# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1612 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1613 --- ## [Amazon Linux 2 server monitoring](https://discuss.elastic.co/t/amazon-linux-2-server-monitoring/260568)
**Author:** [@Sergey\_Kuyanov](https://discuss.elastic.co/u/Sergey_Kuyanov)\ **Replies:** 5\ **Last updated:** [January 9, 2021, 11:08pm UTC](https://discuss.elastic.co/t/amazon-linux-2-server-monitoring/260568 "2021-01-09T23:08:59Z")
Hello. I am new in Kibana. The problem is that I installed an ELK stack on the Ubuntu 20.04 server. I have no problem getting any logs from all of my other servers regardless of the operating system they are using. Ho… --- ## [Moving elasticsearch storage directory](https://discuss.elastic.co/t/moving-elasticsearch-storage-directory/260611)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 2\ **Last updated:** [January 9, 2021, 5:45pm UTC](https://discuss.elastic.co/t/moving-elasticsearch-storage-directory/260611 "2021-01-09T17:45:15Z")
I've been using the elastic stack for last one year to capture research data (mainly using honeypots hosted on cloud service providers.) I'm using a three-node cluster to capture the data. 2 nodes are data nodes 1 nod… --- ## [How to sent syslog from mikrotik to ELK](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601)
**Author:** [@Zhamax](https://discuss.elastic.co/u/Zhamax)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 3:46pm UTC](https://discuss.elastic.co/t/how-to-sent-syslog-from-mikrotik-to-elk/260601 "2021-01-09T15:46:26Z")
Hi everyone i have some questions to ask. i want to sent syslog from mikrotik to Elastic But I'm confused about how to write code into Input, Filter and output ? Thank you in advance for your help --- ## [Logstash Database pipeline resiliency](https://discuss.elastic.co/t/logstash-database-pipeline-resiliency/260608)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 3:28pm UTC](https://discuss.elastic.co/t/logstash-database-pipeline-resiliency/260608 "2021-01-09T15:28:24Z")
Hello Team, I have a use case where Ineed to deploy database pipeline on 2 nodes, but i want to implement in a way that if one node(machine) goes down then only 2nd will pick up from that point and until the second goes… --- ## [Shards failure](https://discuss.elastic.co/t/shards-failure/258185)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 3:17pm UTC](https://discuss.elastic.co/t/shards-failure/258185 "2021-01-09T15:17:25Z")
Here is what I am seeing: How do I resolve this? --- ## [Using the iptables dashboard](https://discuss.elastic.co/t/using-the-iptables-dashboard/259908)
**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 3:15pm UTC](https://discuss.elastic.co/t/using-the-iptables-dashboard/259908 "2021-01-09T15:15:52Z")
I am running iptables on my server. I enable the module, configure the .yml file for the file /var/log/kern.log. I do a filebeat -E setup.kibana.host= setup --dashboards. I restart kibana on the server, and go to vie… --- ## [TSVB - Top N - Item URL: keep time interval when link to other dashboard](https://discuss.elastic.co/t/tsvb-top-n-item-url-keep-time-interval-when-link-to-other-dashboard/260598)
**Author:** [@anja1](https://discuss.elastic.co/u/anja1)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 12:46pm UTC](https://discuss.elastic.co/t/tsvb-top-n-item-url-keep-time-interval-when-link-to-other-dashboard/260598 "2021-01-09T12:46:50Z")
I´m using the "item url" in TSVB visualization to link to another dashboard. In the new dashboard the search is already filled with the value of "{{key}}" (thats ok). When link to another dashboard I also want to keep… --- ## [Filebeat output to elasticsearch (open kerberos), publisher\_pipeline\_output WWW-Authenticate Negotiate 401 No processing](https://discuss.elastic.co/t/filebeat-output-to-elasticsearch-open-kerberos-publisher-pipeline-output-www-authenticate-negotiate-401-no-processing/260539)
