# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1953 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1954 --- ## [Oracle Cloud Infrastructure - Logstash Plugin](https://discuss.elastic.co/t/oracle-cloud-infrastructure-logstash-plugin/239813)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 2:17pm UTC](https://discuss.elastic.co/t/oracle-cloud-infrastructure-logstash-plugin/239813 "2020-07-03T14:17:34Z")
Hi All, Hoping anyone has ingested logs from OCI Object Storage into Logstash using a specific input plugin similiar to that of logstash-input-s3? The scenario is shown in the diagram below: All the resources in a … --- ## [Not able to search index](https://discuss.elastic.co/t/not-able-to-search-index/239808)
**Author:** [@nvnitt](https://discuss.elastic.co/u/nvnitt)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 2:09pm UTC](https://discuss.elastic.co/t/not-able-to-search-index/239808 "2020-07-03T14:09:18Z")
Hello, I restored some indexes from snapshot.The restore status was success.But,when I search for it,I am not able to find any data.I am a beginner to ELK stack.Please help. --- ## [Kibana can not connect to Elasticsearch cluster](https://discuss.elastic.co/t/kibana-can-not-connect-to-elasticsearch-cluster/237335)
**Author:** [@skeleton](https://discuss.elastic.co/u/skeleton)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 1:46pm UTC](https://discuss.elastic.co/t/kibana-can-not-connect-to-elasticsearch-cluster/237335 "2020-07-03T13:46:00Z")
First and foremost: Apologies, if this post is poorly formatted, i am unfamiliar with this editor. I will try to fix it once i see it, because i can not find the preview function. Background: I am trying to get a Wazuh … --- ## [Logstash - Elasticsearch filter plugin with basic authentication](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-with-basic-authentication/203473)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 1:13pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-plugin-with-basic-authentication/203473 "2020-07-03T13:13:29Z")
Hi all, I have a problem with the Logstash elasticsearch filter plugin when using basic authentication. I have created a specific user called "logstash\_internal\_reader" which has the built-in logstash\_admin role and a … --- ## [Anomaly Result Interpretation for Seasonal Data](https://discuss.elastic.co/t/anomaly-result-interpretation-for-seasonal-data/239216)
**Author:** [@saraKM](https://discuss.elastic.co/u/saraKM)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 1:08pm UTC](https://discuss.elastic.co/t/anomaly-result-interpretation-for-seasonal-data/239216 "2020-07-03T13:08:34Z")
Hi, I have one job running in elastic ML with following config: "bucket\_span": "10m", "detectors": \[ { "detector\_description": "high\_non\_zero\_count by \\"client.user\_name\\" partitionfield=\\"client.ip\\"… --- ## [Number of rows in an Excel file](https://discuss.elastic.co/t/number-of-rows-in-an-excel-file/238406)
**Author:** [@souma](https://discuss.elastic.co/u/souma)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 1:01pm UTC](https://discuss.elastic.co/t/number-of-rows-in-an-excel-file/238406 "2020-07-03T13:01:46Z")
Hey guys, i have a stack of Excel files, and i use Logstash to send it to Es. All i want is that each time i send a file to Es, it(Logstash config file) count the number of rows and save it in a variable. Is there an… --- ## [Export all saved objects](https://discuss.elastic.co/t/export-all-saved-objects/238264)
**Author:** [@vikram\_singh](https://discuss.elastic.co/u/vikram_singh)\ **Replies:** 7\ **Last updated:** [July 3, 2020, 12:56pm UTC](https://discuss.elastic.co/t/export-all-saved-objects/238264 "2020-07-03T12:56:11Z")
I found a way in kibana UI-\> management-\> saved objects to export all objects at a time in export.ndjson file. But I want to export all saved objects by a single query in kibana 7.6.2. I tried to export all saved objec… --- ## [Access sub-fields in kibana](https://discuss.elastic.co/t/access-sub-fields-in-kibana/238646)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 12:44pm UTC](https://discuss.elastic.co/t/access-sub-fields-in-kibana/238646 "2020-07-03T12:44:14Z")
Hello, In my index i have the field http.request.body.original (see also image below): As it can be seen tha value of that field is: {"customerNr":"9203521","sendMethod":"TOUR","partialDelivery":false,"isTourTimetab… --- ## [Unable to use rest-high-level client with GraalVM and Quarkus](https://discuss.elastic.co/t/unable-to-use-rest-high-level-client-with-graalvm-and-quarkus/239805)
