# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1851 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1852 --- ## [Metricbeat does not find any application\_pool](https://discuss.elastic.co/t/metricbeat-does-not-find-any-application-pool/244761)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 10:39am UTC](https://discuss.elastic.co/t/metricbeat-does-not-find-any-application-pool/244761 "2020-08-21T10:39:52Z")
Hellow All, I have installed metricbeat-7.8.1, IIS module is enabled with bellow module: iis metricsets: webserver website application\_pool enabled: true period: 10s but in the Log i am keep seeing bellow 2020-… --- ## [Getting Appdynamics Data into ELK](https://discuss.elastic.co/t/getting-appdynamics-data-into-elk/245905)
**Author:** [@sriram28](https://discuss.elastic.co/u/sriram28)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/getting-appdynamics-data-into-elk/245905 "2020-08-21T10:22:47Z")
Hi All, Need your help. I am trying to get Appdynamics Data into Logstash . I am getting connect time out when trying to connect from logstash to appdynamics . +++++++++++++ t http\_request\_failure.error connect tim… --- ## [Metricbeat is running but do not provide metrics](https://discuss.elastic.co/t/metricbeat-is-running-but-do-not-provide-metrics/245864)
**Author:** [@kn\_finfort](https://discuss.elastic.co/u/kn_finfort)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 7:05am UTC](https://discuss.elastic.co/t/metricbeat-is-running-but-do-not-provide-metrics/245864 "2020-08-21T07:05:09Z")
Hellow everyone, I have an Elastic Stack running in a swarm of docker: ELK 7.7.0 + Filebeat + Metricbeat. After an Metricbeat service restart (maybe not and I missed something) it stopped to provide metrics. The servi… --- ## [Elastic-agent make ssl verification none](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827 "2020-08-21T09:44:39Z")
Hello, I am playing around with elastic ingest manager and I configured a fleet in kibana. I would like to update the elasticsearch ssl verification\_mode to none in the agent config but it's not possible or at least I d… --- ## [Logstash crash receiving data from filebeats](https://discuss.elastic.co/t/logstash-crash-receiving-data-from-filebeats/244425)
**Author:** [@M9k](https://discuss.elastic.co/u/M9k)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/logstash-crash-receiving-data-from-filebeats/244425 "2020-08-21T09:44:05Z")
Hi, I have a problem with logstash, every time it receive a document from filebeat it crash. This is my filebeat configuration: filebeat.inputs: - paths: - c:\\windows\\system32\\dhcp\\DhcpSrvLog-\*.… --- ## [Elastic search throwing unknown setting error](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887)
**Author:** [@Pradeep\_K\_S](https://discuss.elastic.co/u/Pradeep_K_S)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 9:18am UTC](https://discuss.elastic.co/t/elastic-search-throwing-unknown-setting-error/245887 "2020-08-21T09:18:22Z")
Hi, I am trying to create index with my schema mapping but i am getting unknown setting error for some tag. Attached the error below. {"error":{"root\_cause":\[{"type":"remote\_transport\_exception","reason":"\[ip-20-124-… --- ## [Watcher using filter range with time does not fire](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998)
**Author:** [@ajazam](https://discuss.elastic.co/u/ajazam)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 8:37am UTC](https://discuss.elastic.co/t/watcher-using-filter-range-with-time-does-not-fire/244998 "2020-08-21T08:37:53Z")
Hello. I have been trying to write a Watcher that looks for specific conditions in data and then send out an email, but it doesn't work. I have managed to shrink the Watcher down to a bare minimum and have found out that… --- ## [Sporadic unable to authenticate user OIDC errors](https://discuss.elastic.co/t/sporadic-unable-to-authenticate-user-oidc-errors/245788)
