# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=679 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 680 --- ## [Match exact phrase using elasticsearch Nest](https://discuss.elastic.co/t/match-exact-phrase-using-elasticsearch-nest/322412)
**Author:** [@Javier\_Zaldivar](https://discuss.elastic.co/u/Javier_Zaldivar)\ **Replies:** 0\ **Last updated:** [January 4, 2023, 2:24am UTC](https://discuss.elastic.co/t/match-exact-phrase-using-elasticsearch-nest/322412 "2023-01-04T02:24:47Z")
I'm using Nest to build a query. I have a class called Event which has a property called Location and a property called Address (a string). So the indices look something like this: "id" : "something1", "location": { … --- ## [Access is denied in case of elastic agent in Windows installation](https://discuss.elastic.co/t/access-is-denied-in-case-of-elastic-agent-in-windows-installation/322333)
**Author:** [@lovelike123](https://discuss.elastic.co/u/lovelike123)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 1:17am UTC](https://discuss.elastic.co/t/access-is-denied-in-case-of-elastic-agent-in-windows-installation/322333 "2023-01-04T01:17:34Z")
Access is denied in case of elastic agent in Windows installation Version of windows server：windows server 2008r2 --- ## [Enabling anonymous access (fileRealm) in kibana](https://discuss.elastic.co/t/enabling-anonymous-access-filerealm-in-kibana/321101)
**Author:** [@jane.hwang](https://discuss.elastic.co/u/jane.hwang)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 11:30pm UTC](https://discuss.elastic.co/t/enabling-anonymous-access-filerealm-in-kibana/321101 "2023-01-03T23:30:59Z")
Hello, I'm a beginner in using elasticsearch and kibana with ECK. I have installed elasticsearch and kibana with ECK. I have already make it possible to login elasticsearch using fileRealm. elasticsearch.yaml apiVer… --- ## [Dashboard drilldown does not carry filters from the panel of origin](https://discuss.elastic.co/t/dashboard-drilldown-does-not-carry-filters-from-the-panel-of-origin/319850)
**Author:** [@lpacheco](https://discuss.elastic.co/u/lpacheco)\ **Replies:** 3\ **Last updated:** [December 7, 2022, 12:22am UTC](https://discuss.elastic.co/t/dashboard-drilldown-does-not-carry-filters-from-the-panel-of-origin/319850 "2022-12-07T00:22:35Z")
I've created 2 dashboards: a macro view and a detailed view. In the macro view I have a series of lens panels that filter the index to show metrics from different AWS services. I configured each panel to drill down into… --- ## [How to read a user cookie from Custom Realm plugin](https://discuss.elastic.co/t/how-to-read-a-user-cookie-from-custom-realm-plugin/322224)
**Author:** [@wsbr](https://discuss.elastic.co/u/wsbr)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 9:35pm UTC](https://discuss.elastic.co/t/how-to-read-a-user-cookie-from-custom-realm-plugin/322224 "2023-01-03T21:35:37Z")
Hi folks, In our solution we are trying to insert a button that redirect to Kibana with the user already logged. We created a "custom realm" plugin as our unique auth provider to give Kibana access for final users of o… --- ## [Execute Enrich Policy Creating Index, "Unexpected"](https://discuss.elastic.co/t/execute-enrich-policy-creating-index-unexpected/322400)
**Author:** [@cj\_hillbrand](https://discuss.elastic.co/u/cj_hillbrand)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 7:21pm UTC](https://discuss.elastic.co/t/execute-enrich-policy-creating-index-unexpected/322400 "2023-01-03T19:21:54Z")
Hello, I am running into an issue when executing an enrich policy via the dotnet NEST API. The top-level issue is that there is no, ".enrich-my-index-name" after issuing the execute on the enrich policy. There is autom… --- ## [How to list one records when there are 4 similar records with no unique field in ELK](https://discuss.elastic.co/t/how-to-list-one-records-when-there-are-4-similar-records-with-no-unique-field-in-elk/322324)
**Author:** [@Anuradha\_Pendyala](https://discuss.elastic.co/u/Anuradha_Pendyala)\ **Replies:** 3\ **Last updated:** [January 3, 2023, 8:45pm UTC](https://discuss.elastic.co/t/how-to-list-one-records-when-there-are-4-similar-records-with-no-unique-field-in-elk/322324 "2023-01-03T20:45:47Z")
Hi , we have an alerting mechanism in place with the help of watcher where we have a complex filter query with an attachment from kibana saved objects ,our index contains multiple records with very similar field values… --- ## [Help with logstash conditional filter](https://discuss.elastic.co/t/help-with-logstash-conditional-filter/322402)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 7:49pm UTC](https://discuss.elastic.co/t/help-with-logstash-conditional-filter/322402 "2023-01-03T19:49:48Z")
