

Hi. I am using existing index as input and enriching it with the data from SQL server. This enriching process needs to run weekly for now. Currently I am loading past 10 days, but that cause duplicate. Preformatted …

---

## [Metricbeat autodiscover configuration to create a new index when a new namespace is created](https://discuss.elastic.co/t/metricbeat-autodiscover-configuration-to-create-a-new-index-when-a-new-namespace-is-created/266616)

<div class="topic-metadata">

**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 10:54pm UTC](https://discuss.elastic.co/t/metricbeat-autodiscover-configuration-to-create-a-new-index-when-a-new-namespace-is-created/266616 "2021-03-08T22:54:39Z")

</div>

Hi I want to crate a new elasticsearch index whenenver a new kubernetes namespace is created. How do I specify this in metricbeat configuration ? For every new namespace created, I need to add some config and also cre…

---

## [Display data with the latest date](https://discuss.elastic.co/t/display-data-with-the-latest-date/266196)

<div class="topic-metadata">

**Author:** [@jazzdorf](https://discuss.elastic.co/u/jazzdorf)\
**Replies:** 5\
**Last updated:** [March 8, 2021, 9:54pm UTC](https://discuss.elastic.co/t/display-data-with-the-latest-date/266196 "2021-03-08T21:54:04Z")

</div>

Hi, I'm new to Kibana and I'm trying out some things. Now, I have some dummy data set and I want to filter for some data by a query. How can I get a count for the latest date where data exists? I'm using a metric visu…

---

## [AWS elb and vpcflow log filebeat visualizations fail to load properly](https://discuss.elastic.co/t/aws-elb-and-vpcflow-log-filebeat-visualizations-fail-to-load-properly/266608)

<div class="topic-metadata">

**Author:** [@EvanGertis](https://discuss.elastic.co/u/EvanGertis)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 9:44pm UTC](https://discuss.elastic.co/t/aws-elb-and-vpcflow-log-filebeat-visualizations-fail-to-load-properly/266608 "2021-03-08T21:44:31Z")

</div>

I am trying to develop more visibility around aws. I'd really like to use the prebuilt dashboards that come with filebeat, but I seem to constantly run into issues with the visualizations for elb and vpcflow logs. My con…

---

## [JDBC\_Static Filter](https://discuss.elastic.co/t/jdbc-static-filter/266162)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 11\
**Last updated:** [March 8, 2021, 9:32pm UTC](https://discuss.elastic.co/t/jdbc-static-filter/266162 "2021-03-08T21:32:17Z")

</div>

I am pulling data from a database that has fields populated with numeric values. I need to perform subsequent lookups to additional tables to convert the numeric value to a named value. Since I'll be doing this frequen…

---

## [Kibana dashboard import api fails](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603)

<div class="topic-metadata">

**Author:** [@vaclav1](https://discuss.elastic.co/u/vaclav1)\
**Replies:** 4\
**Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-api-fails/265603 "2021-03-08T20:41:11Z")

</div>

Dear team, We use export api to export dashboard with other visualisations. This api url is used to export it: GET \<kibana host\>:\<port\>/s/\<space-id\>/api/kibana/dashboards/export?dashboard=dashboard\_id Export produces…

---

## [Error in getting all the snapshots under a repository](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034)

<div class="topic-metadata">

**Author:** [@yabhishek](https://discuss.elastic.co/u/yabhishek)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/error-in-getting-all-the-snapshots-under-a-repository/266034 "2021-03-08T20:41:02Z")

</div>

Hi, I have registered a repository named repo123 to use one of my AWS buckets for storing snapshots. When I run GET \_snapshot/repo123 it returns the output as expected, containing repo name - {"repo123":{"type":"s3"…

---

## [Delay in Kibana logs even after the filebeat restart](https://discuss.elastic.co/t/delay-in-kibana-logs-even-after-the-filebeat-restart/266531)

<div class="topic-metadata">

**Author:** [@Akila11](https://discuss.elastic.co/u/Akila11)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:19pm UTC](https://discuss.elastic.co/t/delay-in-kibana-logs-even-after-the-filebeat-restart/266531 "2021-03-08T20:19:10Z")

</div>

Hi Team, We are getting old logs in kibana with previous date and it is not displaying logs with current date. We have restarted the filebeat also but still logs with old date we could see in kibana. Could you please …

---

## [How to write a script in Ingest Pipeline to detect the null values and pushed to separate index on failure (unformattedindex)](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517)

