# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1933 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1934 --- ## [Kibana: failed to import dashboard](https://discuss.elastic.co/t/kibana-failed-to-import-dashboard/240969)
**Author:** [@Lan\_Lynn](https://discuss.elastic.co/u/Lan_Lynn)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 12:44pm UTC](https://discuss.elastic.co/t/kibana-failed-to-import-dashboard/240969 "2020-07-13T12:44:45Z")
I'm trying to use filebeat to output file to dashboard. I've set【filebeats.input、dashboard.enabled、setup.kibana、output.elasticsearch】: filebeat: dashboard: kibana: elasticsearch: and use "filebeat setup --da… --- ## [Override index name while using the inbuilt filebeat modules](https://discuss.elastic.co/t/override-index-name-while-using-the-inbuilt-filebeat-modules/240855)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 5\ **Last updated:** [July 13, 2020, 12:31pm UTC](https://discuss.elastic.co/t/override-index-name-while-using-the-inbuilt-filebeat-modules/240855 "2020-07-13T12:31:14Z")
We are in process of standardising index names to ensure permissions are given correctly (eg my\_os\_windows\_yyyy-mm-dd, my\_os\_linux\_yyyy-mm-dd, my\_network\_cisco\_yyyy-mm-dd etc..) rather than the default "filebeat\*" form… --- ## [Use painless script in transform aggregation](https://discuss.elastic.co/t/use-painless-script-in-transform-aggregation/240600)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 12:28pm UTC](https://discuss.elastic.co/t/use-painless-script-in-transform-aggregation/240600 "2020-07-13T12:28:26Z")
Hi i am running 7.6.2 Elastic search and kibana , and i was trying simple painless script in transform aggregation . POST \_transform/\_preview { "source": { "index": "testindex\*" }, "pivot": { "group\_… --- ## [JDBC\_STATIC\_LOOKUP](https://discuss.elastic.co/t/jdbc-static-lookup/240704)
**Author:** [@Priyanshi\_Tiwari](https://discuss.elastic.co/u/Priyanshi_Tiwari)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 12:22pm UTC](https://discuss.elastic.co/t/jdbc-static-lookup/240704 "2020-07-13T12:22:11Z")
2020-07-07T13:59:30,863\]\[WARN \]\[logstash.filters.jdbc.lookup\] Exception when executing Jdbc query {:lookup\_id=\>"lookup-1", :exception=\>"Java::JavaSql::SQLSyntaxErrorException: Syntax error: Encountered ":" at line 1, col… --- ## [Official apt repository (451 Unavailable For Legal Reasons)](https://discuss.elastic.co/t/official-apt-repository-451-unavailable-for-legal-reasons/232494)
**Author:** [@vdt\_mik](https://discuss.elastic.co/u/vdt_mik)\ **Replies:** 74\ **Last updated:** [July 13, 2020, 12:21pm UTC](https://discuss.elastic.co/t/official-apt-repository-451-unavailable-for-legal-reasons/232494 "2020-07-13T12:21:20Z")
Hi! I faced this problem in my VM on the DigitalOcean(Europe region). I tried to do an apt update in my Debian 9 VM. But I recieved this message: Ign:1 http://deb.debian.org/debian stretch InRelease Hit:2 http://securi… --- ## [CSRF issue in Kibana 6.8](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777)
**Author:** [@nirav.gshah](https://discuss.elastic.co/u/nirav.gshah)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 12:21pm UTC](https://discuss.elastic.co/t/csrf-issue-in-kibana-6-8/240777 "2020-07-13T12:21:18Z")
Hi Team, We are doing penetration testing in ELK 6.8 using basic license. We have CSRF related issues. Are there any way we can close this CSRF or control CSRF. Regards Nirav --- ## [Elastic Cloud (SaaS) Upgrade x.coordinating.x configuration is not available for editing](https://discuss.elastic.co/t/elastic-cloud-saas-upgrade-x-coordinating-x-configuration-is-not-available-for-editing/240952)
**Author:** [@piotr.pawlak3](https://discuss.elastic.co/u/piotr.pawlak3)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 12:20pm UTC](https://discuss.elastic.co/t/elastic-cloud-saas-upgrade-x-coordinating-x-configuration-is-not-available-for-editing/240952 "2020-07-13T12:20:50Z")
Hi, I am unable to upgrade from GUI of Elastic Cloud SaaS from 7.4.2 to 7.7.1 or 7.8.0, due to Deployment \> Edit "Your changes cannot be applied The requested cluster configuration change is not permitted. Value of … --- ## [FileBeat decode\_json\_fields processor max\_depth option not working](https://discuss.elastic.co/t/filebeat-decode-json-fields-processor-max-depth-option-not-working/240948)
