# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1534 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1535 --- ## [Does not match the certificate subject provided by the peer](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/does-not-match-the-certificate-subject-provided-by-the-peer/265484 "2021-02-25T22:57:35Z")
Host name 'localhost' does not match the certificate subject provided by the peer (CN=elasticsearch) How can I deal with it? Can I just verify certificate? I don't want hardcode any IP etc. In /etc/logstash/logstash.ym… --- ## [Filtering for certain Hostname in Lens](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478)
**Author:** [@quixter](https://discuss.elastic.co/u/quixter)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 10:57pm UTC](https://discuss.elastic.co/t/filtering-for-certain-hostname-in-lens/265478 "2021-02-25T22:57:10Z")
Been trying to figure out something that I thought would be simple but yet I can't seem to get it to work. I'm working on a lens with y axis is cpu percentage and x axis is host.name. I need it to only return a group of… --- ## [Aggregate sum wrong with huge datasets](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549)
**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 10:05pm UTC](https://discuss.elastic.co/t/aggregate-sum-wrong-with-huge-datasets/265549 "2021-02-25T22:05:20Z")
Hi all and sorry for my poor english. Hi have data like that: { "\_index": "statistic", "\_type": "\_doc", "\_id": "df5d295f-99bf-49b3-b640-a9000461de3a", "\_score": 1.0, "\_source":{ "\_class": "com.x.dsp.elasticssearc… --- ## [HTTP input plugin customize response-header](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547)
**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:54pm UTC](https://discuss.elastic.co/t/http-input-plugin-customize-response-header/265547 "2021-02-25T21:54:02Z")
Hello! I'm working with logstash and the http input plugin. I've a datasource that send a data stream to logstash and require as response header content-type =\> application/json. I'm using the following configuration, bu… --- ## [Logstash on EKS and AWS elastic - 401 auth errors](https://discuss.elastic.co/t/logstash-on-eks-and-aws-elastic-401-auth-errors/265507)
**Author:** [@kyleh31](https://discuss.elastic.co/u/kyleh31)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 9:29pm UTC](https://discuss.elastic.co/t/logstash-on-eks-and-aws-elastic-401-auth-errors/265507 "2021-02-25T21:29:35Z")
Hi we are getting 401 auth errors as of mid January. We have reached out to AWS support team and they were unable to help. We have had logstash running in production environment for ~6 months, but when we went to update … --- ## [ECS Tooling to HttpTriggered Azure Function](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544)
**Author:** [@mxu](https://discuss.elastic.co/u/mxu)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 9:13pm UTC](https://discuss.elastic.co/t/ecs-tooling-to-httptriggered-azure-function/265544 "2021-02-25T21:13:44Z")
Hi, we have been using ECS Tooling to generate index templates with custom schemas. We plan to have that as HttpTriggered Azure Function which takes in custom schema in the request and generates template dynamically. … --- ## [Pre-filtering for \_termvectors API to get statistics on a subset of documents](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540)
**Author:** [@bbaronas](https://discuss.elastic.co/u/bbaronas)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 8:42pm UTC](https://discuss.elastic.co/t/pre-filtering-for-termvectors-api-to-get-statistics-on-a-subset-of-documents/265540 "2021-02-25T20:42:33Z")
Is there a way to pre-filter documents for the \_termvector API to get statistics limited to a subset of the documents in an index? I would like to use the term vector API to look at tf/idf, etc. for items in my index, b… --- ## [Search for \* in data](https://discuss.elastic.co/t/search-for-in-data/265413)
