# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=676

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 677

---

## [Can not create new index , Client request timeout (502)](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516)

<div class="topic-metadata">

**Author:** [@Madushan\_Pathirana](https://discuss.elastic.co/u/Madushan_Pathirana)\
**Replies:** 3\
**Last updated:** [January 6, 2023, 8:04am UTC](https://discuss.elastic.co/t/can-not-create-new-index-client-request-timeout-502/322516 "2023-01-06T08:04:07Z")

</div>

Hi, elasticsearch worked fine when I install it first. After two weeks, now when I try to create new index it return below error PUT customer response {"statusCode":502,"error":"Bad Gateway","message":"Client request …

---

## [I want to dissable depriciated TLSv1.0 and tlsv1.1](https://discuss.elastic.co/t/i-want-to-dissable-depriciated-tlsv1-0-and-tlsv1-1/321609)

<div class="topic-metadata">

**Author:** [@udittiwari](https://discuss.elastic.co/u/udittiwari)\
**Replies:** 3\
**Last updated:** [January 6, 2023, 7:55am UTC](https://discuss.elastic.co/t/i-want-to-dissable-depriciated-tlsv1-0-and-tlsv1-1/321609 "2023-01-06T07:55:00Z")

</div>

How can i dissable the depriciated TLS in my server? its urgent can some one help?

---

## [Compare fields and report](https://discuss.elastic.co/t/compare-fields-and-report/322468)

<div class="topic-metadata">

**Author:** [@pclokcer](https://discuss.elastic.co/u/pclokcer)\
**Replies:** 4\
**Last updated:** [January 6, 2023, 7:39am UTC](https://discuss.elastic.co/t/compare-fields-and-report/322468 "2023-01-06T07:39:46Z")

</div>

example data { "timestamp": "2023-01-04T14:00:00.00Z", "url": "http://localhost/test", "trace\_id": "asdasdasd" } { "timestamp": "2023-01-04T14:01:00.000Z", "url": "http://localhost/test", "trace\_id": "asdasdasd" …

---

## [Queries not working with node js](https://discuss.elastic.co/t/queries-not-working-with-node-js/322590)

<div class="topic-metadata">

**Author:** [@Hemabh\_Ravee\_Fox](https://discuss.elastic.co/u/Hemabh_Ravee_Fox)\
**Replies:** 0\
**Last updated:** [January 6, 2023, 5:52am UTC](https://discuss.elastic.co/t/queries-not-working-with-node-js/322590 "2023-01-06T05:52:24Z")

</div>

I am using the following query to get the total unique values for the field website - GET events\_test2/\_search { "size": 0, "aggs": { "unique\_websites": { "terms": { "field": "website", "si…

---

## [Alert for every document based on the field value](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237)

<div class="topic-metadata">

**Author:** [@breakingcode](https://discuss.elastic.co/u/breakingcode)\
**Replies:** 4\
**Last updated:** [December 9, 2022, 5:45am UTC](https://discuss.elastic.co/t/alert-for-every-document-based-on-the-field-value/320237 "2022-12-09T05:45:22Z")

</div>

Hi, We have a requirement in which we have to setup alerting system based on the field value of the document. So document will be like this { ........ ........ breach: "false"/"true" ........ } Based of the 'breach' f…

---

## [Unable to connect Elastic Cloud to my python(FastApi) app](https://discuss.elastic.co/t/unable-to-connect-elastic-cloud-to-my-python-fastapi-app/322589)

<div class="topic-metadata">

**Author:** [@Dhruv\_Extra](https://discuss.elastic.co/u/Dhruv_Extra)\
**Replies:** 0\
**Last updated:** [January 6, 2023, 5:43am UTC](https://discuss.elastic.co/t/unable-to-connect-elastic-cloud-to-my-python-fastapi-app/322589 "2023-01-06T05:43:02Z")

</div>

Here's my code: from elasticsearch import Elasticsearch es = Elasticsearch( cloud\_id="cluster-1:dXMa5Fx...", http\_auth=("elastic", "\<password\>"), ) es.info() #or from elasticsearch import Elasticsearch es = …

---

## [Auditbeat installation failed](https://discuss.elastic.co/t/auditbeat-installation-failed/322507)

<div class="topic-metadata">

**Author:** [@freemankevin](https://discuss.elastic.co/u/freemankevin)\
**Replies:** 7\
**Last updated:** [January 6, 2023, 2:55am UTC](https://discuss.elastic.co/t/auditbeat-installation-failed/322507 "2023-01-06T02:55:41Z")

</div>

error message：x509: certificate signed by unknown authority \[root@efk ~\]# curl -f https://localhost:8220/api/status -k {"name":"fleet-server","status":"HEALTHY"}\[root@efk ~\]# \[root@efk ~\]# \[root@efk ~\]# \[root@efk ~\]# cu…