**Author:** [@Vitaliy\_Kravchenko](https://discuss.elastic.co/u/Vitaliy_Kravchenko)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 12:14pm UTC](https://discuss.elastic.co/t/filebeat-decode-json-fields-processor-max-depth-option-not-working/240948 "2020-07-13T12:14:44Z")
decode\_json\_fields -\> max\_depth option not working or documentation misunderstanding. To prevent creating tons of document fields in an Elasticsearch log index I want to control nested JSON parsing depth. Filebeat vers… --- ## [Natural Sort Support](https://discuss.elastic.co/t/natural-sort-support/240961)
**Author:** [@Eugene\_Kiba](https://discuss.elastic.co/u/Eugene_Kiba)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 11:51am UTC](https://discuss.elastic.co/t/natural-sort-support/240961 "2020-07-13T11:51:10Z")
Is there a native natural sort in ES engine? If not, how to achieve this functionality? This plugin seems to be outdated and not supported anymore: https://github.com/jprante/elasticsearch-analysis-naturalsort --- ## [Dump JSON directly in to ElasticSearch](https://discuss.elastic.co/t/dump-json-directly-in-to-elasticsearch/240940)
**Author:** [@saurabhbhatt](https://discuss.elastic.co/u/saurabhbhatt)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 11:41am UTC](https://discuss.elastic.co/t/dump-json-directly-in-to-elasticsearch/240940 "2020-07-13T11:41:14Z")
Hi, I have this requirement of dumping big JSON file with over 700K records into ES directly. However the JSON I have is formatted in PRETTY array format as below: STRING 1: indent preformatted text by 4 spaces \[ {… --- ## [Error in building and running Elasticsearch Source Code in IntelliJ IDEA](https://discuss.elastic.co/t/error-in-building-and-running-elasticsearch-source-code-in-intellij-idea/240957)
**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 11:36am UTC](https://discuss.elastic.co/t/error-in-building-and-running-elasticsearch-source-code-in-intellij-idea/240957 "2020-07-13T11:36:13Z")
I want to import and run Elasticsearch source code into an IntelliJ IDEA project, for that : I have cloned the latest Elasticsearch Source Code from the official Github repository https://github.com/elastic/elasticsea… --- ## [Enhanced Table](https://discuss.elastic.co/t/enhanced-table/240817)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 6\ **Last updated:** [July 13, 2020, 11:24am UTC](https://discuss.elastic.co/t/enhanced-table/240817 "2020-07-13T11:24:56Z")
Hi @fbaligand , at first I would like to thank for creating the awesome and very useful Kibana Enhanced Table plugin, it really helped me . my first question is it possible to set a row alert , i mean adding a compute… --- ## [Export Canvas workpad to PDF](https://discuss.elastic.co/t/export-canvas-workpad-to-pdf/240947)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 11:20am UTC](https://discuss.elastic.co/t/export-canvas-workpad-to-pdf/240947 "2020-07-13T11:20:19Z")
Hello, I am wondering about the feature on Canvas tab when someone want to share a workpad as pdf. I am using a basic license and kibana 7.6. It says that "Export to PDF is disabled. You must configure reporting to use… --- ## [Does logstash has any dependency on Elasticsearch version](https://discuss.elastic.co/t/does-logstash-has-any-dependency-on-elasticsearch-version/240544)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 11:11am UTC](https://discuss.elastic.co/t/does-logstash-has-any-dependency-on-elasticsearch-version/240544 "2020-07-13T11:11:13Z")
Hi, Does logstash has any dependency on Elasticsearch? When I checked the Kibana documentation it has clearly said that Elasticsearch & Kibana should be on same version. But no such information I am able to find on Elas… --- ## [Losgtash Ruby extract JSON Array Key Value](https://discuss.elastic.co/t/losgtash-ruby-extract-json-array-key-value/240909)
**Author:** [@lueneburger](https://discuss.elastic.co/u/lueneburger)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 11:06am UTC](https://discuss.elastic.co/t/losgtash-ruby-extract-json-array-key-value/240909 "2020-07-13T11:06:13Z")
Hi Everyone, i was looking last week for 2 days for this and i found a solution to my first use case, but i can't get it working for my second one :confused: also its the first time doing something with ruby, so maybe i… --- ## [Overwriting auto-generated \_id value with existing value in doc body](https://discuss.elastic.co/t/overwriting-auto-generated-id-value-with-existing-value-in-doc-body/240865)
