# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=220 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 221 --- ## [Merge Multiple Line Event Messages in Elastic through Filebeat](https://discuss.elastic.co/t/merge-multiple-line-event-messages-in-elastic-through-filebeat/361448)
**Author:** [@nitesh.srivastava](https://discuss.elastic.co/u/nitesh.srivastava)\ **Replies:** 2\ **Last updated:** [June 14, 2024, 9:32pm UTC](https://discuss.elastic.co/t/merge-multiple-line-event-messages-in-elastic-through-filebeat/361448 "2024-06-14T21:32:11Z")
Hi All, We have a situation where we are monitoring some server syslogs using Filebeat/Logstash and we want log messages in multiple lines to show up as a single event in Elastic instead of an event for each line. I ch… --- ## [Migrate from NEST to new Elastic.Clients.Elasticsearch](https://discuss.elastic.co/t/migrate-from-nest-to-new-elastic-clients-elasticsearch/361526)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 8:40pm UTC](https://discuss.elastic.co/t/migrate-from-nest-to-new-elastic-clients-elasticsearch/361526 "2024-06-14T20:40:47Z")
Hi, As the NEST nugget package is deprecated, we are trying to migrate new Elastic.Clients.Elasticsearch. I couldn't find much documentation on the new Elastic.Clients.Elasticsearch. NEST has very detailed examples and… --- ## [Need some help in understanding Why retrieving all snapshots is taking forever](https://discuss.elastic.co/t/need-some-help-in-understanding-why-retrieving-all-snapshots-is-taking-forever/361450)
**Author:** [@kushalOtter](https://discuss.elastic.co/u/kushalOtter)\ **Replies:** 3\ **Last updated:** [June 14, 2024, 6:02pm UTC](https://discuss.elastic.co/t/need-some-help-in-understanding-why-retrieving-all-snapshots-is-taking-forever/361450 "2024-06-14T18:02:31Z")
Hi all, We are using the elasticsearch for storing the logs of our system via the filebeat and our cluster consists of the following on 6.8 Elasticsearch Cluster "cluster\_name" : "elk", "status" : "green", "timed… --- ## [Https:9200 without user/password and certificate](https://discuss.elastic.co/t/https-9200-without-user-password-and-certificate/361514)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [June 14, 2024, 5:43pm UTC](https://discuss.elastic.co/t/https-9200-without-user-password-and-certificate/361514 "2024-06-14T17:43:14Z")
Can I setup elasticsearch, so I can use curl like this curl https://server:9200 if yes what are the settings in yml --- ## [About the content security policies](https://discuss.elastic.co/t/about-the-content-security-policies/361509)
**Author:** [@DxT1](https://discuss.elastic.co/u/DxT1)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 3:51pm UTC](https://discuss.elastic.co/t/about-the-content-security-policies/361509 "2024-06-14T15:51:00Z")
Hi! I'm having certain issue with Kibana 8.5. Truly i don't know since when this started happening. The problem is this message the kibana shows when landing on the site that says: "Kibana has strict security requireme… --- ## [Kibana: Getting error of 'Server not ready' on browser side](https://discuss.elastic.co/t/kibana-getting-error-of-server-not-ready-on-browser-side/361481)
**Author:** [@Ajay\_Gupta1](https://discuss.elastic.co/u/Ajay_Gupta1)\ **Replies:** 2\ **Last updated:** [June 14, 2024, 3:00pm UTC](https://discuss.elastic.co/t/kibana-getting-error-of-server-not-ready-on-browser-side/361481 "2024-06-14T15:00:40Z")
I have successfully setup Elasticsearch in my local with green health and also able to check on browser side with initial node and cluster\_name. Now, as i try to run kibana from terminal its showing some error at the en… --- ## [Filter by multiple source ports](https://discuss.elastic.co/t/filter-by-multiple-source-ports/361500)
