# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=239 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 240 --- ## [Applying SSL to Elasticsearch and Kibana: Connection refused on Kibana](https://discuss.elastic.co/t/applying-ssl-to-elasticsearch-and-kibana-connection-refused-on-kibana/358493)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 55\ **Last updated:** [May 16, 2024, 2:50pm UTC](https://discuss.elastic.co/t/applying-ssl-to-elasticsearch-and-kibana-connection-refused-on-kibana/358493 "2024-05-16T14:50:39Z")
Hello I just configured Elastic and Kibana to use SSL but Im getting a connection refused and errors about Kibana not being able to connect elasticsearch.yml: # Enable security features xpack.security.enabled: true x… --- ## [Only show and save logs more than 40 characters of line](https://discuss.elastic.co/t/only-show-and-save-logs-more-than-40-characters-of-line/359615)
**Author:** [@Suleman\_Ahmed](https://discuss.elastic.co/u/Suleman_Ahmed)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 1:23pm UTC](https://discuss.elastic.co/t/only-show-and-save-logs-more-than-40-characters-of-line/359615 "2024-05-16T13:23:57Z")
Hello! Guys I need soluiton that How can I filter logs to only show and save logs contains more than 40 characters of line. If less I do not need it. Looking forward to it ASAP! Thanks Suleman --- ## [Turn field into URL link](https://discuss.elastic.co/t/turn-field-into-url-link/359608)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [May 16, 2024, 1:21pm UTC](https://discuss.elastic.co/t/turn-field-into-url-link/359608 "2024-05-16T13:21:21Z")
Hello, I need to turn a field into a URL link. This link should redirect to the "Discover" page with some filters. What i did was put the Discover page with the filters that i needed and use the generated link from "Sh… --- ## [How to config filebeat collecting and send log every second?](https://discuss.elastic.co/t/how-to-config-filebeat-collecting-and-send-log-every-second/359598)
**Author:** [@dw130](https://discuss.elastic.co/u/dw130)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 9:58am UTC](https://discuss.elastic.co/t/how-to-config-filebeat-collecting-and-send-log-every-second/359598 "2024-05-16T09:58:42Z")
hi, I want to collect log and send to es as quickly as possible So I set type: filestream id: login backoff: init: 1s max: 1s and open the output debug mode and when I write log to log file and about four second… --- ## [Changing Log Stream datasource on Visualization](https://discuss.elastic.co/t/changing-log-stream-datasource-on-visualization/359585)
**Author:** [@chad1st](https://discuss.elastic.co/u/chad1st)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 9:02am UTC](https://discuss.elastic.co/t/changing-log-stream-datasource-on-visualization/359585 "2024-05-16T09:02:35Z")
Hello fellow Developers, i wanted to ask that i have a problem to change datasource, from the logstream at Dashboard page, as i saw there is no option to change the datasource or dataview from the dashboard from what… --- ## [Runtime fields can't be saved because highlighted errors need to be fixed but none are highlighted](https://discuss.elastic.co/t/runtime-fields-cant-be-saved-because-highlighted-errors-need-to-be-fixed-but-none-are-highlighted/359121)
**Author:** [@rasmus.torkel](https://discuss.elastic.co/u/rasmus.torkel)\ **Replies:** 16\ **Last updated:** [May 16, 2024, 8:39am UTC](https://discuss.elastic.co/t/runtime-fields-cant-be-saved-because-highlighted-errors-need-to-be-fixed-but-none-are-highlighted/359121 "2024-05-16T08:39:49Z")
The message says invalid Painless script but does not highlight any errors. Of course, I want to write a more involved script, but even this basic script is getting rejected without explanation. --- ## [Queue between filter and output stages](https://discuss.elastic.co/t/queue-between-filter-and-output-stages/359597)
**Author:** [@danielgallardo](https://discuss.elastic.co/u/danielgallardo)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 7:43am UTC](https://discuss.elastic.co/t/queue-between-filter-and-output-stages/359597 "2024-05-16T07:43:04Z")
Hello, this same question was made a couple years ago but automatically closed without any response. Is there a queue between filter and output in logstash? As the Execution Model mentioned, By default, Logstash uses … --- ## [field.IpAddress returns loadbalancer IP](https://discuss.elastic.co/t/field-ipaddress-returns-loadbalancer-ip/358845)
