# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1525 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1526 --- ## [Filebeat /usr/local/bin/docker-entrypoint line 8: exec: filebeat: not found](https://discuss.elastic.co/t/filebeat-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/265927)
**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\ **Replies:** 7\ **Last updated:** [March 3, 2021, 6:59pm UTC](https://discuss.elastic.co/t/filebeat-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/265927 "2021-03-03T18:59:41Z")
Hi There, I faced typical problem with filebeat. No matter which user (filebeat or root) I'm trying to launch filebeat 7.9.2 i'm getting: filebeat | /usr/local/bin/docker-entrypoint: line 8: exec: filebeat: not foun… --- ## [Recommendation for specific analyser settings](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150)
**Author:** [@Veran](https://discuss.elastic.co/u/Veran)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 6:24pm UTC](https://discuss.elastic.co/t/recommendation-for-specific-analyser-settings/266150 "2021-03-03T18:24:11Z")
Hello, I have been using Elasticsearch to create a search system based on data from RDBMS. I have documents with only 8 fields, where each field contains text data. This data represents best practice recommendations from… --- ## [ElasticSerch returns an error if the query contains strings with brackets and other characters](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611)
**Author:** [@mor\_mor](https://discuss.elastic.co/u/mor_mor)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611 "2021-03-03T17:39:47Z")
Description: The application has the ability to filter the date by key values. For example, if you need to display all items in which "Result: success"; For one of the keys, the value is always in the form of a JS objec… --- ## [Merge multiple fields in document into json array](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:09pm UTC](https://discuss.elastic.co/t/merge-multiple-fields-in-document-into-json-array/266036 "2021-03-03T17:09:56Z")
Hi, I have following document Ingesting into Elasticsearch using the logstash \_source": { "server\_name": "abc", "server\_ip": "0.0.0.0", "server\_location: "us" "type" : "… --- ## [For large texts, indexing with offsets or term vectors is recommended](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115)
**Author:** [@cas4](https://discuss.elastic.co/u/cas4)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 4:47pm UTC](https://discuss.elastic.co/t/for-large-texts-indexing-with-offsets-or-term-vectors-is-recommended/266115 "2021-03-03T16:47:01Z")
I have an index that contains the text of files. Most files aren't that large, but some do have more than 1,000,000 characters. I'm using the default unified highlighter when displaying results to the end users. When a s… --- ## [I see timeout excpetion in logstash](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 4:20pm UTC](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140 "2021-03-03T16:20:59Z")
Below is the error message in logstash-plain.log \[2021-03-03T16:00:46,719\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]\[main\]\[ed5928ede48a4919694eb040ed1411b2d0e6482d5881ff856cc046fe3412681f\] An exceptionCaught() eve… --- ## [Upgrade Assistant: Internal Server Error](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955)
**Author:** [@adsr](https://discuss.elastic.co/u/adsr)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 4:03pm UTC](https://discuss.elastic.co/t/upgrade-assistant-internal-server-error/265955 "2021-03-03T16:03:25Z")
Hello everyone, after upgrading to 7.11.1 (coming from 7.5.0) I notice that the "Upgrade Assistant" reports an Internal Server Error: I tried starting kibana with logging.verbose: true but can't seem to see any "usef… --- ## [Disable auto refresh](https://discuss.elastic.co/t/disable-auto-refresh/264653)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 3:24pm UTC](https://discuss.elastic.co/t/disable-auto-refresh/264653 "2021-03-03T15:24:51Z")
Hello, i was trying to disable auto refresh in Kibana. I would like to completely disable it. But timepicker:refreshInterval "pause": true is not working no matter what i do. It always goes back to enable and 10sec. Ki… --- ## [Running the script in elasticsearch docker-compose](https://discuss.elastic.co/t/running-the-script-in-elasticsearch-docker-compose/265832)
