# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1700

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1701

---

## [Kibana Dev Tools Get Field names from .kibana index](https://discuss.elastic.co/t/kibana-dev-tools-get-field-names-from-kibana-index/254990)

<div class="topic-metadata">

**Author:** [@cwobuzz](https://discuss.elastic.co/u/cwobuzz)\
**Replies:** 2\
**Last updated:** [November 12, 2020, 4:05pm UTC](https://discuss.elastic.co/t/kibana-dev-tools-get-field-names-from-kibana-index/254990 "2020-11-12T16:05:31Z")

</div>

Team, I tried to figure this out, but I am new to using the dev tools. I am using SecOnion. I want to pull out the fields mapped to different event ids. I spent a good amount of time trying to google an answer, but I di…

---

## [How to read data from a DB table and project it on KIBANA DB](https://discuss.elastic.co/t/how-to-read-data-from-a-db-table-and-project-it-on-kibana-db/254420)

<div class="topic-metadata">

**Author:** [@Dinesh\_Potey](https://discuss.elastic.co/u/Dinesh_Potey)\
**Replies:** 9\
**Last updated:** [November 12, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-read-data-from-a-db-table-and-project-it-on-kibana-db/254420 "2020-11-12T15:31:27Z")

</div>

Hi, I want to run a select query on a DB table so that I project the output on KIBANA DB. I am not expertise in modules. Could you please help me here in achieving this. Thanks, Dinesh

---

## [Logstash output log messages to multiple outputs simultaneously?](https://discuss.elastic.co/t/logstash-output-log-messages-to-multiple-outputs-simultaneously/255232)

<div class="topic-metadata">

**Author:** [@randoran](https://discuss.elastic.co/u/randoran)\
**Replies:** 1\
**Last updated:** [November 12, 2020, 3:29pm UTC](https://discuss.elastic.co/t/logstash-output-log-messages-to-multiple-outputs-simultaneously/255232 "2020-11-12T15:29:40Z")

</div>

Is it possible for logstash to output a log message to multiple different outputs simultaneously? Something like this: output { if \[env\] == "production" and \[node\] == "web101" { file { path =\> "/var/log/logs…

---

## [Ingesting documents (.pbix) to elasticsearch](https://discuss.elastic.co/t/ingesting-documents-pbix-to-elasticsearch/254549)

<div class="topic-metadata">

**Author:** [@Yuval\_David](https://discuss.elastic.co/u/Yuval_David)\
**Replies:** 13\
**Last updated:** [November 12, 2020, 3:18pm UTC](https://discuss.elastic.co/t/ingesting-documents-pbix-to-elasticsearch/254549 "2020-11-12T15:18:46Z")

</div>

so I would like to create an application which would get pbix files insert those files into elastic and then we could create a rest application which could query elastic for full text search over those pbix files. howev…

---

## [Logstash - Filter events according to data from a REST API](https://discuss.elastic.co/t/logstash-filter-events-according-to-data-from-a-rest-api/255153)

<div class="topic-metadata">

**Author:** [@Yor\_On](https://discuss.elastic.co/u/Yor_On)\
**Replies:** 1\
**Last updated:** [November 12, 2020, 3:16pm UTC](https://discuss.elastic.co/t/logstash-filter-events-according-to-data-from-a-rest-api/255153 "2020-11-12T15:16:54Z")

</div>

Hi, I've scoured the internet for someone with the same issue as I, but I haven't had much success in finding any precedent on getting what I need done. I have a REST API that returns a response which looks like: GET …

---

## [Timelion in 7.10.0 does not work with single quotations anymore](https://discuss.elastic.co/t/timelion-in-7-10-0-does-not-work-with-single-quotations-anymore/255213)

<div class="topic-metadata">

**Author:** [@shauenstein](https://discuss.elastic.co/u/shauenstein)\
**Replies:** 2\
**Last updated:** [November 12, 2020, 3:09pm UTC](https://discuss.elastic.co/t/timelion-in-7-10-0-does-not-work-with-single-quotations-anymore/255213 "2020-11-12T15:09:28Z")

</div>

After upgrading from version 7.9.3 to 7.10.0 my timelion views are broken. I was using before. E.g .es(index='logstash-\*',q="subtype=EQS", metric="sum:payload\_length").cusum() =\> and get an error: Timelion request err…

---

## [Plugin for SVN elastic search](https://discuss.elastic.co/t/plugin-for-svn-elastic-search/255193)

<div class="topic-metadata">

**Author:** [@viswa.varanasi](https://discuss.elastic.co/u/viswa.varanasi)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 3:08pm UTC](https://discuss.elastic.co/t/plugin-for-svn-elastic-search/255193 "2020-11-12T15:08:36Z")

