# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1753 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1754 --- ## [ElasticSearch 6.5.1 TLS setting](https://discuss.elastic.co/t/elasticsearch-6-5-1-tls-setting/251796)
**Author:** [@varom](https://discuss.elastic.co/u/varom)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 7:39pm UTC](https://discuss.elastic.co/t/elasticsearch-6-5-1-tls-setting/251796 "2020-10-13T19:39:50Z")
Hi , i am struggling for long time to establish TLS communication between 2 nodes. I followed : https://www.elastic.co/guide/en/elasticsearch/reference/6.5/configuring-tls.html#node-certificates Also check several lin… --- ## [Time stamp is wrong](https://discuss.elastic.co/t/time-stamp-is-wrong/251957)
**Author:** [@victor.vera](https://discuss.elastic.co/u/victor.vera)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/time-stamp-is-wrong/251957 "2020-10-13T19:17:51Z")
I have a problem with the time stamp I get the date right, but the time is wrong I get like 5 hours in advance, the date is right but I do not know why I get another time of execution, set the time zone in kibana, but I … --- ## [Is there an event handler for Retries within the NEST client?](https://discuss.elastic.co/t/is-there-an-event-handler-for-retries-within-the-nest-client/251951)
**Author:** [@astanton1978](https://discuss.elastic.co/u/astanton1978)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 6:50pm UTC](https://discuss.elastic.co/t/is-there-an-event-handler-for-retries-within-the-nest-client/251951 "2020-10-13T18:50:26Z")
We are getting frequent request timeouts and have specified... throw exceptions disable direct streaming a 2 minute request timeout up to 5 retries a max retry timeout of 10 minutes ... on the client and are executing… --- ## [Help with Logstash filter](https://discuss.elastic.co/t/help-with-logstash-filter/251825)
**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 6:47pm UTC](https://discuss.elastic.co/t/help-with-logstash-filter/251825 "2020-10-13T18:47:21Z")
Hi, I'm new to ELK and Grok. I'm using ES 7.7 and logstash 7.9. Application logs are coming from Filebeat \> Logstash \> ES. My logs are being indexed into ES and viewable from Kibana. Issue is my logstash filter is not c… --- ## [Elasticsearch 7.2 set up cluster ERROR: \[2\] bootstrap checks failed in docker](https://discuss.elastic.co/t/elasticsearch-7-2-set-up-cluster-error-2-bootstrap-checks-failed-in-docker/251946)
**Author:** [@bognad](https://discuss.elastic.co/u/bognad)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 6:21pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-set-up-cluster-error-2-bootstrap-checks-failed-in-docker/251946 "2020-10-13T18:21:08Z")
Hello! I have tried convert Elasticsearch 7.2 standalone node to cluster in docker. Error: elasticsearch\_1 | {"type": "server", "timestamp": "2020-10-13T15:36:39,791+0000", "level": "INFO", "component": "o.e.b.Bo… --- ## [Help with Logstash Config - Conditionals in filters](https://discuss.elastic.co/t/help-with-logstash-config-conditionals-in-filters/251623)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 5:57pm UTC](https://discuss.elastic.co/t/help-with-logstash-config-conditionals-in-filters/251623 "2020-10-13T17:57:09Z")
I'm attempting to parse Versa Analytics Events. The log stream from the SD-Wan devices will have several event types in the over all stream. E.g. URL event logs, FW event logs, IDS event logs etc. My config is as follow… --- ## [Download CSV report from kibana discover of size greater than 10 MB](https://discuss.elastic.co/t/download-csv-report-from-kibana-discover-of-size-greater-than-10-mb/251801)
**Author:** [@neil12345](https://discuss.elastic.co/u/neil12345)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 5:50pm UTC](https://discuss.elastic.co/t/download-csv-report-from-kibana-discover-of-size-greater-than-10-mb/251801 "2020-10-13T17:50:21Z")
Hi Team, I want to download the logs as csv report from Discover. I am using kibana@7.9.2. Can you please help me how can I get this? When I change the max file size to greater than 10 MB and I get error, even after in… --- ## [SMS Alerting](https://discuss.elastic.co/t/sms-alerting/251744)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 5:45pm UTC](https://discuss.elastic.co/t/sms-alerting/251744 "2020-10-13T17:45:40Z")