**Author:** [@clementlesne](https://discuss.elastic.co/u/clementlesne)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 12:34pm UTC](https://discuss.elastic.co/t/unable-to-use-rest-high-level-client-with-graalvm-and-quarkus/239805 "2020-07-03T12:34:14Z")
Hi, I am unable to use the REST High Level Elasticsearch client on Quarkus with native image. The issue has been referenced into the GraalVM project. How to reproduce: Instantiate a Quarkus project Add the rest-high-… --- ## [Are these values right for Query delay, Frequency and Bucket Span?](https://discuss.elastic.co/t/are-these-values-right-for-query-delay-frequency-and-bucket-span/239498)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 12:39pm UTC](https://discuss.elastic.co/t/are-these-values-right-for-query-delay-frequency-and-bucket-span/239498 "2020-07-03T12:39:12Z")
I am trying out the anomaly detection job. The data is coming from logstash at interval of 5 mins. But sometimes there will be no data in those 5 mins. The data itself will be randomly distrubuted in the 5 min slot. Som… --- ## [Search query Timeout using RestHighLevelClient ES 7.6v](https://discuss.elastic.co/t/search-query-timeout-using-resthighlevelclient-es-7-6v/239784)
**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 11:49am UTC](https://discuss.elastic.co/t/search-query-timeout-using-resthighlevelclient-es-7-6v/239784 "2020-07-03T11:49:04Z")
Hi, We have recently migrated from ES 5.6v to 7.6v. In ES 5.6 we have been using the below statement to throw an exception and return the default response if the query execution is taking more than the given TimeValue. … --- ## [Elasticsearch Service: Email whitelisting alternative](https://discuss.elastic.co/t/elasticsearch-service-email-whitelisting-alternative/239789)
**Author:** [@Max96](https://discuss.elastic.co/u/Max96)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 11:42am UTC](https://discuss.elastic.co/t/elasticsearch-service-email-whitelisting-alternative/239789 "2020-07-03T11:42:03Z")
Hello, I am new to the ELK-Stack and we are using the Elasticsearch Service. Is it possible to send emails without whitelisting them first? Thanks Max --- ## [Hide search bar only from dashboard](https://discuss.elastic.co/t/hide-search-bar-only-from-dashboard/239117)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 8\ **Last updated:** [July 3, 2020, 11:29am UTC](https://discuss.elastic.co/t/hide-search-bar-only-from-dashboard/239117 "2020-07-03T11:29:37Z")
Hi everyone!! :wave: I want to hide the search bar from 'dashboard' page only (not for 'discovery' page) as the panels have already filters for the data to be visualized and I want my colleagues not to have the abilit… --- ## [Detach node from a cluster in docker](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/239777)
**Author:** [@peterol](https://discuss.elastic.co/u/peterol)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 10:39am UTC](https://discuss.elastic.co/t/detach-node-from-a-cluster-in-docker/239777 "2020-07-03T10:39:33Z")
Hello everyone! I have a little question about the elasticsearch-node tool: Is it possible to use it in any way to detach a node from a cluster that exists in a docker container? So far the tool throws an exception tha… --- ## [Not working on Chromium after upgrade to 7.5.2 -\> 7.8.0](https://discuss.elastic.co/t/not-working-on-chromium-after-upgrade-to-7-5-2-7-8-0/239598)
**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\ **Replies:** 4\ **Last updated:** [July 3, 2020, 10:11am UTC](https://discuss.elastic.co/t/not-working-on-chromium-after-upgrade-to-7-5-2-7-8-0/239598 "2020-07-03T10:11:46Z")
Hi community. I've just upgraded a small cluster from 7.5.2 to 7.8.0 .... so far so good, but, since I'm debianist at worstation-level, I use the packaged Chromium browser. Yesterday, as I did a rolling upgrade, I notic… --- ## [Filebeat log Not Coming to Logstash](https://discuss.elastic.co/t/filebeat-log-not-coming-to-logstash/239608)