</div>

Hello team , am looking for the implementation of the SVN repository elastic search came acroos this plugin https://github.com/plombard/SubversionRiver is this deprecated ? or is it still valid for latest version of El…

---

## [Better names for index patterns](https://discuss.elastic.co/t/better-names-for-index-patterns/255178)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 5\
**Last updated:** [November 12, 2020, 2:51pm UTC](https://discuss.elastic.co/t/better-names-for-index-patterns/255178 "2020-11-12T14:51:08Z")

</div>

Hi, In several screens in Kibana you use the indexpatterns to select in which indices your query should run. However, these patterns an become pretty ugly, especiallywhen also taking remote indices with them. Is there …

---

## [Logstash A plugin had an unrecoverable error (AWS ARM64/Ubuntu 20.04/Java OpenJDK 11)](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-aws-arm64-ubuntu-20-04-java-openjdk-11/255146)

<div class="topic-metadata">

**Author:** [@yoesoff](https://discuss.elastic.co/u/yoesoff)\
**Replies:** 1\
**Last updated:** [November 12, 2020, 2:53pm UTC](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-aws-arm64-ubuntu-20-04-java-openjdk-11/255146 "2020-11-12T14:53:15Z")

</div>

I have installed ELK using docker from following link https://github.com/deviantony/docker-elk/tree/release-7.x It works very well before, but recenty I got an issue on several new servers. The issue related with Logsta…

---

## [Index-and-query-logs-fixed-daily-volume challenge exception](https://discuss.elastic.co/t/index-and-query-logs-fixed-daily-volume-challenge-exception/255102)

<div class="topic-metadata">

**Author:** [@Oleg\_Ruchovets](https://discuss.elastic.co/u/Oleg_Ruchovets)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 2:49pm UTC](https://discuss.elastic.co/t/index-and-query-logs-fixed-daily-volume-challenge-exception/255102 "2020-11-12T14:49:05Z")

</div>

Hello , I've got the exception during the execution of index-and-query-logs-fixed-daily-volume I've executed the index-logs-fixed-daily-volume and it generated the data in ES esrally --track-repository=eventdata --tra…

---

## [Kibana 7.10 login issues](https://discuss.elastic.co/t/kibana-7-10-login-issues/255201)

<div class="topic-metadata">

**Author:** [@KevSex](https://discuss.elastic.co/u/KevSex)\
**Replies:** 4\
**Last updated:** [November 12, 2020, 2:26pm UTC](https://discuss.elastic.co/t/kibana-7-10-login-issues/255201 "2020-11-12T14:26:01Z")

</div>

Since upgrading to Elastic stack 7.10, I am now receiving the below error when attempting to POST to /internal/security/login \[root@dev-node-01 ~\]# curl -k 'https://127.0.0.1:5601/internal/security/login' -H 'Content-…

---

## [Esrally SSL error certificate verify failed](https://discuss.elastic.co/t/esrally-ssl-error-certificate-verify-failed/254893)

<div class="topic-metadata">

**Author:** [@r.laponder](https://discuss.elastic.co/u/r.laponder)\
**Replies:** 7\
**Last updated:** [November 12, 2020, 2:25pm UTC](https://discuss.elastic.co/t/esrally-ssl-error-certificate-verify-failed/254893 "2020-11-12T14:25:03Z")

</div>

Hi, I'm trying to benchmark an existing Elasticsearch cluster to try out Rally. When starting the benchmark I run into the following error: 2020-11-10 09:27:39,430 ActorAddr-(T|:57843)/PID:16851 esrally.client INFO…

---

## [Use logstash or filebeat or both to send log at S3](https://discuss.elastic.co/t/use-logstash-or-filebeat-or-both-to-send-log-at-s3/255223)

<div class="topic-metadata">

**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 2:23pm UTC](https://discuss.elastic.co/t/use-logstash-or-filebeat-or-both-to-send-log-at-s3/255223 "2020-11-12T14:23:55Z")

</div>

I want all logs that are sent to logstash or filebeat, to be forwarded to S3. I have a question? Should I use logstash or filebeat or both? Example configuration: If it's logstash If it's filebeat If both

---

## [ILM Failed and not created new index](https://discuss.elastic.co/t/ilm-failed-and-not-created-new-index/254294)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [November 12, 2020, 2:20pm UTC](https://discuss.elastic.co/t/ilm-failed-and-not-created-new-index/254294 "2020-11-12T14:20:13Z")

</div>

Hi I set up an ILM and it ran until 2020/11/01, ILM showed errors when it rotated the index and stopped creating new indexes, I tried to delete the previous index that had an error, I restarted the full ELK stack includ…

