# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1844 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1845 --- ## [ECONNREFUSED: Connection refused - connect (2) for "localhost" port 587](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087)
**Author:** [@David03](https://discuss.elastic.co/u/David03)\ **Replies:** 2\ **Last updated:** [August 26, 2020, 2:48am UTC](https://discuss.elastic.co/t/econnrefused-connection-refused-connect-2-for-localhost-port-587/246087 "2020-08-26T02:48:36Z")
Hi, good day. I used email config and i encounter this Connection refused - connect (2) for "localhost" port 587 output { elasticsearch { hosts =\> \["localhost:9200"\] } stdout { codec =\> rubydebug } if "shouldmail… --- ## [Authenticate to Kibana without Elasticsearch?](https://discuss.elastic.co/t/authenticate-to-kibana-without-elasticsearch/245529)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 6\ **Last updated:** [August 26, 2020, 2:12am UTC](https://discuss.elastic.co/t/authenticate-to-kibana-without-elasticsearch/245529 "2020-08-26T02:12:21Z")
Hi, Is it possible, somehow, to login/authenticate to Kibana with an external authentication method? So there will be no changes to the elastic node/yml and other configuration files. For example, authenticate to an a… --- ## [Getting mapper\_parsing\_exception while trying to create index in 7.8](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204)
**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\ **Replies:** 6\ **Last updated:** [August 25, 2020, 11:22pm UTC](https://discuss.elastic.co/t/getting-mapper-parsing-exception-while-trying-to-create-index-in-7-8/246204 "2020-08-25T23:22:57Z")
Suppressed: org.elasticsearch.client.ResponseException: method \[PUT\], host \[http://localhost:9200\], URI \[/ise?master\_timeout=30s&timeout=30s\], status line \[HTTP/1.1 400 Bad Request\] {"error":{"root\_cause":\[{"type":"mapp… --- ## [How does "Cross-cluster" searching impact \_score?](https://discuss.elastic.co/t/how-does-cross-cluster-searching-impact-score/246358)
**Author:** [@Joshua\_Stromme](https://discuss.elastic.co/u/Joshua_Stromme)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 9:44pm UTC](https://discuss.elastic.co/t/how-does-cross-cluster-searching-impact-score/246358 "2020-08-25T21:44:37Z")
Let's say I've got 5 million resources indexed in two different ways: 5 million on one cluster 2.5 million on one cluster and 2.5 million on another Would a match query yield results in the same order on both setups? … --- ## [Date in Filter not respecting Browser Timezone](https://discuss.elastic.co/t/date-in-filter-not-respecting-browser-timezone/246179)
**Author:** [@oong](https://discuss.elastic.co/u/oong)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 8:59pm UTC](https://discuss.elastic.co/t/date-in-filter-not-respecting-browser-timezone/246179 "2020-08-25T20:59:15Z")
We have our timestamps in our logs stored in UTC. When the logs are returned in queries, the times are shown converted based on the brower's timezone. This is great! However, when applying a date filter on the search … --- ## [User Deleted All Files Inside Node0 Directory](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818)
**Author:** [@ELKNub](https://discuss.elastic.co/u/ELKNub)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 8:45pm UTC](https://discuss.elastic.co/t/user-deleted-all-files-inside-node0-directory/245818 "2020-08-25T20:45:42Z")
Hey Folks, So one if my users deleted everything inside my directory C:\\ProgramData\\Elastic\\Elasticsearch\\data\\nodes\\0\\indices 'Now I can't start the service "elasticsearch" ' My worry is the configuration is totally … --- ## [Recreation of Index Patterns, Lost Visualizations](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468)
**Author:** [@chaitanya1127](https://discuss.elastic.co/u/chaitanya1127)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 8:35pm UTC](https://discuss.elastic.co/t/recreation-of-index-patterns-lost-visualizations/245468 "2020-08-25T20:35:57Z")
Hi, I found a lot of topics on this forum on this subject but I was not able to figure out how to solve the problem. I recreated index patterns as they got deleted. I do not see any visualizations or Dashboards which w… --- ## [Keystore Not Finding auditbeat.yml and Non-Zero Issue](https://discuss.elastic.co/t/keystore-not-finding-auditbeat-yml-and-non-zero-issue/246354)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 7:56pm UTC](https://discuss.elastic.co/t/keystore-not-finding-auditbeat-yml-and-non-zero-issue/246354 "2020-08-25T19:56:45Z")
