# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=172 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 173 --- ## [Logstash csv filter unable to handle newline in CSV](https://discuss.elastic.co/t/logstash-csv-filter-unable-to-handle-newline-in-csv/366328)
**Author:** [@Lee\_Li\_Xiong](https://discuss.elastic.co/u/Lee_Li_Xiong)\ **Replies:** 5\ **Last updated:** [September 10, 2024, 4:31pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-unable-to-handle-newline-in-csv/366328 "2024-09-10T16:31:45Z")
Hello, i have a csv data with newline in some of the column data. Whenever the data start with ", it contain newline. testing2.csv date,name,address 5/23/2024,"Lee123 Hello3",Tanjung789 5/24/2024,Lee124,Tanjung790 5/… --- ## [Error when transfer text field to numeric](https://discuss.elastic.co/t/error-when-transfer-text-field-to-numeric/366338)
**Author:** [@wtxdlut2021](https://discuss.elastic.co/u/wtxdlut2021)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 3:48pm UTC](https://discuss.elastic.co/t/error-when-transfer-text-field-to-numeric/366338 "2024-09-10T15:48:27Z")
I have an index from an older version of Elasticsearch, in which one of the fields is of the 'text' type and does not have the 'keyword' attribute, but it actually contains numerical values. I would like to treat it as a… --- ## [Can’t collect Check Point FW Logs, via TCP over TLS](https://discuss.elastic.co/t/can-t-collect-check-point-fw-logs-via-tcp-over-tls/366294)
**Author:** [@lga1](https://discuss.elastic.co/u/lga1)\ **Replies:** 8\ **Last updated:** [September 10, 2024, 2:53pm UTC](https://discuss.elastic.co/t/can-t-collect-check-point-fw-logs-via-tcp-over-tls/366294 "2024-09-10T14:53:36Z")
Hello, I’m new in the elastic community. I’d like to collect logs from a Check Point firewall, with Logstash. I use Elasticsearch, Kibana and Logstash. The infrastructure is running, communications are working between … --- ## [Collect other types of windows logs](https://discuss.elastic.co/t/collect-other-types-of-windows-logs/366256)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 1:53pm UTC](https://discuss.elastic.co/t/collect-other-types-of-windows-logs/366256 "2024-09-10T13:53:32Z")
Hi, I am currently working with Elastic Agent and I am collecting logs without any problem. I am getting the Application, Security and System logs. I would like to know how I can get other types of logs like the ones s… --- ## [Kibana plugin development](https://discuss.elastic.co/t/kibana-plugin-development/366325)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 1:45pm UTC](https://discuss.elastic.co/t/kibana-plugin-development/366325 "2024-09-10T13:45:18Z")
Hi all, When running yarn kbn bootstrap The command runs in wsl (because im on windows) and then gets stucks on \[bazel\] warning Workspaces can only be enabled in private projects. Any guesses on why that is the case T… --- ## [Logstash Keystore not working when running logstash as a service](https://discuss.elastic.co/t/logstash-keystore-not-working-when-running-logstash-as-a-service/366230)
**Author:** [@Raven\_Music](https://discuss.elastic.co/u/Raven_Music)\ **Replies:** 2\ **Last updated:** [September 10, 2024, 1:43pm UTC](https://discuss.elastic.co/t/logstash-keystore-not-working-when-running-logstash-as-a-service/366230 "2024-09-10T13:43:56Z")
Hi, I'm trying to store the hosts and the logstash\_user password in a keystore in my logstash conf.d output. I have a Ubuntu 22 system. The keystore works perfectly fine with my testconfig when I run logstash like this, … --- ## [LDAP Configuration for Kibana Authentication](https://discuss.elastic.co/t/ldap-configuration-for-kibana-authentication/366305)
**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 12:37pm UTC](https://discuss.elastic.co/t/ldap-configuration-for-kibana-authentication/366305 "2024-09-10T12:37:05Z")
Hello I have an Elastic cluster with two coordinator nodes, and I need to configure LDAP for Kibana authentication. Should the LDAP configuration and role\_mapping file be applied to just one coordinator node or to both? … --- ## [Auditbeat 7.13.0 vs 8.15.0 logs format](https://discuss.elastic.co/t/auditbeat-7-13-0-vs-8-15-0-logs-format/366279)
**Author:** [@Matt\_Pinch](https://discuss.elastic.co/u/Matt_Pinch)\ **Replies:** 3\ **Last updated:** [September 10, 2024, 12:28pm UTC](https://discuss.elastic.co/t/auditbeat-7-13-0-vs-8-15-0-logs-format/366279 "2024-09-10T12:28:55Z")
Upgrading from auditbeat 7.13.0 -\> 8.15.0. What differences are expected to be seen in the logs? Does 8.15.0 provide the same information as 7.13.0? Does the format change? Is it backward compatible? Thanks. --- ## [Filter out character like "|" , "\\---------/" using KQL](https://discuss.elastic.co/t/filter-out-character-like-using-kql/366309)
