# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1785 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1786 --- ## [Dynamic variable in Http\_poller url](https://discuss.elastic.co/t/dynamic-variable-in-http-poller-url/249943)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 2:03pm UTC](https://discuss.elastic.co/t/dynamic-variable-in-http-poller-url/249943 "2020-09-25T14:03:13Z")
Hi all, i try to make the endDate in the url , dynamic ( take the date of the system) ? but i got error in logstash . \[2020-09-25T10:24:22,616\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Attempting to install templa… --- ## [Logstash can't start](https://discuss.elastic.co/t/logstash-cant-start/249673)
**Author:** [@Ben\_said](https://discuss.elastic.co/u/Ben_said)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 1:56pm UTC](https://discuss.elastic.co/t/logstash-cant-start/249673 "2020-09-25T13:56:00Z")
Hello, Can someone help me please i want to configure format date in pipeline logstash Pipeline Config : input { beats { port =\> 5044 host =\> "0.0.0.0" } } filter { if \[fileset\]\[module\] == "system" { … --- ## [How can we read data from Qualys to any of E L K?](https://discuss.elastic.co/t/how-can-we-read-data-from-qualys-to-any-of-e-l-k/249754)
**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 1:45pm UTC](https://discuss.elastic.co/t/how-can-we-read-data-from-qualys-to-any-of-e-l-k/249754 "2020-09-25T13:45:06Z")
Continuing the discussion from Qualys API integration into Elasticsearch: --- ## [Filebeat Fortinet module not working](https://discuss.elastic.co/t/filebeat-fortinet-module-not-working/247063)
**Author:** [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\ **Replies:** 3\ **Last updated:** [September 1, 2020, 9:51am UTC](https://discuss.elastic.co/t/filebeat-fortinet-module-not-working/247063 "2020-09-01T09:51:15Z")
I have a FortiGate 200E firewall and I can see the logs reaching the filebeat machine (using tcpdump listening on port 9004). but filebeat doesn't process them ( no logs in discover tab the output of journalctl -xeu file… --- ## [Slow refresh times for large indices](https://discuss.elastic.co/t/slow-refresh-times-for-large-indices/249811)
**Author:** [@yogevyuval](https://discuss.elastic.co/u/yogevyuval)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 12:56pm UTC](https://discuss.elastic.co/t/slow-refresh-times-for-large-indices/249811 "2020-09-25T12:56:44Z")
Hi, We are experiencing a very high load on the cluster, which seems to happen from a very high iops rate (\>5000), when indexing to very specific indices. In this graph you can see our disk iops during indexing to thos… --- ## [Two sequential drop down filters in Canvas](https://discuss.elastic.co/t/two-sequential-drop-down-filters-in-canvas/249934)
**Author:** [@guas5](https://discuss.elastic.co/u/guas5)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 12:53pm UTC](https://discuss.elastic.co/t/two-sequential-drop-down-filters-in-canvas/249934 "2020-09-25T12:53:56Z")
Hello everyone, I would be grateful for a hint if it is possible to configure in canvas two dropdwon filters: for example, the first one displays user id and then the second filter displays user's first and last name an… --- ## [Unexpected format of ES document generated by FileBeats](https://discuss.elastic.co/t/unexpected-format-of-es-document-generated-by-filebeats/249834)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 1\ **Last updated:** [September 25, 2020, 12:36pm UTC](https://discuss.elastic.co/t/unexpected-format-of-es-document-generated-by-filebeats/249834 "2020-09-25T12:36:36Z")
Hi guys! I'm starting to test with FileBeats and I can't generate documents in ElasticSearch that suit what I want. This is my scenario. I want to send some audit information to ElasticSearch from my Java application. … --- ## [Send log from SUSE 10 to logstash](https://discuss.elastic.co/t/send-log-from-suse-10-to-logstash/249927)
**Author:** [@diecode](https://discuss.elastic.co/u/diecode)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 11:20am UTC](https://discuss.elastic.co/t/send-log-from-suse-10-to-logstash/249927 "2020-09-25T11:20:35Z")
Hey, I have few SUSE 10 servers (old novell servers, I cannot upgrade). I would like send a file content to remote logstash. I tried install filebeat, but the SUSE 10 is not supported. There is syslog-ng on the SUSE10, … --- ## [Disable kibana home page](https://discuss.elastic.co/t/disable-kibana-home-page/249960)
