# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=200 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 201 --- ## [Kibana URL Page : Refused to execute inline script because it violates the following Content Security Policy directive](https://discuss.elastic.co/t/kibana-url-page-refused-to-execute-inline-script-because-it-violates-the-following-content-security-policy-directive/363442)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [July 22, 2024, 9:09am UTC](https://discuss.elastic.co/t/kibana-url-page-refused-to-execute-inline-script-because-it-violates-the-following-content-security-policy-directive/363442 "2024-07-22T09:09:10Z")
Hi, OS - 22.04 Kibana - 7.17.22 Error: Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'self'". Either the 'unsafe-inline' keyword, a ha… --- ## [Kibana dashboard using 2 indices](https://discuss.elastic.co/t/kibana-dashboard-using-2-indices/363292)
**Author:** [@Riccardo\_Robb](https://discuss.elastic.co/u/Riccardo_Robb)\ **Replies:** 5\ **Last updated:** [July 22, 2024, 9:08am UTC](https://discuss.elastic.co/t/kibana-dashboard-using-2-indices/363292 "2024-07-22T09:08:54Z")
Hi guys, I want to know if it is possible to create a dashboard using 2 indices. I have 2 indices, one "collections" with \_id and related\_files\_sha256 (keyword array); one "files" with \_id, sha256 (text) and date (date)… --- ## [Applying ILM for backing indices of Elastic Integrations' datastreams](https://discuss.elastic.co/t/applying-ilm-for-backing-indices-of-elastic-integrations-datastreams/363533)
**Author:** [@An\_Hoang](https://discuss.elastic.co/u/An_Hoang)\ **Replies:** 0\ **Last updated:** [July 22, 2024, 8:34am UTC](https://discuss.elastic.co/t/applying-ilm-for-backing-indices-of-elastic-integrations-datastreams/363533 "2024-07-22T08:34:24Z")
Hello everyone, I am trying to apply the ILM for the backing indices of Elastic Integrations' datastreams. I see that we have a separate built-in Lifecycle of datastream to set the retention of data. The problem is I wa… --- ## [Master Node vs Data Node](https://discuss.elastic.co/t/master-node-vs-data-node/363403)
**Author:** [@elk.admin](https://discuss.elastic.co/u/elk.admin)\ **Replies:** 3\ **Last updated:** [July 22, 2024, 6:58am UTC](https://discuss.elastic.co/t/master-node-vs-data-node/363403 "2024-07-22T06:58:49Z")
I have designed a 6 node elasticsearch cluster with 3 Master Nodes and 3 Data nodes. I am trying to turn on the monitoring using Metricbeat . And metricbeat asks for the url of the monitoring Cluster. What should be the … --- ## [Calculating sum using the aggregate filter](https://discuss.elastic.co/t/calculating-sum-using-the-aggregate-filter/363519)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 0\ **Last updated:** [July 22, 2024, 5:40am UTC](https://discuss.elastic.co/t/calculating-sum-using-the-aggregate-filter/363519 "2024-07-22T05:40:52Z")
Hi Team, We have sample data like this log 1 { "commonid": "test\_567", "Key": "test1234", "amount": 0, "information2": "test\_567" } log 2 { "commonid": "test\_567", "reconKey… --- ## [Elastic auditbeat v6 vs v7 unknown TCP connects](https://discuss.elastic.co/t/elastic-auditbeat-v6-vs-v7-unknown-tcp-connects/363516)
**Author:** [@ficco2024](https://discuss.elastic.co/u/ficco2024)\ **Replies:** 1\ **Last updated:** [July 22, 2024, 4:05am UTC](https://discuss.elastic.co/t/elastic-auditbeat-v6-vs-v7-unknown-tcp-connects/363516 "2024-07-22T04:05:10Z")
Hello, I am seeing unknown TCP connections in auditbeat when processing or publishing events in v6.7 but there is no such unknown connections in v7+. Is it correct old version behavior and what is it used for? Here is … --- ## [Failed to retrieve password hash for reserved user kibana\_system](https://discuss.elastic.co/t/failed-to-retrieve-password-hash-for-reserved-user-kibana-system/363271)