**Author:** [@sumitsahay](https://discuss.elastic.co/u/sumitsahay)\ **Replies:** 5\ **Last updated:** [July 3, 2020, 10:09am UTC](https://discuss.elastic.co/t/filebeat-log-not-coming-to-logstash/239608 "2020-07-03T10:09:19Z")
Hi All, I am having fliebeat install on my client machine and elk masternode on different vm. I Configured everything though logs are not coming to Kibana index and index is not getting created. --- ## [Creating Snapshot repository, Linux and windows paths get mixed. Why?](https://discuss.elastic.co/t/creating-snapshot-repository-linux-and-windows-paths-get-mixed-why/239767)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 4\ **Last updated:** [July 3, 2020, 10:04am UTC](https://discuss.elastic.co/t/creating-snapshot-repository-linux-and-windows-paths-get-mixed-why/239767 "2020-07-03T10:04:47Z")
Hi I have 3 Nodes. 2 on Windows and 1 on linux. I want to try the snapshoting feature. As far as I know I have to set the path.repoon every node. So I created the network drive e which is on the PC Scot YML: Windows1… --- ## [I have to combine certain aggregation and query to extract data from elastic search . Can someone help with this following query](https://discuss.elastic.co/t/i-have-to-combine-certain-aggregation-and-query-to-extract-data-from-elastic-search-can-someone-help-with-this-following-query/239746)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 7\ **Last updated:** [July 3, 2020, 10:01am UTC](https://discuss.elastic.co/t/i-have-to-combine-certain-aggregation-and-query-to-extract-data-from-elastic-search-can-someone-help-with-this-following-query/239746 "2020-07-03T10:01:38Z")
From a set of documents do the following: Extract documents which match the following criteria: a. date\_field \> given certain date and b. second\_date\_field \< given certain date From the above extracted documents,… --- ## [Continuous tranforms stop indexing after initial indexing](https://discuss.elastic.co/t/continuous-tranforms-stop-indexing-after-initial-indexing/238473)
**Author:** [@Germain\_Pavot](https://discuss.elastic.co/u/Germain_Pavot)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 9:39am UTC](https://discuss.elastic.co/t/continuous-tranforms-stop-indexing-after-initial-indexing/238473 "2020-07-03T09:39:29Z")
Hy guys, I try to setup a continuous transforms strategy on a new cluster for optimize queries and index size with an 1h aggregation. The stack is setup like that : 1 index input-\[0\_9\]{6} with a write alias "input".… --- ## [Visualization of controls kibana 7.2](https://discuss.elastic.co/t/visualization-of-controls-kibana-7-2/239741)
**Author:** [@sanjaygunda1](https://discuss.elastic.co/u/sanjaygunda1)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 6:58am UTC](https://discuss.elastic.co/t/visualization-of-controls-kibana-7-2/239741 "2020-07-03T06:58:00Z")
Hi all, i am trying to filter data using controls in visualization tool. example:- if i have an set of emails who is having multiple cars set emails \[a@a.com,b@b.com,c@c.com\] set cars \[ford,Honda,BMW\] a@a.com is … --- ## [Store dense vectors of size more than 2048](https://discuss.elastic.co/t/store-dense-vectors-of-size-more-than-2048/239438)
**Author:** [@techytushar](https://discuss.elastic.co/u/techytushar)\ **Replies:** 4\ **Last updated:** [July 3, 2020, 9:26am UTC](https://discuss.elastic.co/t/store-dense-vectors-of-size-more-than-2048/239438 "2020-07-03T09:26:55Z")
I am trying to build a semantic text search using ElasticSearch. For this I have decided to use the cosine similarity between the embeddings of the query paragraph and the embeddings of the search paragraphs. The proble… --- ## [How to do Logstash JDBC Output with SSH](https://discuss.elastic.co/t/how-to-do-logstash-jdbc-output-with-ssh/239760)
**Author:** [@JF-GIAMMARI](https://discuss.elastic.co/u/JF-GIAMMARI)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 9:05am UTC](https://discuss.elastic.co/t/how-to-do-logstash-jdbc-output-with-ssh/239760 "2020-07-03T09:05:49Z")
Hi, I'm using JDBC as output to store logs in a mySQL database, but the mySQL server is not on the same server, so I need to launch an SSH connection before making my command, otherwise the connection fails. I've been … --- ## [Filebeat as Datasource for Elastic SIEM](https://discuss.elastic.co/t/filebeat-as-datasource-for-elastic-siem/239756)
