# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1626 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1627 --- ## [Simple Observability of Metrics from Apache Spark](https://discuss.elastic.co/t/simple-observability-of-metrics-from-apache-spark/259760)
**Author:** [@bplies](https://discuss.elastic.co/u/bplies)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 9:31pm UTC](https://discuss.elastic.co/t/simple-observability-of-metrics-from-apache-spark/259760 "2020-12-28T21:31:48Z")
We're trying to collect basic metrics from Apache Spark. We realize there are Hadoop Metrics provided by ES-Hadoop but it seems just so heavy-handed for what we want. We are not trying to tie in full featured interacti… --- ## [Getting the error when using EuiDataGrid inside Kibana plugin](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613)
**Author:** [@zixon89](https://discuss.elastic.co/u/zixon89)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 7:37pm UTC](https://discuss.elastic.co/t/getting-the-error-when-using-euidatagrid-inside-kibana-plugin/259613 "2020-12-28T19:37:37Z")
Hi there, I hope it's the right place to ask the following question... I'm new with Kibana plugin development, and I figure out most of the back-end part. However, now comes the tricky part for me - the EUI framework. … --- ## [Filebeat multiline config doesn't work with S3 input](https://discuss.elastic.co/t/filebeat-multiline-config-doesnt-work-with-s3-input/259756)
**Author:** [@bplies](https://discuss.elastic.co/u/bplies)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 7:03pm UTC](https://discuss.elastic.co/t/filebeat-multiline-config-doesnt-work-with-s3-input/259756 "2020-12-28T19:03:47Z")
Elastic Cloud hosting Elasticsearch 7.10.0 Filebeat 7.10.1 We've been unable to get files from S3 input to successfully apply the configured multiline options on that input. Despite our best efforts, lines that shoul… --- ## [Apply condition on value (count) greater than some value in aggregation](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750)
**Author:** [@hariskhalique](https://discuss.elastic.co/u/hariskhalique)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 6:54pm UTC](https://discuss.elastic.co/t/apply-condition-on-value-count-greater-than-some-value-in-aggregation/259750 "2020-12-28T18:54:05Z")
I am looking a way where I can apply condition on value return in result. Here is my query. { "size": 0, "aggs": { "by\_brand": { "terms": { "field": "brand\_name.keyword", "size": 10… --- ## [\[Error\]tried to parse field \[TLSv1\] as object, but found a concrete value](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 6:43pm UTC](https://discuss.elastic.co/t/error-tried-to-parse-field-tlsv1-as-object-but-found-a-concrete-value/259753 "2020-12-28T18:43:20Z")
I am trying to ingest json data into Elasticsearch vai http\_poller and facing following error. elasticsearch - Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"cloudflare",… --- ## [Can't get filebeat Netflow Module to work](https://discuss.elastic.co/t/cant-get-filebeat-netflow-module-to-work/258459)
**Author:** [@Gambit22](https://discuss.elastic.co/u/Gambit22)\ **Replies:** 4\ **Last updated:** [December 28, 2020, 6:36pm UTC](https://discuss.elastic.co/t/cant-get-filebeat-netflow-module-to-work/258459 "2020-12-28T18:36:14Z")
Hello Everyone, I've been pulling my hair out trying to understand why Filebeat's net flow module keeps causing filebeats to end. Heres the error it keeps outputting: 2020-12-11T17:42:22.025-0700 ERROR instance/be… --- ## [Elasticsearch-exporter connection failure](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128)
**Author:** [@Patrick\_Lieberg1](https://discuss.elastic.co/u/Patrick_Lieberg1)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 6:31pm UTC](https://discuss.elastic.co/t/elasticsearch-exporter-connection-failure/259128 "2020-12-28T18:31:47Z")
Any idea why an elasticsearch-exporter pod's logs report an error connecting to the coordinating pod, but if I exec into the pod and curl the same address, it works? Exporter version: 1.1.0-debian-10-r303 Error from lo… --- ## [Filebeat code=exited, status=1/FAILURE](https://discuss.elastic.co/t/filebeat-code-exited-status-1-failure/258926)