<div class="topic-metadata">

**Author:** [@sravankayitha](https://discuss.elastic.co/u/sravankayitha)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 8:09pm UTC](https://discuss.elastic.co/t/how-to-write-a-script-in-ingest-pipeline-to-detect-the-null-values-and-pushed-to-separate-index-on-failure-unformattedindex/266517 "2021-03-08T20:09:40Z")

</div>

How to detect the null values in Ingest Pipeline and Index it. Actual index name: myindex Unformatted index name: unformattedindex i have tried the below Script Processor to detect the null values to Actual index(inde…

---

## [Monitore mikrotik router logs with ELK](https://discuss.elastic.co/t/monitore-mikrotik-router-logs-with-elk/266026)

<div class="topic-metadata">

**Author:** [@NZHP](https://discuss.elastic.co/u/NZHP)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 7:48pm UTC](https://discuss.elastic.co/t/monitore-mikrotik-router-logs-with-elk/266026 "2021-03-08T19:48:37Z")

</div>

Hi everybody, I installed ELK on my infrastructure, now i want to monitor logs data of my routers and switch with elk stack. So how can process it please ? Thank advance

---

## [Logstash Metricbeat monitoring - empty instance kibana display](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599)

<div class="topic-metadata">

**Author:** [@Fran\_Raknic](https://discuss.elastic.co/u/Fran_Raknic)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 7:47pm UTC](https://discuss.elastic.co/t/logstash-metricbeat-monitoring-empty-instance-kibana-display/266599 "2021-03-08T19:47:32Z")

</div>

I am having problems monitoring Logstash instances with Metricbeat, to be more precise the problem is with Kibana instance Node tab. Metricbeat service is running with logstash-xpack.yml properly configured, I can curl l…

---

## [Uptime monitor status](https://discuss.elastic.co/t/uptime-monitor-status/266585)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 7:35pm UTC](https://discuss.elastic.co/t/uptime-monitor-status/266585 "2021-03-08T19:35:25Z")

</div>

Hi - we have hearbeat installed/configured in our environment. When we check on the uptime status, I do see the historic count of the services that were down listed in the dashboard but nothing shows up in the "Monitor s…

---

## [Logstash doesnt stop when config.reload.automatic is enabled](https://discuss.elastic.co/t/logstash-doesnt-stop-when-config-reload-automatic-is-enabled/266596)

<div class="topic-metadata">

**Author:** [@hayo](https://discuss.elastic.co/u/hayo)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 7:39pm UTC](https://discuss.elastic.co/t/logstash-doesnt-stop-when-config-reload-automatic-is-enabled/266596 "2021-03-08T19:39:44Z")

</div>

Hello, I am running a logstash pipeline with JDBC input triggered via crontab, to ensure also a process runs afterwards. Besides that i have also a logstash pipeline with JDBC input but with schedule as a service. I w…

---

## [Kibana drill down in space](https://discuss.elastic.co/t/kibana-drill-down-in-space/266543)

<div class="topic-metadata">

**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 7:36pm UTC](https://discuss.elastic.co/t/kibana-drill-down-in-space/266543 "2021-03-08T19:36:31Z")

</div>

I created a dashboard in kibana, inside that created one data table with drill down to redirect on Discover page, once I moved that dashboard to a space and gave all permission for Dashboard and Discover but drill down…

---

## [Deletion of indices action not enforced](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 7:32pm UTC](https://discuss.elastic.co/t/deletion-of-indices-action-not-enforced/266561 "2021-03-08T19:32:23Z")

</div>

Hi Team, I deployed EFK stack in my cluster with default settings except storage size and secrets settings. Everything is working so far. Now, I wanted to configure elasticsearch curator for managing indices in elasti…

---

## [A way to index Azure's Secure Scores](https://discuss.elastic.co/t/a-way-to-index-azures-secure-scores/263042)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 7:07pm UTC](https://discuss.elastic.co/t/a-way-to-index-azures-secure-scores/263042 "2021-03-08T19:07:39Z")

</div>

Hello, I was wondering if there is already a way to index Azure's Secure Score metrics into Elasticsearch. A bit like: Grtz Willem

---

## [Kibana Queries - depends on the order of the fields?](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538)

<div class="topic-metadata">

**Author:** [@Jan\_Kabelka](https://discuss.elastic.co/u/Jan_Kabelka)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-queries-depends-on-the-order-of-the-fields/266538 "2021-03-08T10:41:37Z")

