# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=700

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 701

---

## [Elastic Agent ignores the Agent Binary Download location setting](https://discuss.elastic.co/t/elastic-agent-ignores-the-agent-binary-download-location-setting/320276)

<div class="topic-metadata">

**Author:** [@username11](https://discuss.elastic.co/u/username11)\
**Replies:** 4\
**Last updated:** [December 14, 2022, 6:34am UTC](https://discuss.elastic.co/t/elastic-agent-ignores-the-agent-binary-download-location-setting/320276 "2022-12-14T06:34:19Z")

</div>

Hi. This is basically a repeat of this thread, which did not get any replies. Right now I am testing the Elastic Agents in a test environment, which does not have direct internet access (and neither will my live environm…

---

## [How to handle missing values for date datatype while ingesting the data in Elasticsearch](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524)

<div class="topic-metadata">

**Author:** [@Durga\_Prasad](https://discuss.elastic.co/u/Durga_Prasad)\
**Replies:** 3\
**Last updated:** [December 14, 2022, 5:49am UTC](https://discuss.elastic.co/t/how-to-handle-missing-values-for-date-datatype-while-ingesting-the-data-in-elasticsearch/320524 "2022-12-14T05:49:12Z")

</div>

There are few empty values for date datatype field in a csv file. So, while ingesting the data in Kibana (uploading csv file), getting the below error. Some documents could not be imported 1445 out of 45436 documents c…

---

## [Nested List Ingest Pipeline](https://discuss.elastic.co/t/nested-list-ingest-pipeline/320504)

<div class="topic-metadata">

**Author:** [@dwissm1](https://discuss.elastic.co/u/dwissm1)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 1:01am UTC](https://discuss.elastic.co/t/nested-list-ingest-pipeline/320504 "2022-12-14T01:01:14Z")

</div>

Hey Folks. I have a nested list inside of a list (obs - below) in some data from my tempest weather station. I want to split out the csv and I have the field names. I tried a foreach and a foreach with an append... no…

---

## [Forgot how to get geoip enrichment to work for packetbeat](https://discuss.elastic.co/t/forgot-how-to-get-geoip-enrichment-to-work-for-packetbeat/321170)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 1\
**Last updated:** [December 14, 2022, 12:15am UTC](https://discuss.elastic.co/t/forgot-how-to-get-geoip-enrichment-to-work-for-packetbeat/321170 "2022-12-14T00:15:33Z")

</div>

I got geoip enrichment working with packetbeat a few days ago in a test set up with elasticsearch 8.5 and kibana 8.5. But I tore down the servers this morning so that I can repeat the installation. For some reason, th…

---

## [Incorrect date format in Aggregation Based Table in Kibana](https://discuss.elastic.co/t/incorrect-date-format-in-aggregation-based-table-in-kibana/320819)

<div class="topic-metadata">

**Author:** [@victorhmorales](https://discuss.elastic.co/u/victorhmorales)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:42pm UTC](https://discuss.elastic.co/t/incorrect-date-format-in-aggregation-based-table-in-kibana/320819 "2022-12-13T22:42:51Z")

</div>

Hello, I just upgraded Elastic from 8.4.3 to 8.5.2 and I'm having a problem using fields of type "date" in tables created in Aggregation Based in Kibana. The reason for using table in Aggregation Based is the 'Export' …

---

## [Using Curl to change cluster settings](https://discuss.elastic.co/t/using-curl-to-change-cluster-settings/321086)

<div class="topic-metadata">

**Author:** [@matt\_dee](https://discuss.elastic.co/u/matt_dee)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 10:21pm UTC](https://discuss.elastic.co/t/using-curl-to-change-cluster-settings/321086 "2022-12-13T22:21:39Z")

</div>

Hi. I'm quite new to ES and have done most of the admin through kibana I was doing a cluster restart and disabled shard allocation via dev tools through Kibana. Now I've started the nodes back up Kibana is giving an e…