**Author:** [@Shachar0n](https://discuss.elastic.co/u/Shachar0n)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 10:49am UTC](https://discuss.elastic.co/t/overwriting-auto-generated-id-value-with-existing-value-in-doc-body/240865 "2020-07-13T10:49:40Z")
Hi Guys, We are implementing discovery service over emails meta data for a large stream of emails, and we are trying to use some self-generated email ID as primary key for each doc in elasticsearch (overwrite the \_id fi… --- ## [Deletion in ES getting 403](https://discuss.elastic.co/t/deletion-in-es-getting-403/240915)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 10:42am UTC](https://discuss.elastic.co/t/deletion-in-es-getting-403/240915 "2020-07-13T10:42:44Z")
trying to delete from es using this query POST /logstash-2020.06.17/\_delete\_by\_query { "query": { "match": { "tags": "AuditLog" } } } getting this error message { "took": 62, "timed\_out": false, … --- ## [How to subtract two values in elasticsearch](https://discuss.elastic.co/t/how-to-subtract-two-values-in-elasticsearch/240824)
**Author:** [@adi0509](https://discuss.elastic.co/u/adi0509)\ **Replies:** 10\ **Last updated:** [July 13, 2020, 10:36am UTC](https://discuss.elastic.co/t/how-to-subtract-two-values-in-elasticsearch/240824 "2020-07-13T10:36:23Z")
if my logs looks like this, { name: "A1",X: 10} { name: "A1",Y: 8 } { name: "A2",X: 15} { name: "A2",Y: 1 } then how can I subtract (X-Y) which have same name? What I want is, for name "A1" X-Y = 10-8 = 2 for nam… --- ## [Replace dot with Space is not working](https://discuss.elastic.co/t/replace-dot-with-space-is-not-working/240664)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 10:31am UTC](https://discuss.elastic.co/t/replace-dot-with-space-is-not-working/240664 "2020-07-13T10:31:19Z")
Hi Support, I have created a large index and I am facing issue related filename search. Below is the mapping example. PUT split\_test { "settings":{ "index" : { "number\_of\_… --- ## [Elasticsearch.py dump conversion](https://discuss.elastic.co/t/elasticsearch-py-dump-conversion/240939)
**Author:** [@Koen\_Wouters1](https://discuss.elastic.co/u/Koen_Wouters1)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 9:52am UTC](https://discuss.elastic.co/t/elasticsearch-py-dump-conversion/240939 "2020-07-13T09:52:06Z")
Up till now we used simple sh scripts to load JSON files as bulk to ES, but we want to change this to the python client. I am however struggling to figure out how we can do this without completely rewriting our JSON crea… --- ## [Will Increasing the setting script.max\_compilations\_rate from 75/5m to 300/m effect perfomance?](https://discuss.elastic.co/t/will-increasing-the-setting-script-max-compilations-rate-from-75-5m-to-300-m-effect-perfomance/240781)
**Author:** [@Sravanti](https://discuss.elastic.co/u/Sravanti)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 9:45am UTC](https://discuss.elastic.co/t/will-increasing-the-setting-script-max-compilations-rate-from-75-5m-to-300-m-effect-perfomance/240781 "2020-07-13T09:45:13Z")
I'm getting remote transport exception while executing painless scripts. Need to know if it will really effect performance, if we increase from its actual limit i.e 75/5m to 200-300/1m. if not, is there any alternative … --- ## [Upgrade from elastic 5.6 to 7](https://discuss.elastic.co/t/upgrade-from-elastic-5-6-to-7/240933)
**Author:** [@amitkle](https://discuss.elastic.co/u/amitkle)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 9:37am UTC](https://discuss.elastic.co/t/upgrade-from-elastic-5-6-to-7/240933 "2020-07-13T09:37:46Z")
Hello, We are currently running elastic 5.6. We are switching servers and we wanted to take this opportunity to upgrade to elastic 7. Our original plan was to backup our indexes -\> load the backups to elastic 6.8 on th… --- ## [Geo\_shape: False positives when the polygon has aligned points](https://discuss.elastic.co/t/geo-shape-false-positives-when-the-polygon-has-aligned-points/240725)
