# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1840 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1841 --- ## [Logstash - Unable to start the pipeline(Cipher Issue)](https://discuss.elastic.co/t/logstash-unable-to-start-the-pipeline-cipher-issue/246598)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 10:31am UTC](https://discuss.elastic.co/t/logstash-unable-to-start-the-pipeline-cipher-issue/246598 "2020-08-27T10:31:07Z")
Logstash throws following error on turning on SSL - Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create\, action\_r… --- ## [Logstash cannot send data to elasticsearch](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391)
**Author:** [@pranayv66](https://discuss.elastic.co/u/pranayv66)\ **Replies:** 16\ **Last updated:** [August 26, 2020, 11:34am UTC](https://discuss.elastic.co/t/logstash-cannot-send-data-to-elasticsearch/246391 "2020-08-26T11:34:36Z")
Hi Community, I'm trying to push some data from a data directory from filebeat to logstash and then elasticsearch. The server runs on Centos7 with the installations of all 4 components. I've pasted below the config file… --- ## [Filebeat timestamp processor parsing incorrectly](https://discuss.elastic.co/t/filebeat-timestamp-processor-parsing-incorrectly/246586)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 11:09am UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-parsing-incorrectly/246586 "2020-08-27T11:09:56Z")
Filebeat timestamp processor is unable to parse timestamp as expected. Log file - 26/Aug/2020:08:00:30 +0100 26/Aug/2020:08:02:30 +0100 Filebeat config - filebeat.inputs: - type: log paths: … --- ## [Logstash with filebeat and batching](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597)
**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 10:30am UTC](https://discuss.elastic.co/t/logstash-with-filebeat-and-batching/246597 "2020-08-27T10:30:04Z")
Hi all, I know Logstash isn't made to be a batch processing tool i.e. only process logs at a certain period or time? Scenario - I have large amounts of logs coming from a firewall via filebeat to a logstash server. It … --- ## [Elasticsearch Indices not showing on Kibana](https://discuss.elastic.co/t/elasticsearch-indices-not-showing-on-kibana/246532)
**Author:** [@PaulMess](https://discuss.elastic.co/u/PaulMess)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 10:25am UTC](https://discuss.elastic.co/t/elasticsearch-indices-not-showing-on-kibana/246532 "2020-08-27T10:25:37Z")
Hello, I created a index in Elastisearch and look good (creen) But do not appears in Kibana what are the possible reasons for this? --- ## [Filebeat stopped sending logs continuously](https://discuss.elastic.co/t/filebeat-stopped-sending-logs-continuously/246595)
**Author:** [@Silvium](https://discuss.elastic.co/u/Silvium)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 10:15am UTC](https://discuss.elastic.co/t/filebeat-stopped-sending-logs-continuously/246595 "2020-08-27T10:15:10Z")
Filebeat has started to have gaps in sending logs from a file written by rsyslog from a docker instance. Below the visualisation of count of documents from specific host The path logs take to Kibana is: Docker-\> rsys… --- ## [Large CSV export issue](https://discuss.elastic.co/t/large-csv-export-issue/245976)
**Author:** [@adnanahmed](https://discuss.elastic.co/u/adnanahmed)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 10:09am UTC](https://discuss.elastic.co/t/large-csv-export-issue/245976 "2020-08-27T10:09:45Z")
Hi Friends, we are using ELK 7.9 version. We are having problem with CSV export of "Saved search" through our Dashboard, it got hanged if size of CSV gets more than 150 MB nevertheless we are able to export c… --- ## [Filebeat make update fails for new custom module](https://discuss.elastic.co/t/filebeat-make-update-fails-for-new-custom-module/246070)
**Author:** [@cpohl](https://discuss.elastic.co/u/cpohl)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 9:57am UTC](https://discuss.elastic.co/t/filebeat-make-update-fails-for-new-custom-module/246070 "2020-08-27T09:57:22Z")
I have followed the instructions: https://www.elastic.co/guide/en/beats/devguide/7.8/filebeat-modules-devguide.html create-module, create-fileset and create-fields all work correctly with no errors. But the make updat… --- ## [First query is slow after every short period of time](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591)