**Author:** [@Bubunia\_Patra](https://discuss.elastic.co/u/Bubunia_Patra)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:37pm UTC](https://discuss.elastic.co/t/running-the-script-in-elasticsearch-docker-compose/265832 "2021-03-03T14:37:49Z")
Hi all, I am facing a issue after running the script from the docker-compose to install s3 plugin and restart the elastic search. Its failing with an error as mentioned below. Can anyone help how can we successfully ru… --- ## [Delete a inherited field mapping with another template](https://discuss.elastic.co/t/delete-a-inherited-field-mapping-with-another-template/266127)
**Author:** [@frank\_esg](https://discuss.elastic.co/u/frank_esg)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 2:31pm UTC](https://discuss.elastic.co/t/delete-a-inherited-field-mapping-with-another-template/266127 "2021-03-03T14:31:26Z")
Hi Folks, is it possible to delete a field mapping parameter ("ignore\_above") which is defined in a default template with a "special" template (with higher order) ? Background: i am using legacy templates at the momen… --- ## [Kibana Ports reported as vulnerability for TLS v 1.0 and 1.1](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-ports-reported-as-vulnerability-for-tls-v-1-0-and-1-1/266111 "2021-03-03T14:30:31Z")
Hi All We are using Kibana Version 6.6.2. Recently our security scans for vulnerable ports reported Kibana port (5061) for using TLS 1.0 and TLS 1.1. I could not find any documentation on the blogs on how to disable ol… --- ## [Error if FunctionBeat´s lambda name is changed](https://discuss.elastic.co/t/error-if-functionbeat-s-lambda-name-is-changed/265996)
**Author:** [@jpm](https://discuss.elastic.co/u/jpm)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 1:39pm UTC](https://discuss.elastic.co/t/error-if-functionbeat-s-lambda-name-is-changed/265996 "2021-03-03T13:39:35Z")
I'm trying to deploy Functionbeat lambda in AWS with a custom name. If I deploy it with the default name, cloudwatch, it works successfully but if I change the default name to any other name, once deployed it doesn't wor… --- ## [Create time series with fields date as long mapping](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 17\ **Last updated:** [March 3, 2021, 1:05pm UTC](https://discuss.elastic.co/t/create-time-series-with-fields-date-as-long-mapping/262833 "2021-03-03T13:05:46Z")
Hi all, sorry for my poor english I have a index with a eventTime field mapped as long, So when I create a time series no date field is found by kibana. Is there a way (with a pre script???) to say to kibana "consider… --- ## [How to config Logstash receive and pars logs from port and file path at the same time](https://discuss.elastic.co/t/how-to-config-logstash-receive-and-pars-logs-from-port-and-file-path-at-the-same-time/266112)
**Author:** [@asan](https://discuss.elastic.co/u/asan)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 1:00pm UTC](https://discuss.elastic.co/t/how-to-config-logstash-receive-and-pars-logs-from-port-and-file-path-at-the-same-time/266112 "2021-03-03T13:00:47Z")
Hi I've been configured my Logstash input to read logs for two of my network devices from "/var/log" path file and it was working correctly but when i installed netflow plugin on logstash it started not reading the pat… --- ## [How to visualise the comparison of two bar plots in a single plot?](https://discuss.elastic.co/t/how-to-visualise-the-comparison-of-two-bar-plots-in-a-single-plot/265789)
**Author:** [@choobani](https://discuss.elastic.co/u/choobani)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 12:06pm UTC](https://discuss.elastic.co/t/how-to-visualise-the-comparison-of-two-bar-plots-in-a-single-plot/265789 "2021-03-03T12:06:00Z")
I have two different datasets from two different timeframes, I want to compute the difference between them and visualize it like the following plot. Is it possible to do so in Kibana? As you see it's not a time series … --- ## [Forecast still works on a machine that is not being monitored anymore](https://discuss.elastic.co/t/forecast-still-works-on-a-machine-that-is-not-being-monitored-anymore/266004)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 12:04pm UTC](https://discuss.elastic.co/t/forecast-still-works-on-a-machine-that-is-not-being-monitored-anymore/266004 "2021-03-03T12:04:33Z")