Hi, I am basically just getting beats going so I apologize for what may be stupid questions but.... I have just installed auditbeat on a number of servers and all appears to be functioning - meaning systemctl says its … --- ## [How to ship application logs from EC2 to Elastic Cloud](https://discuss.elastic.co/t/how-to-ship-application-logs-from-ec2-to-elastic-cloud/246339)
**Author:** [@vabnix](https://discuss.elastic.co/u/vabnix)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 7:35pm UTC](https://discuss.elastic.co/t/how-to-ship-application-logs-from-ec2-to-elastic-cloud/246339 "2020-08-25T19:35:14Z")
hello All, We have an application package as a docker image and run on EC2 instance, EC2 is preconfigured to ship filebeat and metricbeat to AWS Elasticsearch. However, now that we are getting started with Elastic Cloud… --- ## [Kibana Login page is not working](https://discuss.elastic.co/t/kibana-login-page-is-not-working/245551)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 11\ **Last updated:** [August 25, 2020, 7:13pm UTC](https://discuss.elastic.co/t/kibana-login-page-is-not-working/245551 "2020-08-25T19:13:14Z")
I want to implement Kibana Login page ,I tried all the settings can any body help me. --- ## [MetricBeat Binary Signed](https://discuss.elastic.co/t/metricbeat-binary-signed/246349)
**Author:** [@Questions](https://discuss.elastic.co/u/Questions)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 7:08pm UTC](https://discuss.elastic.co/t/metricbeat-binary-signed/246349 "2020-08-25T19:08:40Z")
On investigating the MetricBeat client binary, I noticed that it was not properly signed with the Elastic publisher certificate (the Endgame sensor binary is signed). Am I missing something or is there a reason why Metri… --- ## [Response time much greater than query time in slowlogs - AWS ES](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176)
**Author:** [@jlicheng](https://discuss.elastic.co/u/jlicheng)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 6:51pm UTC](https://discuss.elastic.co/t/response-time-much-greater-than-query-time-in-slowlogs-aws-es/246176 "2020-08-25T18:51:15Z")
Hi folks, we are using Amazon Elasticsearch and we're seeing a big discrepancy in response time as measured by the code querying Elasticsearch and the slowlogs produced by Elasticsearch. We've turned on "slowlogs" and g… --- ## [Want to modify the Kibana login page Logo](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 6:43pm UTC](https://discuss.elastic.co/t/want-to-modify-the-kibana-login-page-logo/246344 "2020-08-25T18:43:59Z")
I want little modification in Kibana Home page Logo and want to change the name of Kibana in Menu.Is it possible? --- ## [Filebeat error with helm3](https://discuss.elastic.co/t/filebeat-error-with-helm3/246181)
**Author:** [@Raman\_Sawhney](https://discuss.elastic.co/u/Raman_Sawhney)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-error-with-helm3/246181 "2020-08-25T18:28:19Z")
I am getting error while deploying autodiscover in our environment Error: Exiting: error in autodiscover provider settings: error setting up kubernetes autodiscover provider: missing field accessing 'filebeat.autodiscov… --- ## [Error: called with an invalid endpoint: security.getToken](https://discuss.elastic.co/t/error-called-with-an-invalid-endpoint-security-gettoken/246194)
**Author:** [@npm\_install](https://discuss.elastic.co/u/npm_install)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 6:26pm UTC](https://discuss.elastic.co/t/error-called-with-an-invalid-endpoint-security-gettoken/246194 "2020-08-25T18:26:38Z")
I am creating a Kibana Plugin using the kibana plugin generator, and I have a route defined that is using the elasticsearch dataClient to get a token: context.core.elasticsearch.dataClient.callAsCurrentUser('security.ge… --- ## [Need Help Parsing PS command Output using logstash](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 6:17pm UTC](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145 "2020-08-25T18:17:36Z")
