# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=675 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 676 --- ## [Kibana error when enabling xpack security](https://discuss.elastic.co/t/kibana-error-when-enabling-xpack-security/322666)
**Author:** [@francis009](https://discuss.elastic.co/u/francis009)\ **Replies:** 7\ **Last updated:** [January 7, 2023, 4:23pm UTC](https://discuss.elastic.co/t/kibana-error-when-enabling-xpack-security/322666 "2023-01-07T16:23:49Z")
Hi, i've look through the forums and found many people having errors when enabling xpack, but not exactly my error, if i enable xpack on elasticsearch it pops up the log in when i access the website, but when i enable it… --- ## [Pagination on composite aggregation](https://discuss.elastic.co/t/pagination-on-composite-aggregation/322667)
**Author:** [@hmkhitaryan](https://discuss.elastic.co/u/hmkhitaryan)\ **Replies:** 0\ **Last updated:** [January 7, 2023, 3:25pm UTC](https://discuss.elastic.co/t/pagination-on-composite-aggregation/322667 "2023-01-07T15:25:38Z")
Hi. I'm having such kind of problem on defining composite aggregation for paginating the results. CompositeAggregationBuilder aggregationBuilder = AggregationBuilders .composite(aggrField, List.of(ne… --- ## [Kibana Index not working after update](https://discuss.elastic.co/t/kibana-index-not-working-after-update/316796)
**Author:** [@Rommy](https://discuss.elastic.co/u/Rommy)\ **Replies:** 1\ **Last updated:** [October 17, 2022, 2:08pm UTC](https://discuss.elastic.co/t/kibana-index-not-working-after-update/316796 "2022-10-17T14:08:28Z")
Hello, A version update was made for the stack. After the update, there is a problem with the Kibana index. Before the update there was a Kibana version 7.10.2 (OpenDistro 1.13). Has been updated to version 7.13.4. {"t… --- ## [Elasticsearch not starting, with no errors in the logs](https://discuss.elastic.co/t/elasticsearch-not-starting-with-no-errors-in-the-logs/322660)
**Author:** [@sphawk](https://discuss.elastic.co/u/sphawk)\ **Replies:** 3\ **Last updated:** [January 7, 2023, 11:29am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-with-no-errors-in-the-logs/322660 "2023-01-07T11:29:34Z")
I've updated debian to buster version without no problem and today I've tried to update ES to 8.5 version. Bad idea (some Java problem) so I've reinstalled previous version (6.x) but ES still not starting. service elas… --- ## [Upgraded first node from 7.17.5 to 8.4. Won't start, claiming there is a 6.4.5 index, but I can't find it](https://discuss.elastic.co/t/upgraded-first-node-from-7-17-5-to-8-4-wont-start-claiming-there-is-a-6-4-5-index-but-i-cant-find-it/317811)
**Author:** [@Brett\_C](https://discuss.elastic.co/u/Brett_C)\ **Replies:** 11\ **Last updated:** [January 7, 2023, 10:57am UTC](https://discuss.elastic.co/t/upgraded-first-node-from-7-17-5-to-8-4-wont-start-claiming-there-is-a-6-4-5-index-but-i-cant-find-it/317811 "2023-01-07T10:57:10Z")
Hi Everyone, I have just started upgrading my cluster from 7.17.5 to 8.4. I completed the first node, but when I went to start the service, it complained that: \[2022-10-31T17:08:08,683\]\[ERROR\]\[o.e.b.Elasticsearch \]… --- ## [Divide Number in Y axis by 10 in TSVB Vizualization](https://discuss.elastic.co/t/divide-number-in-y-axis-by-10-in-tsvb-vizualization/320584)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 2\ **Last updated:** [December 10, 2022, 9:38am UTC](https://discuss.elastic.co/t/divide-number-in-y-axis-by-10-in-tsvb-vizualization/320584 "2022-12-10T09:38:24Z")
Hi, I am trying to Build Viz in Kibana Version 7.6. I want to divide number present in Y axis by 10. I tried filtering options but it did not worked out, may be I am missing something. Current viz Snap: Pls let me… --- ## [Filebeat: active (running) then code=exited, status=2 or code=exited, status=1](https://discuss.elastic.co/t/filebeat-active-running-then-code-exited-status-2-or-code-exited-status-1/322233)
**Author:** [@Anthony\_Allen](https://discuss.elastic.co/u/Anthony_Allen)\ **Replies:** 11\ **Last updated:** [January 7, 2023, 1:49am UTC](https://discuss.elastic.co/t/filebeat-active-running-then-code-exited-status-2-or-code-exited-status-1/322233 "2023-01-07T01:49:49Z")
I am running Elasticsearch/Kibana 7.14. on Ubuntu 22.04 on the backend of an Apache reverse proxy. Filebeat is on another Ubuntu 22.04 on the backend of the same reverse proxy. Other beats are on the Filebeat's machine. … --- ## [Not able to use Filebeat-OSS AWS-S3 input](https://discuss.elastic.co/t/not-able-to-use-filebeat-oss-aws-s3-input/322595)