**Author:** [@Eugene\_Marcotte](https://discuss.elastic.co/u/Eugene_Marcotte)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 8:33am UTC](https://discuss.elastic.co/t/sporadic-unable-to-authenticate-user-oidc-errors/245788 "2020-08-21T08:33:27Z")
Hey there, I've been working on setting up a elastic cloud hosted deployment (currently running v7.8.0) with OIDC pointed at Okta. I've run into this error sporadically with various users: "\[security\_exception\] unable … --- ## [Logstash dosn't run file.conf in /etc/logstash/conf.d](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192)
**Author:** [@Amine\_Aloui](https://discuss.elastic.co/u/Amine_Aloui)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 8:30am UTC](https://discuss.elastic.co/t/logstash-dosnt-run-file-conf-in-etc-logstash-conf-d/244192 "2020-08-21T08:30:52Z")
in /etc/logstash.yml i put this config path.config: /etc/logstash/conf.d/\*.conf config.reload.automatic: true config.reload.interval: 3s in /etc/logstash/conf.d i put my index.conf tail -f /var/log/logstash/logst… --- ## [How to use Javascript to get Response data on the Kibana Discover page?](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860)
**Author:** [@neargle](https://discuss.elastic.co/u/neargle)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 8:09am UTC](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860 "2020-08-21T08:09:59Z")
I hope that after searching in Discover, I can use JS or Chrome DevTools Console in the /app/kibana#/discover page to get the data returned by ES for further processing? How can I get the result of javascript object? --- ## [Plugin on new platform](https://discuss.elastic.co/t/plugin-on-new-platform/245773)
**Author:** [@wilmouths](https://discuss.elastic.co/u/wilmouths)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 8:04am UTC](https://discuss.elastic.co/t/plugin-on-new-platform/245773 "2020-08-21T08:04:31Z")
Hello, I am developing a Kibana 7.8 plugin, I would like to know how to retrieve environment variables in the client part (public) and also how to add a link in the menu, because before you had to use uiExports: { links… --- ## [Logstash how to parse different format message in one logfile](https://discuss.elastic.co/t/logstash-how-to-parse-different-format-message-in-one-logfile/245863)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 7:58am UTC](https://discuss.elastic.co/t/logstash-how-to-parse-different-format-message-in-one-logfile/245863 "2020-08-21T07:58:55Z")
The original log 07/20/20 09:23:14 INFO login 2493 us.(channel/Channel.cpp:575) 07/20/20 09:23:14 INFO deletecity:cn(city/CityDeleteBusiness.cpp:55) 07/20/20 09:23:14 INFO ---p\_dbSession-\>deleteCity() 14066… --- ## [How to apply filters in elasticsearch NEST functionscore function](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839)
**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839 "2020-08-21T07:15:30Z")
To control the score of documents based on a field value, I am using filter with function\_score in my DSL query and this gets the results ordered as I expect. However on implementing this in NEST, the results are differ… --- ## [How to use JSON Input to make filter on part of log](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570)
**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 6:52am UTC](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570 "2020-08-21T06:52:21Z")
I have collected logs which are already imported into ELK. Each log contains several fields, for ex date is different field. Also there is complicated field "Details" which consist a lot of data: method: value, source:… --- ## [Filebeat json to Elasticsearch, error processing pipeline](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767)
**Author:** [@felixbarbeira](https://discuss.elastic.co/u/felixbarbeira)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 6:37am UTC](https://discuss.elastic.co/t/filebeat-json-to-elasticsearch-error-processing-pipeline/245767 "2020-08-21T06:37:17Z")
Hi, I'm sending a json log file with filebeat to an Elasticsearch cluster. When I try to parse the ip field with geoip filter it shows the following error in the ingestError field: field \[client\] not present as part of… --- ## [Metrices for Openshift via mtericbeat is not coming in elasticsearch](https://discuss.elastic.co/t/metrices-for-openshift-via-mtericbeat-is-not-coming-in-elasticsearch/245229)