**Author:** [@jing](https://discuss.elastic.co/u/jing)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 8:21am UTC](https://discuss.elastic.co/t/filebeat-output-to-elasticsearch-open-kerberos-publisher-pipeline-output-www-authenticate-negotiate-401-no-processing/260539 "2021-01-09T08:21:16Z")
Connect to elasticsearch(open kerberos )，The authentication fails, when elasticsearch responds with 401(Negotiate), nothing happens,Normal logic should go to kdc to request processing Why doesn't filebeat request kerber… --- ## [5.6 \> 7.9 upgrade, auto\_generate\_phrase\_query alternatives?](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164)
**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\ **Replies:** 3\ **Last updated:** [January 9, 2021, 7:26am UTC](https://discuss.elastic.co/t/5-6-7-9-upgrade-auto-generate-phrase-query-alternatives/260164 "2021-01-09T07:26:16Z")
Hello, I'm upgrading my codebase's ElasticSearch from 5.6 to 7.x due to some features I'd like to explore. I'm currently using GoLang & "github.com/olivere/elastic/v5" specifically. However, auto\_generate\_phrase\_query… --- ## [Performance impacts of track\_scores on sorted queries](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578)
**Author:** [@AlanN](https://discuss.elastic.co/u/AlanN)\ **Replies:** 1\ **Last updated:** [January 9, 2021, 6:57am UTC](https://discuss.elastic.co/t/performance-impacts-of-track-scores-on-sorted-queries/260578 "2021-01-09T06:57:12Z")
Hi, I'm attempting to wrap my head around what the performance hit is on queries with and without the track\_scores flag flipped in the sort during queries in our ElasticSearch 6.8 cluster. Unfortunately it's pretty bus… --- ## [Issue on Letsencrypt SSL kibana](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 11:02pm UTC](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005 "2021-01-08T23:02:17Z")
Hi currently trying to install SSL letsencrypt on Wazuh, i got the certificates though DNS cloudflare, but i changed the part in kibana but it wont seem to start root@wazuh:~# cat /etc/kibana/kibana.yml server.host: 0.… --- ## [Inconsistent elasticsearch input vs output plugin settings](https://discuss.elastic.co/t/inconsistent-elasticsearch-input-vs-output-plugin-settings/260586)
**Author:** [@GuillaumeN](https://discuss.elastic.co/u/GuillaumeN)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 10:58pm UTC](https://discuss.elastic.co/t/inconsistent-elasticsearch-input-vs-output-plugin-settings/260586 "2021-01-08T22:58:49Z")
Hi, The Logstash Elasticsearch output supports the "ssl\_certificate\_verification" parameter whereas the input one doesn't. This makes it more difficult when consuming data from an Elasticsearch cluster using self-signe… --- ## [Embeding dashboards as iframes within a Kibana Application](https://discuss.elastic.co/t/embeding-dashboards-as-iframes-within-a-kibana-application/259608)
**Author:** [@WhiskeyTF](https://discuss.elastic.co/u/WhiskeyTF)\ **Replies:** 8\ **Last updated:** [January 8, 2021, 10:32pm UTC](https://discuss.elastic.co/t/embeding-dashboards-as-iframes-within-a-kibana-application/259608 "2021-01-08T22:32:12Z")
Hello, I am currently working to create a plugin that can be used as a kind of configurable works space for users where they can quickly store and view multiple dashboards together. when I add a Kibana dashboard to the p… --- ## [Plugin startup fails in V7.9.3](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-3/260583)
**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 10:18pm UTC](https://discuss.elastic.co/t/plugin-startup-fails-in-v7-9-3/260583 "2021-01-08T22:18:45Z")
My plugin is working in 7.6.0. I am now using Kibana 7.9.3 and the plugin fails yarn start with FATAL TypeError: xpackMainPlugin.registerFeature is not a function The plugin was created with the script 'node scripts/g… --- ## [Deleting individual indexes from a datastream](https://discuss.elastic.co/t/deleting-individual-indexes-from-a-datastream/259924)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 10:04pm UTC](https://discuss.elastic.co/t/deleting-individual-indexes-from-a-datastream/259924 "2021-01-08T22:04:39Z")
I have a datastream which I set up recently and as a check I set to rollover every day so I could see that it was woking as expected. That was just before Christmas and I saw it roll over once... I came back today and … --- ## [How to Look at Kibana Logs in Elastic Cloud?](https://discuss.elastic.co/t/how-to-look-at-kibana-logs-in-elastic-cloud/260564)