**Author:** [@jfromm](https://discuss.elastic.co/u/jfromm)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 8:43pm UTC](https://discuss.elastic.co/t/search-for-in-data/265413 "2021-02-25T20:43:20Z")
I have an application where in dictated results, the string "\*\*\*" is put in to indicate that a dictated word can not be understood. I have a text field containing the output of the dictation, and when I look at the stri… --- ## [Can I upgrade my kibana node thats running 7.6.1 to 7.11 without upgrading my elasticsearch and logstash nodes which are running 7.6.1?](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 8:24pm UTC](https://discuss.elastic.co/t/can-i-upgrade-my-kibana-node-thats-running-7-6-1-to-7-11-without-upgrading-my-elasticsearch-and-logstash-nodes-which-are-running-7-6-1/265538 "2021-02-25T20:24:34Z")
I have a 5 node ELK cluster. I have kibana 7.6.1 running on a single node. Elasticsearch 7.6.1 on 3 other nodes. Logstash 7.6.1 on the last node. Can I upgrade kibana without upgrading elasticsearch and logstash to 7.11… --- ## [For the same data with date format search works in Elasticsearch 6.x.But, it do not work on 7.x](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536)
**Author:** [@Bharath\_Italapur](https://discuss.elastic.co/u/Bharath_Italapur)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 8:12pm UTC](https://discuss.elastic.co/t/for-the-same-data-with-date-format-search-works-in-elasticsearch-6-x-but-it-do-not-work-on-7-x/265536 "2021-02-25T20:12:53Z")
Hi, The search with timestamp is not working for the 12-hour date format on 7.X . Please help me understand or fix the issue posted below. Thank you for the help. ------- This is the date format we are using. PUT test … --- ## [Where did the field refresh icon go in 7.11?](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532)
**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 8:15pm UTC](https://discuss.elastic.co/t/where-did-the-field-refresh-icon-go-in-7-11/265532 "2021-02-25T20:15:02Z")
In 7.11 I don't see a button to refresh the fields in my index pattern any more. It used to be up there in the top-right with the delete icon, but no longer. Has it been removed by design, and if so, how do I refresh… --- ## [Save Objects API often results in 503 Timeout](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123)
**Author:** [@gdoctor](https://discuss.elastic.co/u/gdoctor)\ **Replies:** 8\ **Last updated:** [February 25, 2021, 7:33pm UTC](https://discuss.elastic.co/t/save-objects-api-often-results-in-503-timeout/265123 "2021-02-25T19:33:02Z")
Elasticsearch version: 7.10.0 Kibana version: 7.10.0 All POST API calls to the endpoint https://kibana-our-host.cisco.com/api/saved\_objects/query/Example%20Query result in the following 503 Error, no matter the conten… --- ## [Filebeat dynamic indices name](https://discuss.elastic.co/t/filebeat-dynamic-indices-name/265363)
**Author:** [@Alex\_Doe](https://discuss.elastic.co/u/Alex_Doe)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 7:30pm UTC](https://discuss.elastic.co/t/filebeat-dynamic-indices-name/265363 "2021-02-25T19:30:08Z")
Good day. I would like to configure dynamic naming for indices. My filebeat instance is writing data to logastash which is writing to elasticsearch. My configuration is looking like that: output.logstash: hosts: - el… --- ## [Using variable in timefilter](https://discuss.elastic.co/t/using-variable-in-timefilter/265528)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:24pm UTC](https://discuss.elastic.co/t/using-variable-in-timefilter/265528 "2021-02-25T19:24:22Z")
I am attempting to use a variable defined in the workpad in the timefilter but I can't seem to figure it out. timefilter column="dates.createDate" from="now-{var \\"query\_timeframe\\"}h" to="now" Use of the variable does … --- ## [Logstash warning](https://discuss.elastic.co/t/logstash-warning/265416)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 7:12pm UTC](https://discuss.elastic.co/t/logstash-warning/265416 "2021-02-25T19:12:47Z")