**Author:** [@Harshi1](https://discuss.elastic.co/u/Harshi1)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:53am UTC](https://discuss.elastic.co/t/metrices-for-openshift-via-mtericbeat-is-not-coming-in-elasticsearch/245229 "2020-08-21T05:53:14Z")
Kibana version : 7.7.0 Elasticsearch version : 7.7.0 Metricbeat version : 7.7 Browser version : Chrome 84.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version : RPM from download pa… --- ## [Histogram per second](https://discuss.elastic.co/t/histogram-per-second/245855)
**Author:** [@idyuzhev](https://discuss.elastic.co/u/idyuzhev)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:48am UTC](https://discuss.elastic.co/t/histogram-per-second/245855 "2020-08-21T05:48:44Z")
Hi. I need to build a histogram per second. Kibana, depending on the specified period, can be grouped in 5/10/30/60 seconds. This option does not suit me. Can this somehow be disabled and forced to output per second? … --- ## [Filebeat intermittent auto discovery states issue](https://discuss.elastic.co/t/filebeat-intermittent-auto-discovery-states-issue/243590)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 3\ **Last updated:** [August 21, 2020, 5:45am UTC](https://discuss.elastic.co/t/filebeat-intermittent-auto-discovery-states-issue/243590 "2020-08-21T05:45:35Z")
I just switched from fluentd to filebeat and am seeing the following issues for some logs now. Does anyone have an idea where the issue could reside? 2020-08-03T14:26:23.349Z ERROR \[autodiscover\] autodiscover… --- ## [GeoIP Troubles](https://discuss.elastic.co/t/geoip-troubles/245824)
**Author:** [@Midnigh7](https://discuss.elastic.co/u/Midnigh7)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 5:25am UTC](https://discuss.elastic.co/t/geoip-troubles/245824 "2020-08-21T05:25:49Z")
Trying to get geoip working from IIS log ingestion. Current setup; Elasticsearch v.7.9.0 Kibana v.7.9.0 Filebeat v.7.9.0 Output is set to Elasticsearch with geoip pipeline; output.elasticsearch: # Array of… --- ## [Persistent queue not working?](https://discuss.elastic.co/t/persistent-queue-not-working/245852)
**Author:** [@TomHome](https://discuss.elastic.co/u/TomHome)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 4:57am UTC](https://discuss.elastic.co/t/persistent-queue-not-working/245852 "2020-08-21T04:57:40Z")
Hi, I'd like to use Persistent Queues (PQ) as an internal overflow buffer when we get spikes of logs into our redis instance (input redis {} in each pipeline). But the PQ does not grow despite our redis instance being s… --- ## [Use query parameters to change token filter behavior for the given query](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851)
**Author:** [@dtchesno](https://discuss.elastic.co/u/dtchesno)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 4:46am UTC](https://discuss.elastic.co/t/use-query-parameters-to-change-token-filter-behavior-for-the-given-query/245851 "2020-08-21T04:46:38Z")
I understand it's not what normally happens. But I'm curious, is there a pattern to pass config to token filter for the given query? E.g. I could have plugin with custom query builder and analyzer/filters. I want to app… --- ## [Kibana Dashboard Data](https://discuss.elastic.co/t/kibana-dashboard-data/245763)
**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 4:41am UTC](https://discuss.elastic.co/t/kibana-dashboard-data/245763 "2020-08-21T04:41:41Z")
Hi there How kibana UI request this API for dashboard data. http://localhost:5601/elasticsearch/\_msearch?rest\_total\_hits\_as\_int=true&ignore\_throttled=true --- ## [Retrieve the sum of count of string fields](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778)
**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 3:58am UTC](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778 "2020-08-21T03:58:57Z")
Hi, I want to retrieve the sum of the count of string fields in bar chart. Is it possible to do it in Kibana visualisations. Here I want one more bar chart that will show the cummulative sum of all fields. --- ## [Failed to install The Japanese (kuromoji) Analysis plugin to Elasticsearch 7.8.1](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630)
