# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=221 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 222 --- ## [Multiple pipeline on single host not working as expected](https://discuss.elastic.co/t/multiple-pipeline-on-single-host-not-working-as-expected/361330)
**Author:** [@Ajay\_Bhatnagar](https://discuss.elastic.co/u/Ajay_Bhatnagar)\ **Replies:** 2\ **Last updated:** [June 13, 2024, 12:34pm UTC](https://discuss.elastic.co/t/multiple-pipeline-on-single-host-not-working-as-expected/361330 "2024-06-13T12:34:26Z")
When defining multiple pipelines on single host with output to elasticsearch in different indices (each pipeline points its own separate config file, different pipeline id and different output index name defined in confi… --- ## [SSL "wrong version number"](https://discuss.elastic.co/t/ssl-wrong-version-number/361352)
**Author:** [@ebates](https://discuss.elastic.co/u/ebates)\ **Replies:** 4\ **Last updated:** [June 13, 2024, 12:30pm UTC](https://discuss.elastic.co/t/ssl-wrong-version-number/361352 "2024-06-13T12:30:52Z")
I had a working elasticsearch 7.x with SSL configured. I upgraded to elasticsearch 8.14 and now whenever I attempt to connect via curl I get an error message from the OpenSSL lib: # curl -vvv --cacert /etc/elasticsearc… --- ## [Backup and update the document](https://discuss.elastic.co/t/backup-and-update-the-document/361338)
**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\ **Replies:** 3\ **Last updated:** [June 13, 2024, 12:22pm UTC](https://discuss.elastic.co/t/backup-and-update-the-document/361338 "2024-06-13T12:22:30Z")
How to backup the documents and restore them if I change my mind after updating them? I want to make an update from the current data with some new fields. The content of the document is huge and if I want to reverse the… --- ## [Kibana upgrade failed - Error: \[config validation of \[elasticsearch\].preserveHost\]: definition for this key is missing](https://discuss.elastic.co/t/kibana-upgrade-failed-error-config-validation-of-elasticsearch-preservehost-definition-for-this-key-is-missing/361032)
**Author:** [@padmavathi](https://discuss.elastic.co/u/padmavathi)\ **Replies:** 5\ **Last updated:** [June 13, 2024, 12:21pm UTC](https://discuss.elastic.co/t/kibana-upgrade-failed-error-config-validation-of-elasticsearch-preservehost-definition-for-this-key-is-missing/361032 "2024-06-13T12:21:05Z")
I have upgraded kibana from 7.17 to 8.0.1 .Im getting the below error . Error: \[config validation of \[elasticsearch\].preserveHost\]: definition for this key is missing Could you please help me ? Thanks --- ## [How http\_poller plugin works in logstash](https://discuss.elastic.co/t/how-http-poller-plugin-works-in-logstash/361379)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 2\ **Last updated:** [June 13, 2024, 12:15pm UTC](https://discuss.elastic.co/t/how-http-poller-plugin-works-in-logstash/361379 "2024-06-13T12:15:19Z")
Hi Team, We are using http\_poller input plugin in our logstash to fetch data from opensearch perticular index and we did some filtering and sending data to kafka servers. Whenever kafka server gets some error from this … --- ## [How can create index name automatically by filebeat?](https://discuss.elastic.co/t/how-can-create-index-name-automatically-by-filebeat/361344)
**Author:** [@alex\_zolat](https://discuss.elastic.co/u/alex_zolat)\ **Replies:** 12\ **Last updated:** [June 13, 2024, 12:07pm UTC](https://discuss.elastic.co/t/how-can-create-index-name-automatically-by-filebeat/361344 "2024-06-13T12:07:26Z")
My filebeat is working now want to know how can config it to create it index automatically with hostname ? my configuration is such as folllow : ###################### Filebeat Configuration Example ###################… --- ## [Create a table with different values](https://discuss.elastic.co/t/create-a-table-with-different-values/361388)