**Author:** [@Mireiabm](https://discuss.elastic.co/u/Mireiabm)\ **Replies:** 10\ **Last updated:** [July 22, 2024, 1:55am UTC](https://discuss.elastic.co/t/failed-to-retrieve-password-hash-for-reserved-user-kibana-system/363271 "2024-07-22T01:55:49Z")
hi, From one day to the next, my Elasticsearch stopped working without me doing anything, and this error appears: \[2024-07-11T09:22:37,457\]\[ERROR\]\[o.e.x.s.a.e.ReservedRealm\] \[prod-1\] failed to retrieve password hash for… --- ## [Brain Twister (for us any way!)](https://discuss.elastic.co/t/brain-twister-for-us-any-way/363456)
**Author:** [@xef](https://discuss.elastic.co/u/xef)\ **Replies:** 2\ **Last updated:** [July 21, 2024, 6:53pm UTC](https://discuss.elastic.co/t/brain-twister-for-us-any-way/363456 "2024-07-21T18:53:51Z")
we have an index and we use it to show documents which we retreive on a paged basis. i.e the query will be { .From((page - 1) \* pageSize) .Size(25) .Sort(sort =\> //etc } How can we figure out if we hav… --- ## [API Key Permissions for Behavioral Analytics](https://discuss.elastic.co/t/api-key-permissions-for-behavioral-analytics/363236)
**Author:** [@jokulicz](https://discuss.elastic.co/u/jokulicz)\ **Replies:** 1\ **Last updated:** [July 21, 2024, 5:24pm UTC](https://discuss.elastic.co/t/api-key-permissions-for-behavioral-analytics/363236 "2024-07-21T17:24:55Z")
I configured Behavioral Analytics using an API key to track analytics from Search UI and I am trying to refine the permissions so the API key only has access to what it needs. I am running an on-premise Elasticsearch in… --- ## [Logstash geoip failure | IP was not found in the database](https://discuss.elastic.co/t/logstash-geoip-failure-ip-was-not-found-in-the-database/363231)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 7\ **Last updated:** [July 21, 2024, 2:18pm UTC](https://discuss.elastic.co/t/logstash-geoip-failure-ip-was-not-found-in-the-database/363231 "2024-07-21T14:18:52Z")
Hi Community, Below is the logstash config . My objective is to get city,country,state based on geolocation. In input file i am putting geolocation. input { beats { port=\> 5044 #codec =\> json } } filter { geoip { … --- ## [Preserve uniqueness while supporting large amount of data](https://discuss.elastic.co/t/preserve-uniqueness-while-supporting-large-amount-of-data/363500)
**Author:** [@sam10](https://discuss.elastic.co/u/sam10)\ **Replies:** 0\ **Last updated:** [July 21, 2024, 1:21pm UTC](https://discuss.elastic.co/t/preserve-uniqueness-while-supporting-large-amount-of-data/363500 "2024-07-21T13:21:38Z")
Hi community, I have approximately a few TB of data (few billions of documents) and I want to save them in an elastic manner while preserving the uniqueness of each document. I achieve uniqueness by generating the \_id … --- ## [Bletcherous Logstash Elasticsearch filter ConfigurationError](https://discuss.elastic.co/t/bletcherous-logstash-elasticsearch-filter-configurationerror/363443)
**Author:** [@Gary\_Brooks](https://discuss.elastic.co/u/Gary_Brooks)\ **Replies:** 3\ **Last updated:** [July 21, 2024, 11:23am UTC](https://discuss.elastic.co/t/bletcherous-logstash-elasticsearch-filter-configurationerror/363443 "2024-07-21T11:23:18Z")
I'm receiving the "Unable to configure plugins: (ConfigurationError) Something is wrong with your configuration." error message from a Logstash Elasticsearch filter. The filter is: filter { ruby { # code to defi… --- ## [LogStash 403 error to Elastic](https://discuss.elastic.co/t/logstash-403-error-to-elastic/362897)