---

## [Metricbeat AWS Billing Module does not combine Group By options](https://discuss.elastic.co/t/metricbeat-aws-billing-module-does-not-combine-group-by-options/322497)

<div class="topic-metadata">

**Author:** [@Thomas\_Cate](https://discuss.elastic.co/u/Thomas_Cate)\
**Replies:** 3\
**Last updated:** [January 6, 2023, 1:28am UTC](https://discuss.elastic.co/t/metricbeat-aws-billing-module-does-not-combine-group-by-options/322497 "2023-01-06T01:28:31Z")

</div>

It looks like the Metricbeat AWS Billing module takes in an arbitrary number of Cost Explorer Group by Dimensions, and then iterates over them individually to generate documents. Ideally it should allow you to pair up d…

---

## [Dashboard with count of pipelines](https://discuss.elastic.co/t/dashboard-with-count-of-pipelines/316567)

<div class="topic-metadata">

**Author:** [@kmz161](https://discuss.elastic.co/u/kmz161)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 3:18pm UTC](https://discuss.elastic.co/t/dashboard-with-count-of-pipelines/316567 "2022-10-14T15:18:59Z")

</div>

Hi! I need create Dashboard with statistics of new created Logstash Pipelines. I have not any index with such information. How can i display the number of pipelines?

---

## [Field from logs](https://discuss.elastic.co/t/field-from-logs/322476)

<div class="topic-metadata">

**Author:** [@MrMartin1](https://discuss.elastic.co/u/MrMartin1)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 11:32pm UTC](https://discuss.elastic.co/t/field-from-logs/322476 "2023-01-05T23:32:55Z")

</div>

Hi! I'm new to elasticsearch and have recently setup elastic, kibana and filebeat and manage to receive logs from a Cisco device. Now i have a question if it's possible to parse specific value from the message, like "P…

---

## [How to change security index's replica shard count?](https://discuss.elastic.co/t/how-to-change-security-indexs-replica-shard-count/322558)

<div class="topic-metadata">

**Author:** [@bulent](https://discuss.elastic.co/u/bulent)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 10:16pm UTC](https://discuss.elastic.co/t/how-to-change-security-indexs-replica-shard-count/322558 "2023-01-05T22:16:53Z")

</div>

Hi; I am trying to increase replica count of security index by using superuser ( elastic) like below curl -X PUT 'http://\*\*\*\*\*\*\*\*\*\*\*\*\*\*:9212/.security-7/\_settings' -H 'Authorization: Basic \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*' -H 'Co…

---

## [How to optimize config-files of filebeat for many different environments?](https://discuss.elastic.co/t/how-to-optimize-config-files-of-filebeat-for-many-different-environments/322577)

<div class="topic-metadata">

**Author:** [@ira-zaya](https://discuss.elastic.co/u/ira-zaya)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 9:57pm UTC](https://discuss.elastic.co/t/how-to-optimize-config-files-of-filebeat-for-many-different-environments/322577 "2023-01-05T21:57:35Z")

</div>

We have 3 different config files for 3 envs on the project. Each env is a separate cluster. All config files are similar to each other but the one difference - field.env, which is related to environment, accordingly. …

---

## [How to properly connect a standalone Logstash to an Elasticsearch cluster](https://discuss.elastic.co/t/how-to-properly-connect-a-standalone-logstash-to-an-elasticsearch-cluster/322520)

<div class="topic-metadata">

**Author:** [@Francesco1966](https://discuss.elastic.co/u/Francesco1966)\
**Replies:** 2\
**Last updated:** [January 5, 2023, 9:24pm UTC](https://discuss.elastic.co/t/how-to-properly-connect-a-standalone-logstash-to-an-elasticsearch-cluster/322520 "2023-01-05T21:24:03Z")

</div>

Hello, I have successfully created an Elasticsearch Cluster with two servers Ubuntu each one running an Elasticsearch node (one ES-Node1 acting as master node and ES-Node2 acting as data node). I than created a Standal…

---

## [Cold Tier ILM auto restore](https://discuss.elastic.co/t/cold-tier-ilm-auto-restore/322574)

<div class="topic-metadata">

**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 8:27pm UTC](https://discuss.elastic.co/t/cold-tier-ilm-auto-restore/322574 "2023-01-05T20:27:06Z")

</div>

I have been working with cold tier ILM policies and noticed that as soon as the data is written to the cold tier as a snapshot it is immediately restored to local cache. No searches are taking place, this is during the …

---

## [How can i change the @timestamp in a dashboard?](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427)

<div class="topic-metadata">

**Author:** [@Raul\_dum](https://discuss.elastic.co/u/Raul_dum)\
**Replies:** 1\
**Last updated:** [December 8, 2022, 10:09pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-timestamp-in-a-dashboard/320427 "2022-12-08T22:09:38Z")

</div>

I want to change the timestamp from @timestamp per 12 hours to per seconds,if that's possible.