Need Help Parsing PS command Output using logstash. My input file looks like below. Linux VM Ubuntu zzz \*\*\*Thu Jul 23 13:00:11 UTC 2020 USER PID PPID PRI %CPU %MEM VSZ RSS WCHAN S STARTED … --- ## [Calculate Difference between 2 Dates](https://discuss.elastic.co/t/calculate-difference-between-2-dates/246300)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 6:03pm UTC](https://discuss.elastic.co/t/calculate-difference-between-2-dates/246300 "2020-08-25T18:03:21Z")
Hi All, it's possible to calculate the difference between two dates in a TSVB visualization! i use Kibana 7.7.0 --- ## [Multiple Winlogbeat Agents on WEF Collectors](https://discuss.elastic.co/t/multiple-winlogbeat-agents-on-wef-collectors/245424)
**Author:** [@stranjer](https://discuss.elastic.co/u/stranjer)\ **Replies:** 4\ **Last updated:** [August 25, 2020, 5:48pm UTC](https://discuss.elastic.co/t/multiple-winlogbeat-agents-on-wef-collectors/245424 "2020-08-25T17:48:32Z")
I have an environment that has pretty high Windows EPS and am looking at best how to alleviate bottlenecks in processing Windows Event Logs. Overall, I'm getting around 100k EPS Windows events sustained on average, with … --- ## [Elasticsearch 7.8.1 not writing to ilm-history-\*](https://discuss.elastic.co/t/elasticsearch-7-8-1-not-writing-to-ilm-history/246311)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 3:15pm UTC](https://discuss.elastic.co/t/elasticsearch-7-8-1-not-writing-to-ilm-history/246311 "2020-08-25T15:15:21Z")
TL;DR Elasticsearch is not writing to ilm-history-\* in v. 7.8.1, but indices rolling over as expected. Issue I'm using ILM in Elasticsearch 7.8.1. Indices are rolling over, as expected, but Elasticsearch isn't writing t… --- ## [Main ERROR Null object returned for RollingFile in Appenders](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335)
**Author:** [@divya\_lakshmi](https://discuss.elastic.co/u/divya_lakshmi)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 5:24pm UTC](https://discuss.elastic.co/t/main-error-null-object-returned-for-rollingfile-in-appenders/246335 "2020-08-25T17:24:35Z")
i use ES 6.5 , on trying to start ES getting following error 2020-08-25 11:58:01,121 main ERROR Null object returned for RollingFile in Appenders. 2020-08-25 11:58:01,122 main ERROR Unable to locate appender "rolling" … --- ## [XML key:value Extraction](https://discuss.elastic.co/t/xml-key-value-extraction/246182)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 4:51pm UTC](https://discuss.elastic.co/t/xml-key-value-extraction/246182 "2020-08-25T16:51:59Z")
Apologies, I have searched but cannot seem to find a good example on how to extract and then index the remaining data. If this is addressed elsewhere and Ive missed it please direct me there. Being new to logstash and i… --- ## [Too many cached tokens with illegal\_state\_exception error](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250)
**Author:** [@111375](https://discuss.elastic.co/u/111375)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 4:28pm UTC](https://discuss.elastic.co/t/too-many-cached-tokens-with-illegal-state-exception-error/245250 "2020-08-25T16:28:30Z")
While doing bulk request to bulk API I got response with errors: Type: (string) (len=23) "illegal\_state\_exception", Reason: (string) (len=30) "Too many cached tokens (\> 100)" I tried to Google this Too many cached toke… --- ## [Adding additional data along with the visualization](https://discuss.elastic.co/t/adding-additional-data-along-with-the-visualization/246226)