**Author:** [@Gaurav\_yadav1](https://discuss.elastic.co/u/Gaurav_yadav1)\ **Replies:** 1\ **Last updated:** [January 7, 2023, 2:04am UTC](https://discuss.elastic.co/t/not-able-to-use-filebeat-oss-aws-s3-input/322595 "2023-01-07T02:04:59Z")
I am getting - Exiting: Failed to start crawler: starting input failed: error while initializing input: Error creating input. No such input type exist: 'aws-s3' What is the difference between Filebeat and Filebeat-OSS? … --- ## [How can display horizontal bar on the Timelion? (or another chart)](https://discuss.elastic.co/t/how-can-display-horizontal-bar-on-the-timelion-or-another-chart/320661)
**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\ **Replies:** 4\ **Last updated:** [December 10, 2022, 3:28am UTC](https://discuss.elastic.co/t/how-can-display-horizontal-bar-on-the-timelion-or-another-chart/320661 "2022-12-10T03:28:11Z")
Help this please. (sample json too) Thanks. --- ## [Agent stuck on updating after install](https://discuss.elastic.co/t/agent-stuck-on-updating-after-install/322641)
**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 9:37pm UTC](https://discuss.elastic.co/t/agent-stuck-on-updating-after-install/322641 "2023-01-06T21:37:45Z")
Continuing the discussion from Agent stuck on updating but still send index: We are also seeing this. We have Fleet deployed in ECK. We have 2 fleet servers listed in Kibana, one url is the k8s internal Cluster DNS FQ… --- ## [Embedding dashboard by value renderer throws error for all filters having filter.meta.value type as string](https://discuss.elastic.co/t/embedding-dashboard-by-value-renderer-throws-error-for-all-filters-having-filter-meta-value-type-as-string/316738)
**Author:** [@Shreeya\_Rajguru](https://discuss.elastic.co/u/Shreeya_Rajguru)\ **Replies:** 0\ **Last updated:** [October 17, 2022, 7:36am UTC](https://discuss.elastic.co/t/embedding-dashboard-by-value-renderer-throws-error-for-all-filters-having-filter-meta-value-type-as-string/316738 "2022-10-17T07:36:53Z")
Hi, I have embedded an existing dashboard using getDashboardContainerByValueRenderer in a custom plugin. When I apply a filter which has filter.meta.value as string for eg. filter for a field present i.e. Field: exists,… --- ## [Constant logstash s3 input plugin restart due to failing to open TCP connection to the target s3 bucket](https://discuss.elastic.co/t/constant-logstash-s3-input-plugin-restart-due-to-failing-to-open-tcp-connection-to-the-target-s3-bucket/322637)
**Author:** [@maltesersabc](https://discuss.elastic.co/u/maltesersabc)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 8:03pm UTC](https://discuss.elastic.co/t/constant-logstash-s3-input-plugin-restart-due-to-failing-to-open-tcp-connection-to-the-target-s3-bucket/322637 "2023-01-06T20:03:30Z")
Background: We are using logstash s3 input plugin to ingest the logs from s3 bucket in AWS, however, we observed in the logstash plain logs, there are constant plugin errors that lead to the restart of the plugin. And t… --- ## [Filebeat CrashLoopBackOff](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 8\ **Last updated:** [January 6, 2023, 7:32pm UTC](https://discuss.elastic.co/t/filebeat-crashloopbackoff/320830 "2023-01-06T19:32:57Z")
After installing filebeat from the new Helm 8.5 in our cluster k8s, 5 of the pods are stuck in CrashLoopBackOff: {"log.level":"error","@timestamp":"2022-12-08T21:13:19.258Z","log.origin":{"file.name":"instance/beat.go",… --- ## [Get all value for a field with the JAVA API](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 5\ **Last updated:** [January 6, 2023, 6:19pm UTC](https://discuss.elastic.co/t/get-all-value-for-a-field-with-the-java-api/322566 "2023-01-06T18:19:21Z")
Hello, How can i get all the value that correspond to a specific field ? For example i want all the existing value for the field "affaireName", check the exemple below : SearchRequest request = SearchRequest.of(a -\> a… --- ## [Bug in Cisco Module for Filebeat 7.17.8](https://discuss.elastic.co/t/bug-in-cisco-module-for-filebeat-7-17-8/322633)
**Author:** [@mmh13](https://discuss.elastic.co/u/mmh13)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 5:12pm UTC](https://discuss.elastic.co/t/bug-in-cisco-module-for-filebeat-7-17-8/322633 "2023-01-06T17:12:28Z")
Hey, When trying to run Filebeat 7.17.8 with the Cisco module enabled we found that new amp events were not being ingested. The var.first\_interval parameter was respected and initially populated the index with amp even… --- ## [Flattened fields vs subobjects=false](https://discuss.elastic.co/t/flattened-fields-vs-subobjects-false/322631)