**Author:** [@NikoCosmico01](https://discuss.elastic.co/u/NikoCosmico01)\ **Replies:** 9\ **Last updated:** [July 21, 2024, 7:13am UTC](https://discuss.elastic.co/t/logstash-403-error-to-elastic/362897 "2024-07-21T07:13:34Z")
I am trying to ingest data from wazuh to elastic using this .config file inside logstash input { opensearch { hosts =\> \["\[IP:PORT\]"\] user =\> "\[USER\]" password =\> "\[PW\]" index =\> "wazuh-alerts-\*" s… --- ## [Detecting Active Directory Activity](https://discuss.elastic.co/t/detecting-active-directory-activity/363477)
**Author:** [@Oolong](https://discuss.elastic.co/u/Oolong)\ **Replies:** 2\ **Last updated:** [July 20, 2024, 8:12pm UTC](https://discuss.elastic.co/t/detecting-active-directory-activity/363477 "2024-07-20T20:12:19Z")
Hi Everyone, Is it possible to detect active directory activity with winlogbeat ? i.e. - A new user getting created - A user being deleted - Password resets If yes, can someone point me to documentation that i can … --- ## [Ingest json file containing several json objects (one per line) sent from java (over http) to logstash to elasticsearch](https://discuss.elastic.co/t/ingest-json-file-containing-several-json-objects-one-per-line-sent-from-java-over-http-to-logstash-to-elasticsearch/363478)
**Author:** [@taykara](https://discuss.elastic.co/u/taykara)\ **Replies:** 11\ **Last updated:** [July 20, 2024, 6:35pm UTC](https://discuss.elastic.co/t/ingest-json-file-containing-several-json-objects-one-per-line-sent-from-java-over-http-to-logstash-to-elasticsearch/363478 "2024-07-20T18:35:42Z")
Hi there, I'm very very new to ELK and I am facing an issue. I try to send a json file containing several json object (one per line) from a Java application to logstash. Here is the file I send over http post request … --- ## [Metricbeat kubernetes module](https://discuss.elastic.co/t/metricbeat-kubernetes-module/363471)
**Author:** [@AFKBETO](https://discuss.elastic.co/u/AFKBETO)\ **Replies:** 0\ **Last updated:** [July 20, 2024, 12:11pm UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-module/363471 "2024-07-20T12:11:20Z")
Hello, I would like to ask for help on k8s module since I can't seem to find it anywhere. Our company has a private cloud that each team can request a namespace to deploy applications on. Since we do not have full permi… --- ## [Filter stop words in simple\_query\_string](https://discuss.elastic.co/t/filter-stop-words-in-simple-query-string/363283)
**Author:** [@jahedi](https://discuss.elastic.co/u/jahedi)\ **Replies:** 5\ **Last updated:** [July 20, 2024, 4:53am UTC](https://discuss.elastic.co/t/filter-stop-words-in-simple-query-string/363283 "2024-07-20T04:53:11Z")
Hi, I have an index named news\_headline with such mapping: { "mappings": { "properties": { "authors": { "type": "text" }, "category": { "type": "keyword" }, "date": {… --- ## [Ghost Web Crawlers](https://discuss.elastic.co/t/ghost-web-crawlers/363373)
**Author:** [@mszal\_ib](https://discuss.elastic.co/u/mszal_ib)\ **Replies:** 3\ **Last updated:** [July 19, 2024, 8:20pm UTC](https://discuss.elastic.co/t/ghost-web-crawlers/363373 "2024-07-19T20:20:59Z")
I am using Elastic, Kibana, and Enterprise Search 8.14 on Elastic Cloud. I was test crawling some domains with the "Elastic Web Crawler" with multiple custom crawl schedules (top right drop down Kibana). Later, I deleted… --- ## [Redundant syslog processing](https://discuss.elastic.co/t/redundant-syslog-processing/363178)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 2\ **Last updated:** [July 19, 2024, 6:58pm UTC](https://discuss.elastic.co/t/redundant-syslog-processing/363178 "2024-07-19T18:58:29Z")