</div>

Hi, I did not find answer on the Internet:( I would like to know - from cluster utilization perspective - if depends on order of fields in query. Specifically, lets say I have index and data below: "\_index": "firewall" …

---

## [Extract fields from kibana logs](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511)

<div class="topic-metadata">

**Author:** [@aagarwal3](https://discuss.elastic.co/u/aagarwal3)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 5:59pm UTC](https://discuss.elastic.co/t/extract-fields-from-kibana-logs/266511 "2021-03-08T17:59:10Z")

</div>

I have the Status Code in log field only on kibana logs which I want to extract. Is there any way in which we can parse the log field from Kibana itself? "2021-03-08 06:16:16.631 INFO ; Status\_Code=200; Response\_Body=…

---

## [OSS filebeat error "No such input type exist 'httpjson'"](https://discuss.elastic.co/t/oss-filebeat-error-no-such-input-type-exist-httpjson/266578)

<div class="topic-metadata">

**Author:** [@estebanes22](https://discuss.elastic.co/u/estebanes22)\
**Replies:** 3\
**Last updated:** [March 8, 2021, 4:46pm UTC](https://discuss.elastic.co/t/oss-filebeat-error-no-such-input-type-exist-httpjson/266578 "2021-03-08T16:46:55Z")

</div>

I switched from the elastic licensed filebeat to OSS version and am getting this new error when trying to use httpjson input: Not doing anything special here; was working fine with elastic licensed version.

---

## [Display Gauge/Goal with current percent of month](https://discuss.elastic.co/t/display-gauge-goal-with-current-percent-of-month/266584)

<div class="topic-metadata">

**Author:** [@paulwellnerbou](https://discuss.elastic.co/u/paulwellnerbou)\
**Replies:** 1\
**Last updated:** [March 8, 2021, 5:55pm UTC](https://discuss.elastic.co/t/display-gauge-goal-with-current-percent-of-month/266584 "2021-03-08T17:55:42Z")

</div>

I am trying to display data related to the current month (in Gauge/Goal visualization), and to compare the progress, I would like to add another Gauge/Goal displaying the progress of the current month (28, 30 or 31 days)…

---

## [Logstash access dynamic field with ruby filter](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489)

<div class="topic-metadata">

**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\
**Replies:** 8\
**Last updated:** [March 8, 2021, 5:45pm UTC](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489 "2021-03-08T17:45:19Z")

</div>

Hello I have nested field looks like this \[field1\]\[field2\]\[field3\] I want to remove field1 and field2 so the expected output will be \[field3\] I already manage to remove field1 with this ruby filter ruby { …

---

## [Geoip for using maps](https://discuss.elastic.co/t/geoip-for-using-maps/266592)

<div class="topic-metadata">

**Author:** [@David\_Mohamad](https://discuss.elastic.co/u/David_Mohamad)\
**Replies:** 0\
**Last updated:** [March 8, 2021, 5:40pm UTC](https://discuss.elastic.co/t/geoip-for-using-maps/266592 "2021-03-08T17:40:32Z")

</div>

Hi everyone, I'm trying to use geoip to show data on a map. The problem is that the wrong index is showing up. I tried adding a new index template with no luck. This is what I get when I check the json code: "src": { …

---

## [Panel dependency](https://discuss.elastic.co/t/panel-dependency/266039)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 5:22pm UTC](https://discuss.elastic.co/t/panel-dependency/266039 "2021-03-08T17:22:06Z")

</div>

Hi there! I'm new to Kibana, all my previous experience is with Splunk, and I wanted to ask you (the experts) if it is possible to set dependencies on panel. Say that you have a panel displaying a value and you only wan…

---

## [Wrong output](https://discuss.elastic.co/t/wrong-output/266446)

<div class="topic-metadata">

**Author:** [@David\_Mohamad](https://discuss.elastic.co/u/David_Mohamad)\
**Replies:** 2\
**Last updated:** [March 8, 2021, 5:02pm UTC](https://discuss.elastic.co/t/wrong-output/266446 "2021-03-08T17:02:41Z")

</div>

Hi everyone, I recently started using the elastic stack for the first time and I cant seem to find a way to get the desired output. I'm trying to use this data: admintool\[899\] browser=Mozilla%2F5.0 %28Windows NT 10.0…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1516)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1518)