**Author:** [@Shivani\_Kushwaha](https://discuss.elastic.co/u/Shivani_Kushwaha)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 11:45am UTC](https://discuss.elastic.co/t/filter-out-character-like-using-kql/366309 "2024-09-10T11:45:41Z")
I am trying to filter out the characters/ symbols like "|" , "/---------------", in logs, i tried filter out method but it is not working. looking for suggesstions, Thanks! :slight\_smile: --- ## [Need to create a custom default color in kibana individual visualizations and Dashboards](https://discuss.elastic.co/t/need-to-create-a-custom-default-color-in-kibana-individual-visualizations-and-dashboards/366303)
**Author:** [@Roshini](https://discuss.elastic.co/u/Roshini)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 9:45am UTC](https://discuss.elastic.co/t/need-to-create-a-custom-default-color-in-kibana-individual-visualizations-and-dashboards/366303 "2024-09-10T09:45:24Z")
Hi, I would like to know do we have an option for setting up a default color theme for individual visualizations and Dashboards? Attached screen shot for which we need to apply the default color theme setting --- ## [Embedding Webview in Kibana Dashboard](https://discuss.elastic.co/t/embedding-webview-in-kibana-dashboard/366291)
**Author:** [@OAJ](https://discuss.elastic.co/u/OAJ)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 10:25am UTC](https://discuss.elastic.co/t/embedding-webview-in-kibana-dashboard/366291 "2024-09-10T10:25:26Z")
Hi all, I want to embed a Webview in my kibana dashboard. I used the markdown visualiser and inserted my iframe but it renders the iframe as text. It's there something I'm missing --- ## [Sort over Aggregations buckets by text field over already sorted result](https://discuss.elastic.co/t/sort-over-aggregations-buckets-by-text-field-over-already-sorted-result/366297)
**Author:** [@ayanpoddar](https://discuss.elastic.co/u/ayanpoddar)\ **Replies:** 0\ **Last updated:** [September 10, 2024, 8:39am UTC](https://discuss.elastic.co/t/sort-over-aggregations-buckets-by-text-field-over-already-sorted-result/366297 "2024-09-10T08:39:30Z")
I am currently facing an issue with sorting aggregation results on a text field in Elasticsearch. this is my query { "size": 0, "query": { "bool": { "must": \[ { "query\_string": { … --- ## [How to set @timestamp precision to microsecond](https://discuss.elastic.co/t/how-to-set-timestamp-precision-to-microsecond/366129)
**Author:** [@zhangli178](https://discuss.elastic.co/u/zhangli178)\ **Replies:** 0\ **Last updated:** [September 6, 2024, 3:57am UTC](https://discuss.elastic.co/t/how-to-set-timestamp-precision-to-microsecond/366129 "2024-09-06T03:57:55Z")
Hi elastic experts, I am using ECK Beat to collect the container logs of applications deployed in k8s cluster. The type of beat is filebeat. I can see the logs shipped from beat to logstash have the field @timestamp, the… --- ## [PatternCaptureGroupTokenFilter throwing error - startOffset must be non-negative, and endOffset must be \>= startOffset, and offsets must not go backwards](https://discuss.elastic.co/t/patterncapturegrouptokenfilter-throwing-error-startoffset-must-be-non-negative-and-endoffset-must-be-startoffset-and-offsets-must-not-go-backwards/366199)
**Author:** [@shikha65786](https://discuss.elastic.co/u/shikha65786)\ **Replies:** 2\ **Last updated:** [September 10, 2024, 5:11am UTC](https://discuss.elastic.co/t/patterncapturegrouptokenfilter-throwing-error-startoffset-must-be-non-negative-and-endoffset-must-be-startoffset-and-offsets-must-not-go-backwards/366199 "2024-09-10T05:11:16Z")
I'm using the PatternCaptureGroupTokenFilter in my code to generate tokens based on multiple regular expressions and highlight matches in the string. I'm working with Lucene 9, but it's returning the following error. {"… --- ## [Java log Parsing with Filebeat and Logstash](https://discuss.elastic.co/t/java-log-parsing-with-filebeat-and-logstash/366280)
**Author:** [@zerratriani](https://discuss.elastic.co/u/zerratriani)\ **Replies:** 2\ **Last updated:** [September 10, 2024, 4:17am UTC](https://discuss.elastic.co/t/java-log-parsing-with-filebeat-and-logstash/366280 "2024-09-10T04:17:46Z")
So I have a java log that I want to consume using filebeat. When I test in the local env I succeed, but when I try to use the production env the log is not successfully parsed. Because in the local env I use logstash but… --- ## [Error: unknown flag: --fleet-server-client-auth](https://discuss.elastic.co/t/error-unknown-flag-fleet-server-client-auth/364778)