**Author:** [@juandres117](https://discuss.elastic.co/u/juandres117)\ **Replies:** 1\ **Last updated:** [June 13, 2024, 11:03am UTC](https://discuss.elastic.co/t/create-a-table-with-different-values/361388 "2024-06-13T11:03:54Z")
Hello everyone, Sorry to bother you but I am having problems trying to create a table. I have created an index that has a country and like 23 types of different risks. Every risk has three fields. It's name, the type (L… --- ## [Best practice for multiple Logstash pipelines writing to Elasticsearch](https://discuss.elastic.co/t/best-practice-for-multiple-logstash-pipelines-writing-to-elasticsearch/361389)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 10:53am UTC](https://discuss.elastic.co/t/best-practice-for-multiple-logstash-pipelines-writing-to-elasticsearch/361389 "2024-06-13T10:53:49Z")
Hello, I'm currently working with multiple Logstash pipelines and I'm trying to determine the best approach for writing data to Elasticsearch. I would appreciate any advice or insights from the community. Here are the … --- ## [Date filter](https://discuss.elastic.co/t/date-filter/361304)
**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\ **Replies:** 3\ **Last updated:** [June 13, 2024, 4:38am UTC](https://discuss.elastic.co/t/date-filter/361304 "2024-06-13T04:38:48Z")
Is it possible to configure a specific visualization within a dashboard to display data from the last 7 days while the other visualizations in the same dashboard display data for last 3 months? If yes, how can I achieve … --- ## [How can I hide some buttons of dashboard while embed into my application](https://discuss.elastic.co/t/how-can-i-hide-some-buttons-of-dashboard-while-embed-into-my-application/361378)
**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\ **Replies:** 1\ **Last updated:** [June 13, 2024, 8:39am UTC](https://discuss.elastic.co/t/how-can-i-hide-some-buttons-of-dashboard-while-embed-into-my-application/361378 "2024-06-13T08:39:10Z")
I can be able to hide filter bar, query, time filter while embedding the kibana dashboard into my application. But I don't want all the users to view create visualization button, add controls and add panel buttons. How c… --- ## [Elastic-agent without data-stream](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093)
**Author:** [@Viktor\_Movita](https://discuss.elastic.co/u/Viktor_Movita)\ **Replies:** 4\ **Last updated:** [June 13, 2024, 8:05am UTC](https://discuss.elastic.co/t/elastic-agent-without-data-stream/361093 "2024-06-13T08:05:36Z")
Hello everyone, I previously monitored my Linux servers using Filebeat and Metricbeat agents. The data from each of them went to a dedicated index in Elasticsearch based on the default ECS template. Now I want to switc… --- ## [Poor Performance After Migrating 8.13](https://discuss.elastic.co/t/poor-performance-after-migrating-8-13/361197)
**Author:** [@jackson\_alvarez](https://discuss.elastic.co/u/jackson_alvarez)\ **Replies:** 1\ **Last updated:** [June 13, 2024, 7:58am UTC](https://discuss.elastic.co/t/poor-performance-after-migrating-8-13/361197 "2024-06-13T07:58:15Z")
Hi everyone, We recently migrated our Elasticsearch clusters from version 7.10.2 to 8.13.0 and have noticed an increase in search latency. Our shard configuration, cluster, and index settings remain unchanged. To inve… --- ## [Upgrade issue on linux like os (kali, proxmox)](https://discuss.elastic.co/t/upgrade-issue-on-linux-like-os-kali-proxmox/359074)