**Author:** [@engin](https://discuss.elastic.co/u/engin)\ **Replies:** 2\ **Last updated:** [May 16, 2024, 7:42am UTC](https://discuss.elastic.co/t/field-ipaddress-returns-loadbalancer-ip/358845 "2024-05-16T07:42:01Z")
Hi, newbie on elastic here, I have several applications run on kubernetes. I am trying to get the real ips that comes from loadbalancer but all I see is the loadbalancer IP. { "\_index": "application-dev-2024.04.15", "… --- ## [Cloudflare Logpush Integration: incorrect header or header secret](https://discuss.elastic.co/t/cloudflare-logpush-integration-incorrect-header-or-header-secret/359595)
**Author:** [@Gregg\_Douglas](https://discuss.elastic.co/u/Gregg_Douglas)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 7:33am UTC](https://discuss.elastic.co/t/cloudflare-logpush-integration-incorrect-header-or-header-secret/359595 "2024-05-16T07:33:42Z")
Hi All, I have been struggling for weeks with the Cloudflare Logpush to a HTTP Endpoint integration. I have tried the Elastic examples, the Cloudflare examples and examples from other posts. These are the configuration… --- ## [Elastic Shards are Not Balanced Across Nodes](https://discuss.elastic.co/t/elastic-shards-are-not-balanced-across-nodes/359504)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 10\ **Last updated:** [May 16, 2024, 5:51am UTC](https://discuss.elastic.co/t/elastic-shards-are-not-balanced-across-nodes/359504 "2024-05-16T05:51:48Z")
Hi Team, Initially we had made a cluster of two nodes having six shards. Later we decided to add one more node to cluster, after adding node we can see that the cluster is in green state but the shards are not distribut… --- ## [ElasticSearch sort not working with es php library 8.2](https://discuss.elastic.co/t/elasticsearch-sort-not-working-with-es-php-library-8-2/359586)
**Author:** [@sajeeda](https://discuss.elastic.co/u/sajeeda)\ **Replies:** 0\ **Last updated:** [May 16, 2024, 4:24am UTC](https://discuss.elastic.co/t/elasticsearch-sort-not-working-with-es-php-library-8-2/359586 "2024-05-16T04:24:04Z")
Hi All, Trying to add sort option in query while retriving the data from Elasticsearch. Have been getting the below error PHP Fatal error: Uncaught Elastic\\Elasticsearch\\Exception\\ClientResponseException: 400 Bad Req… --- ## [Configuring Certs Results in "Kibana server is not ready yet."](https://discuss.elastic.co/t/configuring-certs-results-in-kibana-server-is-not-ready-yet/359584)
**Author:** [@gossamer](https://discuss.elastic.co/u/gossamer)\ **Replies:** 1\ **Last updated:** [May 16, 2024, 3:21am UTC](https://discuss.elastic.co/t/configuring-certs-results-in-kibana-server-is-not-ready-yet/359584 "2024-05-16T03:21:58Z")
I'm having trouble configuring kibana on a remote fedora38 server. I already have ES working properly, but when I try to connect to the kibana console from my desktop, I receive just "Kibana server is not ready yet." I … --- ## [Wait-until-merges-finish-after-index operations](https://discuss.elastic.co/t/wait-until-merges-finish-after-index-operations/359286)
**Author:** [@tommyd](https://discuss.elastic.co/u/tommyd)\ **Replies:** 8\ **Last updated:** [May 15, 2024, 9:33pm UTC](https://discuss.elastic.co/t/wait-until-merges-finish-after-index-operations/359286 "2024-05-15T21:33:52Z")
Hello Rally Gurus, I am testing my ES cluster using ESRally with openai\_vector track and I have a question about the "wait-until-merges-finish-after-index" operation. In the track README file, I see that there is this … --- ## [Use function\_score with index.sort to get top X and rescore on those](https://discuss.elastic.co/t/use-function-score-with-index-sort-to-get-top-x-and-rescore-on-those/359575)
**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 8:19pm UTC](https://discuss.elastic.co/t/use-function-score-with-index-sort-to-get-top-x-and-rescore-on-those/359575 "2024-05-15T20:19:58Z")
Hi, I have a field 'mysort', I can declare it float, rankfeature...whatever I want. I use it for index sort: { "settings": { "index": { "sort.field": "mysort", "sort.order": "desc" } }, And… --- ## [Parsing arrays/lists when using environment variable configuration broke in 8.13.1 (docker)](https://discuss.elastic.co/t/parsing-arrays-lists-when-using-environment-variable-configuration-broke-in-8-13-1-docker/359573)
**Author:** [@jdmcalee](https://discuss.elastic.co/u/jdmcalee)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 6:55pm UTC](https://discuss.elastic.co/t/parsing-arrays-lists-when-using-environment-variable-configuration-broke-in-8-13-1-docker/359573 "2024-05-15T18:55:59Z")
Beginning in version 8.13.1 of the docker image, using an environment variable with a list value yields the following error: ERROR: Pipeline id in \`xpack.management.pipeline.id\` must begin with a letter or underscore an… --- ## [The \_template API is erroneously creating my index as a data stream, which causes the \_bulk API to fail](https://discuss.elastic.co/t/the-template-api-is-erroneously-creating-my-index-as-a-data-stream-which-causes-the-bulk-api-to-fail/359568)