---

## [You cannot specify a keystore and key file](https://discuss.elastic.co/t/you-cannot-specify-a-keystore-and-key-file/322561)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:46pm UTC](https://discuss.elastic.co/t/you-cannot-specify-a-keystore-and-key-file/322561 "2023-01-05T16:46:08Z")

</div>

Trying to get Elasticsearch 7.13 to run in Kubernetes with security enabled via the official helm chart. The error is elasticsearch java.lang.IllegalArgumentException: you cannot specify a keystore and key file. What do…

---

## [Dynamic Baseline](https://discuss.elastic.co/t/dynamic-baseline/322317)

<div class="topic-metadata">

**Author:** [@Rbb](https://discuss.elastic.co/u/Rbb)\
**Replies:** 5\
**Last updated:** [January 5, 2023, 4:29pm UTC](https://discuss.elastic.co/t/dynamic-baseline/322317 "2023-01-05T16:29:05Z")

</div>

Hi! I need to create a dynamic baseline which is based on the average of the field transaction.duration.us of the previous month. I have tried to create a runtime field, but the fact that the data is located in seperate…

---

## [Kibana not able to communicate with elasticsearch](https://discuss.elastic.co/t/kibana-not-able-to-communicate-with-elasticsearch/321160)

<div class="topic-metadata">

**Author:** [@Harsh3](https://discuss.elastic.co/u/Harsh3)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:12pm UTC](https://discuss.elastic.co/t/kibana-not-able-to-communicate-with-elasticsearch/321160 "2023-01-05T16:12:27Z")

</div>

Hello !! I am new to Elastic-search and Kibana and this is the first time i am doing the implementation. I have configured kibana inside k8s cluster and elasticsearch is hosted on ec-2 instance my elasticsearch is up a…

---

## [Options List control type filters cannot be saved as query](https://discuss.elastic.co/t/options-list-control-type-filters-cannot-be-saved-as-query/322509)

<div class="topic-metadata">

**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:11pm UTC](https://discuss.elastic.co/t/options-list-control-type-filters-cannot-be-saved-as-query/322509 "2023-01-05T16:11:51Z")

</div>

Once we filter multiple values in Option list control type, it does not allow us to Save query. Save Saved Query option does not highlight when we filter using drop downs. Please suggest.

---

## [Setting the verification\_mode to none - What about Kibanas using HTTPS?](https://discuss.elastic.co/t/setting-the-verification-mode-to-none-what-about-kibanas-using-https/321719)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 4:09pm UTC](https://discuss.elastic.co/t/setting-the-verification-mode-to-none-what-about-kibanas-using-https/321719 "2023-01-05T16:09:46Z")

</div>

Dear Community, due to certifiactes going to get invalid, I have to activate this setting in one of my secured production servers: verification\_mode to none My Question is: Once activated this setting (by restarting a…

---

## [Deploying Winlogbeat with Octopus Deploy](https://discuss.elastic.co/t/deploying-winlogbeat-with-octopus-deploy/322565)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 0\
**Last updated:** [January 5, 2023, 4:08pm UTC](https://discuss.elastic.co/t/deploying-winlogbeat-with-octopus-deploy/322565 "2023-01-05T16:08:07Z")

</div>

Looking for some guidance on using Octopus Deploy to deploy Winlogbeat. The approach I've been trying is to deploy a wrapper Powershell script, which would then invoke the install-service-winlogbeat.ps1 script, which I …

---

## [Windows Local Magento Installation Elastic Search Unknown 503 error from Elasticsearch null](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174)

<div class="topic-metadata">

**Author:** [@kumar2023](https://discuss.elastic.co/u/kumar2023)\
**Replies:** 9\
**Last updated:** [January 5, 2023, 3:42pm UTC](https://discuss.elastic.co/t/windows-local-magento-installation-elastic-search-unknown-503-error-from-elasticsearch-null/322174 "2023-01-05T15:42:35Z")

</div>

Installed Magento 2.45 in windows 10 local setup. From the admin panel i do see Catalog Search index notification. Actually the notification says "One or more indexers are invalid. Make sure your Magento cron job is run…

---

## [No fields available when creating logs threshold alert in Kibana](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525)

<div class="topic-metadata">

**Author:** [@mattia.borini](https://discuss.elastic.co/u/mattia.borini)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 3:40pm UTC](https://discuss.elastic.co/t/no-fields-available-when-creating-logs-threshold-alert-in-kibana/322525 "2023-01-05T15:40:38Z")