Hello, I'm trying to create a filter to drop events that don't have Lateral attack or Vulnerability exploit attack in the message field. but it is giving error, I would like to know what is wrong and what is the correct … --- ## [Is it possible to change the field name of 'Show title' using JSON input?](https://discuss.elastic.co/t/is-it-possible-to-change-the-field-name-of-show-title-using-json-input/315844)
**Author:** [@jaheim](https://discuss.elastic.co/u/jaheim)\ **Replies:** 2\ **Last updated:** [October 12, 2022, 4:44am UTC](https://discuss.elastic.co/t/is-it-possible-to-change-the-field-name-of-show-title-using-json-input/315844 "2022-10-12T04:44:15Z")
Hi! I add Split group in Buckets in Metric of Kibana. Aggregation is set to Terms. And I enable 'Show title'. The values of Field are used as the name of Show title. (0, 1, 2) I want to change the name. For example, 0… --- ## [Logstash pipeline with input+ filter to one output and other without filter to different output](https://discuss.elastic.co/t/logstash-pipeline-with-input-filter-to-one-output-and-other-without-filter-to-different-output/322350)
**Author:** [@shadu88](https://discuss.elastic.co/u/shadu88)\ **Replies:** 6\ **Last updated:** [January 3, 2023, 4:05pm UTC](https://discuss.elastic.co/t/logstash-pipeline-with-input-filter-to-one-output-and-other-without-filter-to-different-output/322350 "2023-01-03T16:05:08Z")
Hello Elkan s I wish you a happy new year!! Hope all are doings well. My scenario: collecting logs on port 9600 and adding filter to forward the logs to qradar I need to add one more output of azure sentinel without … --- ## [Query which return number range](https://discuss.elastic.co/t/query-which-return-number-range/322349)
**Author:** [@Serhii\_Maistruk](https://discuss.elastic.co/u/Serhii_Maistruk)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:57pm UTC](https://discuss.elastic.co/t/query-which-return-number-range/322349 "2023-01-03T15:57:02Z")
Hi there, maybe someone has an idea if i'm able to do following query using kibana vizualization: I have huge index tag filled with phone numbers, and i need to check if they are "sequential". For example, we have n… --- ## [Custom logs ingest: how?](https://discuss.elastic.co/t/custom-logs-ingest-how/321928)
**Author:** [@Johannnnnn](https://discuss.elastic.co/u/Johannnnnn)\ **Replies:** 4\ **Last updated:** [January 3, 2023, 3:40pm UTC](https://discuss.elastic.co/t/custom-logs-ingest-how/321928 "2023-01-03T15:40:57Z")
I have a very simple logfile in json format that I want to send to elasticsearch The Filebeat quick setup page is not clear on how to make this work. This is an excerpt of the file to input. This is all the complexity … --- ## [Data Loss when cluster has hit Watermark](https://discuss.elastic.co/t/data-loss-when-cluster-has-hit-watermark/322389)
**Author:** [@jobypm](https://discuss.elastic.co/u/jobypm)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:09pm UTC](https://discuss.elastic.co/t/data-loss-when-cluster-has-hit-watermark/322389 "2023-01-03T15:09:57Z")
If a cluster hits watermark and gets rectified few hrs later, will there be data loss for the duration when the cluster was readonly? If there is data lost, is there a way we can retrigger using any parameter in filebea… --- ## [Question on kv filter](https://discuss.elastic.co/t/question-on-kv-filter/322388)
**Author:** [@moberreiter](https://discuss.elastic.co/u/moberreiter)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 3:09pm UTC](https://discuss.elastic.co/t/question-on-kv-filter/322388 "2023-01-03T15:09:05Z")
Hello everyone! I have a log from syslog which logstash should parse: Source: Jan 3 10:14:40 123.123.123.123 {"zone\_src":"SRC","zone\_dst":"DST","reason":"rule","rule\_id":12345,"rule\_description":"Rule Description","a… --- ## [Help my please realized clarifying filtering](https://discuss.elastic.co/t/help-my-please-realized-clarifying-filtering/322385)
