# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=214 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 215 --- ## [Filebeat is not sending logs to elk server in aws ec2 instance. please suggest!](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elk-server-in-aws-ec2-instance-please-suggest/361826)
**Author:** [@evangelin](https://discuss.elastic.co/u/evangelin)\ **Replies:** 0\ **Last updated:** [June 21, 2024, 7:09am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-logs-to-elk-server-in-aws-ec2-instance-please-suggest/361826 "2024-06-21T07:09:49Z")
hi, i have installed elk in an ec2 instance ubuntu 22 and filebeat in aother server ubuntu 22 now im trying to send logs from filebeat to elk here is my filebeat.yml cat /etc/filebeat/filebeat.yml ##################… --- ## [Logstash with CVE-2023-26604 - systemd blocked for production](https://discuss.elastic.co/t/logstash-with-cve-2023-26604-systemd-blocked-for-production/362042)
**Author:** [@Madhab\_Chandra\_Pal](https://discuss.elastic.co/u/Madhab_Chandra_Pal)\ **Replies:** 1\ **Last updated:** [June 26, 2024, 12:42pm UTC](https://discuss.elastic.co/t/logstash-with-cve-2023-26604-systemd-blocked-for-production/362042 "2024-06-26T12:42:41Z")
Hi, I am trying to use logstash 8.12.2 for our production but I am struck due to High vulnerability from CVE-2023-26604 - systemd and it does not have a remediation as of today being an OS package. Is there any alterna… --- ## [Cannot specify multiple documents in a single corpora](https://discuss.elastic.co/t/cannot-specify-multiple-documents-in-a-single-corpora/362065)
**Author:** [@mradulag](https://discuss.elastic.co/u/mradulag)\ **Replies:** 6\ **Last updated:** [June 26, 2024, 12:05pm UTC](https://discuss.elastic.co/t/cannot-specify-multiple-documents-in-a-single-corpora/362065 "2024-06-26T12:05:33Z")
I have multiple input JSON documents (around 5000) and want to ingest them using Rally, I have created a track.json based on those input JSON documents like this: (Shows the first few lines of the file) { "version":… --- ## [Elasticsearch Data Lost After Restart Minikube & After Restart Pod In Local Minikube](https://discuss.elastic.co/t/elasticsearch-data-lost-after-restart-minikube-after-restart-pod-in-local-minikube/362081)
**Author:** [@Arfa\_T](https://discuss.elastic.co/u/Arfa_T)\ **Replies:** 1\ **Last updated:** [June 26, 2024, 11:20am UTC](https://discuss.elastic.co/t/elasticsearch-data-lost-after-restart-minikube-after-restart-pod-in-local-minikube/362081 "2024-06-26T11:20:26Z")
I have a problem dealing with persistent data from elasticsearch after I shut down and restart my minikube Requirement: CPUS: 4 Memory: 7000Mbi Driver: hyperv (windows - local) Scenario: Deploy elastic to minikube A… --- ## [Elasticsearch server sizing](https://discuss.elastic.co/t/elasticsearch-server-sizing/362087)
**Author:** [@sl89](https://discuss.elastic.co/u/sl89)\ **Replies:** 0\ **Last updated:** [June 26, 2024, 10:54am UTC](https://discuss.elastic.co/t/elasticsearch-server-sizing/362087 "2024-06-26T10:54:34Z")
Hello. I have a single ES node running on my server with lots of indexes and data. It is time for me to cluster my data/indices. Where can I learn about, how to size the cluster ? ( No. of nodes, shards etc keeping i… --- ## [Error : master\_not\_discovered\_exception / ELK 7.17.12 - RHEL8](https://discuss.elastic.co/t/error-master-not-discovered-exception-elk-7-17-12-rhel8/362039)
**Author:** [@SAMY-ELK](https://discuss.elastic.co/u/SAMY-ELK)\ **Replies:** 3\ **Last updated:** [June 26, 2024, 8:00am UTC](https://discuss.elastic.co/t/error-master-not-discovered-exception-elk-7-17-12-rhel8/362039 "2024-06-26T08:00:51Z")
Hi, I getting this error when i execute those command : curl -X GET "http://SFAPRL17026.gestion.mrqgest:9200/\_licence curl -X GET "http://SFAPRL17026.gestion.mrqgest:9200/\_cluster/health?pretty" error text : { "err… --- ## [Template setting is not honored by the index](https://discuss.elastic.co/t/template-setting-is-not-honored-by-the-index/361903)
**Author:** [@siakc](https://discuss.elastic.co/u/siakc)\ **Replies:** 10\ **Last updated:** [June 24, 2024, 1:14pm UTC](https://discuss.elastic.co/t/template-setting-is-not-honored-by-the-index/361903 "2024-06-24T13:14:55Z")
I created an index template with settings: { 'index.mapping.total\_fields.limit': 1500, 'index.mapping.ignore\_malformed': true } After that I create an index with matching pattern. But the index hi… --- ## [Logstash ElasticSearch Filter doesn't work with dissect fields or IP ranges](https://discuss.elastic.co/t/logstash-elasticsearch-filter-doesnt-work-with-dissect-fields-or-ip-ranges/362068)