**Author:** [@Shikhar\_Dixit](https://discuss.elastic.co/u/Shikhar_Dixit)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 11:00am UTC](https://discuss.elastic.co/t/disable-kibana-home-page/249960 "2020-09-25T11:00:14Z")
Hi, I want to disable the kibana home button, which when clicked, takes the user to home page. How can I do that? --- ## [Cluster not forming](https://discuss.elastic.co/t/cluster-not-forming/249948)
**Author:** [@ggrocott](https://discuss.elastic.co/u/ggrocott)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 10:23am UTC](https://discuss.elastic.co/t/cluster-not-forming/249948 "2020-09-25T10:23:12Z")
I have two servers, both Ubuntu servers running 20.04.1 and Java versions 11.0.8 No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04.1 LTS Release: 20.04 Codename: focal r… --- ## [Sending alert to Opsgenie](https://discuss.elastic.co/t/sending-alert-to-opsgenie/249955)
**Author:** [@mokashi](https://discuss.elastic.co/u/mokashi)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 10:19am UTC](https://discuss.elastic.co/t/sending-alert-to-opsgenie/249955 "2020-09-25T10:19:40Z")
Hi, I created a a watcher in Elasticsearch to send alert to Opsgenie, below is the Watcher configuration toward Opsgenie: { "trigger": { "schedule": { "cron": "0 0 7-15 \* \* ?" } }, "input": { "… --- ## [Beat not creating index the right way after change output from elasticsearch to logstash](https://discuss.elastic.co/t/beat-not-creating-index-the-right-way-after-change-output-from-elasticsearch-to-logstash/249951)
**Author:** [@hank](https://discuss.elastic.co/u/hank)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 9:57am UTC](https://discuss.elastic.co/t/beat-not-creating-index-the-right-way-after-change-output-from-elasticsearch-to-logstash/249951 "2020-09-25T09:57:08Z")
hi installed new elastic stack with version 7.9.1 and filebeat localy everything working fine with default config installed logstash and changed the output in filebeat.yml to logstash index creating not working as bef… --- ## [Date serialization and shading](https://discuss.elastic.co/t/date-serialization-and-shading/249944)
**Author:** [@jnioche](https://discuss.elastic.co/u/jnioche)\ **Replies:** 1\ **Last updated:** [September 25, 2020, 10:07am UTC](https://discuss.elastic.co/t/date-serialization-and-shading/249944 "2020-09-25T10:07:17Z")
I am experiencing the same issue as this one. I copied the code snippet provided by @baz and am able to run it without problems with mvn compile exec:java or from Eclipse but when building the uber jar with Maven shade … --- ## [Log4j2.properties: An example of a multiple conditions configuration for an elasticsearch 7 cluster (7.6.1)](https://discuss.elastic.co/t/log4j2-properties-an-example-of-a-multiple-conditions-configuration-for-an-elasticsearch-7-cluster-7-6-1/249939)
**Author:** [@ginolegigot](https://discuss.elastic.co/u/ginolegigot)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 9:22am UTC](https://discuss.elastic.co/t/log4j2-properties-an-example-of-a-multiple-conditions-configuration-for-an-elasticsearch-7-cluster-7-6-1/249939 "2020-09-25T09:22:44Z")
Due to the lack of a proper documentation on this matter (yes it's not that obvious how you write a log4j.properties based on xml examples from log4j2 documentation), I thought it would have been useful to share my log4j… --- ## [How to configure Data table visualization as drilldown in Line graph visualization](https://discuss.elastic.co/t/how-to-configure-data-table-visualization-as-drilldown-in-line-graph-visualization/249770)
**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-configure-data-table-visualization-as-drilldown-in-line-graph-visualization/249770 "2020-09-25T09:12:55Z")
Hi Team, Is it possible to provide data table visualization as drilldown upon clicking any line in line graph visualization in Kibana? For example, I have a line graph(built based on number of method calls on Y-axis an… --- ## [Transfer (Dell EMC PowerMax)-Data from Grafana to Elastic Index](https://discuss.elastic.co/t/transfer-dell-emc-powermax-data-from-grafana-to-elastic-index/249932)