---

## [Cannot see any host in elastic security and also cannot see any data from auditbeat or winlogbeat](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983)

<div class="topic-metadata">

**Author:** [@Mohaiminul\_Islam](https://discuss.elastic.co/u/Mohaiminul_Islam)\
**Replies:** 13\
**Last updated:** [December 13, 2022, 9:03pm UTC](https://discuss.elastic.co/t/cannot-see-any-host-in-elastic-security-and-also-cannot-see-any-data-from-auditbeat-or-winlogbeat/320983 "2022-12-13T21:03:26Z")

</div>

I am trying to create a home lab. I have setup everything in ubuntu machine in vmware. The auditbeat is also in this machine. But I cannot see any data from auditbeat or even the host itself in security overview. Then I …

---

## [Configure PKI authentication for Elasticsearch 7.7](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686)

<div class="topic-metadata">

**Author:** [@samhagin](https://discuss.elastic.co/u/samhagin)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 8:45pm UTC](https://discuss.elastic.co/t/configure-pki-authentication-for-elasticsearch-7-7/318686 "2022-12-13T20:45:56Z")

</div>

This guide Elasticsearch Security: Configure TLS/SSL & PKI Authentication | Elastic Blog shows how to configure PKI for Elasticsearch version 6.5 however this doesn't work for version 7.7.0 ( the version I'm currently us…

---

## [Logstash.conf error](https://discuss.elastic.co/t/logstash-conf-error/321157)

<div class="topic-metadata">

**Author:** [@limitless](https://discuss.elastic.co/u/limitless)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 6:57pm UTC](https://discuss.elastic.co/t/logstash-conf-error/321157 "2022-12-13T18:57:04Z")

</div>

.\\bin\\logstash.bat -f logstash.conf "Using bundled JDK: A:\\logstash-8.5.3\\jdk\\bin\\java.exe" Sending Logstash logs to A:/logstash-8.5.3/logs which is now configured via log4j2.properties \[2022-12-13T22:19:36,586\]\[INFO …

---

## [Conflict occur with rollup job](https://discuss.elastic.co/t/conflict-occur-with-rollup-job/319817)

<div class="topic-metadata">

**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 6:50pm UTC](https://discuss.elastic.co/t/conflict-occur-with-rollup-job/319817 "2022-12-13T18:50:39Z")

</div>

Hi Team, I am using elasticsearch and kibana 7.16.2 and I'm facing conflicts on index pattern while creating process wise Visualization dashboard. Below I have describe two scenario, In which I faced conflict on scenar…

---

## [Logstash Agent error Failed to execute action](https://discuss.elastic.co/t/logstash-agent-error-failed-to-execute-action/321147)

<div class="topic-metadata">

**Author:** [@suresh.vemu](https://discuss.elastic.co/u/suresh.vemu)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 6:45pm UTC](https://discuss.elastic.co/t/logstash-agent-error-failed-to-execute-action/321147 "2022-12-13T18:45:42Z")

</div>

I am new to logstash, and just installed it. When i try to run its giving me the below error. i am using logstash 8.5.3 version. appreciate any help. \[2022-12-13T11:29:39,728\]\[ERROR\]\[logstash.agent \] Failed to…

---

## [Visualize a utilize of bot execution during a day\\](https://discuss.elastic.co/t/visualize-a-utilize-of-bot-execution-during-a-day/318986)

<div class="topic-metadata">

**Author:** [@yonaten08](https://discuss.elastic.co/u/yonaten08)\
**Replies:** 1\
**Last updated:** [November 15, 2022, 7:51pm UTC](https://discuss.elastic.co/t/visualize-a-utilize-of-bot-execution-during-a-day/318986 "2022-11-15T19:51:42Z")

</div>

hi all, quite new in Kibana and need some help, I'm trying to visualize a utilization of bots during a day\\days (depended on filter @timestemp) , when a bot ended his run he log is total execution time in second, and …