**Author:** [@Parano9I](https://discuss.elastic.co/u/Parano9I)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 2:59pm UTC](https://discuss.elastic.co/t/help-my-please-realized-clarifying-filtering/322385 "2023-01-03T14:59:05Z")
GET original\_docs/\_search { "\_source": \[ "styles", "production\_date\_start" \], "from": 20, "size": 20, "query": { "bool": { "filter": \[ { "nested": { "path": "styl… --- ## [How to extend /var file partition](https://discuss.elastic.co/t/how-to-extend-var-file-partition/322305)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 7\ **Last updated:** [January 3, 2023, 2:57pm UTC](https://discuss.elastic.co/t/how-to-extend-var-file-partition/322305 "2023-01-03T14:57:36Z")
The /dev/mapper/centos-var partition got full Can anyone suggest a solution for extending it or any solution? --- ## [How to present score of current month and month -1 at one Lens table](https://discuss.elastic.co/t/how-to-present-score-of-current-month-and-month-1-at-one-lens-table/322306)
**Author:** [@przemek\_ironcode](https://discuss.elastic.co/u/przemek_ironcode)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 2:28pm UTC](https://discuss.elastic.co/t/how-to-present-score-of-current-month-and-month-1-at-one-lens-table/322306 "2023-01-03T14:28:53Z")
Hello All, I have a problem displaying data in the Lens table. I want to display the score of the current month, month -1, and the difference between these scores. Below is a sample table. Thanks in advance for your he… --- ## [Cannot search on field \[event.original\] since it is not indexed](https://discuss.elastic.co/t/cannot-search-on-field-event-original-since-it-is-not-indexed/322381)
**Author:** [@NS\_Midhun](https://discuss.elastic.co/u/NS_Midhun)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 2:25pm UTC](https://discuss.elastic.co/t/cannot-search-on-field-event-original-since-it-is-not-indexed/322381 "2023-01-03T14:25:24Z")
I have 7.17v version, i see the apache server logs in filebeat kibana dashboard. But it gives the message with event.original instead of message. when i try to write a lucene query to search all GET req for example, it d… --- ## [Increase Data count in elastic](https://discuss.elastic.co/t/increase-data-count-in-elastic/322292)
**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 2:18pm UTC](https://discuss.elastic.co/t/increase-data-count-in-elastic/322292 "2023-01-03T14:18:08Z")
Hello, i've integrate fortigate firewall with logstash and forward logs to elasticsearch and visualize with kibana, th log count stopped after docs count : 117026 i want to increase index data --- ## [Export Metrics to csv](https://discuss.elastic.co/t/export-metrics-to-csv/320267)
**Author:** [@erloti](https://discuss.elastic.co/u/erloti)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 2:03pm UTC](https://discuss.elastic.co/t/export-metrics-to-csv/320267 "2023-01-03T14:03:37Z")
Hello, I have one dashboard with lot of different metrics (simple counts) and filters (time range and data list). I would like to know the best way to export those values in a csv file with the correct filter. I can't… --- ## [How to replicate a home plugin with chromeless feature?](https://discuss.elastic.co/t/how-to-replicate-a-home-plugin-with-chromeless-feature/322087)
**Author:** [@Joe\_Kuan](https://discuss.elastic.co/u/Joe_Kuan)\ **Replies:** 1\ **Last updated:** [January 3, 2023, 1:52pm UTC](https://discuss.elastic.co/t/how-to-replicate-a-home-plugin-with-chromeless-feature/322087 "2023-01-03T13:52:47Z")
Hi, I have experimented a UI plugin with chromeless feature and it worked fine. However, my goal is to replicate the home page UI plugin without the Kibana navigation and replace with our custom navigation menus. I hav… --- ## [\_jsonparsefailure with filebeat and logstash](https://discuss.elastic.co/t/jsonparsefailure-with-filebeat-and-logstash/322356)
**Author:** [@Lynow](https://discuss.elastic.co/u/Lynow)\ **Replies:** 10\ **Last updated:** [January 3, 2023, 1:43pm UTC](https://discuss.elastic.co/t/jsonparsefailure-with-filebeat-and-logstash/322356 "2023-01-03T13:43:08Z")
Hello, I use Filebeat to fetch data from Wazuh (HIDS) and send alerts to Logstash. Then Logstash sends its data to ES and everything usually works fine. However, sometimes after being away for a few days, I look on Ki… --- ## [Maximum requests per seconde on elasticsearch node](https://discuss.elastic.co/t/maximum-requests-per-seconde-on-elasticsearch-node/322369)
**Author:** [@b\_Ensberg](https://discuss.elastic.co/u/b_Ensberg)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 1:36pm UTC](https://discuss.elastic.co/t/maximum-requests-per-seconde-on-elasticsearch-node/322369 "2023-01-03T13:36:03Z")
I installed elasticseach on a linux server, I have a single node of it. I have a csv file of several tens of thousands of lines which contains IDs, the goal is to iterate over this file and retrieve the data from the ela… --- ## [Kbn-ui-shared-deps-npm.dll.js blocked by meraki](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519)