Hi If I have a premium ELK license, how can I use with alerting?!? I just know the connection between kibana and elasticsearch must be secured... how?!? And also, what should I do, to send some alerts or anomalies to … --- ## [Visualisation Blank in kibana due to failed](https://discuss.elastic.co/t/visualisation-blank-in-kibana-due-to-failed/251378)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 5:38pm UTC](https://discuss.elastic.co/t/visualisation-blank-in-kibana-due-to-failed/251378 "2020-10-13T17:38:11Z")
i create a visualization data table with kibana 7.5.0, went i run it i didnt get a table and i get error : { "resp": { "error": {} } } how to solve it and show the visualization... thanks before --- ## [AWS metrics shipping intervals are unstable and not matching the configuration of 1minute](https://discuss.elastic.co/t/aws-metrics-shipping-intervals-are-unstable-and-not-matching-the-configuration-of-1minute/251159)
**Author:** [@Yotamloe](https://discuss.elastic.co/u/Yotamloe)\ **Replies:** 9\ **Last updated:** [October 13, 2020, 5:28pm UTC](https://discuss.elastic.co/t/aws-metrics-shipping-intervals-are-unstable-and-not-matching-the-configuration-of-1minute/251159 "2020-10-13T17:28:13Z")
Hey everyone. I'm facing an issue when using AWS module (cloudwatch metricset) with metricbeat 7.5.2, I'm trying to send metrics data to elasticsearch every 1 minute and I receive the data from the AWS/NetworkELB service… --- ## [Logstash-input-salesforce plugin logstash error](https://discuss.elastic.co/t/logstash-input-salesforce-plugin-logstash-error/251811)
**Author:** [@cmay](https://discuss.elastic.co/u/cmay)\ **Replies:** 5\ **Last updated:** [October 13, 2020, 4:55pm UTC](https://discuss.elastic.co/t/logstash-input-salesforce-plugin-logstash-error/251811 "2020-10-13T16:55:49Z")
I've tried reinstalling logstash and the logstash-input-salesforce plugin after changing from Java 11 to 1.8.0. I restart the service. I never see it in Kibana. ERROR RECEIVED: \[2020-10-12T16:05:14,151\]\[ERROR\]\[logstash… --- ## [Logstash - Elastic App Search Error](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937)
**Author:** [@Tam2](https://discuss.elastic.co/u/Tam2)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 4:46pm UTC](https://discuss.elastic.co/t/logstash-elastic-app-search-error/251937 "2020-10-13T16:46:06Z")
Running logstash with the elastic\_app\_search output throws an error My config file looks like this: input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver://XXXXX:1433;databaseName=XXXX;user=XXXX;passwo… --- ## [Grouping GPS points into custom GeoJSON sections](https://discuss.elastic.co/t/grouping-gps-points-into-custom-geojson-sections/251478)
**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 4:41pm UTC](https://discuss.elastic.co/t/grouping-gps-points-into-custom-geojson-sections/251478 "2020-10-13T16:41:01Z")
Hello all! Wondering if someone can shed some light on whether I'm trying to do the impossible in Kibana :slight\_smile: I'll use example images for the purposes of this post. The following image shows a number of geog… --- ## [Index Lifecycle Policy not working properly](https://discuss.elastic.co/t/index-lifecycle-policy-not-working-properly/251905)
**Author:** [@OmarDacca](https://discuss.elastic.co/u/OmarDacca)\ **Replies:** 0\ **Last updated:** [October 13, 2020, 1:23pm UTC](https://discuss.elastic.co/t/index-lifecycle-policy-not-working-properly/251905 "2020-10-13T13:23:48Z")
(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged) --- ## [Custom Logstash snmp plugin pipeline approach](https://discuss.elastic.co/t/custom-logstash-snmp-plugin-pipeline-approach/251901)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 4:23pm UTC](https://discuss.elastic.co/t/custom-logstash-snmp-plugin-pipeline-approach/251901 "2020-10-13T16:23:52Z")
Hello, I need to add data get via logstash SNMP plugin to elastisearch. I wanted to ask things I am not sure about how to approach. 1.) How Can I define static fields like interface name description, hostname, etc, so… --- ## [Tagging a document](https://discuss.elastic.co/t/tagging-a-document/251899)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 4:13pm UTC](https://discuss.elastic.co/t/tagging-a-document/251899 "2020-10-13T16:13:10Z")