**Author:** [@kirolosmena299](https://discuss.elastic.co/u/kirolosmena299)\ **Replies:** 3\ **Last updated:** [September 10, 2024, 4:16am UTC](https://discuss.elastic.co/t/error-unknown-flag-fleet-server-client-auth/364778 "2024-09-10T04:16:19Z")
I have a problem whenever i try to install the agent to some of my Ubuntu servers I get this error : Error: unknown flag: --fleet-server-client-auth --- ## [Elastic agent custom configuration to index in multiple indices](https://discuss.elastic.co/t/elastic-agent-custom-configuration-to-index-in-multiple-indices/366276)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 3:51am UTC](https://discuss.elastic.co/t/elastic-agent-custom-configuration-to-index-in-multiple-indices/366276 "2024-09-10T03:51:40Z")
Hi All, I am trying to index data into different indices in kubernetes integration, based on the container logs, output.elasticsearch: indices: - index: "test-analytics-%{+yyyy.MM}" when.contains: k… --- ## [FIlebeat Output Configuration Error](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 26\ **Last updated:** [September 9, 2024, 10:51pm UTC](https://discuss.elastic.co/t/filebeat-output-configuration-error/366175 "2024-09-09T22:51:11Z")
HI All. I am using Elastic/Kibana/Filebeat version 8.15.1. I am setting up the filebeat modules.d\\system.yml file and trying to run it to ingest logs in a directory, but I am getting an error: "Exiting: no outputs are… --- ## [Using the metricbeat provided index template adds many fields which are not needed or used](https://discuss.elastic.co/t/using-the-metricbeat-provided-index-template-adds-many-fields-which-are-not-needed-or-used/366272)
**Author:** [@dfinn](https://discuss.elastic.co/u/dfinn)\ **Replies:** 0\ **Last updated:** [September 9, 2024, 8:53pm UTC](https://discuss.elastic.co/t/using-the-metricbeat-provided-index-template-adds-many-fields-which-are-not-needed-or-used/366272 "2024-09-09T20:53:04Z")
Recently we have moved from dynamic mapping on our metricbeat indexes to using the metricbeat provided index template. I think this is much better because it means our field types are locked down and cannot change witho… --- ## [Cannot get started with development of a Logstash plugin: README incorrect?](https://discuss.elastic.co/t/cannot-get-started-with-development-of-a-logstash-plugin-readme-incorrect/365771)
**Author:** [@frans-wtax](https://discuss.elastic.co/u/frans-wtax)\ **Replies:** 4\ **Last updated:** [September 9, 2024, 6:10pm UTC](https://discuss.elastic.co/t/cannot-get-started-with-development-of-a-logstash-plugin-readme-incorrect/365771 "2024-09-09T18:10:00Z")
I'm new to Ruby and Rails, so go easy on me :slight\_smile: Maybe I'm missing something that's completely obvious to an experienced Ruby developer but not to this guy with 20 years on Java :man\_shrugging: The README info… --- ## [Segregate Replicas](https://discuss.elastic.co/t/segregate-replicas/366260)
**Author:** [@Aditya\_Teltia](https://discuss.elastic.co/u/Aditya_Teltia)\ **Replies:** 5\ **Last updated:** [September 9, 2024, 5:50pm UTC](https://discuss.elastic.co/t/segregate-replicas/366260 "2024-09-09T17:50:27Z")
Is there a way we can segregate all replica shards on a separate node and all primary shard on a separate node? --- ## [Connect ECONNREFUSED for Kibana with xpack.security.enabled: true](https://discuss.elastic.co/t/connect-econnrefused-for-kibana-with-xpack-security-enabled-true/366265)
**Author:** [@RSaravanaPrasad](https://discuss.elastic.co/u/RSaravanaPrasad)\ **Replies:** 0\ **Last updated:** [September 9, 2024, 5:12pm UTC](https://discuss.elastic.co/t/connect-econnrefused-for-kibana-with-xpack-security-enabled-true/366265 "2024-09-09T17:12:28Z")
Version: Elasticsearch and kibana on version 8.13.4 Environment: Minikube. While setting up xpack.security, getting following errors. Logs from kibana pod: {"type":"log","@timestamp":"2024-09-09T14:35:51+00:00","tags… --- ## [Possibly allow Kibana to dynamically change i18n config?](https://discuss.elastic.co/t/possibly-allow-kibana-to-dynamically-change-i18n-config/366140)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 1\ **Last updated:** [September 9, 2024, 3:58pm UTC](https://discuss.elastic.co/t/possibly-allow-kibana-to-dynamically-change-i18n-config/366140 "2024-09-09T15:58:08Z")