**Author:** [@bdentino](https://discuss.elastic.co/u/bdentino)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 4:45pm UTC](https://discuss.elastic.co/t/flattened-fields-vs-subobjects-false/322631 "2023-01-06T16:45:43Z")
Hi everyone, Can someone help me understand the fundamental differences between a 'flattened' field type and an 'object' field type with subobjects=false? AIUI, everything under a 'flattened' object is indexed as a keyw… --- ## [Kibana ignoring requestTimeout setting](https://discuss.elastic.co/t/kibana-ignoring-requesttimeout-setting/322627)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 4:03pm UTC](https://discuss.elastic.co/t/kibana-ignoring-requesttimeout-setting/322627 "2023-01-06T16:03:35Z")
Hello, I'm having some issues with some requests that timeout on Dev Tools and returns stream timeout. I change the elasticsearch.requestTimeout setting to 300000 which means 5 minutes, but Kibana stills timeout around… --- ## [Filebeat Kubernetes autodiscover with post "processor" specific field with another filebeat module](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503)
**Author:** [@kgfathur](https://discuss.elastic.co/u/kgfathur)\ **Replies:** 7\ **Last updated:** [January 6, 2023, 4:03pm UTC](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscover-with-post-processor-specific-field-with-another-filebeat-module/322503 "2023-01-06T16:03:09Z")
I have setup filbeat on Kubernetes (ECK) with sample and guide from docs: Role Based Access Control for Beats | Elastic Cloud on Kubernetes \[2.5\] Run Filebeat on Kubernetes | Filebeat Reference \[8.5\] Version: ECK: … --- ## [Using two date ranges in one Watcher](https://discuss.elastic.co/t/using-two-date-ranges-in-one-watcher/322554)
**Author:** [@mariusk](https://discuss.elastic.co/u/mariusk)\ **Replies:** 3\ **Last updated:** [January 6, 2023, 3:26pm UTC](https://discuss.elastic.co/t/using-two-date-ranges-in-one-watcher/322554 "2023-01-06T15:26:24Z")
I have a group of indices (tracking-v1-\*) containing documents representing parts of a fibre optic network (one document per day and construction crew). I want to create a Watcher that generates a daily report, showing t… --- ## [Kibana Dashboard for two different indices with seperate time filters](https://discuss.elastic.co/t/kibana-dashboard-for-two-different-indices-with-seperate-time-filters/322591)
**Author:** [@rvadiga](https://discuss.elastic.co/u/rvadiga)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 2:56pm UTC](https://discuss.elastic.co/t/kibana-dashboard-for-two-different-indices-with-seperate-time-filters/322591 "2023-01-06T14:56:05Z")
Hi Team, I do have a requirement to build a Kibana dashboard with two different time filters from two Elastic indices. User should be able to compare the performance one index with another with different time periods, … --- ## [Visualization doesn't follow time picker value in the dashboard](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-value-in-the-dashboard/322616)
**Author:** [@Ashish\_Grover](https://discuss.elastic.co/u/Ashish_Grover)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 2:54pm UTC](https://discuss.elastic.co/t/visualization-doesnt-follow-time-picker-value-in-the-dashboard/322616 "2023-01-06T14:54:56Z")
I m making some visualization and i m taking timestamp on x axis but my timestamp on x axis is not updating with current time. --- ## [How to sync data between Azure SQL Database with Elasticsearch through Logstash](https://discuss.elastic.co/t/how-to-sync-data-between-azure-sql-database-with-elasticsearch-through-logstash/322560)
**Author:** [@seerj29](https://discuss.elastic.co/u/seerj29)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 2:36pm UTC](https://discuss.elastic.co/t/how-to-sync-data-between-azure-sql-database-with-elasticsearch-through-logstash/322560 "2023-01-06T14:36:37Z")
Hi everyone, I'm trying to find a way to sync data between Azure SQL Database with Elasticsearch using Logstash. I found an article about doing this with the JBDC plugin, but if I understood correctly this is only for … --- ## [Block certain strings from ingestion](https://discuss.elastic.co/t/block-certain-strings-from-ingestion/322326)
