# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=699 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 700 --- ## [Can I run multiple Elasticsearch instances in one server?](https://discuss.elastic.co/t/can-i-run-multiple-elasticsearch-instances-in-one-server/321230)
**Author:** [@Lakshmi\_Kumari](https://discuss.elastic.co/u/Lakshmi_Kumari)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 5:50pm UTC](https://discuss.elastic.co/t/can-i-run-multiple-elasticsearch-instances-in-one-server/321230 "2022-12-14T17:50:50Z")
Can I run multiple Elasticsearch instances in one server? -If yes, How can I install 2 Elasticsearch instances in a single Linux server. I am aware if we use "yum install" will be installed without any issue. Thanks i… --- ## [Abnormal Datafeeding detected in Anomaly Detection Jobs](https://discuss.elastic.co/t/abnormal-datafeeding-detected-in-anomaly-detection-jobs/320672)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 5:47pm UTC](https://discuss.elastic.co/t/abnormal-datafeeding-detected-in-anomaly-detection-jobs/320672 "2022-12-14T17:47:58Z")
Hi Team, There are a couple of machine learning jobs currently running in our ELK environment. With this, we have configured watcher alerts also, based on the record-level anomaly score. Since a few days back, we've bee… --- ## [Metricbeats reported version mismatch](https://discuss.elastic.co/t/metricbeats-reported-version-mismatch/321071)
**Author:** [@serge1](https://discuss.elastic.co/u/serge1)\ **Replies:** 6\ **Last updated:** [December 14, 2022, 5:17pm UTC](https://discuss.elastic.co/t/metricbeats-reported-version-mismatch/321071 "2022-12-14T17:17:00Z")
Hello! I'm installing beats v. 8.5.1 on my machines. When I query installed version with /var/lib/metricbeat/metricbeat version, it reports itself as 8.5.1. However in Humio where I ship the metrics, Agent version is po… --- ## [Scrollbar disappeared in Vega](https://discuss.elastic.co/t/scrollbar-disappeared-in-vega/320428)
**Author:** [@victorhmorales](https://discuss.elastic.co/u/victorhmorales)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 5:05pm UTC](https://discuss.elastic.co/t/scrollbar-disappeared-in-vega/320428 "2022-12-14T17:05:59Z")
Hello, I'm using a graphic developed in Vega in my Dashboard. The "autosize" property is set to "fit-x". It used to show a vertical scrollbar when I was running Elastic 8.3, but since I upgraded to 8.4 and now to 8.5 (8… --- ## [Logstash jdbc input state](https://discuss.elastic.co/t/logstash-jdbc-input-state/321192)
**Author:** [@Mahdi\_Moazami](https://discuss.elastic.co/u/Mahdi_Moazami)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 3:43pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-state/321192 "2022-12-14T15:43:48Z")
Hi there elastic team, Suppose i have multiple pipelines each with one jdbc input. each of them execute a sql query that uses the value of sql\_last\_value to fetch only updated data and each pipeline file targets a speci… --- ## [How to access Kibana in different VM](https://discuss.elastic.co/t/how-to-access-kibana-in-different-vm/321224)
**Author:** [@Vivek\_Arumugam](https://discuss.elastic.co/u/Vivek_Arumugam)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 3:37pm UTC](https://discuss.elastic.co/t/how-to-access-kibana-in-different-vm/321224 "2022-12-14T15:37:19Z")
Hi Team, I have installed Kibana and Elasticsearch in server. I am able access Kibana in same machine. But in different VM it not working. Please help me out --- ## [Log collector solution](https://discuss.elastic.co/t/log-collector-solution/320964)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 2\ **Last updated:** [December 14, 2022, 3:32pm UTC](https://discuss.elastic.co/t/log-collector-solution/320964 "2022-12-14T15:32:48Z")
Hi TL;DR: need log collector for file with minimum configuration, and support different conditions. I have 3 servers that generate log file daily with size about 12GB (12\*3=36GB) How can I gather these files on centra… --- ## [Filebeat Docker - Elasticsearch Host Issue](https://discuss.elastic.co/t/filebeat-docker-elasticsearch-host-issue/320083)