**Author:** [@lexicalunit](https://discuss.elastic.co/u/lexicalunit)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 5:43pm UTC](https://discuss.elastic.co/t/the-template-api-is-erroneously-creating-my-index-as-a-data-stream-which-causes-the-bulk-api-to-fail/359568 "2024-05-15T17:43:04Z")
I'm trying to spin up a small working example of what we have in staging/production in a local dockerized setup. I've downloaded some representative data from my staging environment, now I just need to inject it into my … --- ## [SnipeIT Integration](https://discuss.elastic.co/t/snipeit-integration/359567)
**Author:** [@slama](https://discuss.elastic.co/u/slama)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 5:03pm UTC](https://discuss.elastic.co/t/snipeit-integration/359567 "2024-05-15T17:03:19Z")
Has anyone integrated SnipeIT with Elastic SIEM? --- ## [Can you have a date histogram graph with multiple lines using multiple timestamp fields?](https://discuss.elastic.co/t/can-you-have-a-date-histogram-graph-with-multiple-lines-using-multiple-timestamp-fields/359351)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 3:50pm UTC](https://discuss.elastic.co/t/can-you-have-a-date-histogram-graph-with-multiple-lines-using-multiple-timestamp-fields/359351 "2024-05-15T15:50:14Z")
I have an index which contains a number of timestamp fields, eg: { "docId": 1, "action1Timestamp": "2024-01-01T00:00:00.100Z", "action2Timestamp": "2024-01-02T00:00:00.100Z", "action3Timestamp": "2024-01-03T00:0… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/359525)
**Author:** [@Sasan\_Askari](https://discuss.elastic.co/u/Sasan_Askari)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 3:16pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/359525 "2024-05-15T15:16:48Z")
Hi, I want to run elastic and kibana with these configuration but i got Kibana server is not ready yet. Here is my elastic docker compose : version: '3.7' services: elasticsearch-elk: image: focker.ir/elasticse… --- ## [Allow "HTTP" auth users to have themes applied and modify theme settings](https://discuss.elastic.co/t/allow-http-auth-users-to-have-themes-applied-and-modify-theme-settings/359562)
**Author:** [@mishnz](https://discuss.elastic.co/u/mishnz)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 3:00pm UTC](https://discuss.elastic.co/t/allow-http-auth-users-to-have-themes-applied-and-modify-theme-settings/359562 "2024-05-15T15:00:18Z")
My users are externally authenticated. When they login the authentication provider is set as follows: "authentication\_provider": { "type": "http", "name": "\_\_http\_\_" } However, … --- ## [Replace return carriage associated with tab](https://discuss.elastic.co/t/replace-return-carriage-associated-with-tab/359554)
**Author:** [@s0p4L1n3](https://discuss.elastic.co/u/s0p4L1n3)\ **Replies:** 4\ **Last updated:** [May 15, 2024, 2:55pm UTC](https://discuss.elastic.co/t/replace-return-carriage-associated-with-tab/359554 "2024-05-15T14:55:40Z")
Hello, I'm monitoring Windows File integrity and I want to replace some return carriage and tab that are present in the value of the field. Field: winlog.event\_data.AccessList Value: %%1537 %%1538 %%1541 … --- ## [Hi All, I am unable to display all Kafka consumer groups name in table visualization. It is showing only 10 values out of 31. I have increased row size to 50. But still only 10 values is showing can any one help on that](https://discuss.elastic.co/t/hi-all-i-am-unable-to-display-all-kafka-consumer-groups-name-in-table-visualization-it-is-showing-only-10-values-out-of-31-i-have-increased-row-size-to-50-but-still-only-10-values-is-showing-can-any-one-help-on-that/359146)
**Author:** [@venkata\_pavan\_kalyan](https://discuss.elastic.co/u/venkata_pavan_kalyan)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 2:44pm UTC](https://discuss.elastic.co/t/hi-all-i-am-unable-to-display-all-kafka-consumer-groups-name-in-table-visualization-it-is-showing-only-10-values-out-of-31-i-have-increased-row-size-to-50-but-still-only-10-values-is-showing-can-any-one-help-on-that/359146 "2024-05-15T14:44:07Z")
Hi All, I am unable to display all Kafka consumer groups name in table visualization. It is showing only 10 values out of 31. I have increased row size to 50. But still only 10 values is showing can any one help on that --- ## [Fiter and display field value from two indexes](https://discuss.elastic.co/t/fiter-and-display-field-value-from-two-indexes/359249)