**Author:** [@Abhishek\_Chauhan](https://discuss.elastic.co/u/Abhishek_Chauhan)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:32am UTC](https://discuss.elastic.co/t/first-query-is-slow-after-every-short-period-of-time/246591 "2020-08-27T09:32:35Z")
Hi, I am using Elasticsearch version 7.6.2 inside a docker container and i use logstash to index data to my ES Node but when i query the ES indexes after a short amount of time, it takes a significant time to return sea… --- ## [How to rebuld Kibana for UI changes](https://discuss.elastic.co/t/how-to-rebuld-kibana-for-ui-changes/246507)
**Author:** [@User4](https://discuss.elastic.co/u/User4)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-to-rebuld-kibana-for-ui-changes/246507 "2020-08-27T09:40:41Z")
Hi, I need to change the appearance of Kibana - hide the top bar with the .euiHeader class, I make changes to the css file node\_modules \\ @kbn \\ ui-shared-deps \\ target \\ kbn-ui-shared-deps.light.css, but the changes are… --- ## [Any endpoint could update synonyms files for es cluster](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590)
**Author:** [@cindy](https://discuss.elastic.co/u/cindy)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 9:28am UTC](https://discuss.elastic.co/t/any-endpoint-could-update-synonyms-files-for-es-cluster/246590 "2020-08-27T09:28:03Z")
Is there any API in es for updating synonyms files or any plan to provide such API interface? API caller only provide synonyms content list, API could update synonyms file on each ES cluster nodes and return update resu… --- ## [Kibana 7.8 is it possible to use JSON input to filter the aggregated column in data table?](https://discuss.elastic.co/t/kibana-7-8-is-it-possible-to-use-json-input-to-filter-the-aggregated-column-in-data-table/246262)
**Author:** [@JasonYangJY](https://discuss.elastic.co/u/JasonYangJY)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 9:12am UTC](https://discuss.elastic.co/t/kibana-7-8-is-it-possible-to-use-json-input-to-filter-the-aggregated-column-in-data-table/246262 "2020-08-27T09:12:18Z")
Update: I have used the enhanced table plugin to solve this.Thank you very much! I am using kibana 7.8,and try to do some log analyzing.I try to create a data table like bellow and I only want the rows that "access\_cou… --- ## [Picking up document which contains first recorded timestamp](https://discuss.elastic.co/t/picking-up-document-which-contains-first-recorded-timestamp/246518)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 8:56am UTC](https://discuss.elastic.co/t/picking-up-document-which-contains-first-recorded-timestamp/246518 "2020-08-27T08:56:45Z")
Hi All, We are pulling data from servicenow, where all the incident records are been pulled and there are duplicate incidents as well, and all the incidents are tagged with different different created time. We need to … --- ## [Logstash parsing timestamp incorrectly](https://discuss.elastic.co/t/logstash-parsing-timestamp-incorrectly/244773)
**Author:** [@anandd4](https://discuss.elastic.co/u/anandd4)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 8:47am UTC](https://discuss.elastic.co/t/logstash-parsing-timestamp-incorrectly/244773 "2020-08-27T08:47:05Z")
Problem Statement - Filebeat streaming logs via logstash into elasticsearch (7.5) Logstash applies the filter on epoch time & update @timestamp field during data ingestion Logstash is incorrectly ingesting the timesta… --- ## [Logstash-keystore failed with error "ArgumentError: invalid byte sequence in CP949"](https://discuss.elastic.co/t/logstash-keystore-failed-with-error-argumenterror-invalid-byte-sequence-in-cp949/246582)
**Author:** [@jaykim](https://discuss.elastic.co/u/jaykim)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 8:33am UTC](https://discuss.elastic.co/t/logstash-keystore-failed-with-error-argumenterror-invalid-byte-sequence-in-cp949/246582 "2020-08-27T08:33:32Z")
Hello team, I'm working to secure configuration on ELK stack. While creating keystore in logstash, there was an error : 'ArgumentError: invalid byte sequence in CP949' It also occured in v7.8.0, don't know what happens… --- ## [How to connect elastic from public address](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918)