**Author:** [@mmercaldi](https://discuss.elastic.co/u/mmercaldi)\ **Replies:** 3\ **Last updated:** [June 14, 2024, 2:26pm UTC](https://discuss.elastic.co/t/filter-by-multiple-source-ports/361500 "2024-06-14T14:26:52Z")
I have 2 different streams going into the same logstash instance. I want it so if the sourceport is 5510 output to connection A and if sourceport is 5511 output to connection B. But I do not know how to reference the s… --- ## [Incoherences indices](https://discuss.elastic.co/t/incoherences-indices/361268)
**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\ **Replies:** 1\ **Last updated:** [June 14, 2024, 1:17pm UTC](https://discuss.elastic.co/t/incoherences-indices/361268 "2024-06-14T13:17:03Z")
Good morning, I think that I have an incoherence between the number of indices in DevTools and Cluster status: In dev Tools with this query: GET \_cat/indices?v&h=index,docs.count,store.size&s=docs.count:desc The res… --- ## [Unit testing new Java Api Client update method with Mockito](https://discuss.elastic.co/t/unit-testing-new-java-api-client-update-method-with-mockito/361497)
**Author:** [@PodarcisMuralis](https://discuss.elastic.co/u/PodarcisMuralis)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 1:06pm UTC](https://discuss.elastic.co/t/unit-testing-new-java-api-client-update-method-with-mockito/361497 "2024-06-14T13:06:13Z")
Hi, I am trying to write a unit test with JUnit & Mockito for client.update() method but I am stuck. Here is my updateMyId() method to test: var searchRequest = Factory.createDocumentByIdSearchRequest(indexName, id, aP… --- ## [how to update index already created with the latest update deployed in the stack](https://discuss.elastic.co/t/how-to-update-index-already-created-with-the-latest-update-deployed-in-the-stack/361494)
**Author:** [@Ricardo\_Redrao](https://discuss.elastic.co/u/Ricardo_Redrao)\ **Replies:** 1\ **Last updated:** [June 14, 2024, 12:54pm UTC](https://discuss.elastic.co/t/how-to-update-index-already-created-with-the-latest-update-deployed-in-the-stack/361494 "2024-06-14T12:54:26Z")
Hi everyone, I deployed scripts for various stacks in Logstash to perform the respective ETL processes and filters. However, when I later incorporated new calculations into the stack called "prueba," the updates only im… --- ## [Disable Attachment Processor from ElasticSearch](https://discuss.elastic.co/t/disable-attachment-processor-from-elasticsearch/361401)
**Author:** [@akula.vamshee](https://discuss.elastic.co/u/akula.vamshee)\ **Replies:** 6\ **Last updated:** [June 14, 2024, 12:43pm UTC](https://discuss.elastic.co/t/disable-attachment-processor-from-elasticsearch/361401 "2024-06-14T12:43:06Z")
Our instance of SonarQube was flagged as having an out-of-date Elasticsearch version (8.11.0) that contains security vulnerabilities. We must upgrade the Elasticsearch version (8.11.0) to (8.11.1). Due to external factor… --- ## [Need Help to Create Cluster with 2 Dedicated Master Node and 3 Data Node](https://discuss.elastic.co/t/need-help-to-create-cluster-with-2-dedicated-master-node-and-3-data-node/361101)
**Author:** [@waheedk](https://discuss.elastic.co/u/waheedk)\ **Replies:** 1\ **Last updated:** [June 14, 2024, 12:30pm UTC](https://discuss.elastic.co/t/need-help-to-create-cluster-with-2-dedicated-master-node-and-3-data-node/361101 "2024-06-14T12:30:59Z")
Hi, I have a total 5 Instances in Production and I am trying to create below 1: - 2 Dedicated Master Node ( Will be accessible from Http URL in browser as well to see the Stats 2: - 1 Master + Data ( to avoid Brin Spl… --- ## [Simple .NET logger does not work using NuGet 'Elastic.Extensions.Logging' v8.11.1](https://discuss.elastic.co/t/simple-net-logger-does-not-work-using-nuget-elastic-extensions-logging-v8-11-1/361489)