**Author:** [@mwsprotte](https://discuss.elastic.co/u/mwsprotte)\ **Replies:** 6\ **Last updated:** [December 14, 2022, 3:18pm UTC](https://discuss.elastic.co/t/filebeat-docker-elasticsearch-host-issue/320083 "2022-12-14T15:18:04Z")
Hello Everyone! I'm trying to run Filebeat in a Docker Container folowing this documentation: https://www.elastic.co/guide/en/beats/filebeat/current/running-on-docker.html#\_run\_the\_filebeat\_setup but in the second step, … --- ## [Drill down in bar vertical stacked in Lens Visuaization gives incorrect output from the parent dashboard](https://discuss.elastic.co/t/drill-down-in-bar-vertical-stacked-in-lens-visuaization-gives-incorrect-output-from-the-parent-dashboard/320627)
**Author:** [@Diya\_19](https://discuss.elastic.co/u/Diya_19)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 2:08pm UTC](https://discuss.elastic.co/t/drill-down-in-bar-vertical-stacked-in-lens-visuaization-gives-incorrect-output-from-the-parent-dashboard/320627 "2022-12-14T14:08:45Z")
I have created a bar vertical stacked graph to get the response status codes (HTTP 200s, 300s, 400s and 500s). I have applied a drill down through which we can filter through the http code in the drill down dashboard whi… --- ## [How to aggregate data across multiple fields?](https://discuss.elastic.co/t/how-to-aggregate-data-across-multiple-fields/318943)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 4\ **Last updated:** [November 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/how-to-aggregate-data-across-multiple-fields/318943 "2022-11-16T15:14:59Z")
Hi! I'm fairly new to Kibana. I'm trying to perform data aggregation across multiple fields, but don't seem to be approaching the problem the right way. Example use case: I have data about house prices. E.g. house "a" … --- ## [Unable to enable saml for cloud deployment with Azure](https://discuss.elastic.co/t/unable-to-enable-saml-for-cloud-deployment-with-azure/318517)
**Author:** [@Jude\_Jerome](https://discuss.elastic.co/u/Jude_Jerome)\ **Replies:** 4\ **Last updated:** [December 14, 2022, 1:33pm UTC](https://discuss.elastic.co/t/unable-to-enable-saml-for-cloud-deployment-with-azure/318517 "2022-12-14T13:33:38Z")
Hello There, I am trying to enable saml for cloud deployment running with 8.3.2 version by following the below docs As a first step I am trying to add the below configuration in elasticsearch yml file. xpack.securi… --- ## [Recompute event.hash for documents in cold indices](https://discuss.elastic.co/t/recompute-event-hash-for-documents-in-cold-indices/321203)
**Author:** [@ivo.raisr](https://discuss.elastic.co/u/ivo.raisr)\ **Replies:** 0\ **Last updated:** [December 14, 2022, 9:55am UTC](https://discuss.elastic.co/t/recompute-event-hash-for-documents-in-cold-indices/321203 "2022-12-14T09:55:42Z")
For certain datasets which contain important log events, logstash pipeline computes event.hash, using fingerprint filter with SHA256 method and a key, over all the event fields. The events are then ingested into elastics… --- ## [Statuspage.io integration](https://discuss.elastic.co/t/statuspage-io-integration/321218)
**Author:** [@javaripa](https://discuss.elastic.co/u/javaripa)\ **Replies:** 0\ **Last updated:** [December 14, 2022, 1:06pm UTC](https://discuss.elastic.co/t/statuspage-io-integration/321218 "2022-12-14T13:06:40Z")
Is it possible to integrate Elastic stack with Statuspage? As far as I know, Elastic seems to use Statuspage.io already! ESS (Public) Status --- ## [How to consume a Elastic indexs between different Clouds](https://discuss.elastic.co/t/how-to-consume-a-elastic-indexs-between-different-clouds/321162)
**Author:** [@Rodrigoscotti](https://discuss.elastic.co/u/Rodrigoscotti)\ **Replies:** 5\ **Last updated:** [December 14, 2022, 12:35pm UTC](https://discuss.elastic.co/t/how-to-consume-a-elastic-indexs-between-different-clouds/321162 "2022-12-14T12:35:15Z")
We run Elasticsearch using a self-hosting solution from GCP. Our services consume a BD in Elastic to work correctly. A new client asks us if it is possible to consume their Elastic BD directly from their Elastic self-hos… --- ## [Math operation on different documents/queries](https://discuss.elastic.co/t/math-operation-on-different-documents-queries/320875)
**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 12:25pm UTC](https://discuss.elastic.co/t/math-operation-on-different-documents-queries/320875 "2022-12-14T12:25:31Z")
Hi, I'm trying to create metric in Kibana dashboard(Lens), where i will see difference between two different fields (events\_passed - events\_all) (subtraction) That fields are available in two different documents Can i… --- ## [Parse array in Json log file with Filebeat 7.7.1](https://discuss.elastic.co/t/parse-array-in-json-log-file-with-filebeat-7-7-1/320736)