I am have metricbeat running on few systems. and getting this error message on and off. can't put my fingure on about which event is generating this error. is there a way to find out? Basically metricbeat is running f… --- ## [Conundrum with repositories](https://discuss.elastic.co/t/conundrum-with-repositories/265247)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 6:08pm UTC](https://discuss.elastic.co/t/conundrum-with-repositories/265247 "2021-02-25T18:08:15Z")
when I query my repositories using the API I get a list of the repositories as expected: http://localhost:9200/\_snapshot/\*?pretty { "version6" : { "type" : "fs", "settings" : { "location" : "/data/elast… --- ## [Parse Json Logs using logstash](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517)
**Author:** [@Yashkumar\_Dabhi](https://discuss.elastic.co/u/Yashkumar_Dabhi)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 5:36pm UTC](https://discuss.elastic.co/t/parse-json-logs-using-logstash/265517 "2021-02-25T17:36:03Z")
Hi, I'm trying to parse logs in logstash, My logs are in Json, {"timestamp":"2021-02-25T15:20:38.490Z","logLevel":"INFO","serviceName":"xxx","transactionId":"0000-0000-000","elapsedTime":820,"endTime":"","url":"","statu… --- ## [How to setup elasticsearch warm node](https://discuss.elastic.co/t/how-to-setup-elasticsearch-warm-node/264805)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 5:30pm UTC](https://discuss.elastic.co/t/how-to-setup-elasticsearch-warm-node/264805 "2021-02-25T17:30:37Z")
I have 8 node elasticsearch cluster (3 Master+3Hot data node+2Warm data node).At beginning all the indices like metricbeat and system indices were on hot node and warm node after sometime i ran the following query. PUT… --- ## [ILM policy trigerring late](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436)
**Author:** [@maheshe](https://discuss.elastic.co/u/maheshe)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 5:27pm UTC](https://discuss.elastic.co/t/ilm-policy-trigerring-late/265436 "2021-02-25T17:27:19Z")
Hi : I am trying to dev test the ILM template by specifying the below... The rollover happens after a few minutes and after it reaches like 750KB instead of 10 KB as mentioned in ILM. Why is it not rolling over as soon… --- ## [Visualization shard errors](https://discuss.elastic.co/t/visualization-shard-errors/265258)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 4\ **Last updated:** [February 25, 2021, 4:46pm UTC](https://discuss.elastic.co/t/visualization-shard-errors/265258 "2021-02-25T16:46:28Z")
We originally had "Shard errors: X of Y shards failed- your data may not be complete" We corrected our scripted field and now when we search data from the Discovery tab those errors are no longer present. (we had to te… --- ## [Sequentially execute filter plugins on listed file inputs](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496)
**Author:** [@pratz](https://discuss.elastic.co/u/pratz)\ **Replies:** 1\ **Last updated:** [February 25, 2021, 4:22pm UTC](https://discuss.elastic.co/t/sequentially-execute-filter-plugins-on-listed-file-inputs/265496 "2021-02-25T16:22:48Z")
I have two files that I input in logstash using the file plugin Is there a way that the first file is parsed first? input { file { path =\> "abc.txt" type =\> "first" } file { path =\> … --- ## [Legend Color](https://discuss.elastic.co/t/legend-color/265308)
**Author:** [@NourBM](https://discuss.elastic.co/u/NourBM)\ **Replies:** 6\ **Last updated:** [February 25, 2021, 4:20pm UTC](https://discuss.elastic.co/t/legend-color/265308 "2021-02-25T16:20:19Z")
Hello, I'm new with Kibana and Vega I want to customize the legend color in kibana: i need to make the color Green for the "Up" and Red for the "Down" Is this possible? --- ## [Beats modules grok](https://discuss.elastic.co/t/beats-modules-grok/265508)
**Author:** [@Romano](https://discuss.elastic.co/u/Romano)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:57pm UTC](https://discuss.elastic.co/t/beats-modules-grok/265508 "2021-02-25T15:57:40Z")
Hi. In my environment I have various hardware firewalls such as Cisco, and other vendors. And I also have Linux servers, so I log events from Apache, OS and auditd. I log all events to central syslog server, from there I… --- ## [Geo shape query radius problem](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323)