**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\ **Replies:** 6\ **Last updated:** [January 6, 2023, 1:36pm UTC](https://discuss.elastic.co/t/block-certain-strings-from-ingestion/322326 "2023-01-06T13:36:01Z")
Hi, There are few back end applications which depend/listen to queues, if there are no messages in queue it will print as INFO level logs "NO MESSAGES AVAILABLE in queue". Is there a way where i can block this particula… --- ## [Mutual TLS authentication between Kibana and Elasticsearch keeping client\_authentication "required"](https://discuss.elastic.co/t/mutual-tls-authentication-between-kibana-and-elasticsearch-keeping-client-authentication-required/322529)
**Author:** [@alex\_kuz](https://discuss.elastic.co/u/alex_kuz)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 1:34pm UTC](https://discuss.elastic.co/t/mutual-tls-authentication-between-kibana-and-elasticsearch-keeping-client-authentication-required/322529 "2023-01-06T13:34:59Z")
I'm trying to enable mutual TLS between all the components. I managed to set up TLS between Kibana and Elasticsearch. But it doesn't work as I would expect. I want to keep "xpack.security.http.ssl.client\_authentication" … --- ## [Customize panel time range on visualizations on a dashboard via app state, global state or another way by URL](https://discuss.elastic.co/t/customize-panel-time-range-on-visualizations-on-a-dashboard-via-app-state-global-state-or-another-way-by-url/320740)
**Author:** [@DMinovski](https://discuss.elastic.co/u/DMinovski)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 1:34pm UTC](https://discuss.elastic.co/t/customize-panel-time-range-on-visualizations-on-a-dashboard-via-app-state-global-state-or-another-way-by-url/320740 "2023-01-06T13:34:05Z")
I have a dashboard with visualizations. When I click on a visualization's options and select Customize time range, selecting a range updates the key dashboardStateManagerPanels in the browser's Sessions storage, to show … --- ## [AbuseCH and enrichment on custom pipeline](https://discuss.elastic.co/t/abusech-and-enrichment-on-custom-pipeline/322480)
**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 1:29pm UTC](https://discuss.elastic.co/t/abusech-and-enrichment-on-custom-pipeline/322480 "2023-01-06T13:29:20Z")
Hi there, I have a simple question about abuseCH integration and field enrichment of abuseCH to an other index. When a create my enrich policy, I don't have an error: PUT /\_enrich/policy/abusechurl-enrich-policy { … --- ## [Error dialing x509: certificate signed by unknown authority](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority/322258)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 11:18am UTC](https://discuss.elastic.co/t/error-dialing-x509-certificate-signed-by-unknown-authority/322258 "2023-01-06T11:18:08Z")
I configured them but still got this error Error dialing x509: certificate signed by unknown authority --- ## [Services are running actively but can not access kibana](https://discuss.elastic.co/t/services-are-running-actively-but-can-not-access-kibana/322463)
**Author:** [@Zahid\_Ali](https://discuss.elastic.co/u/Zahid_Ali)\ **Replies:** 2\ **Last updated:** [January 6, 2023, 11:00am UTC](https://discuss.elastic.co/t/services-are-running-actively-but-can-not-access-kibana/322463 "2023-01-06T11:00:37Z")
Hi Team, I have set up Two VM's in which elasticsearch (version: 7.17.6) and kibana (version: 7.17.6) is installed on one VM both are running with SSL, filebeat (version: 7.17.6) and wazuh manager (version: 4.3.10) is i… --- ## [Alert based on two messages](https://discuss.elastic.co/t/alert-based-on-two-messages/320876)
**Author:** [@Alex\_Lavrov](https://discuss.elastic.co/u/Alex_Lavrov)\ **Replies:** 1\ **Last updated:** [January 6, 2023, 10:48am UTC](https://discuss.elastic.co/t/alert-based-on-two-messages/320876 "2023-01-06T10:48:19Z")
Hello, I have several messages that are ingested together and have same "batchId" field. I need to check a condition (simple calculation), based on two fields from messages that have the same "batchId" (and couple of mo… --- ## [Grok Filter not working with File beat Log Message](https://discuss.elastic.co/t/grok-filter-not-working-with-file-beat-log-message/322605)
**Author:** [@Prakash111](https://discuss.elastic.co/u/Prakash111)\ **Replies:** 0\ **Last updated:** [January 6, 2023, 8:58am UTC](https://discuss.elastic.co/t/grok-filter-not-working-with-file-beat-log-message/322605 "2023-01-06T08:58:03Z")
I'm using file beat for as log collector. my log data : 2023-01-05T11:57:48.179Z \[ERROR\] ABC Company {"Pod": "7d45bf43lbr", "Service": "liveX", "failed to create patch:": "invalid JSON Document"} I supposed to get Key… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=674) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=676)