**Author:** [@HeikoW](https://discuss.elastic.co/u/HeikoW)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 12:19pm UTC](https://discuss.elastic.co/t/simple-net-logger-does-not-work-using-nuget-elastic-extensions-logging-v8-11-1/361489 "2024-06-14T12:19:46Z")
Elastic.Extensions.Logging (NuGet v8.11.1 dotnet 8) : I'm trying to get some simple logging to Elasticsearch DataStream working with a .net8 console application using the NuGet package Elastic.Extensions.Logging. I'm no… --- ## [Drop filter erros](https://discuss.elastic.co/t/drop-filter-erros/361364)
**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\ **Replies:** 5\ **Last updated:** [June 14, 2024, 11:24am UTC](https://discuss.elastic.co/t/drop-filter-erros/361364 "2024-06-14T11:24:49Z")
I am using the dissect filter to ingest csv files into elastic I used the drop filter to eliminate the headers. filter { if \[Email\] == "Email" { drop{} } } but when I look at the index there where still docume… --- ## [Timestamp in document is different from shown in kibana](https://discuss.elastic.co/t/timestamp-in-document-is-different-from-shown-in-kibana/361466)
**Author:** [@gbL2k](https://discuss.elastic.co/u/gbL2k)\ **Replies:** 6\ **Last updated:** [June 14, 2024, 11:22am UTC](https://discuss.elastic.co/t/timestamp-in-document-is-different-from-shown-in-kibana/361466 "2024-06-14T11:22:20Z")
Hello everyone! I bet its something really basic but I dont want to waste any more time by trying to find the solution myself. My issue is that in kibana the timestamp is correct and shows the correct time however in t… --- ## [Self signed certificate in certificate chain issue](https://discuss.elastic.co/t/self-signed-certificate-in-certificate-chain-issue/361484)
**Author:** [@Sachin\_Chourasiya](https://discuss.elastic.co/u/Sachin_Chourasiya)\ **Replies:** 0\ **Last updated:** [June 14, 2024, 11:08am UTC](https://discuss.elastic.co/t/self-signed-certificate-in-certificate-chain-issue/361484 "2024-06-14T11:08:48Z")
Hi Team, I am integrating the nifi using the webhook to send the alert. In body i just sending { "Name": "Rahul" } after setting up the credential when i run the test to check the integration i am getting below err… --- ## [Logstash upgrade issue (Upgrade from 7.17.5 to 8.13.24](https://discuss.elastic.co/t/logstash-upgrade-issue-upgrade-from-7-17-5-to-8-13-24/361399)
**Author:** [@mansoorpn](https://discuss.elastic.co/u/mansoorpn)\ **Replies:** 2\ **Last updated:** [June 14, 2024, 10:19am UTC](https://discuss.elastic.co/t/logstash-upgrade-issue-upgrade-from-7-17-5-to-8-13-24/361399 "2024-06-14T10:19:00Z")
Hello Team, Last week I upgraded Elasticsearch from 7.XX to 8.13.4. The Logstash version is 7.17.5. Everything is working as expected. Now I tried to upgrade Logstash from 7.17.5 to 8.13.4 and it failed with the below … --- ## [Elastic endpoint isn't installed after adding Elastic Defend integration](https://discuss.elastic.co/t/elastic-endpoint-isnt-installed-after-adding-elastic-defend-integration/359450)
**Author:** [@OoO](https://discuss.elastic.co/u/OoO)\ **Replies:** 16\ **Last updated:** [June 14, 2024, 8:11am UTC](https://discuss.elastic.co/t/elastic-endpoint-isnt-installed-after-adding-elastic-defend-integration/359450 "2024-06-14T08:11:19Z")
Hello world, I have a problem when testing Elastic Security with "Current plan:Basic". OS Version: Ubuntu 20.04 for Elastic Agent and Elasticsearch-Kibana-Fleet serve Elastic Stack Version: 8.13.4 I am using the super… --- ## [Distribution of Indexing Load across specific Data Nodes for Cold Tier](https://discuss.elastic.co/t/distribution-of-indexing-load-across-specific-data-nodes-for-cold-tier/361463)