**Author:** [@Chris\_Carter1](https://discuss.elastic.co/u/Chris_Carter1)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 10:02pm UTC](https://discuss.elastic.co/t/how-to-look-at-kibana-logs-in-elastic-cloud/260564 "2021-01-08T22:02:53Z")
We are wanting to audit and see which dashboards are used most frequently, I know there is not a direct feature to view how often dashboards are used but If I could look at the Logs in Kibana I could parse the logs and g… --- ## [Help with installing logstash - no such file to load --logstash/build](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572)
**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 9:37pm UTC](https://discuss.elastic.co/t/help-with-installing-logstash-no-such-file-to-load-logstash-build/260572 "2021-01-08T21:37:32Z")
When in the logstash folder I have tried to install logstash with the command. logstash -f logstash.conf and get the error no such file to load --logstash/build. I have supplied a screenshot. If anyone could help that wo… --- ## [Logstash 7.9 not writing to output file](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260)
**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 8:25pm UTC](https://discuss.elastic.co/t/logstash-7-9-not-writing-to-output-file/260260 "2021-01-08T20:25:43Z")
I have logstash 7.9 running in centos hosts. I'm facing a strange behavior. Logstash is not writing to a file in the given path. I want to make sure logstash is working or not so I provided a path in output section but … --- ## [Having Issue Starting Winlogbeat As A Windows Service](https://discuss.elastic.co/t/having-issue-starting-winlogbeat-as-a-windows-service/260574)
**Author:** [@qcjacobo](https://discuss.elastic.co/u/qcjacobo)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 8:22pm UTC](https://discuss.elastic.co/t/having-issue-starting-winlogbeat-as-a-windows-service/260574 "2021-01-08T20:22:18Z")
I am having issues getting winlogbeat to start as a Windows service on my Windows 10 (1909) system. As you can see below, I am not getting any obvious errors when trying to install and start the Windows service. Just t… --- ## [Error when configure email account elasticseach.yml - Elastic Cloud](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560)
**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 7:49pm UTC](https://discuss.elastic.co/t/error-when-configure-email-account-elasticseach-yml-elastic-cloud/260560 "2021-01-08T19:49:50Z")
Hello guys, We have the problem when configuring SMTP more in ELastic Cloud SaaS Error when configure email account elasticseach.ymlfor sending alerts. When saving the configuration we get the following error: Your cha… --- ## [Create kibana visualization between 2 fields](https://discuss.elastic.co/t/create-kibana-visualization-between-2-fields/260509)
**Author:** [@vishnum](https://discuss.elastic.co/u/vishnum)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 7:03pm UTC](https://discuss.elastic.co/t/create-kibana-visualization-between-2-fields/260509 "2021-01-08T19:03:01Z")
Hi, I am new to elasticsearch and kibana. I am trying to visualize one field against another field in kibana. For example, X-axis contains the jenkins build number (field 1) and Y-axis contains number of tests ran on t… --- ## [Coordinating Node](https://discuss.elastic.co/t/coordinating-node/260570)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 3\ **Last updated:** [January 8, 2021, 6:44pm UTC](https://discuss.elastic.co/t/coordinating-node/260570 "2021-01-08T18:44:04Z")
Via the elasticsearch engineer 1 class regarding the Coordinating node it states: • Configure your client to round-robin between multiple nodes ‒ avoid having single points of failure/creating hotspots ‒ do NOT send r… --- ## [ILM stuck at check-allocation on transition to Cold Node](https://discuss.elastic.co/t/ilm-stuck-at-check-allocation-on-transition-to-cold-node/260490)