---

## [Index pre-analyzed text by sending the actual terms/tokens?](https://discuss.elastic.co/t/index-pre-analyzed-text-by-sending-the-actual-terms-tokens/254989)

<div class="topic-metadata">

**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\
**Replies:** 5\
**Last updated:** [November 12, 2020, 2:17pm UTC](https://discuss.elastic.co/t/index-pre-analyzed-text-by-sending-the-actual-terms-tokens/254989 "2020-11-12T14:17:52Z")

</div>

Is it possible to somehow pass on an already pre-analyzed stream of terms/tokens to an index for a field? I already have my text broken up into tokens, I have the offsets, I can produce everything an analyzer could prod…

---

## [Trasnform - number of shards defined in the template is not applied](https://discuss.elastic.co/t/trasnform-number-of-shards-defined-in-the-template-is-not-applied/255107)

<div class="topic-metadata">

**Author:** [@Hamza\_BENNANI](https://discuss.elastic.co/u/Hamza_BENNANI)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 2:04pm UTC](https://discuss.elastic.co/t/trasnform-number-of-shards-defined-in-the-template-is-not-applied/255107 "2020-11-12T14:04:13Z")

</div>

Hi, I have defined an index template with 4 shards, ILM policy and fields mapping. When I execute my Transform, every thing defined in the template is applied except the number of shards. My ElasticSearch version is 7.…

---

## [Reporting disregards zoom](https://discuss.elastic.co/t/reporting-disregards-zoom/255031)

<div class="topic-metadata">

**Author:** [@gohovd](https://discuss.elastic.co/u/gohovd)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 1:36pm UTC](https://discuss.elastic.co/t/reporting-disregards-zoom/255031 "2020-11-12T13:36:30Z")

</div>

Hi all, I am using Kibana version 7.8.2, and when generating a report of my dashboard which includes a map (Elastic Maps Service), the report completely disregards the zoom level, and always produces the map in its init…

---

## [Drop event for Apache Module](https://discuss.elastic.co/t/drop-event-for-apache-module/254913)

<div class="topic-metadata">

**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\
**Replies:** 2\
**Last updated:** [November 12, 2020, 1:03pm UTC](https://discuss.elastic.co/t/drop-event-for-apache-module/254913 "2020-11-12T13:03:21Z")

</div>

Hi Team, I am trying drop a specific event from filebeat apache module , i have tried below drop event processor and its not working. Event to be dropped if the url.original field contains refresh as the text url.orig…

---

## [REST api call to get the JVM arguments?](https://discuss.elastic.co/t/rest-api-call-to-get-the-jvm-arguments/255207)

<div class="topic-metadata">

**Author:** [@manuelbaesler](https://discuss.elastic.co/u/manuelbaesler)\
**Replies:** 2\
**Last updated:** [November 12, 2020, 12:26pm UTC](https://discuss.elastic.co/t/rest-api-call-to-get-the-jvm-arguments/255207 "2020-11-12T12:26:53Z")

</div>

Hello, is there a REST api call to get the JVM arguments from the started elastic search process? Best, Manuel

---

## [How to get Unique Records](https://discuss.elastic.co/t/how-to-get-unique-records/255029)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 15\
**Last updated:** [November 12, 2020, 12:23pm UTC](https://discuss.elastic.co/t/how-to-get-unique-records/255029 "2020-11-12T12:23:21Z")

</div>

Hello Team I am using Elasticsearch version 7.8.0. I am having an INDEX in which there is one field. "userId" : { "type" : "text", "fields" : { "keyword" : { "type" : "ke…

---

## [Elasticsearch SQL CLI](https://discuss.elastic.co/t/elasticsearch-sql-cli/255148)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 4\
**Last updated:** [November 12, 2020, 12:20pm UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli/255148 "2020-11-12T12:20:56Z")

</div>

Hello Team I am using Elasticsearch version 7.8.0. I am using elasticsearch-sql-cli ; to perform my operations on elasticsearch index. When I am using this and redirecting its output to a logfile , its output contains …

---

## [Getting error while pulling data from an API in Logstash](https://discuss.elastic.co/t/getting-error-while-pulling-data-from-an-api-in-logstash/254779)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 5\
**Last updated:** [November 12, 2020, 12:20pm UTC](https://discuss.elastic.co/t/getting-error-while-pulling-data-from-an-api-in-logstash/254779 "2020-11-12T12:20:43Z")

</div>

Hey there, can any help me resolve this problem, I am parsing Cloudflare audit logs via its API, I am putting here my code chunk of .conf file for Logstash plugin input,filter and output. Also, attaching a error screen…

---

## [Mutiple beats on multiple servers sending logs to logstash through one pipeline](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205)