**Author:** [@cnu](https://discuss.elastic.co/u/cnu)\ **Replies:** 7\ **Last updated:** [May 15, 2024, 2:33pm UTC](https://discuss.elastic.co/t/fiter-and-display-field-value-from-two-indexes/359249 "2024-05-15T14:33:44Z")
I want to filter the field value from two indexes and visualise in kibana say I have field problem which is specified multiple times in a file with some number(this will change) example- problem: 16 similarly in othe… --- ## [Logstash mutate can not get variable](https://discuss.elastic.co/t/logstash-mutate-can-not-get-variable/359516)
**Author:** [@Fodesu](https://discuss.elastic.co/u/Fodesu)\ **Replies:** 3\ **Last updated:** [May 15, 2024, 1:58pm UTC](https://discuss.elastic.co/t/logstash-mutate-can-not-get-variable/359516 "2024-05-15T13:58:54Z")
Hi Term, i am trying to make a grok parser for every two lines of log, i config filebeat.yml to parsing every two lines in filebeat. but it can't parser variable successful. I use grokdebug Configuration is follow , … --- ## [How to change strings that are not part of the standard translation file?](https://discuss.elastic.co/t/how-to-change-strings-that-are-not-part-of-the-standard-translation-file/359555)
**Author:** [@belutak](https://discuss.elastic.co/u/belutak)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 2:11pm UTC](https://discuss.elastic.co/t/how-to-change-strings-that-are-not-part-of-the-standard-translation-file/359555 "2024-05-15T14:11:23Z")
Does anyone know how would could i change the strings from the picture? I have tried to find them in code, tried to use substitute mode in apache to change them on the fly but i have failed in my attempts. Is there any… --- ## [New ElasticSearch setup](https://discuss.elastic.co/t/new-elasticsearch-setup/359552)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 0\ **Last updated:** [May 15, 2024, 1:35pm UTC](https://discuss.elastic.co/t/new-elasticsearch-setup/359552 "2024-05-15T13:35:28Z")
We have a 3 node elasticSearch cluster setup on docker instance OS: Oracle Linux. This Elasticsearch version 7.17.6 is used by client application Oracle webcenter which has 7 Million documents stored on the Database. Re… --- ## [Logstash nested array with special key value pair](https://discuss.elastic.co/t/logstash-nested-array-with-special-key-value-pair/357726)
**Author:** [@PieterF](https://discuss.elastic.co/u/PieterF)\ **Replies:** 4\ **Last updated:** [May 15, 2024, 1:35pm UTC](https://discuss.elastic.co/t/logstash-nested-array-with-special-key-value-pair/357726 "2024-05-15T13:35:01Z")
Hi, We ingest Firebase logs with format json. Now there are some properties that have an array of objects with the following structure: the key is always a string but the value is saved depending on type. event\_params… --- ## [Abnormally high CPU usage for specific queries/dashboards](https://discuss.elastic.co/t/abnormally-high-cpu-usage-for-specific-queries-dashboards/359543)
**Author:** [@benpi](https://discuss.elastic.co/u/benpi)\ **Replies:** 2\ **Last updated:** [May 15, 2024, 12:43pm UTC](https://discuss.elastic.co/t/abnormally-high-cpu-usage-for-specific-queries-dashboards/359543 "2024-05-15T12:43:48Z")
Hi, i will start by sharing details regarding our infrastructure. We are running multiple Community Edition Elasticsearch clusters in parallel, all of which are connected via the "Remote Clusters" feature to a single in… --- ## [Using NFS mounted server in a DR environment as elasticsearch data path](https://discuss.elastic.co/t/using-nfs-mounted-server-in-a-dr-environment-as-elasticsearch-data-path/359534)
**Author:** [@charvi23](https://discuss.elastic.co/u/charvi23)\ **Replies:** 3\ **Last updated:** [May 15, 2024, 12:27pm UTC](https://discuss.elastic.co/t/using-nfs-mounted-server-in-a-dr-environment-as-elasticsearch-data-path/359534 "2024-05-15T12:27:49Z")
I have been trying to use production mount point as a NFS client and created a DR environment using NFS mount point as data path. Starting elasticsearch is giving error that it is not able to obtain lock as it doesn't e… --- ## [Elasticsearch Fails to start after restart](https://discuss.elastic.co/t/elasticsearch-fails-to-start-after-restart/359542)
**Author:** [@Hello1](https://discuss.elastic.co/u/Hello1)\ **Replies:** 1\ **Last updated:** [May 15, 2024, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-after-restart/359542 "2024-05-15T12:24:09Z")
because of memory my Elasticsearch service is down, i restarted the service but its inactive, i didn't change any thing, previously its worked. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=238) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=240)