**Author:** [@dave.mc](https://discuss.elastic.co/u/dave.mc)\ **Replies:** 23\ **Last updated:** [December 28, 2020, 6:11pm UTC](https://discuss.elastic.co/t/filebeat-code-exited-status-1-failure/258926 "2020-12-28T18:11:57Z")
Newbie here, so think basic. :slightly\_smiling\_face: Filebeat service won't start (on Debian), fails with code=exited, status=1/FAILURE. If I run filebeat -v -e -d "\*", I get: Exiting: error loading config file: yaml… --- ## [Don't drop event postgresql.activity.query](https://discuss.elastic.co/t/dont-drop-event-postgresql-activity-query/259749)
**Author:** [@Guto\_Ribeiro](https://discuss.elastic.co/u/Guto_Ribeiro)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 5:25pm UTC](https://discuss.elastic.co/t/dont-drop-event-postgresql-activity-query/259749 "2020-12-28T17:25:50Z")
Hello guys, I'm using metricbeat to collect metrics from postgresql, via the postgresql module. I need to drop events with: postgresql.activity.query: "COMMIT" postgresql.activity.query: "" In the metrcibeat configu… --- ## [7.10.1 upgrade and GrokProcessor Error](https://discuss.elastic.co/t/7-10-1-upgrade-and-grokprocessor-error/259647)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 5:26pm UTC](https://discuss.elastic.co/t/7-10-1-upgrade-and-grokprocessor-error/259647 "2020-12-28T17:26:23Z")
After I upgraded to 7.10.1 I am started getting following error. more investigation turn up following links to fix it. https://github.com/elastic/beats/issues/15840 https://discuss.elastic.co/t/es-7-6-regular-express… --- ## [I want to disable optons in visualization](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545)
**Author:** [@sujayjay](https://discuss.elastic.co/u/sujayjay)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 5:04pm UTC](https://discuss.elastic.co/t/i-want-to-disable-optons-in-visualization/259545 "2020-12-28T17:04:10Z")
hi, im new to elasticsearch, i created dashbord in kibana and displayed in website by sharing through iframe. Problem is that i dont want user to see and go through the options in visualization in dashboard i want to … --- ## [Kibana Markdown local image](https://discuss.elastic.co/t/kibana-markdown-local-image/259740)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 4:56pm UTC](https://discuss.elastic.co/t/kibana-markdown-local-image/259740 "2020-12-28T16:56:57Z")
Hello! I want to display in my kibana visualization my local image. I put cat.png to /usr/share/kibana/src/legacy/ui/public/assets/favicons. Owner of /usr/share/kibana/src/legacy/ui/public/assets/favicons is root, owner… --- ## [Unable to create a new index pattern / indexes not loading](https://discuss.elastic.co/t/unable-to-create-a-new-index-pattern-indexes-not-loading/259527)
**Author:** [@elk\_guy\_1234](https://discuss.elastic.co/u/elk_guy_1234)\ **Replies:** 19\ **Last updated:** [December 28, 2020, 4:50pm UTC](https://discuss.elastic.co/t/unable-to-create-a-new-index-pattern-indexes-not-loading/259527 "2020-12-28T16:50:57Z")
Problem: When trying to create a new index pattern the error "The index pattern you've entered does not match any indices". Really the problem is my index's will not load from a config / schema. Index Details: This inde… --- ## [How to keep logstash date type?](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742)
**Author:** [@pamiers](https://discuss.elastic.co/u/pamiers)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 4:39pm UTC](https://discuss.elastic.co/t/how-to-keep-logstash-date-type/259742 "2020-12-28T16:39:36Z")
I am reading data from oracle and putting data into elasticsearch through logstash. However, when reading data from oracle, the value of the field corresponding to the Date type is automatically changed to UTC type, dif… --- ## [ELK Kibana table grouping count](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422)