**Author:** [@mmax](https://discuss.elastic.co/u/mmax)\ **Replies:** 6\ **Last updated:** [August 27, 2020, 8:22am UTC](https://discuss.elastic.co/t/how-to-connect-elastic-from-public-address/245918 "2020-08-27T08:22:16Z")
Hi, I have an infrastructure of 20 servers , standalones, no lan, only public ip behind firewall. I would like monitoring them with elk using metricbeats & winlogsbeats My cluster is ok, i tested metricbeats from a vm… --- ## [How to select data from multiple indicess](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772)
**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 8:04am UTC](https://discuss.elastic.co/t/how-to-select-data-from-multiple-indicess/245772 "2020-08-27T08:04:40Z")
Hi Everyone, I am new to ELK stack, and I am facing an issue with searching data from multiple indices in single query. I am able to do this from Dev tool but not from Discover or visualization. Can anyone please help … --- ## [Read only access](https://discuss.elastic.co/t/read-only-access/246555)
**Author:** [@akhil\_mogaram](https://discuss.elastic.co/u/akhil_mogaram)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 7:59am UTC](https://discuss.elastic.co/t/read-only-access/246555 "2020-08-27T07:59:49Z")
Hello Team, I have Kibana 7.7.0 14 days trial version. How do i give read only access to other users without login credentials. Can you help me with it Thanks and Regards, Akhil --- ## [NPE for Average based on Scripted Field with missing values](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572)
**Author:** [@weand](https://discuss.elastic.co/u/weand)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 7:50am UTC](https://discuss.elastic.co/t/npe-for-average-based-on-scripted-field-with-missing-values/246572 "2020-08-27T07:50:15Z")
Hi, in a kibana data table, we want add an 'average' metric, based on a scripted field. As we want to calculate the average only for a part of the dataset, we tried to rely on the default of the missing field behavior f… --- ## [\[circuit\_breaking\_exception\] \[parent\] Data too large](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 13\ **Last updated:** [August 27, 2020, 7:06am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large/246512 "2020-08-27T07:06:48Z")
Hi all, since this morning I am getting the following errors from time to time in my ECK elasticsearch 7.9.0 cluster. Version: 7.9.0 Build: 33813 Error at Fetch.\_callee3$ (https://kibana.problem.cluster/33813/bundl… --- ## [Kibana login page with aws elasticsearch service](https://discuss.elastic.co/t/kibana-login-page-with-aws-elasticsearch-service/245815)
**Author:** [@messi](https://discuss.elastic.co/u/messi)\ **Replies:** 1\ **Last updated:** [August 27, 2020, 7:05am UTC](https://discuss.elastic.co/t/kibana-login-page-with-aws-elasticsearch-service/245815 "2020-08-27T07:05:46Z")
good afternoon guys, i just integrated kibana with the elasticsearch service from amazon and i would like to know if there is any way to enable some login page when accessing kibana? And how can I do that since the elsat… --- ## [Start auditbeat](https://discuss.elastic.co/t/start-auditbeat/246267)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 7:05am UTC](https://discuss.elastic.co/t/start-auditbeat/246267 "2020-08-27T07:05:01Z")
I'm starting auditbeat on one of the machines and I'm getting the following message when running auditbeat: ERROR instance/beat.go:951 Exiting: 1 error: system/socket dataset setup failed: tracefs/debugfs is not mo… --- ## [Error with elasticsearch-logstash](https://discuss.elastic.co/t/error-with-elasticsearch-logstash/246556)