I'm testing log collection from some Palo Alto firewalls and am considering what the best design might be for reliable and redundant log collection. What do other do? Log to two collectors and have Elastic deduplicate… --- ## [Laravel Elasticsearch Integration: Native Eloquent Model Extension Package](https://discuss.elastic.co/t/laravel-elasticsearch-integration-native-eloquent-model-extension-package/363357)
**Author:** [@pdphilip](https://discuss.elastic.co/u/pdphilip)\ **Replies:** 1\ **Last updated:** [July 19, 2024, 6:17pm UTC](https://discuss.elastic.co/t/laravel-elasticsearch-integration-native-eloquent-model-extension-package/363357 "2024-07-19T18:17:32Z")
Hi All, I've noticed that a few people have been asking about how to integrate Elasticsearch with Laravel. I maintain a package that integrates Elasticsearch directly into Laravel by extending Laravel's Eloquent model … --- ## [How to allow allow all ipv6 address in network in remote.reindex.whitelist](https://discuss.elastic.co/t/how-to-allow-allow-all-ipv6-address-in-network-in-remote-reindex-whitelist/363445)
**Author:** [@amrit\_singh](https://discuss.elastic.co/u/amrit_singh)\ **Replies:** 0\ **Last updated:** [July 19, 2024, 4:09pm UTC](https://discuss.elastic.co/t/how-to-allow-allow-all-ipv6-address-in-network-in-remote-reindex-whitelist/363445 "2024-07-19T16:09:26Z")
In my environment elasticsearch is over container where IP changes on pod restart. So I wanted to allow all IPv6 address (open for any ip) to the "remote.reindex.whitelist" settings, so that re-indexing can be done fro… --- ## [Distributing Load Test Driver: Does It Split Search Operations?](https://discuss.elastic.co/t/distributing-load-test-driver-does-it-split-search-operations/363437)
**Author:** [@RafaelAdao](https://discuss.elastic.co/u/RafaelAdao)\ **Replies:** 1\ **Last updated:** [July 19, 2024, 3:35pm UTC](https://discuss.elastic.co/t/distributing-load-test-driver-does-it-split-search-operations/363437 "2024-07-19T15:35:23Z")
I'm currently running benchmarks using ESRally with a distributed setup for the load test driver. When distributing the load test driver, are search operations also split across the different nodes/drivers? --- ## [Weird behaviour on document update to remove value from a field](https://discuss.elastic.co/t/weird-behaviour-on-document-update-to-remove-value-from-a-field/363427)
**Author:** [@Vijeya\_Nidhi](https://discuss.elastic.co/u/Vijeya_Nidhi)\ **Replies:** 13\ **Last updated:** [July 19, 2024, 2:52pm UTC](https://discuss.elastic.co/t/weird-behaviour-on-document-update-to-remove-value-from-a-field/363427 "2024-07-19T14:52:53Z")
Elasticsearch version 8.13.3 Assume there is a document with id test in index testindex with following fields. { "field1": "any1", "field2": "any2" } if i execute a update request like POST: \/testindex… --- ## [Boost results based of filed (number\_of\_review) with out effecting actual relevancy of results against a search query](https://discuss.elastic.co/t/boost-results-based-of-filed-number-of-review-with-out-effecting-actual-relevancy-of-results-against-a-search-query/363436)
**Author:** [@Azam\_Maqsood](https://discuss.elastic.co/u/Azam_Maqsood)\ **Replies:** 1\ **Last updated:** [July 19, 2024, 2:21pm UTC](https://discuss.elastic.co/t/boost-results-based-of-filed-number-of-review-with-out-effecting-actual-relevancy-of-results-against-a-search-query/363436 "2024-07-19T14:21:16Z")
I have a use-case of an Ecommerce website. We sell furniture and want our customer to search for different furniture items on our website. My search procedure is as follow I combine multiple attributes of a product in … --- ## [Question about knn query on nested field and similarity parameter](https://discuss.elastic.co/t/question-about-knn-query-on-nested-field-and-similarity-parameter/363294)