With the logic below, I am getting a field in the document, a\_device\_customer\_code = 'dupont', but the document is tagged with tags = '%{cust\_code\]'. Is there something I am over looking? |t a\_device\_customer\_code |||--… --- ## [Export CSV Kibana : Trucated and encoding problems (v7.5)](https://discuss.elastic.co/t/export-csv-kibana-trucated-and-encoding-problems-v7-5/251250)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 4:01pm UTC](https://discuss.elastic.co/t/export-csv-kibana-trucated-and-encoding-problems-v7-5/251250 "2020-10-13T16:01:35Z")
Hello, Kibana Version 7.5 I find a problem when i export a search with Kibana CSV Export. First problem : character encoding problem Example Trop élevés Second problem : Export can sometimes truncated (i don't kn… --- ## [Logstash FileOutput Custom Name](https://discuss.elastic.co/t/logstash-fileoutput-custom-name/251838)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 3:58pm UTC](https://discuss.elastic.co/t/logstash-fileoutput-custom-name/251838 "2020-10-13T15:58:41Z")
I have a requirement where the file name (in the output) in a specific way. After 11.30pm, It need to take next day date. For example, today is 13th Oct 2020, the file name is ouput\_13102020.log but then once it passes… --- ## [Unable to push data from mongodb to elastic search using logstash in windows](https://discuss.elastic.co/t/unable-to-push-data-from-mongodb-to-elastic-search-using-logstash-in-windows/251722)
**Author:** [@Durga\_AK](https://discuss.elastic.co/u/Durga_AK)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 3:56pm UTC](https://discuss.elastic.co/t/unable-to-push-data-from-mongodb-to-elastic-search-using-logstash-in-windows/251722 "2020-10-13T15:56:43Z")
Im using the below config file to push data from mongodb to elastic search input{ mongodb{ uri=\>\[""\] placeholder\_db\_dir=\>"C:\\Windows\\System32" placeholder\_db\_name=\>"logstash\_sqlite.db" collection=\>"menus" batch\_si… --- ## [Logstash decprecated?](https://discuss.elastic.co/t/logstash-decprecated/251929)
**Author:** [@opouwels](https://discuss.elastic.co/u/opouwels)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 3:47pm UTC](https://discuss.elastic.co/t/logstash-decprecated/251929 "2020-10-13T15:47:00Z")
Hi Application developer wants to use https://quarkus.io/guides/centralized-log-management to send his multiline java logs to our elastic server, as quarkus defines to use logstash which we don't use at the moment I ne… --- ## [Why do I see the winlogbeat fields in Filebeat indexes after creating the winlogbeat index?](https://discuss.elastic.co/t/why-do-i-see-the-winlogbeat-fields-in-filebeat-indexes-after-creating-the-winlogbeat-index/251637)
**Author:** [@zargaran](https://discuss.elastic.co/u/zargaran)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 3:40pm UTC](https://discuss.elastic.co/t/why-do-i-see-the-winlogbeat-fields-in-filebeat-indexes-after-creating-the-winlogbeat-index/251637 "2020-10-13T15:40:10Z")
I have a filebeat index which worked very carefully. Now I send Windows logs to logstash via winlogbeat and from there I send it to Elasticsearch. A strange thing happens to me over and over again, and that is that afte… --- ## [Filebeat o365 module - Load balancing](https://discuss.elastic.co/t/filebeat-o365-module-load-balancing/251728)
**Author:** [@srilumpa](https://discuss.elastic.co/u/srilumpa)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 3:31pm UTC](https://discuss.elastic.co/t/filebeat-o365-module-load-balancing/251728 "2020-10-13T15:31:03Z")
Hi, We are looking to use the o365 module from filebeat to gather logs from the Office365 API and we have one question that is not adressed in the documentation (or I haven't find mention about it). In order to deal wi… --- ## [Kibana user logins evaluation](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527)