From i18n settings in Kibana | Kibana Guide \[8.15\] | Elastic , changing Kibana's Web UI usually requires setting specific environment variables when launching Kibana's Docker Container, which sounds like I18N\_LOCALE: zh… --- ## [File-beat parsing of log files in not working as expected](https://discuss.elastic.co/t/file-beat-parsing-of-log-files-in-not-working-as-expected/366254)
**Author:** [@Balaganesh](https://discuss.elastic.co/u/Balaganesh)\ **Replies:** 0\ **Last updated:** [September 9, 2024, 3:05pm UTC](https://discuss.elastic.co/t/file-beat-parsing-of-log-files-in-not-working-as-expected/366254 "2024-09-09T15:05:45Z")
Hello Team , I have tried a bunch of different log formats in our application (external-search) , spring boot default , we are facing the below error (May be log format is not supporting ) , How to resolve this error ? … --- ## [ILM warm shrinked indicies vs delete phase](https://discuss.elastic.co/t/ilm-warm-shrinked-indicies-vs-delete-phase/366231)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 5\ **Last updated:** [September 9, 2024, 2:36pm UTC](https://discuss.elastic.co/t/ilm-warm-shrinked-indicies-vs-delete-phase/366231 "2024-09-09T14:36:17Z")
Running a v.8.15.0 cluster of 3x data nodes and got a 30 days ILM policy like this: { "30-days-default": { "version": 3, "modified\_date": "2023-03-17T23:13:14.838Z", "policy": { "phases": { "… --- ## [Get Task from index.default\_pipeline](https://discuss.elastic.co/t/get-task-from-index-default-pipeline/366037)
**Author:** [@Shell\_Dias](https://discuss.elastic.co/u/Shell_Dias)\ **Replies:** 3\ **Last updated:** [September 9, 2024, 1:53pm UTC](https://discuss.elastic.co/t/get-task-from-index-default-pipeline/366037 "2024-09-09T13:53:11Z")
I have a mapping that by default creates an index with the index.default\_pipeline configuration pointing to an ingest pipeline. PUT search-d { "settings": { "index.default\_pipeline": "e5-small-ingest-pipeline" … --- ## [Timeout happens to do Azure Authentication in Elastic Search 8.15.0 Custom Plugin](https://discuss.elastic.co/t/timeout-happens-to-do-azure-authentication-in-elastic-search-8-15-0-custom-plugin/366248)
**Author:** [@Super\_B](https://discuss.elastic.co/u/Super_B)\ **Replies:** 0\ **Last updated:** [September 9, 2024, 1:20pm UTC](https://discuss.elastic.co/t/timeout-happens-to-do-azure-authentication-in-elastic-search-8-15-0-custom-plugin/366248 "2024-09-09T13:20:12Z")
Hello, I'm trying to authenticate in a Elastic Search custom plugin using the Azure Java SDK, but I get a timeout at credential.getToken().block() If I use credential.getTokenSync(), it gets blocked on this function for… --- ## [How can you create reusable Vega-Lite components?](https://discuss.elastic.co/t/how-can-you-create-reusable-vega-lite-components/366246)
**Author:** [@ani\_Watches](https://discuss.elastic.co/u/ani_Watches)\ **Replies:** 1\ **Last updated:** [September 9, 2024, 1:19pm UTC](https://discuss.elastic.co/t/how-can-you-create-reusable-vega-lite-components/366246 "2024-09-09T13:19:27Z")
Hello everyone, As a newcomer to Vega, I'm working on a dashboard that displays various metrics for different servers (such as status, number of containers, and names). All data comes from metricbeat/heartbeat queries. … --- ## [Limit anonymous user's ability on embedded Kibana dashboard](https://discuss.elastic.co/t/limit-anonymous-users-ability-on-embedded-kibana-dashboard/366240)
**Author:** [@Muhammad\_Adil\_Talay](https://discuss.elastic.co/u/Muhammad_Adil_Talay)\ **Replies:** 1\ **Last updated:** [September 9, 2024, 1:00pm UTC](https://discuss.elastic.co/t/limit-anonymous-users-ability-on-embedded-kibana-dashboard/366240 "2024-09-09T13:00:52Z")
Hi, I'm following this tutorial on Elastic blog to embed Kibana dashboard on my website. I expect only the dashboard to appear using this method. However, the Elasticsearch bar, side bar and some other items also appear. … --- ## [Xpack.security.enabled=false](https://discuss.elastic.co/t/xpack-security-enabled-false/366233)
**Author:** [@Yo0kii](https://discuss.elastic.co/u/Yo0kii)\ **Replies:** 0\ **Last updated:** [September 9, 2024, 9:53am UTC](https://discuss.elastic.co/t/xpack-security-enabled-false/366233 "2024-09-09T09:53:13Z")
ECK-Operator When using ECK to deploy Elasticsearch, can you set it not to use username and password? [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=171) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=173)