# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1903

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1904

---

## [Issue while Integrating spring-data-elasticsearch](https://discuss.elastic.co/t/issue-while-integrating-spring-data-elasticsearch/239224)

<div class="topic-metadata">

**Author:** [@Punj\_Shah](https://discuss.elastic.co/u/Punj_Shah)\
**Replies:** 0\
**Last updated:** [June 30, 2020, 5:44am UTC](https://discuss.elastic.co/t/issue-while-integrating-spring-data-elasticsearch/239224 "2020-06-30T05:44:41Z")

</div>

(topic withdrawn by author, will be automatically deleted in 24 hours unless flagged)

---

## [Logstash filter fields in if conditions](https://discuss.elastic.co/t/logstash-filter-fields-in-if-conditions/242717)

<div class="topic-metadata">

**Author:** [@vape](https://discuss.elastic.co/u/vape)\
**Replies:** 4\
**Last updated:** [July 28, 2020, 5:38am UTC](https://discuss.elastic.co/t/logstash-filter-fields-in-if-conditions/242717 "2020-07-28T05:38:26Z")

</div>

Hello, I am learning about logstash, esspecially about logstash filter with if condition. Something not clear to me is what are those fields used in if condition? How can I get the list of those fields? For example, I …

---

## [Index logstash-\* blocked by TOO\_MANY\_REQUESTS/12/index read-only](https://discuss.elastic.co/t/index-logstash-blocked-by-too-many-requests-12-index-read-only/242690)

<div class="topic-metadata">

**Author:** [@Mozhganch](https://discuss.elastic.co/u/Mozhganch)\
**Replies:** 4\
**Last updated:** [July 28, 2020, 5:16am UTC](https://discuss.elastic.co/t/index-logstash-blocked-by-too-many-requests-12-index-read-only/242690 "2020-07-28T05:16:42Z")

</div>

Hi my logstash service starts without error but it stops with this error "Failed with result 'exit-code'" then I run it without logstash service. so after sending 5 entry point, the following error is occured: \[INFO …

---

## [How to set configure timestamp in Map](https://discuss.elastic.co/t/how-to-set-configure-timestamp-in-map/242436)

<div class="topic-metadata">

**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\
**Replies:** 5\
**Last updated:** [July 28, 2020, 4:42am UTC](https://discuss.elastic.co/t/how-to-set-configure-timestamp-in-map/242436 "2020-07-28T04:42:40Z")

</div>

Hi, In Map, I have chosen absolute date range, 17 Jul 2020@00:00:00:00 till 23 Jul 2020@00:00:00:00. However, under the Inspect/Request I found the code "gte": "2020-07-16T16:00:00.000Z", "lte": "2020-07-22T16:00:00.0…

---

## [Setting up three node elasticsearch with security enabled having issues](https://discuss.elastic.co/t/setting-up-three-node-elasticsearch-with-security-enabled-having-issues/242825)

<div class="topic-metadata">

**Author:** [@abhilashkom](https://discuss.elastic.co/u/abhilashkom)\
**Replies:** 0\
**Last updated:** [July 28, 2020, 4:37am UTC](https://discuss.elastic.co/t/setting-up-three-node-elasticsearch-with-security-enabled-having-issues/242825 "2020-07-28T04:37:52Z")

</div>

I am trying to setup thre node Elasticsearch(three nodes configured as master/data) security xpack enabled. started servers elasticsearch is accepting connections only on localhost:9300 port, discovery is failing. pleas…

---

## [HTTP\_POLLER plugin failing to connect to the REST API via proxy](https://discuss.elastic.co/t/http-poller-plugin-failing-to-connect-to-the-rest-api-via-proxy/242824)

<div class="topic-metadata">

**Author:** [@Gaurav\_Deoras](https://discuss.elastic.co/u/Gaurav_Deoras)\
**Replies:** 0\
**Last updated:** [July 28, 2020, 4:29am UTC](https://discuss.elastic.co/t/http-poller-plugin-failing-to-connect-to-the-rest-api-via-proxy/242824 "2020-07-28T04:29:08Z")

</div>

Hi Team, I'm trying to use logstash to pull the log through rest API and plan to further forward it to the SIEM. The setup is pretty straight forward. SIEM \<== Logstash (server) ==\> Proxy ==\> FW ==\> API Host. The have …

---

## [Sharepoint online connector](https://discuss.elastic.co/t/sharepoint-online-connector/242722)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 0\
**Last updated:** [July 27, 2020, 9:33am UTC](https://discuss.elastic.co/t/sharepoint-online-connector/242722 "2020-07-27T09:33:42Z")