**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\ **Replies:** 2\ **Last updated:** [June 13, 2024, 6:01am UTC](https://discuss.elastic.co/t/upgrade-issue-on-linux-like-os-kali-proxmox/359074 "2024-06-13T06:01:22Z")
i am currently updating my agents to 8.13.1 via fleet. The upgrade is failing on linux machines while my windows were updated like expected. The error is elastic-agent upgrade 8.13.1 Error: Failed trigger upgrade of d… --- ## [Broken github release notes link](https://discuss.elastic.co/t/broken-github-release-notes-link/361369)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 5:16am UTC](https://discuss.elastic.co/t/broken-github-release-notes-link/361369 "2024-06-13T05:16:23Z")
The release notes links do no longer work in Releases · elastic/kibana · GitHub starting 8.14.x. not working: https://www.elastic.co/guide/en/kibana/main/release-notes-8.14.1.html working link: --- ## [Random timeouts at webhook connectors to MS Teams from Elastic Watcher](https://discuss.elastic.co/t/random-timeouts-at-webhook-connectors-to-ms-teams-from-elastic-watcher/361367)
**Author:** [@momher](https://discuss.elastic.co/u/momher)\ **Replies:** 0\ **Last updated:** [June 13, 2024, 2:44am UTC](https://discuss.elastic.co/t/random-timeouts-at-webhook-connectors-to-ms-teams-from-elastic-watcher/361367 "2024-06-13T02:44:22Z")
Random timeouts at webhook connectors to MS Teams from Elastic Watcher. We are leveraging Elastic Watchers and the receive the following error message immediately upon a failure "id": "new\_alerts\_to\_teams", "type": "w… --- ## [Unable to install Elastic APM](https://discuss.elastic.co/t/unable-to-install-elastic-apm/358834)
**Author:** [@NNNNNNNNN](https://discuss.elastic.co/u/NNNNNNNNN)\ **Replies:** 1\ **Last updated:** [June 13, 2024, 2:43am UTC](https://discuss.elastic.co/t/unable-to-install-elastic-apm/358834 "2024-06-13T02:43:58Z")
Hello, I am trying to install elastic with default token which has shown as part of elastic APM installation. I have ran below query: in elastic observability lab the elastic pswd: JcRZwmwBPduguAu Command: curl -L -O… --- ## [Target index by input](https://discuss.elastic.co/t/target-index-by-input/360970)
**Author:** [@daniu](https://discuss.elastic.co/u/daniu)\ **Replies:** 1\ **Last updated:** [June 13, 2024, 2:07am UTC](https://discuss.elastic.co/t/target-index-by-input/360970 "2024-06-13T02:07:02Z")
I'm trying to setup filebeat so that I have two log sources that end up in different indexes of the target logstash. All involved services' (filebeat, logstash, elastic) versions are 8.12.0. I've found this question wit… --- ## [MIgrating opensearch to elasticsearch using logstash is generating more docs on destination index than there are in source index](https://discuss.elastic.co/t/migrating-opensearch-to-elasticsearch-using-logstash-is-generating-more-docs-on-destination-index-than-there-are-in-source-index/361275)
**Author:** [@Mat\_Wojdyla](https://discuss.elastic.co/u/Mat_Wojdyla)\ **Replies:** 7\ **Last updated:** [June 12, 2024, 11:32pm UTC](https://discuss.elastic.co/t/migrating-opensearch-to-elasticsearch-using-logstash-is-generating-more-docs-on-destination-index-than-there-are-in-source-index/361275 "2024-06-12T23:32:42Z")
Hello, I am in the process of migrating our opensearch cluster running ES 7.9 as the backend version to an Elasticsearch cluster I built in EC2 that is also running 7.9.3 for the time being. I have the sync running just… --- ## [\[2024-06-06T00:16:32,277\]\[ERROR\]\[o.e.b.Elasticsearch \] \[server.domain.co.uk\] fatal exception while booting Elasticsearch java.lang.NullPointerException: Cannot invoke "org.elasticsearch.nativeaccess.Systemd.notify\_ready()" because "this.systemd" is](https://discuss.elastic.co/t/2024-06-06t0032-277-error-o-e-b-elasticsearch-server-domain-co-uk-fatal-exception-while-booting-elasticsearch-java-lang-nullpointerexception-cannot-invoke-org-elasticsearch-nativeaccess-systemd-notify-ready-because-this-systemd-is/360895)