**Author:** [@mehdi-lamrani](https://discuss.elastic.co/u/mehdi-lamrani)\ **Replies:** 5\ **Last updated:** [June 14, 2024, 8:03am UTC](https://discuss.elastic.co/t/distribution-of-indexing-load-across-specific-data-nodes-for-cold-tier/361463 "2024-06-14T08:03:03Z")
Hi, I have 4 data nodes and 1 ingest Node Nodes 1,2,3 are full to 50%, with a capacity ot 10 Terabytes each I attached a fourth data node, Node 4, with an ILM pointing to its storage for cold tier. This fourth no… --- ## [Create an alias for Fleet Agents](https://discuss.elastic.co/t/create-an-alias-for-fleet-agents/361302)
**Author:** [@otortosa](https://discuss.elastic.co/u/otortosa)\ **Replies:** 3\ **Last updated:** [June 14, 2024, 4:07am UTC](https://discuss.elastic.co/t/create-an-alias-for-fleet-agents/361302 "2024-06-14T04:07:57Z")
Hello! In my system have several hosts that their hostname is a generic one, cannot be change due production affectation. My question is, can it be to add an alias for a Fleet Agent? For example. DESKTOP-RJGJEAFKG and… --- ## [Pdf documents specified in the sitemap are not being indexed by web crawler](https://discuss.elastic.co/t/pdf-documents-specified-in-the-sitemap-are-not-being-indexed-by-web-crawler/361454)
**Author:** [@vsachdeva](https://discuss.elastic.co/u/vsachdeva)\ **Replies:** 2\ **Last updated:** [June 14, 2024, 4:01am UTC](https://discuss.elastic.co/t/pdf-documents-specified-in-the-sitemap-are-not-being-indexed-by-web-crawler/361454 "2024-06-14T04:01:32Z")
Hello, I am trying to index a set of PDF documents using the web crawler. The deployment is in GCP cloud and the PDF documents are specified in the sitemap, which is documented in the robots.txt file. I am not using wo… --- ## [Error: "SameSite: None" requires Secure connection after upgrading to Kibana 8.13.4](https://discuss.elastic.co/t/error-samesite-none-requires-secure-connection-after-upgrading-to-kibana-8-13-4/361446)
**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 7:57pm UTC](https://discuss.elastic.co/t/error-samesite-none-requires-secure-connection-after-upgrading-to-kibana-8-13-4/361446 "2024-06-13T19:57:09Z")
After upgrading from Kibana 7.17.20 to to Kibana 8.13.4, Kibana doesn't start and this error appears in the log. There is no setting for SameSite in kibana.yml file. Any idea how to resolve this issue? \[2024-06-13T1… --- ## [Rsyslog to logstash as json -\> extract pattern from message](https://discuss.elastic.co/t/rsyslog-to-logstash-as-json-extract-pattern-from-message/361382)
**Author:** [@vasilev](https://discuss.elastic.co/u/vasilev)\ **Replies:** 2\ **Last updated:** [June 13, 2024, 12:02pm UTC](https://discuss.elastic.co/t/rsyslog-to-logstash-as-json-extract-pattern-from-message/361382 "2024-06-13T12:02:03Z")
Hello all, I am sending rsyslog data to logstash via udp. Here is the logstash configuration: input { udp { port =\> 15044 codec =\> "json" type =\> "rsyslog" } } filter { if \[srvtype\] == "test" { json { source… --- ## [Problem in setting up a Watcher](https://discuss.elastic.co/t/problem-in-setting-up-a-watcher/361322)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 3\ **Last updated:** [June 13, 2024, 6:55pm UTC](https://discuss.elastic.co/t/problem-in-setting-up-a-watcher/361322 "2024-06-13T18:55:37Z")
I've been trying to setup a Watcher that could print the following fields: monitor.name monitor.type url.full monitor.status So far this was my configuration: { "trigger": { "schedule": { "interval": "5m"… --- ## [Is it possible to pre-load WMS connections for a map in kibana.yml?](https://discuss.elastic.co/t/is-it-possible-to-pre-load-wms-connections-for-a-map-in-kibana-yml/361440)