</div>

Hello Team, we have multiple sources like database, csv,jms and sharepoint online , we also need to do data transformation and enrichment. so we were planning to use logstash , Could you please help me understand if the…

---

## [Add a vertical Threshold line into a line plot](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252)

<div class="topic-metadata">

**Author:** [@TH89](https://discuss.elastic.co/u/TH89)\
**Replies:** 2\
**Last updated:** [June 29, 2020, 7:02am UTC](https://discuss.elastic.co/t/add-a-vertical-threshold-line-into-a-line-plot/238252 "2020-06-29T07:02:10Z")

</div>

Hallo together, Is there a way to print into a line plot a vertical threshold line? A document of me looks like this: In the lineplot I print the field value on the x-Axis and the y-Axis are the Unique count of max\_…

---

## [Elastic Maps Vector Layer](https://discuss.elastic.co/t/elastic-maps-vector-layer/242702)

<div class="topic-metadata">

**Author:** [@Kayla\_Vo](https://discuss.elastic.co/u/Kayla_Vo)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 1:57pm UTC](https://discuss.elastic.co/t/elastic-maps-vector-layer/242702 "2020-07-27T13:57:17Z")

</div>

My logs are pushing an array of geo-point like so: locations: \[ \[ 4.151769893672637, 12.881042132361447 \], \[ 12.44568712640465, 1.5481532379424046 \], \[ 10.20303078443359…

---

## [Weblogic log message data extraction](https://discuss.elastic.co/t/weblogic-log-message-data-extraction/242797)

<div class="topic-metadata">

**Author:** [@tommparekh](https://discuss.elastic.co/u/tommparekh)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 10:40pm UTC](https://discuss.elastic.co/t/weblogic-log-message-data-extraction/242797 "2020-07-27T22:40:54Z")

</div>

Hi, I am new to ELK and trying to setup log file monitoring for my weblogic servers. So far, I have setup filebeat on the linux server to send log details to ES/Kibana. This functionality is working. However, the log e…

---

## [Rollover alias to new index](https://discuss.elastic.co/t/rollover-alias-to-new-index/242629)

<div class="topic-metadata">

**Author:** [@vicky0639](https://discuss.elastic.co/u/vicky0639)\
**Replies:** 15\
**Last updated:** [July 27, 2020, 10:38pm UTC](https://discuss.elastic.co/t/rollover-alias-to-new-index/242629 "2020-07-27T22:38:55Z")

</div>

hi, I created a rollover index and alias. The alias is pointing to new as well as old index when i try to read data from alias. how can i remove the old index from alias? Thanks Vicky

---

## [Logstash multiple outputs](https://discuss.elastic.co/t/logstash-multiple-outputs/238428)

<div class="topic-metadata">

**Author:** [@mycloudcms](https://discuss.elastic.co/u/mycloudcms)\
**Replies:** 5\
**Last updated:** [July 27, 2020, 10:05pm UTC](https://discuss.elastic.co/t/logstash-multiple-outputs/238428 "2020-07-27T22:05:27Z")

</div>

Hi, once I try to add multiple output.logstash as array, I don't get any data, can you please assist? Thank you ex. #----------------------------- Logstash output -------------------------------- output.logstash: # T…

---

## [How to serializing json object to string in ingest node](https://discuss.elastic.co/t/how-to-serializing-json-object-to-string-in-ingest-node/242565)

<div class="topic-metadata">

**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\
**Replies:** 6\
**Last updated:** [July 27, 2020, 9:56pm UTC](https://discuss.elastic.co/t/how-to-serializing-json-object-to-string-in-ingest-node/242565 "2020-07-27T21:56:37Z")

</div>

I am trying to convert json objects with certain key pattern to string by using ingest API. for example, { "myObject": { "toSerialize\_A": {"key\_a": "a"}, "toSerialize\_B": {"key\_b": "b"}, "toSerialize\_C": …

---

## [Where is metricbeat saving docs?](https://discuss.elastic.co/t/where-is-metricbeat-saving-docs/242810)

<div class="topic-metadata">

**Author:** [@tterranigma](https://discuss.elastic.co/u/tterranigma)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 9:35pm UTC](https://discuss.elastic.co/t/where-is-metricbeat-saving-docs/242810 "2020-07-27T21:35:33Z")

</div>

I have setup metricbeat to connect to beats I have on my productions servers. I can see in Kibana's stack monitoring page useful stats about my beats. I also monitor my elasticsearch nodes. My question is where does met…

---

## [Different config files for different log sources](https://discuss.elastic.co/t/different-config-files-for-different-log-sources/242734)

<div class="topic-metadata">

**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Replies:** 3\
**Last updated:** [July 27, 2020, 9:32pm UTC](https://discuss.elastic.co/t/different-config-files-for-different-log-sources/242734 "2020-07-27T21:32:08Z")