**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\ **Replies:** 0\ **Last updated:** [September 25, 2020, 8:42am UTC](https://discuss.elastic.co/t/transfer-dell-emc-powermax-data-from-grafana-to-elastic-index/249932 "2020-09-25T08:42:18Z")
Hello community, we do have a DELL EMC Powermax Storage and want to monitor the storage with elastic. We ask yourself if it is possible to grep data which is available in an grafana influx DB and send this data to elast… --- ## [Minimum Privilege Required for Beats](https://discuss.elastic.co/t/minimum-privilege-required-for-beats/247729)
**Author:** [@hpicass0](https://discuss.elastic.co/u/hpicass0)\ **Replies:** 6\ **Last updated:** [September 25, 2020, 8:37am UTC](https://discuss.elastic.co/t/minimum-privilege-required-for-beats/247729 "2020-09-25T08:37:40Z")
Hi, Given than I need to set the API key or username/password pair in the beats config (and they might get exposed). I need to set the privilege to the absolute minimum for the relevant account I've went over the roles… --- ## [Load Usage gauge not showing for metricbeat agent](https://discuss.elastic.co/t/load-usage-gauge-not-showing-for-metricbeat-agent/248676)
**Author:** [@pankaj0172](https://discuss.elastic.co/u/pankaj0172)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 8:32am UTC](https://discuss.elastic.co/t/load-usage-gauge-not-showing-for-metricbeat-agent/248676 "2020-09-25T08:32:47Z")
HI Team, Can someone please help me here as Load Guage is not showing in Dashboard while checking Host overview of any machines.. Thanks. --- ## [What is the grok pattern for the IIS Logs](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-the-iis-logs/249492)
**Author:** [@Dubru](https://discuss.elastic.co/u/Dubru)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 7:32am UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-the-iis-logs/249492 "2020-09-25T07:32:06Z")
Hi, What is the grok pattern for the following log, as I am new to grok patterns I would need help in making the them. date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip… --- ## [Lock time picker from dashboard/visualization interractions](https://discuss.elastic.co/t/lock-time-picker-from-dashboard-visualization-interractions/249356)
**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 7:29am UTC](https://discuss.elastic.co/t/lock-time-picker-from-dashboard-visualization-interractions/249356 "2020-09-25T07:29:12Z")
Hello, We have a dashboard embedded on your platform interface, that can be seen by users (actually operators of the product). The operator mainly use the interface from a tablet, can change the time picker and filter … --- ## [Elastic Search Version Conflict](https://discuss.elastic.co/t/elastic-search-version-conflict/249699)
**Author:** [@surajdalvi](https://discuss.elastic.co/u/surajdalvi)\ **Replies:** 7\ **Last updated:** [September 25, 2020, 5:49am UTC](https://discuss.elastic.co/t/elastic-search-version-conflict/249699 "2020-09-25T05:49:00Z")
I am using an elastic search for search purpose. But recently I observer that some random error while adding data into elastic search. The error looks like: version conflict, required seqNo \[113789\], primary term \[19\]. … --- ## [Problem about using modules parsing log files while having JSON files](https://discuss.elastic.co/t/problem-about-using-modules-parsing-log-files-while-having-json-files/249050)
**Author:** [@sougou](https://discuss.elastic.co/u/sougou)\ **Replies:** 3\ **Last updated:** [September 24, 2020, 10:28am UTC](https://discuss.elastic.co/t/problem-about-using-modules-parsing-log-files-while-having-json-files/249050 "2020-09-24T10:28:05Z")
Hi, My architecture is as follows: Filebeat -\> Logstash -\> Elasticsearch I passed a number of files to filebeat. Some of which uses some modules. These modules have been given unique var.paths in their module configur… --- ## [What is the classpath for logstash jar and third party jar like manticore in logstash 7.4?](https://discuss.elastic.co/t/what-is-the-classpath-for-logstash-jar-and-third-party-jar-like-manticore-in-logstash-7-4/249783)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 1\ **Last updated:** [September 25, 2020, 6:36am UTC](https://discuss.elastic.co/t/what-is-the-classpath-for-logstash-jar-and-third-party-jar-like-manticore-in-logstash-7-4/249783 "2020-09-25T06:36:49Z")