<div class="topic-metadata">

**Author:** [@prajwalgmpp](https://discuss.elastic.co/u/prajwalgmpp)\
**Replies:** 1\
**Last updated:** [November 12, 2020, 12:18pm UTC](https://discuss.elastic.co/t/mutiple-beats-on-multiple-servers-sending-logs-to-logstash-through-one-pipeline/255205 "2020-11-12T12:18:10Z")

</div>

Hi. I have a requirement where I am supposed to enable log monitoring of NOI (Netcool Omnibus Impact) components through Elastic stack. We have decided to install filebeats on all the components and send logs to logstas…

---

## [Template for plugins development in Kibana 7.9.3](https://discuss.elastic.co/t/template-for-plugins-development-in-kibana-7-9-3/255061)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 6\
**Last updated:** [November 12, 2020, 10:55am UTC](https://discuss.elastic.co/t/template-for-plugins-development-in-kibana-7-9-3/255061 "2020-11-12T10:55:34Z")

</div>

Hi team, is there any plugin templates like it it was on past releases of Kibana: kbn\_tp\_sample\_app\_plugin kbn\_tp\_sample\_app\_visualization I develop plugins in Kibana 7.9.3 using JavaScript and cant find any template…

---

## [WinLogBeat as Daemonset](https://discuss.elastic.co/t/winlogbeat-as-daemonset/255199)

<div class="topic-metadata">

**Author:** [@geek876](https://discuss.elastic.co/u/geek876)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 10:49am UTC](https://discuss.elastic.co/t/winlogbeat-as-daemonset/255199 "2020-11-12T10:49:39Z")

</div>

Dear Members, Has anyone successfully configured 'WinLogBeat' as DaemonSet on 'Windows Docker Host' for Kubernetes ? Or is that possible at all ? If not, what are alternative approaches ? Ours is a hybrid K8s Cluster ( …

---

## [Unable to setup coordinating only node using command line parameters](https://discuss.elastic.co/t/unable-to-setup-coordinating-only-node-using-command-line-parameters/255182)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 1\
**Last updated:** [November 12, 2020, 10:48am UTC](https://discuss.elastic.co/t/unable-to-setup-coordinating-only-node-using-command-line-parameters/255182 "2020-11-12T10:48:08Z")

</div>

I know i can use elasticsearch.yml but I wanted to use the following command to start a coordinating only node but failed. Is it a bug? ./bin/elasticsearch -E"node.roles=" Any help is appreciated

---

## [No Index after indexing with Apache Nutch](https://discuss.elastic.co/t/no-index-after-indexing-with-apache-nutch/255198)

<div class="topic-metadata">

**Author:** [@Nutz3r](https://discuss.elastic.co/u/Nutz3r)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/no-index-after-indexing-with-apache-nutch/255198 "2020-11-12T10:32:50Z")

</div>

Hi everyone! I'm struggling with Elasticsearch in combination with Apache Nutch. With Apache Nutch I want to crawl my websites and index their content to Elasticsearch. Unfortunately the index isn't created, even if N…

---

## [Watcher search Field from Index A is present in Index B](https://discuss.elastic.co/t/watcher-search-field-from-index-a-is-present-in-index-b/255190)

<div class="topic-metadata">

**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 10:17am UTC](https://discuss.elastic.co/t/watcher-search-field-from-index-a-is-present-in-index-b/255190 "2020-11-12T10:17:08Z")

</div>

hello, is it possible to implement a watcher which looks if a value from field "ip-address" in Index A is present in Index B? Enrichment at ingest time is not possible.

---

## [Plugins of ELK in Open source vs Licensed version](https://discuss.elastic.co/t/plugins-of-elk-in-open-source-vs-licensed-version/255194)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 0\
**Last updated:** [November 12, 2020, 10:24am UTC](https://discuss.elastic.co/t/plugins-of-elk-in-open-source-vs-licensed-version/255194 "2020-11-12T10:24:25Z")

</div>

Hi, Can someone send me the comparison of available plugins in Open source ELK version against the licensed one? Is there any restrictions on installing plugins of elasticsearch in AWS Or aws hostel ELK? regards, Su…

---

## [Adding xpack.security.http.ssl.truststore.secure\_password in the keystore](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183)

<div class="topic-metadata">

**Author:** [@anon17386273](https://discuss.elastic.co/u/anon17386273)\
**Replies:** 3\
**Last updated:** [November 12, 2020, 10:24am UTC](https://discuss.elastic.co/t/adding-xpack-security-http-ssl-truststore-secure-password-in-the-keystore/255183 "2020-11-12T10:24:05Z")

</div>

Hi Wanted to know if elasticsearch-keystore add is the only way to add xpack.security.http.ssl.truststore.secure\_password into the keystore? Currently my keystore is generated using openssl and not generated using elas…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1699)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1701)