</div>

Hi, I am new to ELK, and I have tried to integrate some sources with ELk, I have integrated 'Microsoft DNS logs' and 'Fortigate' using Logstash config. My question here is that what is best practice for logstash config…

---

## [Bash: make: command not found while trying to run make create-metricset](https://discuss.elastic.co/t/bash-make-command-not-found-while-trying-to-run-make-create-metricset/242809)

<div class="topic-metadata">

**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\
**Replies:** 0\
**Last updated:** [July 27, 2020, 9:06pm UTC](https://discuss.elastic.co/t/bash-make-command-not-found-while-trying-to-run-make-create-metricset/242809 "2020-07-27T21:06:33Z")

</div>

I am trying to create a new metricset inside the metricbeat folder and I am getting error while trying to run the command "make create-metricset". bash: make: command not found I have few proxy issues on the linux serv…

---

## [KIbana super user privleges](https://discuss.elastic.co/t/kibana-super-user-privleges/242806)

<div class="topic-metadata">

**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 8:53pm UTC](https://discuss.elastic.co/t/kibana-super-user-privleges/242806 "2020-07-27T20:53:55Z")

</div>

Hello All, As a kibana super user, can I track/ monitor activities of non-super users, historically and in real time? Thanks in advance

---

## [Metricbeat 7.8 elasticsearch monitoring permissions Issue](https://discuss.elastic.co/t/metricbeat-7-8-elasticsearch-monitoring-permissions-issue/242807)

<div class="topic-metadata">

**Author:** [@Elk\_huh](https://discuss.elastic.co/u/Elk_huh)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 8:40pm UTC](https://discuss.elastic.co/t/metricbeat-7-8-elasticsearch-monitoring-permissions-issue/242807 "2020-07-27T20:40:35Z")

</div>

I am having monitoring data permissions issue using metricbeat to send monitoring data The current Roles / Privlages are as below. when i make the account a superuser , Elasticsearch monitoring data goes to the monitori…

---

## [ELK 7.6.0-1 Kibana](https://discuss.elastic.co/t/elk-7-6-0-1-kibana/241378)

<div class="topic-metadata">

**Author:** [@SteveHodges](https://discuss.elastic.co/u/SteveHodges)\
**Replies:** 6\
**Last updated:** [July 27, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elk-7-6-0-1-kibana/241378 "2020-07-27T20:20:43Z")

</div>

Hello, For some time I have been occassionally seeing Kibana have an error 500 Internal Server Error. Recently it seems to happen more often. I have tried making changes from suggestions for other threads in this comm…

---

## [Canvas line chart : what's this line?](https://discuss.elastic.co/t/canvas-line-chart-whats-this-line/242768)

<div class="topic-metadata">

**Author:** [@Lempkin](https://discuss.elastic.co/u/Lempkin)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 8:08pm UTC](https://discuss.elastic.co/t/canvas-line-chart-whats-this-line/242768 "2020-07-27T20:08:01Z")

</div>

Hi, I'm new to ELK. I have some API that I need to monitor. I've installed Heartbeat and now I try to represent data in a canvas. I would like to display status of an API with a linechart, showing when it's up or down.…

---

## [All (non-redundant) values of a list of fields](https://discuss.elastic.co/t/all-non-redundant-values-of-a-list-of-fields/242743)

<div class="topic-metadata">

**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 8:07pm UTC](https://discuss.elastic.co/t/all-non-redundant-values-of-a-list-of-fields/242743 "2020-07-27T20:07:19Z")

</div>

Hello, I would like to know which Elastic query can give me all (non-redundant) values ​​of a list of fields. For example, I would like to know all the possible values ​​contained in field: User, SubjectUser, UserName? …

---

## [REST API to fetch values based on Terms aggregation](https://discuss.elastic.co/t/rest-api-to-fetch-values-based-on-terms-aggregation/241188)

<div class="topic-metadata">

**Author:** [@Venkat\_Raj](https://discuss.elastic.co/u/Venkat_Raj)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 7:55pm UTC](https://discuss.elastic.co/t/rest-api-to-fetch-values-based-on-terms-aggregation/241188 "2020-07-27T19:55:29Z")

</div>

Hi All, I have a requirement to fetch data from Elasticsearch based on Term aggregation. I need to build a request using terms aggregation where I need to groupby a particular field name and then fetch other fields corr…

---

## [Is it possible to return a list of records after applying several filters?](https://discuss.elastic.co/t/is-it-possible-to-return-a-list-of-records-after-applying-several-filters/242387)