**Author:** [@roshann](https://discuss.elastic.co/u/roshann)\ **Replies:** 2\ **Last updated:** [December 14, 2022, 12:12pm UTC](https://discuss.elastic.co/t/parse-array-in-json-log-file-with-filebeat-7-7-1/320736 "2022-12-14T12:12:17Z")
Hi, I have a json log file as below: { "Format": "IDEA0", "ID": "1c5ae2e1-bf16-43d6-9233-5865f83ad180", "DetectTime": "2022-12-03T11:17:23.589015+00:00", "EventTime": "2022-12-03T11:17:23.589020+00:00", "Category": \["A… --- ## [Send raw logs to elastic server](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096)
**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\ **Replies:** 13\ **Last updated:** [December 14, 2022, 11:54am UTC](https://discuss.elastic.co/t/send-raw-logs-to-elastic-server/321096 "2022-12-14T11:54:36Z")
Hi I have 2 question about elastic 1-how can i send all files located in specific path with random name via filebeat like this: /var/log/app/serverlog.log /var/log/app/applog.log /var/log/app/exceptionlog.log ... t… --- ## [Timestamp includes different timezones](https://discuss.elastic.co/t/timestamp-includes-different-timezones/321190)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 11:52am UTC](https://discuss.elastic.co/t/timestamp-includes-different-timezones/321190 "2022-12-14T11:52:41Z")
Hello All, In response from backend data I have event with timezone, i have added one field in elastic templte :nextEvent. The date format of above fields are important, it has timezone in it.. like below: "nextEvent"… --- ## [Skip xpack authentication for a specific endpoint](https://discuss.elastic.co/t/skip-xpack-authentication-for-a-specific-endpoint/321122)
**Author:** [@smiley\_tamy](https://discuss.elastic.co/u/smiley_tamy)\ **Replies:** 3\ **Last updated:** [December 14, 2022, 11:34am UTC](https://discuss.elastic.co/t/skip-xpack-authentication-for-a-specific-endpoint/321122 "2022-12-14T11:34:54Z")
I have enabled x-pack and all the requests are expected to provide the credentials to access Elasticsearch. I have a scenario where for certain endpoints, I must be able to access without providing credentials. It means… --- ## [Configuration LDAPS](https://discuss.elastic.co/t/configuration-ldaps/320441)
**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\ **Replies:** 8\ **Last updated:** [December 14, 2022, 11:29am UTC](https://discuss.elastic.co/t/configuration-ldaps/320441 "2022-12-14T11:29:20Z")
Hi everybody. Tell me please. I'm trying to set up a config for authorization via LDAP. I can't understand this setting xpack: security: authc: realms: ldap: ldap1: order: 0 url: "ldaps://ldap.example.com:636" … --- ## [Elasticsearch-create-enrollment-token using IP from wrong ethernet adaptor](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999)
**Author:** [@vimalv](https://discuss.elastic.co/u/vimalv)\ **Replies:** 5\ **Last updated:** [December 14, 2022, 10:55am UTC](https://discuss.elastic.co/t/elasticsearch-create-enrollment-token-using-ip-from-wrong-ethernet-adaptor/320999 "2022-12-14T10:55:52Z")
Hi, We have two ethernet adaptors and hence 2 IPs, When we try to generate enrollment token, it always uses 2nd IP by default. Is there any way to override the default and specify which IP to use or can we use hostname… --- ## [The maxiunm fields support in auditbeat](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205)
**Author:** [@masonlu2014](https://discuss.elastic.co/u/masonlu2014)\ **Replies:** 0\ **Last updated:** [December 14, 2022, 10:23am UTC](https://discuss.elastic.co/t/the-maxiunm-fields-support-in-auditbeat/321205 "2022-12-14T10:23:48Z")
hello team, may i know what the biggest length can be support in auditbeat ? as i tested, it looks like auditbeat truncated the fields vaule here when it long enough for example, when i enter a super long fake curl co… --- ## [After enabling the https not able to launch kibana dashboard](https://discuss.elastic.co/t/after-enabling-the-https-not-able-to-launch-kibana-dashboard/321200)