**Author:** [@Laverio](https://discuss.elastic.co/u/Laverio)\ **Replies:** 0\ **Last updated:** [June 26, 2024, 6:30am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-filter-doesnt-work-with-dissect-fields-or-ip-ranges/362068 "2024-06-26T06:30:10Z")
Hi guys, I still rely on an old minemeld installation that exports its IOC to and Elasticsearch index. Exported ip ranges are similar to this one: 104.156.155.0-104.156.155.255, that is not a CIDR notation nor and elast… --- ## [Find Cluster information Index](https://discuss.elastic.co/t/find-cluster-information-index/361989)
**Author:** [@Bibhutibhusan\_Sahoo](https://discuss.elastic.co/u/Bibhutibhusan_Sahoo)\ **Replies:** 1\ **Last updated:** [June 26, 2024, 5:24am UTC](https://discuss.elastic.co/t/find-cluster-information-index/361989 "2024-06-26T05:24:36Z")
Hi Team, We have 3 nodes cluster for Elasticsearch and all of them are master eligible + data node. If two of ES nodes were down the third ES node is not able to find master node which is expected. Once this happens (t… --- ## [Versions of components used in kibana 8.12.2](https://discuss.elastic.co/t/versions-of-components-used-in-kibana-8-12-2/361767)
**Author:** [@inkumari](https://discuss.elastic.co/u/inkumari)\ **Replies:** 2\ **Last updated:** [June 26, 2024, 4:22am UTC](https://discuss.elastic.co/t/versions-of-components-used-in-kibana-8-12-2/361767 "2024-06-26T04:22:10Z")
Hi. We are using kibana 8.12.2 in our setup in docker. Due to security reasons, we need to know what are the versions of the following components used in this version- blink boringssl crcrypto free-type libcxx libnss… --- ## [Versions of components used in logstash 8.12.2](https://discuss.elastic.co/t/versions-of-components-used-in-logstash-8-12-2/361768)
**Author:** [@inkumari](https://discuss.elastic.co/u/inkumari)\ **Replies:** 2\ **Last updated:** [June 26, 2024, 4:16am UTC](https://discuss.elastic.co/t/versions-of-components-used-in-logstash-8-12-2/361768 "2024-06-26T04:16:44Z")
Hi We are using logstash 8.12.2 in our setup in docker. Due to security reasons, we need to know what are the versions of the following components used in this version- giflib lcms libnss-nis libnss-nisplus logstash-e… --- ## [ELK architecture](https://discuss.elastic.co/t/elk-architecture/362026)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 5\ **Last updated:** [June 25, 2024, 11:03pm UTC](https://discuss.elastic.co/t/elk-architecture/362026 "2024-06-25T23:03:17Z")
Hello, I need some advice. I have an Elasticsearch cluster with six nodes (due to licensing). I have two locations, so ideally, I want to have data in pairs. I collect data through Filebeat -\> Logstash(server) -\> Elast… --- ## [Translate\_sid is not workin](https://discuss.elastic.co/t/translate-sid-is-not-workin/362051)
**Author:** [@noe.gonza](https://discuss.elastic.co/u/noe.gonza)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 8:45pm UTC](https://discuss.elastic.co/t/translate-sid-is-not-workin/362051 "2024-06-25T20:45:19Z")
Hi everyone, the translate\_sid command does not work, it cannot translate the user name field. --- ## [I am not able to load csv data into elasticsearch & kibana](https://discuss.elastic.co/t/i-am-not-able-to-load-csv-data-into-elasticsearch-kibana/361988)
**Author:** [@Hellboy1](https://discuss.elastic.co/u/Hellboy1)\ **Replies:** 3\ **Last updated:** [June 25, 2024, 8:42pm UTC](https://discuss.elastic.co/t/i-am-not-able-to-load-csv-data-into-elasticsearch-kibana/361988 "2024-06-25T20:42:40Z")
I am not able to load data to elasticsearch using logstash. myconfig file input { file{ path=\>"/Users/hellboy/Documents/vscode/notebooks/files/new.csv" start\_position =\> "beginning" sincedb\_… --- ## [Context Error During Reindex with Elser](https://discuss.elastic.co/t/context-error-during-reindex-with-elser/362038)
**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\ **Replies:** 5\ **Last updated:** [June 25, 2024, 7:04pm UTC](https://discuss.elastic.co/t/context-error-during-reindex-with-elser/362038 "2024-06-25T19:04:23Z")
Hello, I am currently running into an error where I reindex documents from an index with a subset of data, run them through a pipeline to create vector embeddings with ELSER and create passages, which also have vector … --- ## [Elastic Agent not reaching Elastic Cloud from Windows server](https://discuss.elastic.co/t/elastic-agent-not-reaching-elastic-cloud-from-windows-server/362046)