I have a machine that is not being monitored anymore, since 15 january. but I can still do a forecast, is there a way to handle this? other than to do a delete by query on the ML index? --- ## [Tag logs files from different directories](https://discuss.elastic.co/t/tag-logs-files-from-different-directories/266066)
**Author:** [@Warren\_Hansen](https://discuss.elastic.co/u/Warren_Hansen)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 11:59am UTC](https://discuss.elastic.co/t/tag-logs-files-from-different-directories/266066 "2021-03-03T11:59:58Z")
Hi, I have the same kind of log file that uses the same grok patterns to match, however they are in different folders and I want to tag them accordingly. How would I go about it? Would something like this work: fi… --- ## [Kibana in Docker does not show snapshot result](https://discuss.elastic.co/t/kibana-in-docker-does-not-show-snapshot-result/265814)
**Author:** [@thesn](https://discuss.elastic.co/u/thesn)\ **Replies:** 0\ **Last updated:** [March 1, 2021, 2:22pm UTC](https://discuss.elastic.co/t/kibana-in-docker-does-not-show-snapshot-result/265814 "2021-03-01T14:22:01Z")
Hi, I have Elasticsearch 7.11.1 and Kibana 7.11.1 installed using docker with volume bindings below. elastic7111: image: docker.elastic.co/elasticsearch/elasticsearch:7.11.1 container\_name: elastic7111 … --- ## [Embed Discover app into Kibana app plugin](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411)
**Author:** [@Thomas\_Vaudry-Read](https://discuss.elastic.co/u/Thomas_Vaudry-Read)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 11:30am UTC](https://discuss.elastic.co/t/embed-discover-app-into-kibana-app-plugin/265411 "2021-03-03T11:30:21Z")
I am developing a Kibana application plugin, and would like to embed the discover app into one of the pages. There does not seem to be much documentation on how to use the embeddables, and if that would even work for a s… --- ## [Filebeat json.message\_key tries to parse string as json](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943)
**Author:** [@YG\_BE](https://discuss.elastic.co/u/YG_BE)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 11:10am UTC](https://discuss.elastic.co/t/filebeat-json-message-key-tries-to-parse-string-as-json/265943 "2021-03-03T11:10:48Z")
Hello, When trying to send logs from my kubernetes cluster on AKS running Filebeat 7.5, I'm running into the following error messages: Error decoding JSON: invalid character 'N' looking for beginning of value E… --- ## [Adding a new numeric field based on addition of different fields from same index (using scripting fields)](https://discuss.elastic.co/t/adding-a-new-numeric-field-based-on-addition-of-different-fields-from-same-index-using-scripting-fields/265862)
**Author:** [@prasad-jagtap](https://discuss.elastic.co/u/prasad-jagtap)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 11:13am UTC](https://discuss.elastic.co/t/adding-a-new-numeric-field-based-on-addition-of-different-fields-from-same-index-using-scripting-fields/265862 "2021-03-03T11:13:50Z")
I'm trying to create a new column in my existing index with a number type based on doc\[''\].value addition of total 4 columns, however, I'm not able to create a number based addition and create that new column using scrip… --- ## [Kibana search filter showing parser errors on date filter. Error:failed to create query: failed to parse date field \[2021-02-04T00:00:00.000Z\] with format \[yyyyMMdd\]: \[failed to parse date field \[2021-02-04T00:00:00.000Z\] with format \[yyyyMMdd\]\]](https://discuss.elastic.co/t/kibana-search-filter-showing-parser-errors-on-date-filter-error-failed-to-create-query-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd/265868)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 11:04am UTC](https://discuss.elastic.co/t/kibana-search-filter-showing-parser-errors-on-date-filter-error-failed-to-create-query-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd-failed-to-parse-date-field-2021-02-04t0000-000z-with-format-yyyymmdd/265868 "2021-03-03T11:04:53Z")