</div>

Hi, I don't understand why I cannot find any field in the select when trying to create a Log Threshold Alert in Kibana (7.17). I can see data in Discover

---

## [Elasticsearch working with Electronjs](https://discuss.elastic.co/t/elasticsearch-working-with-electronjs/322564)

<div class="topic-metadata">

**Author:** [@Prashant\_Tyagi](https://discuss.elastic.co/u/Prashant_Tyagi)\
**Replies:** 0\
**Last updated:** [January 5, 2023, 3:32pm UTC](https://discuss.elastic.co/t/elasticsearch-working-with-electronjs/322564 "2023-01-05T15:32:51Z")

</div>

Hi Everyone, I developed a Desktop search application with reactjs, nodejs, elasticsearch and docker. This application simply index all the files in your local system and then provides a search box to search the files. …

---

## [Is it possible to get current date in Kibana canvas markdown?](https://discuss.elastic.co/t/is-it-possible-to-get-current-date-in-kibana-canvas-markdown/320763)

<div class="topic-metadata">

**Author:** [@Dovydas](https://discuss.elastic.co/u/Dovydas)\
**Replies:** 3\
**Last updated:** [December 8, 2022, 4:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-current-date-in-kibana-canvas-markdown/320763 "2022-12-08T16:46:19Z")

</div>

Hi, I'm trying to display current date in Kibana canvas as part of my data overview, is it possible to get the current date or should I use different solution?

---

## [How can I add Json-Data to historic index](https://discuss.elastic.co/t/how-can-i-add-json-data-to-historic-index/322457)

<div class="topic-metadata">

**Author:** [@Steven\_Tschache](https://discuss.elastic.co/u/Steven_Tschache)\
**Replies:** 4\
**Last updated:** [January 5, 2023, 2:39pm UTC](https://discuss.elastic.co/t/how-can-i-add-json-data-to-historic-index/322457 "2023-01-05T14:39:23Z")

</div>

We currently are importing data using Logstash. One of the fields ("request") is a JSON stored as a string. We now require a section of this stored JSON as fields in the searchable index. I have updated Logstash filter u…

---

## [Winlogbeat unable to communicate with logstash](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862)

<div class="topic-metadata">

**Author:** [@doudou](https://discuss.elastic.co/u/doudou)\
**Replies:** 25\
**Last updated:** [January 5, 2023, 2:32pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-communicate-with-logstash/321862 "2023-01-05T14:32:37Z")

</div>

doudou@elkserver101:~$ doudou@elkserver101:~$ sudo /usr/share/logstash/bin/logstash -f /home/doudou/elk/pipeline.conf Using bundled JDK: /usr/share/logstash/jdk WARNING: Could not find logstash.yml which is typically loc…

---

## [Kubernetes unit tests failing on arm64 and other non-amd64 platforms](https://discuss.elastic.co/t/kubernetes-unit-tests-failing-on-arm64-and-other-non-amd64-platforms/320909)

<div class="topic-metadata">

**Author:** [@Jonathan\_Albrecht](https://discuss.elastic.co/u/Jonathan_Albrecht)\
**Replies:** 1\
**Last updated:** [January 5, 2023, 2:05pm UTC](https://discuss.elastic.co/t/kubernetes-unit-tests-failing-on-arm64-and-other-non-amd64-platforms/320909 "2023-01-05T14:05:11Z")

</div>

I'd like to ask about some test failures and then open an issue if it makes sense. I'm running the metricbeat unit tests on arm64 and s390x and I'm getting these test failures: FAIL github.com/elastic/beats/v7/metri…

---

## [Which methods can be used to analyze and improve data?](https://discuss.elastic.co/t/which-methods-can-be-used-to-analyze-and-improve-data/322528)

<div class="topic-metadata">

**Author:** [@Henrigo](https://discuss.elastic.co/u/Henrigo)\
**Replies:** 7\
**Last updated:** [January 5, 2023, 12:46pm UTC](https://discuss.elastic.co/t/which-methods-can-be-used-to-analyze-and-improve-data/322528 "2023-01-05T12:46:10Z")

</div>

I'm new to the field and I have a question. Which methods can be used to analyze and improve data?

---

## [Logstash variables in the output plugin for ADX/Log Analytics in Azure](https://discuss.elastic.co/t/logstash-variables-in-the-output-plugin-for-adx-log-analytics-in-azure/322461)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 4\
**Last updated:** [January 5, 2023, 12:04pm UTC](https://discuss.elastic.co/t/logstash-variables-in-the-output-plugin-for-adx-log-analytics-in-azure/322461 "2023-01-05T12:04:26Z")

</div>

Hello All, I have a question. I have a Logstash configuration with an output plugin for Log Analytics/Azure Data explorer in Azure. In my configuration (the output plugin part) instead of using the workspace ID and key…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=675)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=677)