**Author:** [@franck.valentin](https://discuss.elastic.co/u/franck.valentin)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 9:18am UTC](https://discuss.elastic.co/t/geo-shape-false-positives-when-the-polygon-has-aligned-points/240725 "2020-07-13T09:18:16Z")
Hi, I got false positives when searching intersections with a polygon that have aligned points: For example, after indexing the following FeatureCollection (directly from Kibana): { "type": "FeatureCollect… --- ## [Is there any way to adjust the edge weights in Graph by myself?](https://discuss.elastic.co/t/is-there-any-way-to-adjust-the-edge-weights-in-graph-by-myself/240873)
**Author:** [@op71](https://discuss.elastic.co/u/op71)\ **Replies:** 1\ **Last updated:** [July 13, 2020, 9:13am UTC](https://discuss.elastic.co/t/is-there-any-way-to-adjust-the-edge-weights-in-graph-by-myself/240873 "2020-07-13T09:13:52Z")
I would like to use the Graph feature of Elasticsearch right now. Is there any way to adjust the edge weights in Graph by myself? I want to increase the weights on certain nodes. --- ## [I want to import a 3GB system file to ELK in one go](https://discuss.elastic.co/t/i-want-to-import-a-3gb-system-file-to-elk-in-one-go/240572)
**Author:** [@Deepika\_Rawat](https://discuss.elastic.co/u/Deepika_Rawat)\ **Replies:** 21\ **Last updated:** [July 13, 2020, 9:08am UTC](https://discuss.elastic.co/t/i-want-to-import-a-3gb-system-file-to-elk-in-one-go/240572 "2020-07-13T09:08:52Z")
But it is showing Disk error.I installed graylog now but it is also not working .Will anyone be able to tell me how to read a 3 GB file in ELK or any other free open source software just like ELK if you will be able to t… --- ## [Why can't I get the result?](https://discuss.elastic.co/t/why-cant-i-get-the-result/240910)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 3\ **Last updated:** [July 13, 2020, 9:08am UTC](https://discuss.elastic.co/t/why-cant-i-get-the-result/240910 "2020-07-13T09:08:11Z")
GET abp\_schedulerlogs\_dev/\_search { "query": { "bool": { "must": { "term":{ "JobInfoId":"08d814f9-470e-4082-8333-6d6de194863e" } }, "filter": { "te… --- ## [Filebeat stopped harvesting logs](https://discuss.elastic.co/t/filebeat-stopped-harvesting-logs/240863)
**Author:** [@Sai\_Avinash\_Duddupud](https://discuss.elastic.co/u/Sai_Avinash_Duddupud)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 9:04am UTC](https://discuss.elastic.co/t/filebeat-stopped-harvesting-logs/240863 "2020-07-13T09:04:20Z")
Hi all, I have started filebeat today with the following config and filbeat read logs till 2days ago and now it stopped receiving logs. I have tried restarting the filebeat by deleted the registry folder too, but the re… --- ## [Auditd rules to save terminal output](https://discuss.elastic.co/t/auditd-rules-to-save-terminal-output/240930)
**Author:** [@Matt\_Rollo](https://discuss.elastic.co/u/Matt_Rollo)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 9:03am UTC](https://discuss.elastic.co/t/auditd-rules-to-save-terminal-output/240930 "2020-07-13T09:03:29Z")
Thanks to autidbeat I'm able to logging on ELK command execution with flags, but I also need to save output from terminal of that command call. Is there any way to do that by auditbeat ? Maybe some rules to record kernel… --- ## [Ingesting Winlogbeat File output Text file](https://discuss.elastic.co/t/ingesting-winlogbeat-file-output-text-file/240925)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 0\ **Last updated:** [July 13, 2020, 8:44am UTC](https://discuss.elastic.co/t/ingesting-winlogbeat-file-output-text-file/240925 "2020-07-13T08:44:11Z")
Hi, Apologies if this should be in the Beats section, though I think it should be Logstash. I need to ingest WInlogbeat events from a system which has WinlogBeats installed but is using a File output, rather than Logst… --- ## [Sending logs to external SIEM via syslog using filebeat](https://discuss.elastic.co/t/sending-logs-to-external-siem-via-syslog-using-filebeat/240816)
**Author:** [@JitenM](https://discuss.elastic.co/u/JitenM)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 8:25am UTC](https://discuss.elastic.co/t/sending-logs-to-external-siem-via-syslog-using-filebeat/240816 "2020-07-13T08:25:35Z")
Hello All, Is it possible to send the logs to a external SIEM server through syslog configuration using filebeat? If yes could you please give me a reference link because i am not able to find a output type as syslog in… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1932) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1934)