**Author:** [@Rezwan\_Ahmed\_Sami](https://discuss.elastic.co/u/Rezwan_Ahmed_Sami)\ **Replies:** 17\ **Last updated:** [June 12, 2024, 6:56pm UTC](https://discuss.elastic.co/t/2024-06-06t0032-277-error-o-e-b-elasticsearch-server-domain-co-uk-fatal-exception-while-booting-elasticsearch-java-lang-nullpointerexception-cannot-invoke-org-elasticsearch-nativeaccess-systemd-notify-ready-because-this-systemd-is/360895 "2024-06-12T18:56:04Z")
\[2024-06-06T00:16:32,277\]\[ERROR\]\[o.e.b.Elasticsearch \] \[server.domain.co.uk\] fatal exception while booting Elasticsearch java.lang.NullPointerException: Cannot invoke "org.elasticsearch.nativeaccess.Systemd.notify\_… --- ## [PHP Notice: Indirect modification of overloaded element](https://discuss.elastic.co/t/php-notice-indirect-modification-of-overloaded-element/361356)
**Author:** [@chongshengdz](https://discuss.elastic.co/u/chongshengdz)\ **Replies:** 0\ **Last updated:** [June 12, 2024, 6:48pm UTC](https://discuss.elastic.co/t/php-notice-indirect-modification-of-overloaded-element/361356 "2024-06-12T18:48:09Z")
end($results\['hits'\]\['hits'\]); the above line getting the below error, please help. PHP Notice: Indirect modification of overloaded element of Elastic\\Elasticsearch\\Response\\Elasticsearch has no effect i am using ela… --- ## [Elastic integration for ServiceNow](https://discuss.elastic.co/t/elastic-integration-for-servicenow/361348)
**Author:** [@gnatola](https://discuss.elastic.co/u/gnatola)\ **Replies:** 2\ **Last updated:** [June 12, 2024, 6:46pm UTC](https://discuss.elastic.co/t/elastic-integration-for-servicenow/361348 "2024-06-12T18:46:13Z")
Hello, is there any detailed documentation on integrating ServiceNow ITSM into Elastic? Elastic's documentation never seems to be complete. Thanks. --- ## [Kibana: Alter the values in the dashboard](https://discuss.elastic.co/t/kibana-alter-the-values-in-the-dashboard/361331)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 1\ **Last updated:** [June 12, 2024, 6:24pm UTC](https://discuss.elastic.co/t/kibana-alter-the-values-in-the-dashboard/361331 "2024-06-12T18:24:01Z")
Hi, I'm generating the following dashboard for the bit rate of a specific queue on a specific interface for a specific device. Is it possible to use the Formula section to change the bps value to mbps? If so what is … --- ## [Specific API keys, specific data on dashboard](https://discuss.elastic.co/t/specific-api-keys-specific-data-on-dashboard/361267)
**Author:** [@Sukuna](https://discuss.elastic.co/u/Sukuna)\ **Replies:** 2\ **Last updated:** [June 12, 2024, 3:33pm UTC](https://discuss.elastic.co/t/specific-api-keys-specific-data-on-dashboard/361267 "2024-06-12T15:33:35Z")
Hi everybody, I'm new here, happy to see you all. I am currently brainstorming for a project and right now I'm gathering ideas. I want to create a external webapp and display a kibana dashboard (through Iframe) that sh… --- ## [How do I send Cowrie logs to ELK (with SSL) via Logstash?](https://discuss.elastic.co/t/how-do-i-send-cowrie-logs-to-elk-with-ssl-via-logstash/361159)
**Author:** [@optimuspur3](https://discuss.elastic.co/u/optimuspur3)\ **Replies:** 1\ **Last updated:** [June 12, 2024, 1:59pm UTC](https://discuss.elastic.co/t/how-do-i-send-cowrie-logs-to-elk-with-ssl-via-logstash/361159 "2024-06-12T13:59:11Z")
When I am setting up my ELK without SSL configuration, I was able to setup Cowrie logstash in my logstash-cowrie.log and inside my filebeat.yml file. The link from the ELK with SSL configuration: I have created anothe… --- ## [How to pass selected end time from Elastic dashboard to Horizontal Axis](https://discuss.elastic.co/t/how-to-pass-selected-end-time-from-elastic-dashboard-to-horizontal-axis/360565)