**Author:** [@Atif\_EL\_KHACHINE](https://discuss.elastic.co/u/Atif_EL_KHACHINE)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 4:28pm UTC](https://discuss.elastic.co/t/elk-kibana-table-grouping-count/259422 "2020-12-28T16:28:42Z")
Hi, I have some data : {"groupname":"ZAAH", "dname":"DEVICE1", "status":"OK"} {"groupname":"ZAAH","dname":"DEVICE2", "status":"ERROR"} {"groupname":"ZAAH","dname":"DEVICE3", "status":"OK"} {"groupname":"ZAAH","dname… --- ## [Logstash enrichement: URLHaus](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 4:14pm UTC](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720 "2020-12-28T16:14:18Z")
Hello , I would like to enrich my SIEM with information from URLhaus, I configured my logstash pipline like this: input { exec { command =\> 'curl https://urlhaus.abuse.ch/downloads/csv/' interval =\> 86400 … --- ## [What's the proper way to set the op\_type metadata field?](https://discuss.elastic.co/t/whats-the-proper-way-to-set-the-op-type-metadata-field/258323)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 2:36pm UTC](https://discuss.elastic.co/t/whats-the-proper-way-to-set-the-op-type-metadata-field/258323 "2020-12-28T14:36:55Z")
I am trying to have filebeat use the index operation rather than create, and after digging through the beats source code, I came to this pull request where support was added to set the @metadata.op\_type field to index, c… --- ## [Configure HTTP-server elasticsearch](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723)
**Author:** [@wmr84](https://discuss.elastic.co/u/wmr84)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 1:02pm UTC](https://discuss.elastic.co/t/configure-http-server-elasticsearch/259723 "2020-12-28T13:02:03Z")
Hi everybody! I have configured the following parameters on my elasticsearch server http.host: elasticsearch.company.com http.publish\_host: elasticsearch.company.com http.bind\_host: elasticsearch.company.com I thoug… --- ## [Optimize corpus before training](https://discuss.elastic.co/t/optimize-corpus-before-training/259732)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 12:51pm UTC](https://discuss.elastic.co/t/optimize-corpus-before-training/259732 "2020-12-28T12:51:01Z")
Hi all from elastic team. I am building a pipiline to optimize a corpus before submitting to opennlp training. remove stopwords apply lemmatizer or stemmer The elastic has some functionality that I pass a text and re… --- ## [Cannot run Kibana](https://discuss.elastic.co/t/cannot-run-kibana/259677)
**Author:** [@111422](https://discuss.elastic.co/u/111422)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 12:46pm UTC](https://discuss.elastic.co/t/cannot-run-kibana/259677 "2020-12-28T12:46:22Z")
After that I downloaded kibana to my windows, I opened in command prompt bin folder and ran kibana command. It showed "\\Kibana\\config was unexpected at this time." and did not run kibana. ElasticSearch was running normal… --- ## [Reverse Proxy & Security Questions](https://discuss.elastic.co/t/reverse-proxy-security-questions/256972)
**Author:** [@Ganymede](https://discuss.elastic.co/u/Ganymede)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 12:45pm UTC](https://discuss.elastic.co/t/reverse-proxy-security-questions/256972 "2020-12-28T12:45:05Z")
Hello ES & Kibana aficionados! I'm very new to this whole topic (ES/Kibana/Network Security) and have some burning questions I'm certain you can help me out with. General Setup: Connection occurs via Citrix VPN. E… --- ## [Download kibana dashboards using API call](https://discuss.elastic.co/t/download-kibana-dashboards-using-api-call/259728)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 12:21pm UTC](https://discuss.elastic.co/t/download-kibana-dashboards-using-api-call/259728 "2020-12-28T12:21:41Z")
i know that we can download our kibana dashboards as CSV but is it possible to download any kibana dashboard using tools like POSTMAN ?? by providing our login credentials and without logging into kibana is there a way t… --- ## [Elastic Agent and other Beats not run](https://discuss.elastic.co/t/elastic-agent-and-other-beats-not-run/259730)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 12:20pm UTC](https://discuss.elastic.co/t/elastic-agent-and-other-beats-not-run/259730 "2020-12-28T12:20:16Z")