**Author:** [@robincher](https://discuss.elastic.co/u/robincher)\ **Replies:** 0\ **Last updated:** [July 3, 2020, 8:42am UTC](https://discuss.elastic.co/t/filebeat-as-datasource-for-elastic-siem/239756 "2020-07-03T08:42:23Z")
Hi , I am looking at piping logs for MS Azure AD to SIEM, specifically for investigating attempted logins and related activity with authentication data gathered by Auditbeat and the Filebeat system modules. From Kibana… --- ## [Cluster.routing.allocation.awareness.attributes doesn't seem to work](https://discuss.elastic.co/t/cluster-routing-allocation-awareness-attributes-doesnt-seem-to-work/238548)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 9\ **Last updated:** [July 3, 2020, 8:20am UTC](https://discuss.elastic.co/t/cluster-routing-allocation-awareness-attributes-doesnt-seem-to-work/238548 "2020-07-03T08:20:23Z")
Hi Team, cluster.routing.allocation.awareness.attributes: 34 And I have 2 VMs with this same value. prd-es107.com and prd-es108.com. Both has 34. I have almost 86 nodes in my cluster. Below is the shard allocation … --- ## [Get ip source TCP plugin](https://discuss.elastic.co/t/get-ip-source-tcp-plugin/239743)
**Author:** [@Thomas74](https://discuss.elastic.co/u/Thomas74)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 8:05am UTC](https://discuss.elastic.co/t/get-ip-source-tcp-plugin/239743 "2020-07-03T08:05:39Z")
Hi, I wonder if it's possible to get the ip source of a sender when using tcp input in logstash. Is there a way to get this ip even if I don't use http requests ? Best regards, Thomas R. --- ## [Unable to ship data to logstash 6.8 via Python](https://discuss.elastic.co/t/unable-to-ship-data-to-logstash-6-8-via-python/239677)
**Author:** [@Swetha\_B](https://discuss.elastic.co/u/Swetha_B)\ **Replies:** 10\ **Last updated:** [July 3, 2020, 4:32am UTC](https://discuss.elastic.co/t/unable-to-ship-data-to-logstash-6-8-via-python/239677 "2020-07-03T04:32:34Z")
We have a Python script to collect data and ship to Logstash. Please find the python script and logstash config below. import socket import json import logging from datetime import datetime import sys print("starting t… --- ## [I am facing some issues while trying to parse XML from some host by using port without XML,](https://discuss.elastic.co/t/i-am-facing-some-issues-while-trying-to-parse-xml-from-some-host-by-using-port-without-xml/239733)
**Author:** [@Radha](https://discuss.elastic.co/u/Radha)\ **Replies:** 1\ **Last updated:** [July 3, 2020, 7:58am UTC](https://discuss.elastic.co/t/i-am-facing-some-issues-while-trying-to-parse-xml-from-some-host-by-using-port-without-xml/239733 "2020-07-03T07:58:17Z")
filbeat yml file created: type: log paths: O:\\path\\sample.xml fields: Branch: ${BRANCH} Major\_Minor: ${MAJOR\_MINOR} Build\_Time: ${BUILD\_TIME} multiline.pattern: '^\' multiline.negate: true multiline.… --- ## [Design indexes with big data](https://discuss.elastic.co/t/design-indexes-with-big-data/239235)
**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\ **Replies:** 15\ **Last updated:** [July 3, 2020, 7:23am UTC](https://discuss.elastic.co/t/design-indexes-with-big-data/239235 "2020-07-03T07:23:15Z")
I am creating an elastic cluster with 2.5TB dataset. Questions: What is the best way to design shards for best performance? The only limit is 2.1Billion documents per shard (it's Lucene core limitation), 20 - 40GB… --- ## [Crypto/rsa: verification error - using heartbeat](https://discuss.elastic.co/t/crypto-rsa-verification-error-using-heartbeat/239427)
**Author:** [@Peter\_Steenbergen](https://discuss.elastic.co/u/Peter_Steenbergen)\ **Replies:** 6\ **Last updated:** [July 3, 2020, 7:21am UTC](https://discuss.elastic.co/t/crypto-rsa-verification-error-using-heartbeat/239427 "2020-07-03T07:21:31Z")
Hi, I am getting a crypto/rsa error: verification error with heartbeat version 7.4.2. The website is using LetsEncrypt and the SSL was verified with ssllabs with a grade of A. What can be the issue here? - type: http… --- ## [Filebeat encrypted communication to Logstash](https://discuss.elastic.co/t/filebeat-encrypted-communication-to-logstash/239739)
**Author:** [@d.silwon](https://discuss.elastic.co/u/d.silwon)\ **Replies:** 2\ **Last updated:** [July 3, 2020, 7:10am UTC](https://discuss.elastic.co/t/filebeat-encrypted-communication-to-logstash/239739 "2020-07-03T07:10:50Z")
Dears, I have to enable SSL/TLS in Filebeat configuration to encrypt communication to Logstash. Right now my ELK cluster use SSL/TLS configuration between nodes with self-signed certificates. Logstash is started on ea… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1952) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1954)