**Author:** [@NashSLX](https://discuss.elastic.co/u/NashSLX)\ **Replies:** 3\ **Last updated:** [November 8, 2022, 3:09pm UTC](https://discuss.elastic.co/t/kbn-ui-shared-deps-npm-dll-js-blocked-by-meraki/315519 "2022-11-08T15:09:27Z")
Hey everyone! Recently we've been having issues connecting to kibana under some circumstances: After not seeing anything in the server logs, we realized something seemed to be blocked in the console: And then IT… --- ## [Filebeat: "memory leak" via filebeat.autodiscover and \>\>200.000 goroutines](https://discuss.elastic.co/t/filebeat-memory-leak-via-filebeat-autodiscover-and-200-000-goroutines/322082)
**Author:** [@HarryTuttle](https://discuss.elastic.co/u/HarryTuttle)\ **Replies:** 5\ **Last updated:** [January 3, 2023, 1:00pm UTC](https://discuss.elastic.co/t/filebeat-memory-leak-via-filebeat-autodiscover-and-200-000-goroutines/322082 "2023-01-03T13:00:25Z")
Hi, we use filebeat (8.5.3) to scrape logs from kubernetes (1.24) nodes and send them to logstash (8.5.3). We have been doing this since filebeat 6.x and have adjusted the configs to the best of our knowledge during the… --- ## [Logstash conditional check if filed exist then replace timestamp value with another fileds timestamp](https://discuss.elastic.co/t/logstash-conditional-check-if-filed-exist-then-replace-timestamp-value-with-another-fileds-timestamp/322311)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 12:45pm UTC](https://discuss.elastic.co/t/logstash-conditional-check-if-filed-exist-then-replace-timestamp-value-with-another-fileds-timestamp/322311 "2023-01-03T12:45:14Z")
Hello All, I'm stuck in how to implement conditional check in logstash and how would it be implemented correctly. Usecase:I have data coming in my index with multiple fields value,I'd like to send data to elastic wher… --- ## [RabbitMQ VS IBM MQ For integrate with ELK](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 9\ **Last updated:** [January 3, 2023, 11:23am UTC](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297 "2023-01-03T11:23:49Z")
Hello Everybody, I need from ELK integrations Expertise to Recommend for me Whet is the best from between IBM MQ and Rabbit MQ to pull Messages in terms of performance and compatibility with ELK 7.11.2. --- ## [Using the Cloud URL instead of ID to connect .NET client app to Elastic Cloud](https://discuss.elastic.co/t/using-the-cloud-url-instead-of-id-to-connect-net-client-app-to-elastic-cloud/322362)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 0\ **Last updated:** [January 3, 2023, 11:06am UTC](https://discuss.elastic.co/t/using-the-cloud-url-instead-of-id-to-connect-net-client-app-to-elastic-cloud/322362 "2023-01-03T11:06:03Z")
Hi, we had an issue after applying Azure private link traffic filter to our deployment, authenticating with Cloud Id no longer works. We are considering to use URL instead but we see it is not recommended: When connec… --- ## [IS it possible to use "nested else if" in logstash.conf](https://discuss.elastic.co/t/is-it-possible-to-use-nested-else-if-in-logstash-conf/322342)
**Author:** [@jjacksonrkk](https://discuss.elastic.co/u/jjacksonrkk)\ **Replies:** 2\ **Last updated:** [January 3, 2023, 10:17am UTC](https://discuss.elastic.co/t/is-it-possible-to-use-nested-else-if-in-logstash-conf/322342 "2023-01-03T10:17:35Z")
hello~ Is it possible to use "nested else if" in filter section inside logstash.conf logstash 7.10.2 example else if ... { if ...{ else if .... { .... } } } --- ## [Logstash - Collecting SNMP data from network devices](https://discuss.elastic.co/t/logstash-collecting-snmp-data-from-network-devices/321814)
**Author:** [@muhammad-murad.nagoo](https://discuss.elastic.co/u/muhammad-murad.nagoo)\ **Replies:** 25\ **Last updated:** [January 3, 2023, 9:41am UTC](https://discuss.elastic.co/t/logstash-collecting-snmp-data-from-network-devices/321814 "2023-01-03T09:41:33Z")
Hello Gentlemen, Installed the logstash agent in on prem Windows server. Configure to collect the SNMP from network devices. However i found error "\[2022-12-20T09:05:57,307\]\[FATAL\]\[org.logstash.Logstash \] Logstash st… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=678) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=680)