**Author:** [@Shaun\_Stuart](https://discuss.elastic.co/u/Shaun_Stuart)\ **Replies:** 7\ **Last updated:** [July 19, 2024, 12:52pm UTC](https://discuss.elastic.co/t/question-about-knn-query-on-nested-field-and-similarity-parameter/363294 "2024-07-19T12:52:54Z")
Hello According to the documentation (Knn query | Elasticsearch Guide \[8.14\] | Elastic), the similarity parameter can be used as a filter to only include documents that are greater than the raw similarity calculated. I'… --- ## [Calculating the Sum of a field by grouping](https://discuss.elastic.co/t/calculating-the-sum-of-a-field-by-grouping/363411)
**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\ **Replies:** 0\ **Last updated:** [July 19, 2024, 10:06am UTC](https://discuss.elastic.co/t/calculating-the-sum-of-a-field-by-grouping/363411 "2024-07-19T10:06:15Z")
Hi Team, I am trying to merge two documents based on a common key in logstash and i am able to achieve this by using a elastic input filter and elastic filter in filter section for the lookup data. Now i wanted to calcu… --- ## [Cannot send e-mail notifications SMTPAuthenticationError all the time](https://discuss.elastic.co/t/cannot-send-e-mail-notifications-smtpauthenticationerror-all-the-time/363431)
**Author:** [@Sainar\_Vekinel](https://discuss.elastic.co/u/Sainar_Vekinel)\ **Replies:** 0\ **Last updated:** [July 19, 2024, 12:10pm UTC](https://discuss.elastic.co/t/cannot-send-e-mail-notifications-smtpauthenticationerror-all-the-time/363431 "2024-07-19T12:10:03Z")
Hey guys i don't know if this problem already discussed? but i have the problem with email notification in logstash here is the error: \[2024-07-19T13:37:58,836\]\[ERROR\]\[logstash.outputs.email \]\[main\]\[aa5c77b7a64207e316… --- ## [TypeError: Cannot read properties of undefined (reading 'cluster\_uuid') in Stack Monitoring Overview Page](https://discuss.elastic.co/t/typeerror-cannot-read-properties-of-undefined-reading-cluster-uuid-in-stack-monitoring-overview-page/363423)
**Author:** [@elk.admin](https://discuss.elastic.co/u/elk.admin)\ **Replies:** 1\ **Last updated:** [July 19, 2024, 11:15am UTC](https://discuss.elastic.co/t/typeerror-cannot-read-properties-of-undefined-reading-cluster-uuid-in-stack-monitoring-overview-page/363423 "2024-07-19T11:15:29Z")
I have a 7 node elasticsearch cluster . 3 Master Nodes , 3 Data Nodes and 1 Ingest Node. The 3 master and data nodes sends metrics to the ingest node via metricbeat ( system module and elasticsearch-xpack module ) . When… --- ## [Heartbeats configure http json post request](https://discuss.elastic.co/t/heartbeats-configure-http-json-post-request/362497)
**Author:** [@solo\_etz](https://discuss.elastic.co/u/solo_etz)\ **Replies:** 2\ **Last updated:** [July 19, 2024, 11:05am UTC](https://discuss.elastic.co/t/heartbeats-configure-http-json-post-request/362497 "2024-07-19T11:05:46Z")
Hiii , i am new to heartbeats i need assistance with setup a http post request , how do i configure my json request body .. here is how i configure mine currently - type: http # Set enabled to true (or delete the fo… --- ## [O365 Audit Log Severe Delay](https://discuss.elastic.co/t/o365-audit-log-severe-delay/363419)
**Author:** [@JS2005](https://discuss.elastic.co/u/JS2005)\ **Replies:** 0\ **Last updated:** [July 19, 2024, 11:03am UTC](https://discuss.elastic.co/t/o365-audit-log-severe-delay/363419 "2024-07-19T11:03:33Z")
We have been having issues surrounding the o365.audit Integration within Elastic. We are running this integration on multiple machines and tenants and are having massive delays in logs being created on 365 before we see… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=199) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=201)