I have set up my Index template in elastic and the transaction\_date column is carrying the format as 'yyyyMMDD' but when I try to add the filter on that filter by click on the plus icon next to the column name it throws … --- ## [KIBANA : xpack.security.audit issue](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 15\ **Last updated:** [March 3, 2021, 10:41am UTC](https://discuss.elastic.co/t/kibana-xpack-security-audit-issue/265347 "2021-03-03T10:41:59Z")
hello, I'm trying to make audit for kibana like this doc : https://www.elastic.co/guide/en/kibana/7.11/security-settings-kb.html#audit-logging-settings Here's my kib.yml : --------------------------------- Audit ----… --- ## [Filebeat HAProxy fields mapping not clear, what is the total active time for the HTTP request?](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088)
**Author:** [@bluepuma77](https://discuss.elastic.co/u/bluepuma77)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:34am UTC](https://discuss.elastic.co/t/filebeat-haproxy-fields-mapping-not-clear-what-is-the-total-active-time-for-the-http-request/266088 "2021-03-03T10:34:56Z")
I am currently looking into the haproxy log files to find out how long requests take. Elastic Filebeat has a detailed page about HAProxy fields. haproxy.total\_waiting\_time\_ms Total time in milliseconds spent waiting i… --- ## ["Authentication using apikey failed - invalid ApiKey value"](https://discuss.elastic.co/t/authentication-using-apikey-failed-invalid-apikey-value/266083)
**Author:** [@freddux](https://discuss.elastic.co/u/freddux)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 10:14am UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed-invalid-apikey-value/266083 "2021-03-03T10:14:51Z")
Hi guys! New user here, I'm currently finding a tonne of this in my elasticsearch\_server.json log, and I can't find out where it is: {"type": "server", "timestamp": "2021-03-03T11:10:08,518+01:00", "level": "WARN", "co… --- ## [Douments structure](https://discuss.elastic.co/t/douments-structure/265938)
**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\ **Replies:** 3\ **Last updated:** [March 3, 2021, 9:48am UTC](https://discuss.elastic.co/t/douments-structure/265938 "2021-03-03T09:48:22Z")
Hi there, we're planning to ingest large xml payloads in our ES cluster and we'll have to do full text query on it. This payload can be split in more documents if nedeed but we wonder if a full text query is more perf… --- ## [Run Kibana as a Windows service without using nssm tool](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808)
**Author:** [@ARoy](https://discuss.elastic.co/u/ARoy)\ **Replies:** 5\ **Last updated:** [March 3, 2021, 9:35am UTC](https://discuss.elastic.co/t/run-kibana-as-a-windows-service-without-using-nssm-tool/265808 "2021-03-03T09:35:01Z")
Hi, I am using Kibana v 7.10.1, and need to run Kibana without using nssm tool. I tried to install using power shell script as follows : sc.exe create "ElasticSearch Kibana 4.0.1" binPath= "binpath" depend= "elasticsea… --- ## [Column with all field](https://discuss.elastic.co/t/column-with-all-field/265783)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 9:22am UTC](https://discuss.elastic.co/t/column-with-all-field/265783 "2021-03-03T09:22:59Z")
It is possible to get a table with one column in kibana contained all the field name like the follow pictures show. how can i do it in kibana. thank for help --- ## [Logstash-\* in Alert/Action section](https://discuss.elastic.co/t/logstash-in-alert-action-section/266070)
**Author:** [@MABN](https://discuss.elastic.co/u/MABN)\ **Replies:** 1\ **Last updated:** [March 3, 2021, 8:37am UTC](https://discuss.elastic.co/t/logstash-in-alert-action-section/266070 "2021-03-03T08:37:37Z")
Hi I used rsyslog to send log to ELK, like this guide https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04 Then I used grok to pars log's messages in logstash.conf … --- ## [KIBANA : can't install 7.11.1](https://discuss.elastic.co/t/kibana-cant-install-7-11-1/265578)
**Author:** [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 7:46am UTC](https://discuss.elastic.co/t/kibana-cant-install-7-11-1/265578 "2021-03-03T07:46:17Z")
Hello, I 'm trying to install kibana latest 7.11.1 from sources and i get those errors : tar: kibana-7.11.1-linux-x86\_64/x-pack/plugins/xpack\_legacy/common/index.js: Cannot open: Operation not permitted kibana-7.11.1… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1524) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1526)