**Author:** [@masapon](https://discuss.elastic.co/u/masapon)\ **Replies:** 0\ **Last updated:** [August 19, 2020, 3:09pm UTC](https://discuss.elastic.co/t/failed-to-install-the-japanese-kuromoji-analysis-plugin-to-elasticsearch-7-8-1/245630 "2020-08-19T15:09:39Z")
ERROR message is as follows: Downloading file: https://artifacts.elastic.co/downloads/elasticsearch-plugins/analysis-kuromoji/analysis-kuromoji-7.8.1.zip Downloading \[===================================================… --- ## [Heartbeat: make http check.response.body get negative result based on the match](https://discuss.elastic.co/t/heartbeat-make-http-check-response-body-get-negative-result-based-on-the-match/245332)
**Author:** [@lowry](https://discuss.elastic.co/u/lowry)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 2:49am UTC](https://discuss.elastic.co/t/heartbeat-make-http-check-response-body-get-negative-result-based-on-the-match/245332 "2020-08-21T02:49:35Z")
Hello everyone, Wondering if there's solution for this case: We want to do http check over an endpoint: http://localhost:8080/health, it returns 3 kinds of response(not json, plain text. just for example) “status”: “… --- ## [FATAL Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 2\ **Last updated:** [August 21, 2020, 1:35am UTC](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733 "2020-08-21T01:35:09Z")
I used version 7.6.1 before, and then I changed it to kibana:8.0.0-SNAPSHOT Restart the pod and it won't work Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read at Object.readSync (f… --- ## [Monitoring linux processes with heartbeat](https://discuss.elastic.co/t/monitoring-linux-processes-with-heartbeat/237871)
**Author:** [@igorid70](https://discuss.elastic.co/u/igorid70)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 1:23am UTC](https://discuss.elastic.co/t/monitoring-linux-processes-with-heartbeat/237871 "2020-08-21T01:23:24Z")
I have a long and successful implementation of Elastic stack and recently we want to add application processes monitoring using hearbeat. It works like a charm with most of them, however some processes are just regular L… --- ## [Beats on Heroku (rails)](https://discuss.elastic.co/t/beats-on-heroku-rails/244780)
**Author:** [@weilandia](https://discuss.elastic.co/u/weilandia)\ **Replies:** 1\ **Last updated:** [August 21, 2020, 1:22am UTC](https://discuss.elastic.co/t/beats-on-heroku-rails/244780 "2020-08-21T01:22:04Z")
Is there a good way to setup Elastic beats (filebeat, heartbeat, etc.) on Heroku (rails app)? All the setup instructions have you download the packages and run the beat servers. Doing this for each Heroku dyno everytime… --- ## [Index creation issues after removing ILM Policy](https://discuss.elastic.co/t/index-creation-issues-after-removing-ilm-policy/244607)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 1:10am UTC](https://discuss.elastic.co/t/index-creation-issues-after-removing-ilm-policy/244607 "2020-08-21T01:10:37Z")
Hi, I have an issue regarding writing to a daily metricbeat index after removing ILM policy from index template. Below are the steps i followed: Created ILM policy to delete the index after 7 days (no rollup, cold, wa… --- ## [Struggling with filebeat and elasticsearch ingest pipeline for processing custom log file that has weird date/time format](https://discuss.elastic.co/t/struggling-with-filebeat-and-elasticsearch-ingest-pipeline-for-processing-custom-log-file-that-has-weird-date-time-format/243941)
**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\ **Replies:** 7\ **Last updated:** [August 21, 2020, 12:29am UTC](https://discuss.elastic.co/t/struggling-with-filebeat-and-elasticsearch-ingest-pipeline-for-processing-custom-log-file-that-has-weird-date-time-format/243941 "2020-08-21T00:29:49Z")
Struggling with use of elasticsearch ingest pipeline for custom parsing of a unique flatfile log format. Running into problems. Not sure if there's mix of issues here. Here's the scenerio... Format uses multi-line … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1850) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1852)