**Author:** [@alex170195](https://discuss.elastic.co/u/alex170195)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 6:30pm UTC](https://discuss.elastic.co/t/elastic-agent-not-reaching-elastic-cloud-from-windows-server/362046 "2024-06-25T18:30:49Z")
I deployed the Elastic Agent using the command generated in Elastic Cloud and while I can see the Agent with Status Healthy in Fleet no data is received. I got the logs from the agent and I saw this: {"log.level":"erro… --- ## [Kibana dashboard is broken after cluster migration](https://discuss.elastic.co/t/kibana-dashboard-is-broken-after-cluster-migration/362045)
**Author:** [@Vitor\_Nilson](https://discuss.elastic.co/u/Vitor_Nilson)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 6:10pm UTC](https://discuss.elastic.co/t/kibana-dashboard-is-broken-after-cluster-migration/362045 "2024-06-25T18:10:48Z")
I migrated my elasticsearch to another cluster. I did exported all Saved Objects from the older cluster and imported in the new cluster. I "dumped" an rollup job index from the previous cluster to the new one. The pro… --- ## [App search engine nested filter not working](https://discuss.elastic.co/t/app-search-engine-nested-filter-not-working/361864)
**Author:** [@gautham.pushpakumar](https://discuss.elastic.co/u/gautham.pushpakumar)\ **Replies:** 6\ **Last updated:** [June 25, 2024, 4:57pm UTC](https://discuss.elastic.co/t/app-search-engine-nested-filter-not-working/361864 "2024-06-25T16:57:06Z")
I have zero luck in getting this work. First of all the engine expects us to create subfields and after we do that the filter query returns empty results. I followed exactly what is given here and no luck I have e… --- ## [Curl -X GET Command Error](https://discuss.elastic.co/t/curl-x-get-command-error/362035)
**Author:** [@dfir](https://discuss.elastic.co/u/dfir)\ **Replies:** 8\ **Last updated:** [June 25, 2024, 4:49pm UTC](https://discuss.elastic.co/t/curl-x-get-command-error/362035 "2024-06-25T16:49:49Z")
I am trying to install Elasticsearch on Ubuntu. When I run curl -X GET 'http://localhost:9200 I get an error: Empty Reply from Server. I get this when the firewall is disabled and also when it is enabled. I have adju… --- ## [Solution: Unable to delete rollup job due to spaces in job ID](https://discuss.elastic.co/t/solution-unable-to-delete-rollup-job-due-to-spaces-in-job-id/362032)
**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 2:20pm UTC](https://discuss.elastic.co/t/solution-unable-to-delete-rollup-job-due-to-spaces-in-job-id/362032 "2024-06-25T14:20:30Z")
Hi, Posting solution for below issue. Solution: Get all tasks. GET /\_tasks Identify rollup task. ctrl + f \> rollup Kill the roll up task by task id. Note: Dont copy value from "id" field. Use entire Id mention… --- ## [Extract data from nested json output and assign to new felids](https://discuss.elastic.co/t/extract-data-from-nested-json-output-and-assign-to-new-felids/361901)
**Author:** [@vijjigani](https://discuss.elastic.co/u/vijjigani)\ **Replies:** 1\ **Last updated:** [June 25, 2024, 2:22pm UTC](https://discuss.elastic.co/t/extract-data-from-nested-json-output-and-assign-to-new-felids/361901 "2024-06-25T14:22:04Z")
Dear team , i want to extract the details ,description,sourceDescription and map to other fields . here i am using the http\_poller plug in .i need the filter section , can anyone help here ?i have tried in multiple ways … --- ## [Convert the default ES UTC time to local timezone with logstash](https://discuss.elastic.co/t/convert-the-default-es-utc-time-to-local-timezone-with-logstash/361843)
**Author:** [@gbL2k](https://discuss.elastic.co/u/gbL2k)\ **Replies:** 11\ **Last updated:** [June 25, 2024, 2:11pm UTC](https://discuss.elastic.co/t/convert-the-default-es-utc-time-to-local-timezone-with-logstash/361843 "2024-06-25T14:11:10Z")
Hello everyone, My goal is export alerts from elasticsearch and I have 2 problems left to solve: My current configuration: input { elasticsearch { hosts =\> "https://ip:9200" index =\> ".internal.alerts-securi… --- ## [Flatten issue](https://discuss.elastic.co/t/flatten-issue/361573)