**Author:** [@Manjiri](https://discuss.elastic.co/u/Manjiri)\ **Replies:** 2\ **Last updated:** [December 14, 2022, 10:06am UTC](https://discuss.elastic.co/t/after-enabling-the-https-not-able-to-launch-kibana-dashboard/321200 "2022-12-14T10:06:41Z")
We enable https but we are able to launch the Elasticsearch URL but we are not able to launch kibana it is showing can't reach the page --- ## [Send mustach tag in Weebhook call without having it interpreted?](https://discuss.elastic.co/t/send-mustach-tag-in-weebhook-call-without-having-it-interpreted/320165)
**Author:** [@JohnJ\_M](https://discuss.elastic.co/u/JohnJ_M)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 9:34am UTC](https://discuss.elastic.co/t/send-mustach-tag-in-weebhook-call-without-having-it-interpreted/320165 "2022-12-14T09:34:31Z")
Hi the community, I am looking a way to send via webhook mustach tab (like {{ctx.payload.total\_assets.hits.total}} that should not be interpreted. The reason: The main watcher create new watchers using the webhook. Th… --- ## [Send Elasticsearch logs to Graylog](https://discuss.elastic.co/t/send-elasticsearch-logs-to-graylog/321199)
**Author:** [@tiwaxa4826](https://discuss.elastic.co/u/tiwaxa4826)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 8:59am UTC](https://discuss.elastic.co/t/send-elasticsearch-logs-to-graylog/321199 "2022-12-14T08:59:58Z")
Hi! I have an on-premise infrastructure. I historically have a Graylog to centralize my logs. For my application needs, I have installed an Elasticsearch cluster and I would like to send Elasticsearch logs to Graylog. N… --- ## [Ordering on parent-aggregations based on sub-aggregrations](https://discuss.elastic.co/t/ordering-on-parent-aggregations-based-on-sub-aggregrations/320437)
**Author:** [@Rajamallikeerthana\_R](https://discuss.elastic.co/u/Rajamallikeerthana_R)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 7:51am UTC](https://discuss.elastic.co/t/ordering-on-parent-aggregations-based-on-sub-aggregrations/320437 "2022-12-14T07:51:34Z")
Hi, I am using elasticsearch 6.3 . I have an index event\_v4 which store the data of all events handled by our company. Now i need to get a list of cities that satisfy a certain conditions. But if the count is less than r… --- ## [Regarding Ingest Node Pipeline](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094)
**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\ **Replies:** 9\ **Last updated:** [December 14, 2022, 7:26am UTC](https://discuss.elastic.co/t/regarding-ingest-node-pipeline/321094 "2022-12-14T07:26:52Z")
Hi team, We would like to know about the ingest node pipeline. we are new in this platform. Normally, an application team sending the logs through the below mentioned path. Logs Flow Path: FileBeat/MetricBeat -\> AWS K… --- ## [Elastic search in splitting the words if dot comes between](https://discuss.elastic.co/t/elastic-search-in-splitting-the-words-if-dot-comes-between/321187)
**Author:** [@jothi\_mano](https://discuss.elastic.co/u/jothi_mano)\ **Replies:** 1\ **Last updated:** [December 14, 2022, 7:21am UTC](https://discuss.elastic.co/t/elastic-search-in-splitting-the-words-if-dot-comes-between/321187 "2022-12-14T07:21:37Z")
If a dot comes between the search string , it is not returning the proper results. Example : search string ' 0002.AB' Need a result which should list the results that matches the whole word first and followed by other… --- ## [Logstash - Reading files from Windows Network Share](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105)
**Author:** [@anon99430464](https://discuss.elastic.co/u/anon99430464)\ **Replies:** 4\ **Last updated:** [December 14, 2022, 7:05am UTC](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105 "2022-12-14T07:05:50Z")
I'm trying to read log files from a network share on Windows. I know this isn't best practice, but currently there is no way around it, and from the documentation it sounds like it is supported. However I can not get th… --- ## [Ingest pipeline - Override datastream](https://discuss.elastic.co/t/ingest-pipeline-override-datastream/321163)
**Author:** [@jeff.diademi](https://discuss.elastic.co/u/jeff.diademi)\ **Replies:** 2\ **Last updated:** [December 14, 2022, 6:48am UTC](https://discuss.elastic.co/t/ingest-pipeline-override-datastream/321163 "2022-12-14T06:48:20Z")
Today, I'm ingesting logs from kubernetes containers pods using elastic agent kubernetes integration. It works fine. Now, I have a use case which is the following: Some specific logs records need to be ingested in anot… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=698) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=700)