any idea for this --- ## [How can I split kibana dashboard?](https://discuss.elastic.co/t/how-can-i-split-kibana-dashboard/249908)
**Author:** [@ojm](https://discuss.elastic.co/u/ojm)\ **Replies:** 5\ **Last updated:** [September 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/how-can-i-split-kibana-dashboard/249908 "2020-09-25T06:35:38Z")
I downloaded kibana open source (v7.8.1). I was wondering that how can I share dashboard area. I want the dashboard to be run in half. And the other half would like to have my website run using iframe. however I have … --- ## [Throttle messages arriving to elastic, in elastic?](https://discuss.elastic.co/t/throttle-messages-arriving-to-elastic-in-elastic/249909)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [September 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/throttle-messages-arriving-to-elastic-in-elastic/249909 "2020-09-25T06:35:07Z")
Hello All, Is there a way to throttle messages sent to elastic and indexing? I saw a document on how to increase indexing speed. Is there a way to decrease the index rate? For example, if elastic gets 1 million messa… --- ## [Kibana makes default index-pattern a not existing one](https://discuss.elastic.co/t/kibana-makes-default-index-pattern-a-not-existing-one/249716)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 2\ **Last updated:** [September 25, 2020, 5:51am UTC](https://discuss.elastic.co/t/kibana-makes-default-index-pattern-a-not-existing-one/249716 "2020-09-25T05:51:50Z")
Hi , I used the below command curl -k --show-error "10.254.43.178:5601/api/kibana/settings" --max-time 3 --retry 1 -H 'kbn-version: 7.0.1' -H 'Content-Type: application/json' --data-binary '{"changes":{"defaultIndex":… --- ## [Metricbeat kubernetes module collection 401](https://discuss.elastic.co/t/metricbeat-kubernetes-module-collection-401/246904)
**Author:** [@ZMMWMY](https://discuss.elastic.co/u/ZMMWMY)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 4:28am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module-collection-401/246904 "2020-09-25T04:28:01Z")
I can collect node data, but k8s can't the configuration - module: kubernetes metricsets: - node - system - pod - container - volume period: 10s host: ${NODE\_NAME} hosts: \["https://${NODE\_IP… --- ## [Json array split using logstash](https://discuss.elastic.co/t/json-array-split-using-logstash/249876)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [September 25, 2020, 12:19am UTC](https://discuss.elastic.co/t/json-array-split-using-logstash/249876 "2020-09-25T00:19:29Z")
I have a jason array like the below The split filter is working till sdwan.status \`split { field =\> "\[parsed\_collection\]\[collection\]\[sdwan:status\]" } when I try to split till path-status like this split { field =\> "… --- ## [How config Elastic to use LDAP on Kibana](https://discuss.elastic.co/t/how-config-elastic-to-use-ldap-on-kibana/249170)
**Author:** [@Rafael\_Valverde](https://discuss.elastic.co/u/Rafael_Valverde)\ **Replies:** 2\ **Last updated:** [September 24, 2020, 11:13pm UTC](https://discuss.elastic.co/t/how-config-elastic-to-use-ldap-on-kibana/249170 "2020-09-24T23:13:02Z")
We are trying to config LDAP on elastic to enable LDAP authentication on Kibana, following this guide:https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html See my current config bellow also. Th… --- ## [Winlogbeat: Problem to get fields from nested winevent message](https://discuss.elastic.co/t/winlogbeat-problem-to-get-fields-from-nested-winevent-message/249712)
**Author:** [@Pedro\_77](https://discuss.elastic.co/u/Pedro_77)\ **Replies:** 4\ **Last updated:** [September 24, 2020, 10:47pm UTC](https://discuss.elastic.co/t/winlogbeat-problem-to-get-fields-from-nested-winevent-message/249712 "2020-09-24T22:47:00Z")
Hello I have problem with winlogbeat (7.9.1) I'm trying to get fields which are "nested" in message field: for example: "message": Endpoint: xxxyy211\\n Endpoint IP: 10.1.1.x\\n … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1784) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1786)