**Author:** [@Fatih\_Kurnaz](https://discuss.elastic.co/u/Fatih_Kurnaz)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 3:36pm UTC](https://discuss.elastic.co/t/geo-shape-query-radius-problem/265323 "2021-02-25T15:36:33Z")
Hi everyone; Here my mapping; \ PUT /circle-example { "mappings": { "properties": { "location": { "type": "geo\_shape", "strategy": "recursive" } } } } \ Here example docum… --- ## [Avoid override of log4j2.properties during upgrade](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505)
**Author:** [@ALIT](https://discuss.elastic.co/u/ALIT)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:20pm UTC](https://discuss.elastic.co/t/avoid-override-of-log4j2-properties-during-upgrade/265505 "2021-02-25T15:20:45Z")
Hi, we want to edit our log4j2.properties to change the rotation of deprecation logs. But with upgrading ES (Ubuntu - APT) we need to merge the file with a new one (if there are any changes in the new version). Its eve… --- ## [ES 1.7.3 Elasticsearch java client significant terms aggregation unknown values](https://discuss.elastic.co/t/es-1-7-3-elasticsearch-java-client-significant-terms-aggregation-unknown-values/265504)
**Author:** [@IvannKurchenko](https://discuss.elastic.co/u/IvannKurchenko)\ **Replies:** 0\ **Last updated:** [February 25, 2021, 3:14pm UTC](https://discuss.elastic.co/t/es-1-7-3-elasticsearch-java-client-significant-terms-aggregation-unknown-values/265504 "2021-02-25T15:14:14Z")
Hello, Elasticsearch Community! Out team currently on way of migration legacy project from Elasticsearch v1.7.3 to v7.8.0. It's in most part written in Scala, so along with this we would like to replace Java client : or… --- ## [Elasticsearch keystore distinguished name](https://discuss.elastic.co/t/elasticsearch-keystore-distinguished-name/265372)
**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\ **Replies:** 2\ **Last updated:** [February 24, 2021, 10:22pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-distinguished-name/265372 "2021-02-24T22:22:38Z")
Hi elastic engineers, Is there a way to create/generate/rename and use distinguished elasticsearch keystore file name instead of default name elasticsearch.keystore ? I'm running multiple elasticsearch clusters (v.7.9/… --- ## [Vertical line in vertical bar chart, possible?](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 5\ **Last updated:** [February 25, 2021, 2:52pm UTC](https://discuss.elastic.co/t/vertical-line-in-vertical-bar-chart-possible/265232 "2021-02-25T14:52:38Z")
Hi, I created a vertical histogram bar chart. My Y-axis is count. X axis is histogram range of the field I am interested in. Is it possible to add vertical fixed value lines to this vertical bar chart? Or add a vertical … --- ## [Developer mode fail](https://discuss.elastic.co/t/developer-mode-fail/265482)
**Author:** [@Matias\_Gerstner](https://discuss.elastic.co/u/Matias_Gerstner)\ **Replies:** 3\ **Last updated:** [February 25, 2021, 2:33pm UTC](https://discuss.elastic.co/t/developer-mode-fail/265482 "2021-02-25T14:33:39Z")
Hello good morning, I am having problems starting kibana in developer mode, it uses 100% of the cpu and gpu, my computer freezes, the idea is to make a plugin, but I cannot start the system, do you have any idea that it … --- ## [Metricbeat zookeeper module connecting to zookeeper using ssl connection](https://discuss.elastic.co/t/metricbeat-zookeeper-module-connecting-to-zookeeper-using-ssl-connection/262973)
**Author:** [@atamarnath](https://discuss.elastic.co/u/atamarnath)\ **Replies:** 2\ **Last updated:** [February 25, 2021, 2:24pm UTC](https://discuss.elastic.co/t/metricbeat-zookeeper-module-connecting-to-zookeeper-using-ssl-connection/262973 "2021-02-25T14:24:21Z")
Hi, I am trying to connect to metricbeat zookeeper module to zookeeper through ssl connection. Though I am able to connect in non ssl mode I am unable to connect through ssl. I get the below errors srvr command failed… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1533) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1535)