I install ELK in single-node mode with following configuration Host IP: 192.168.87.47 Elasticsearch.yml network.host: 0.0.0.0 node.name: elasticsearch cluster.initial\_master\_nodes: elasticsearch # Transport layer xpa… --- ## [Logstash grok hour and minute ruby](https://discuss.elastic.co/t/logstash-grok-hour-and-minute-ruby/259724)
**Author:** [@Cristiane\_Marcarini](https://discuss.elastic.co/u/Cristiane_Marcarini)\ **Replies:** 0\ **Last updated:** [December 28, 2020, 11:16am UTC](https://discuss.elastic.co/t/logstash-grok-hour-and-minute-ruby/259724 "2020-12-28T11:16:48Z")
Hi, I have a grok and I don't want to change it, but I wanted to have the hour and minutes separate, it could be using Ruby, something like that. Thanks else if "performanceLog" in \[path\] { grok { match =\> {"mess… --- ## [Multi match bool query returning 0 hits on large number of documents](https://discuss.elastic.co/t/multi-match-bool-query-returning-0-hits-on-large-number-of-documents/259523)
**Author:** [@Finley](https://discuss.elastic.co/u/Finley)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 10:46am UTC](https://discuss.elastic.co/t/multi-match-bool-query-returning-0-hits-on-large-number-of-documents/259523 "2020-12-28T10:46:31Z")
Hi, I have 2 elk cluster in 7.10. A -\> 70 documents per hour B -\> 100 - 300 documents per second (825k on 1 hour) When I am doing a KQL search in kibana (discover) with just typing "POST", on the cluster A, it's retu… --- ## [Snapshot size limits](https://discuss.elastic.co/t/snapshot-size-limits/259703)
**Author:** [@noob1](https://discuss.elastic.co/u/noob1)\ **Replies:** 4\ **Last updated:** [December 28, 2020, 10:34am UTC](https://discuss.elastic.co/t/snapshot-size-limits/259703 "2020-12-28T10:34:12Z")
Hey All, I'm trying to understand if there is any size limit on how much size snapshot can be written to repository. Say, is it possible to write 200 GB of snapshot to repository? If yes which backend repository should … --- ## [How to sort results based on another field's value or weightage](https://discuss.elastic.co/t/how-to-sort-results-based-on-another-fields-value-or-weightage/259713)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 1\ **Last updated:** [December 28, 2020, 10:03am UTC](https://discuss.elastic.co/t/how-to-sort-results-based-on-another-fields-value-or-weightage/259713 "2020-12-28T10:03:26Z")
Hi, Let's take an example. Say the index has 2 fields, viz., name and weightage. Values- name: Black Bus, weightage: 1 name: Blue Bus, weightage: 2 name: Black Car, weightage: 2 name: Blue Car, weightage: 1 Now, … --- ## [Cisco core switch integration](https://discuss.elastic.co/t/cisco-core-switch-integration/259711)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 9:18am UTC](https://discuss.elastic.co/t/cisco-core-switch-integration/259711 "2020-12-28T09:18:09Z")
Hi All, I am trying to integrate elasticsearch with cisco core switch.I have done the required configuration in filebeat file and cisco module file. But while sending logs from core switch on port 9506, getting error t… --- ## [Export Canvas](https://discuss.elastic.co/t/export-canvas/259363)
**Author:** [@axfla](https://discuss.elastic.co/u/axfla)\ **Replies:** 2\ **Last updated:** [December 28, 2020, 8:51am UTC](https://discuss.elastic.co/t/export-canvas/259363 "2020-12-28T08:51:26Z")
Hello, I'm trying to export a workpad created in Canvas but I'm currently facing multiple problems: How can we export in PDF without the "elastic" frame ? During the export, text zones that were properly sized in the … --- ## [Build kibana via proxy](https://discuss.elastic.co/t/build-kibana-via-proxy/256212)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 8:48am UTC](https://discuss.elastic.co/t/build-kibana-via-proxy/256212 "2020-12-28T08:48:36Z")
i have a source code of kibana 7.3.3 i want to build kibana by : yarn build --skip-node-download --skip-os-packages --skip-archives i have no internet access except an http proxy! i want to build kibana by using this… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1625) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1627)