<div class="topic-metadata">

**Author:** [@nisargtest1](https://discuss.elastic.co/u/nisargtest1)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 7:48pm UTC](https://discuss.elastic.co/t/is-it-possible-to-return-a-list-of-records-after-applying-several-filters/242387 "2020-07-27T19:48:11Z")

</div>

I need to apply several filters like Group BY same id number, apply count on each group, and if count is more than one then I need to calculate the mean price of each group and return those values. How will I be able to…

---

## [Access the filters in search bar from within plugin](https://discuss.elastic.co/t/access-the-filters-in-search-bar-from-within-plugin/242765)

<div class="topic-metadata">

**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 7:32pm UTC](https://discuss.elastic.co/t/access-the-filters-in-search-bar-from-within-plugin/242765 "2020-07-27T19:32:15Z")

</div>

I am using Elastic stack 7.6.3. I want to access the entered queries in the search bar of Kibana from inside my visualization plugin: I have managed to get the time filter and the filter queries, but the only thing I…

---

## [Custom chart with Kibana](https://discuss.elastic.co/t/custom-chart-with-kibana/242770)

<div class="topic-metadata">

**Author:** [@lioaslan](https://discuss.elastic.co/u/lioaslan)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 7:12pm UTC](https://discuss.elastic.co/t/custom-chart-with-kibana/242770 "2020-07-27T19:12:17Z")

</div>

Hi, I have a task showing a chart has Y-axis is URLs and X-axis is number of access of that URL or vice versa. In other words, I want to create chart has both Y-axis and X-axis is terms's data. I tried to read referen…

---

## [Pgrade Kibana docker base image for vulnerability issues](https://discuss.elastic.co/t/pgrade-kibana-docker-base-image-for-vulnerability-issues/242430)

<div class="topic-metadata">

**Author:** [@zj27](https://discuss.elastic.co/u/zj27)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 6:55pm UTC](https://discuss.elastic.co/t/pgrade-kibana-docker-base-image-for-vulnerability-issues/242430 "2020-07-27T18:55:38Z")

</div>

Hello, we notice Kibana docker image uses centos 7 as base image. But we have found there are many components like GNU C library has vulnerability issues. So wondering if there is a plan to upgrade the base image to reso…

---

## [Filebeat Haproxy module configuration](https://discuss.elastic.co/t/filebeat-haproxy-module-configuration/240011)

<div class="topic-metadata">

**Author:** [@ndg](https://discuss.elastic.co/u/ndg)\
**Replies:** 5\
**Last updated:** [July 27, 2020, 6:22pm UTC](https://discuss.elastic.co/t/filebeat-haproxy-module-configuration/240011 "2020-07-27T18:22:08Z")

</div>

Hi! I want to configure the haproxy module on filebeat. I did it and i am getting some fileds but others are empty. Here is my filebeat configuration # Module: haproxy # Docs: https://www.elastic.co/guide/en/beats/file…

---

## [Auto\_flush\_interval not working inside my TCP plugin](https://discuss.elastic.co/t/auto-flush-interval-not-working-inside-my-tcp-plugin/242614)

<div class="topic-metadata">

**Author:** [@dhanshake](https://discuss.elastic.co/u/dhanshake)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 6:12pm UTC](https://discuss.elastic.co/t/auto-flush-interval-not-working-inside-my-tcp-plugin/242614 "2020-07-27T18:12:16Z")

</div>

I'm using Multiline codec, along with my TCP input plugin. And the problem I've is logstash is not processing the last line (it waits for the next line always). Tried using auto\_flush\_interval option as well. But didn'…

---

## [ElasticSearch clone the cluster from existing](https://discuss.elastic.co/t/elasticsearch-clone-the-cluster-from-existing/242791)

<div class="topic-metadata">

**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\
**Replies:** 3\
**Last updated:** [July 27, 2020, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-clone-the-cluster-from-existing/242791 "2020-07-27T18:08:20Z")

</div>

I have 2 nodes ES cluster(on GCP platform), I want to clone this and need to create a new cluster. I have taken the image of the current Node1 and 2 then create the VMs. Then modified these settings as per the new clus…

---

## [X-pack and sql in python](https://discuss.elastic.co/t/x-pack-and-sql-in-python/242685)

<div class="topic-metadata">

**Author:** [@chezhian](https://discuss.elastic.co/u/chezhian)\
**Replies:** 2\
**Last updated:** [July 27, 2020, 5:57pm UTC](https://discuss.elastic.co/t/x-pack-and-sql-in-python/242685 "2020-07-27T17:57:21Z")

</div>

Trying to see how i can call the x-pack sql feature in python. Am I invoking xpack client correctly AttributeError: 'XPackClient' object has no attribute 'sql' from elasticsearch import Elasticsearch, RequestsHttpConne…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1902)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1904)