**Author:** [@kjagadish36](https://discuss.elastic.co/u/kjagadish36)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 4:27pm UTC](https://discuss.elastic.co/t/adding-additional-data-along-with-the-visualization/246226 "2020-08-25T16:27:29Z")
Log record: "2020.07.20-00:33:51.787||null||32e1070d-5f49-44d8-952a-a04f0630464f||ccbisr2||MESSAGE\_PUBLICATION||CORPCHANNELS\_INTERFACE||API\_CALL||CREATE||INVOCATION\_SUCCESS||{fccPartyId=FCC044, message=\ **Author:** [@Miguel\_BA](https://discuss.elastic.co/u/Miguel_BA)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 4:07pm UTC](https://discuss.elastic.co/t/elasticsearch-cumulative-cardinality-without-histogram/246322 "2020-08-25T16:07:41Z") With this query I want to make a count of how many unique mobile phone numbers per company. I have this query that returns the following error: {"size": 1, "\_source": "created\_at", "aggs": { "nested": { … --- ## [Logstash filter plugin for command line output](https://discuss.elastic.co/t/logstash-filter-plugin-for-command-line-output/246318)
**Author:** [@Arati](https://discuss.elastic.co/u/Arati)\ **Replies:** 0\ **Last updated:** [August 25, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-filter-plugin-for-command-line-output/246318 "2020-08-25T15:51:01Z")
Hello everyone, I am new to logstash need help. I want to send commandline output from multiple system to elasticsearch via logstash. which filter plugin suits for this? Below is the sample command line output from 2 s… --- ## [Find logstash compatibility with kafka](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490)
**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\ **Replies:** 2\ **Last updated:** [August 25, 2020, 3:45pm UTC](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490 "2020-08-25T15:45:22Z")
Hello, I upgraded logstash from 2.4 to 7.5 and also kafka from 0.10 to 2.5 Im facing few issues here when pushing logs through logstash issue background information: Im using the same logstash config files in /etc/lo… --- ## [Is there a bug in elasticsearch 6.5.0 concerning s3 snapshot repositories](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250)
**Author:** [@dimitris\_sb](https://discuss.elastic.co/u/dimitris_sb)\ **Replies:** 5\ **Last updated:** [August 25, 2020, 3:44pm UTC](https://discuss.elastic.co/t/is-there-a-bug-in-elasticsearch-6-5-0-concerning-s3-snapshot-repositories/246250 "2020-08-25T15:44:37Z")
Hi All, This is a single node cluster installation running elasticsearch 6.5.0. I noticed that after the set up of the aws access key and secret key in the keystore P.S. I have tested my access key and secret key with… --- ## [While spinning up elastic search on ec2 machines with warm nodes, kibana not yet ready message](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147)
**Author:** [@souji](https://discuss.elastic.co/u/souji)\ **Replies:** 10\ **Last updated:** [August 25, 2020, 3:28pm UTC](https://discuss.elastic.co/t/while-spinning-up-elastic-search-on-ec2-machines-with-warm-nodes-kibana-not-yet-ready-message/246147 "2020-08-25T15:28:22Z")
Hi, I am new self hosted elastic search, for poc I started spinning the self hosted es with data nodes, client nodes set up worked fine. I added the warm nodes I am seeing message kibana not yet ready. Elasticsearch.ym… --- ## [Permissions issue with \`Kibana\_admin\` role and OpenIDConnect provider](https://discuss.elastic.co/t/permissions-issue-with-kibana-admin-role-and-openidconnect-provider/246264)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 3:10pm UTC](https://discuss.elastic.co/t/permissions-issue-with-kibana-admin-role-and-openidconnect-provider/246264 "2020-08-25T15:10:42Z")
Hi there, I am using ES Cloud and trying to setup "SSO" with OpenID Connect. I have managed to connect my IdentityProvider (GitHub) to ElasticSearch through Auth0 (Which does the translation to provide ES with OpenID J… --- ## [Log entries gathered by filebeat in EKS are occasionally joined](https://discuss.elastic.co/t/log-entries-gathered-by-filebeat-in-eks-are-occasionally-joined/244074)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [August 25, 2020, 2:57pm UTC](https://discuss.elastic.co/t/log-entries-gathered-by-filebeat-in-eks-are-occasionally-joined/244074 "2020-08-25T14:57:47Z")
TL;DR Some messages are merging when using filebeat container input. Issue When I'm using the filebeat container input, some log messages occasionally merge into a single message. I am running the filebeat in EKS, deplo… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1843) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1845)