**Author:** [@Aparna\_Vodapalli](https://discuss.elastic.co/u/Aparna_Vodapalli)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 6:34am UTC](https://discuss.elastic.co/t/error-with-elasticsearch-logstash/246556 "2020-08-27T06:34:15Z")
I get below error in my ELK setup. This error is not there in logstash version 6.3.2 and beacuse of this error i am not able to upgrade my logstash as this error is still not fixed in latest logstash 7.8.0 \[ERROR\]\[filew… --- ## [Elasticsearch circuit break when snapshot is being taken](https://discuss.elastic.co/t/elasticsearch-circuit-break-when-snapshot-is-being-taken/246552)
**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\ **Replies:** 3\ **Last updated:** [August 27, 2020, 6:07am UTC](https://discuss.elastic.co/t/elasticsearch-circuit-break-when-snapshot-is-being-taken/246552 "2020-08-27T06:07:30Z")
We have a 10 node elasticsearch cluster (7.2.0) with the following config -Xms8gb -- (16gb RAM) -Xmx8gb -XX:+UseG1GC -XX:G1ReservePercent=25 -XX:InitiatingHeapOccupancyPercent=30 What we are observing is, occassionally… --- ## [TimeZone issue in GET API](https://discuss.elastic.co/t/timezone-issue-in-get-api/246462)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 4\ **Last updated:** [August 27, 2020, 4:49am UTC](https://discuss.elastic.co/t/timezone-issue-in-get-api/246462 "2020-08-27T04:49:34Z")
Hi, I am facing a challenge in displaying the dateTime field in local time zone. When I filter the data in kibana 'Discover' I am getting the date and time in local time zone. But when I query using the GET API in dev… --- ## [How to push csv data from filebeat to elasticsearch](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447)
**Author:** [@singhmac](https://discuss.elastic.co/u/singhmac)\ **Replies:** 2\ **Last updated:** [August 27, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-to-push-csv-data-from-filebeat-to-elasticsearch/246447 "2020-08-27T04:38:24Z")
I am new to elasticsearch , i have csv file data which i need to push into elasticsearch via filebeat. how can i do that? ex: planname1, sunday 5pm, done, 123 planname2, sunday 6pm, pending, 123 when we try this we g… --- ## [Nodes Space balancing Issue](https://discuss.elastic.co/t/nodes-space-balancing-issue/246378)
**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\ **Replies:** 7\ **Last updated:** [August 27, 2020, 4:13am UTC](https://discuss.elastic.co/t/nodes-space-balancing-issue/246378 "2020-08-27T04:13:46Z")
Hi Team, I am having cluster which has three data nodes, which are having a single master. We found that due to some hardware failure, one of the data noes got stuck and shut down. We restarted that nodes and it joined… --- ## [Getting the latest entry using Python's requests library](https://discuss.elastic.co/t/getting-the-latest-entry-using-pythons-requests-library/246538)
**Author:** [@Anowar](https://discuss.elastic.co/u/Anowar)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 3:02am UTC](https://discuss.elastic.co/t/getting-the-latest-entry-using-pythons-requests-library/246538 "2020-08-27T03:02:23Z")
I tried making a query to get the latest entry of a field by curl: curl -X GET -H "Content-Type: application/json" -H "Accept: application/json" -d '{"query": {"match\_all": {}}, "\_source": "@timestamp", "size": 1, "sort… --- ## [Does random\_score seed value got cache?](https://discuss.elastic.co/t/does-random-score-seed-value-got-cache/246536)
**Author:** [@Altiano\_Gerung](https://discuss.elastic.co/u/Altiano_Gerung)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 2:47am UTC](https://discuss.elastic.co/t/does-random-score-seed-value-got-cache/246536 "2020-08-27T02:47:50Z")
Want to know whether the seed value on function\_score.random\_score got cache? I'm implementing the so-called : consistently random scoring: https://www.elastic.co/guide/en/elasticsearch/guide/current/random-scoring.htm… --- ## [Filebeat/Logstash Log\_Type issue](https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 0\ **Last updated:** [August 27, 2020, 1:55am UTC](https://discuss.elastic.co/t/filebeat-logstash-log-type-issue/246529 "2020-08-27T01:55:35Z")
Hi, my current Filebeat configuration is below: - type: log enabled: true paths: - /DATAPATH/log\* fields: {log\_type: JLogs} multiline.pattern: \*pattern\* multiline.negate: true multiline.match: after M… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1839) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1841)