**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 6:06pm UTC](https://discuss.elastic.co/t/ilm-stuck-at-check-allocation-on-transition-to-cold-node/260490 "2021-01-08T18:06:44Z")
Hi folks, We are having an issue whereour index life cycle policy is not completing the check-allocation phase to the cold nodes. It doesn't seem to be causing any errors just waiting and never completing. Interestingly… --- ## [Functionbeat package command creates zip archive with credentials visible in plaintext](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569)
**Author:** [@ashort](https://discuss.elastic.co/u/ashort)\ **Replies:** 0\ **Last updated:** [January 8, 2021, 5:30pm UTC](https://discuss.elastic.co/t/functionbeat-package-command-creates-zip-archive-with-credentials-visible-in-plaintext/260569 "2021-01-08T17:30:50Z")
Hi, When I use the Functionbeat manager to package up Functionbeat and the Yaml file into a zip archive for use with AWS Lambda the zip archive is generated with the password for the Elasticsearch user in plaintext in t… --- ## [Fatal Error in Starting Kibana for Adding New Plugin](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549)
**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 5:13pm UTC](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549 "2021-01-08T17:13:39Z")
I created a plugin with plugin generator script in scripts/ folder (I used script in 7.10.1 with git checkout v7.10.1) and then i just copied it in kibana/plugins folder to check if it works on my kibana which it is vers… --- ## [How to use the last data in the Visualize?](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404)
**Author:** [@111395](https://discuss.elastic.co/u/111395)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404 "2021-01-08T16:29:17Z")
Kibana is usually obtained according to the time period。 But, I need the last data visualization。 You can understand it as looking for data by the number of times，such as last 1, last 5 kibana version:7.4.2 Thanks --- ## [Rabbitmq output plugin : dynamic values on headers not working](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475)
**Author:** [@MarineW29](https://discuss.elastic.co/u/MarineW29)\ **Replies:** 5\ **Last updated:** [January 8, 2021, 4:25pm UTC](https://discuss.elastic.co/t/rabbitmq-output-plugin-dynamic-values-on-headers-not-working/260475 "2021-01-08T16:25:16Z")
Hello, I have a pipeline with elasticsearch input and rabbitmq output. I would like to set dynamic values to headers in properties of the message published in RabbitMQ, but the field are not replaces with their values. … --- ## [Needed to offset the timeseries for Metricbeat dashboard visualizartions to work](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 3:54pm UTC](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541 "2021-01-08T15:54:14Z")
Hi I just need some help to try to understand why exactly my workaround worked/as necessary. We've setup some metricbeats agents and Inoticed that every visualization of the TSVB type was not working: gauges, tables, .… --- ## [Kibana Report limit lines in PDF](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387)
**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\ **Replies:** 2\ **Last updated:** [January 8, 2021, 3:31pm UTC](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387 "2021-01-08T15:31:28Z")
Hello guys! I have the following problem: I created a data table grouping by IP and the total number of lines exceeds 10K When generating the report in PDF it creates only with 1 page limiting in 50 lines. Is there a… --- ## [Question on Elastic Search Filtering](https://discuss.elastic.co/t/question-on-elastic-search-filtering/260504)
**Author:** [@Sampson\_Light](https://discuss.elastic.co/u/Sampson_Light)\ **Replies:** 1\ **Last updated:** [January 8, 2021, 3:17pm UTC](https://discuss.elastic.co/t/question-on-elastic-search-filtering/260504 "2021-01-08T15:17:04Z")
Hi, I have duplicates in my system but i intend to do some form of filtering on the logstash side to prevent any future duplicates from occurring (due to server restart incorrectly). For reference, my current duplicate… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1611) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1613)