**Author:** [@john900502](https://discuss.elastic.co/u/john900502)\ **Replies:** 1\ **Last updated:** [June 25, 2024, 2:02pm UTC](https://discuss.elastic.co/t/flatten-issue/361573 "2024-06-25T14:02:26Z")
Hi everyone! I'm currently using the official dataset for learning and would like to ask if it's possible to visualize "products.taxful\_price" (an array of numbers) in a stacked bar chart style within a view? For examp… --- ## [Kibana latest logs are getting generated](https://discuss.elastic.co/t/kibana-latest-logs-are-getting-generated/361951)
**Author:** [@riya\_s](https://discuss.elastic.co/u/riya_s)\ **Replies:** 3\ **Last updated:** [June 25, 2024, 1:41pm UTC](https://discuss.elastic.co/t/kibana-latest-logs-are-getting-generated/361951 "2024-06-25T13:41:27Z")
Hi, Not sure what are the security level changes or filebeat iml file changes happened but since 2 weeks when I started my instances the latest logs are not getting generated. --- ## [Carbon Black Cloud: Failed to Unmarshal JSON Message](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975)
**Author:** [@promenade8894](https://discuss.elastic.co/u/promenade8894)\ **Replies:** 17\ **Last updated:** [June 25, 2024, 1:17pm UTC](https://discuss.elastic.co/t/carbon-black-cloud-failed-to-unmarshal-json-message/361975 "2024-06-25T13:17:00Z")
I've recently added the Carbon Black Cloud integration to one of my agents using the "Collect Carbon Black Cloud logs via API using CEL \[Beta\]" option. However, all the documents that result from it have no useful inform… --- ## [Cannot write to a field alias \[agent.hostname\]](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-agent-hostname/362019)
**Author:** [@bhagt](https://discuss.elastic.co/u/bhagt)\ **Replies:** 1\ **Last updated:** [June 25, 2024, 11:44am UTC](https://discuss.elastic.co/t/cannot-write-to-a-field-alias-agent-hostname/362019 "2024-06-25T11:44:29Z")
Hi, I encounter the following error during installation of packetbeat: {"type":"mapper\_parsing\_exception","reason":"failed to parse","caused\_by":{"type":"illegal\_argument\_exception","reason":"Cannot write to a field al… --- ## [Filebeat not sending all lines for a overwritten file](https://discuss.elastic.co/t/filebeat-not-sending-all-lines-for-a-overwritten-file/361786)
**Author:** [@immortel](https://discuss.elastic.co/u/immortel)\ **Replies:** 2\ **Last updated:** [June 25, 2024, 10:27am UTC](https://discuss.elastic.co/t/filebeat-not-sending-all-lines-for-a-overwritten-file/361786 "2024-06-25T10:27:30Z")
Hello, On a daily basis, we are exporting 4 configurations files. We are overwriting the same file with the new data that is pretty much the same every time. My problem is that filebeat does not realize it is a new fil… --- ## [Elastic Common Schema Jobss Logs Implementation](https://discuss.elastic.co/t/elastic-common-schema-jobss-logs-implementation/362002)
**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\ **Replies:** 0\ **Last updated:** [June 25, 2024, 9:38am UTC](https://discuss.elastic.co/t/elastic-common-schema-jobss-logs-implementation/362002 "2024-06-25T09:38:57Z")
Hello i am injesting jboss logs to the elastic have some of the fields to grok, but i want to use the ELastic Common schema to store those here is my log: 2024-06-25 11:59:50,358 ERROR \[stderr\] (default task-100) at o… --- ## [Logs are not displayed in dashboards](https://discuss.elastic.co/t/logs-are-not-displayed-in-dashboards/361962)
**Author:** [@Babouchka](https://discuss.elastic.co/u/Babouchka)\ **Replies:** 7\ **Last updated:** [June 25, 2024, 9:09am UTC](https://discuss.elastic.co/t/logs-are-not-displayed-in-dashboards/361962 "2024-06-25T09:09:41Z")
Hello everyone ! I have a 3 node cluster (1 with kibana/elasticsearch and 2 with logstash/elasticsearch). On the client side I use Filebeat to send logs. I have ugraded from 8.11 to 8.14.1 and my dashboards no longer d… --- ## [Future timeline in kibana doesn't create any difference](https://discuss.elastic.co/t/future-timeline-in-kibana-doesnt-create-any-difference/361947)
**Author:** [@Rupa123](https://discuss.elastic.co/u/Rupa123)\ **Replies:** 7\ **Last updated:** [June 25, 2024, 8:58am UTC](https://discuss.elastic.co/t/future-timeline-in-kibana-doesnt-create-any-difference/361947 "2024-06-25T08:58:24Z")
We have added data with future timestamp but that data is still visible in future and past timestamps [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=213) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=215)