**Author:** [@jlogan](https://discuss.elastic.co/u/jlogan)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 5:11pm UTC](https://discuss.elastic.co/t/is-it-possible-to-pre-load-wms-connections-for-a-map-in-kibana-yml/361440 "2024-06-13T17:11:50Z")
I'm designing an implementation of the ELK stack for deployment with Docker and I would like to have Kibana installed with a map already present on login - ideally with some provided WMS layers added to the interface. I … --- ## [Kibana Rule API - Export from cluster with API](https://discuss.elastic.co/t/kibana-rule-api-export-from-cluster-with-api/361437)
**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 4:54pm UTC](https://discuss.elastic.co/t/kibana-rule-api-export-from-cluster-with-api/361437 "2024-06-13T16:54:18Z")
Hello Team, I am trying to pull rules which are created in our elastic cluster. I have used below API query , to get all the alert names. GET kbn:/api/alerting/rules/\_find The need i am looking for is to export this … --- ## [Filebeat converts a template value into an array if there's an environment variable inside it](https://discuss.elastic.co/t/filebeat-converts-a-template-value-into-an-array-if-theres-an-environment-variable-inside-it/361426)
**Author:** [@rinaldy](https://discuss.elastic.co/u/rinaldy)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-converts-a-template-value-into-an-array-if-theres-an-environment-variable-inside-it/361426 "2024-06-13T13:56:25Z")
Hi everyone, I'm currently trying to implement a httpjson filebeat input for Duo Cisco. It needs Basic Auth to be added to header.Authorization, but the key has to be generated dynamically. So this is what I did: file… --- ## [\[logstash.outputs.opensearch\]\[main\]\[9182 Retrying individual bulk actions that failed or were rejected by the previous bulk request {:count=\>125}](https://discuss.elastic.co/t/logstash-outputs-opensearch-main-9182-retrying-individual-bulk-actions-that-failed-or-were-rejected-by-the-previous-bulk-request-count-125/361408)
**Author:** [@Rathiga\_Thambu](https://discuss.elastic.co/u/Rathiga_Thambu)\ **Replies:** 7\ **Last updated:** [June 13, 2024, 2:41pm UTC](https://discuss.elastic.co/t/logstash-outputs-opensearch-main-9182-retrying-individual-bulk-actions-that-failed-or-were-rejected-by-the-previous-bulk-request-count-125/361408 "2024-06-13T14:41:16Z")
bin/logstash -f /opt/logstash-8.9.0/config/conf.d/pipe.conf \[2024-06-13T12:42:19,876\]\[INFO \]\[logstash.outputs.opensearch\]\[main\]\[91823b58f6fb0958c7671051e63dcf1ae4101824338810d25e044a5a52cd36e4\] Retrying failed action {:… --- ## [Manage list of value in a watcher](https://discuss.elastic.co/t/manage-list-of-value-in-a-watcher/361427)
**Author:** [@gnzlnx](https://discuss.elastic.co/u/gnzlnx)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 2:10pm UTC](https://discuss.elastic.co/t/manage-list-of-value-in-a-watcher/361427 "2024-06-13T14:10:01Z")
Hello, I want to create a watcher that checks some patterns and get IPs, but I want to exclude a list of IPs. Is there any way to manage this list of IP out of the watcher or in a parameter and that will be retrieved d… --- ## [Does elastic prune query terms automatically if the query is very long?](https://discuss.elastic.co/t/does-elastic-prune-query-terms-automatically-if-the-query-is-very-long/361422)
**Author:** [@misslorac](https://discuss.elastic.co/u/misslorac)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 1:34pm UTC](https://discuss.elastic.co/t/does-elastic-prune-query-terms-automatically-if-the-query-is-very-long/361422 "2024-06-13T13:34:47Z")
Hi, I notice that elasticsearch by default provides disjunction semantics for query terms, and therefore use dynamic pruning techniques to accelerate the query execution. However, if the query is very long, say contains… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=219) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=221)