**Author:** [@Santosh\_G](https://discuss.elastic.co/u/Santosh_G)\ **Replies:** 1\ **Last updated:** [June 12, 2024, 2:54pm UTC](https://discuss.elastic.co/t/how-to-pass-selected-end-time-from-elastic-dashboard-to-horizontal-axis/360565 "2024-06-12T14:54:23Z")
Hi , I had a requirement to create a Visualization to show the total number of events happened for a interval of 5 m for specific query. Example: I am checking query from 6.01 AM to 6.11 AM these are the start and end… --- ## [Ingest pipelines with cloned from filebeat ingest pipeline do not act on additinal processor](https://discuss.elastic.co/t/ingest-pipelines-with-cloned-from-filebeat-ingest-pipeline-do-not-act-on-additinal-processor/361332)
**Author:** [@Ajay\_Bhatnagar](https://discuss.elastic.co/u/Ajay_Bhatnagar)\ **Replies:** 0\ **Last updated:** [June 12, 2024, 2:08pm UTC](https://discuss.elastic.co/t/ingest-pipelines-with-cloned-from-filebeat-ingest-pipeline-do-not-act-on-additinal-processor/361332 "2024-06-12T14:08:31Z")
I tried to create a new ingest pipeline cloning from existing filebeat ingest pipeline and tried to add additional grok processor to add and modify fields. When tested the pipeline from simulation with single document o… --- ## [the maximum number of documents in an elasticsearch index and difference about stats and count](https://discuss.elastic.co/t/the-maximum-number-of-documents-in-an-elasticsearch-index-and-difference-about-stats-and-count/361328)
**Author:** [@Vincenzo\_Picarelli](https://discuss.elastic.co/u/Vincenzo_Picarelli)\ **Replies:** 1\ **Last updated:** [June 12, 2024, 2:02pm UTC](https://discuss.elastic.co/t/the-maximum-number-of-documents-in-an-elasticsearch-index-and-difference-about-stats-and-count/361328 "2024-06-12T14:02:24Z")
I have an index in elasticsearch with only 1 primary shards e 0 replica. When I do GET /index/\_count, the result is 100,815. When I do GET /index/\_stats, the result is 64,893,983. Each doc has nested fields. My questi… --- ## [Which DB is more flexible for logstash integration](https://discuss.elastic.co/t/which-db-is-more-flexible-for-logstash-integration/361326)
**Author:** [@anguri\_sudhakar](https://discuss.elastic.co/u/anguri_sudhakar)\ **Replies:** 6\ **Last updated:** [June 12, 2024, 1:40pm UTC](https://discuss.elastic.co/t/which-db-is-more-flexible-for-logstash-integration/361326 "2024-06-12T13:40:15Z")
HI , My question is which DB is more reliable for Logstash-8 version Synk. Is it Logstash ------\> MongoDB ..? is it InflexDB --------\> InflexDB..? Thanks, Sudhakar Anguri --- ## [Failed to complete action: snapshot. \: 'indices'](https://discuss.elastic.co/t/failed-to-complete-action-snapshot-class-keyerror-indices/361109)
**Author:** [@Mayank\_Kumar2](https://discuss.elastic.co/u/Mayank_Kumar2)\ **Replies:** 3\ **Last updated:** [June 12, 2024, 1:17pm UTC](https://discuss.elastic.co/t/failed-to-complete-action-snapshot-class-keyerror-indices/361109 "2024-06-12T13:17:45Z")
Hello, I am stucked here, so I have configured curator to take snapshots on tha daily basis. but it fails with the error "Failed to complete action: snapshot. \: 'indices'" when I manually ran the cur… --- ## [How can i configure a new data path for another instance of filebeat?](https://discuss.elastic.co/t/how-can-i-configure-a-new-data-path-for-another-instance-of-filebeat/361045)
**Author:** [@Misa](https://discuss.elastic.co/u/Misa)\ **Replies:** 5\ **Last updated:** [June 12, 2024, 12:18pm UTC](https://discuss.elastic.co/t/how-can-i-configure-a-new-data-path-for-another-instance-of-filebeat/361045 "2024-06-12T12:18:56Z")
I used this doc to configure a new instance of filebeat: Configuring Multi-Instances of Beats on a Single Server. But the new filebeat doesnt create files in new " Directories for Data and Logs". Journalctl shows " Ex… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=220) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=222)