**Author:** [@Thomas\_Sieger](https://discuss.elastic.co/u/Thomas_Sieger)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/kibana-user-logins-evaluation/250527 "2020-10-13T15:04:31Z")
Hello everyone, I would like to monitor the login behavior of our users. However, I am currently not able to evaluate this, because the username is in the middle of the message. Is there a possibility to filter by it o… --- ## [Managing beats and template versions](https://discuss.elastic.co/t/managing-beats-and-template-versions/251829)
**Author:** [@jreichman](https://discuss.elastic.co/u/jreichman)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 3:04pm UTC](https://discuss.elastic.co/t/managing-beats-and-template-versions/251829 "2020-10-13T15:04:24Z")
Hi, I'm trying to work out the best way to manage differing versions of beats for an elastic search instance. If I output from filebeat to logstash, then to elastic search, I miss out on automatic index template creati… --- ## [Login assistance message markdown problem](https://discuss.elastic.co/t/login-assistance-message-markdown-problem/251262)
**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\ **Replies:** 1\ **Last updated:** [October 13, 2020, 2:50pm UTC](https://discuss.elastic.co/t/login-assistance-message-markdown-problem/251262 "2020-10-13T14:50:38Z")
Hi, I have two question about xpack.security.loginAssistanceMessage: 1- How can I add a new line? I tried \
, \\ , \\n\\n and \\n\* but no luck. 2- How can I customize the image size? I'm using !\[name\](URL) format. Ca… --- ## [Heartbeat returns wrong x.509 information (tls.server.x509)](https://discuss.elastic.co/t/heartbeat-returns-wrong-x-509-information-tls-server-x509/251484)
**Author:** [@fik](https://discuss.elastic.co/u/fik)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 9:25am UTC](https://discuss.elastic.co/t/heartbeat-returns-wrong-x-509-information-tls-server-x509/251484 "2020-10-13T09:25:52Z")
We have bunch of apps monitored via HTTP endpoints. However, for one of them, heartbeat writes wrong to data to elasticsearch. Data in tls.server.x509 contains old outdated certificate, however it was changed many month… --- ## [ELK stack Installation issue](https://discuss.elastic.co/t/elk-stack-installation-issue/251596)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [October 13, 2020, 2:41pm UTC](https://discuss.elastic.co/t/elk-stack-installation-issue/251596 "2020-10-13T14:41:02Z")
Hello there, I am trying to install version 7.8.1 for Elasticsearch, Kibana and Logstash but when I try to ingest data from Logstash it gives me an error. Please look at the attached screenshot of my CMD screen for … --- ## [Starting with ELK](https://discuss.elastic.co/t/starting-with-elk/251885)
**Author:** [@riosdfr](https://discuss.elastic.co/u/riosdfr)\ **Replies:** 4\ **Last updated:** [October 13, 2020, 2:31pm UTC](https://discuss.elastic.co/t/starting-with-elk/251885 "2020-10-13T14:31:31Z")
Dear All, I am completely new to ELK and following some help I created a docker-compose.yml file in order to run it under Docker. Inside this file I configured a elasticsearch service and kibana, but accessing kibana is… --- ## [Configure ingest manager in elasticseach 7.9](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 6\ **Last updated:** [October 13, 2020, 2:27pm UTC](https://discuss.elastic.co/t/configure-ingest-manager-in-elasticseach-7-9/251114 "2020-10-13T14:27:52Z")
I have configured ELK on a single VM ( Centos 7 / 10Gig / 4 CPU) along with filebeat and auditbeat as POC and encountered the below error while trying to use the ingest manager. I followed the security setup as sugges… --- ## [Properly Setup Metricbeat with Statsd](https://discuss.elastic.co/t/properly-setup-metricbeat-with-statsd/251792)
**Author:** [@traw1234](https://discuss.elastic.co/u/traw1234)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 2:08pm UTC](https://discuss.elastic.co/t/properly-setup-metricbeat-with-statsd/251792 "2020-10-13T14:08:06Z")
I'm using Metricbeat to send to a 3rd party logstash, and it's working well with system but there seems to be some trouble with statsd (running on localhost:8125). My current metricbeat.yml looks like this (with some oth… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1752) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1754)