---

## [Elastic agent on EKS unhealthy](https://discuss.elastic.co/t/elastic-agent-on-eks-unhealthy/321155)

<div class="topic-metadata">

**Author:** [@wh1sss](https://discuss.elastic.co/u/wh1sss)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 5:34pm UTC](https://discuss.elastic.co/t/elastic-agent-on-eks-unhealthy/321155 "2022-12-13T17:34:14Z")

</div>

Hi everyone, I created a cluster on the elastic cloud and I'm using the "Kubernetes Security", "Kubernetes" and "Elastic APM" integrations. The agents are being installed directly on the EKS cluster on AWS with the m…

---

## [Explain feature is not working in a search template](https://discuss.elastic.co/t/explain-feature-is-not-working-in-a-search-template/321060)

<div class="topic-metadata">

**Author:** [@Randall-McRee](https://discuss.elastic.co/u/Randall-McRee)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 4:26pm UTC](https://discuss.elastic.co/t/explain-feature-is-not-working-in-a-search-template/321060 "2022-12-13T16:26:39Z")

</div>

When I put "explain=true" into a search template (as a parameter, so we can turn it on and off) it does not work. I see a similar problem long ago in .net...this is version 8.14. Following is simple kibana demonstrating…

---

## [Request Body is Required](https://discuss.elastic.co/t/request-body-is-required/321139)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 6\
**Last updated:** [December 13, 2022, 3:24pm UTC](https://discuss.elastic.co/t/request-body-is-required/321139 "2022-12-13T15:24:23Z")

</div>

Hello, every time i try to use the Kibana Dev Tools, if the request has a body it fails with this: Yes, there are no newlines and also the request body is there: I saw many similar threads, but all without soluti…

---

## [GET Kibana API output in table format to send health and nodes details](https://discuss.elastic.co/t/get-kibana-api-output-in-table-format-to-send-health-and-nodes-details/321039)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 4:10pm UTC](https://discuss.elastic.co/t/get-kibana-api-output-in-table-format-to-send-health-and-nodes-details/321039 "2022-12-13T16:10:45Z")

</div>

Hi team, I need to send kibana report which contains all values from below API. We need to send this in one email. Is this possible to create table and send this report in table format. GET \_cluster/health GET /\_cat/…

---

## [ML problem](https://discuss.elastic.co/t/ml-problem/321144)

<div class="topic-metadata">

**Author:** [@alvaro\_ing](https://discuss.elastic.co/u/alvaro_ing)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 4:04pm UTC](https://discuss.elastic.co/t/ml-problem/321144 "2022-12-13T16:04:05Z")

</div>

When I try to run an anomaly detection job in elastic I get an error and it does not execute me. The error I get in the elastic console is this: \[2022-12-13T16:30:18,711\]\[WARN \]\[o.e.p.PersistentTasksClusterService\] \[alv…

---

## [During terms aggregation with partition we get sum\_other\_doc\_count \> 0 in between partitions](https://discuss.elastic.co/t/during-terms-aggregation-with-partition-we-get-sum-other-doc-count-0-in-between-partitions/321140)

<div class="topic-metadata">

**Author:** [@akleiber](https://discuss.elastic.co/u/akleiber)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 3:29pm UTC](https://discuss.elastic.co/t/during-terms-aggregation-with-partition-we-get-sum-other-doc-count-0-in-between-partitions/321140 "2022-12-13T15:29:10Z")

</div>

We are running ES 6.8 and move some documents to another ES Cluster with a more recent version. We also transform the documents during that process. We need to group documents by a field, so we do this via a terms aggre…

---

## [Inconsistency in the number of documents](https://discuss.elastic.co/t/inconsistency-in-the-number-of-documents/321129)

<div class="topic-metadata">

**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 3:25pm UTC](https://discuss.elastic.co/t/inconsistency-in-the-number-of-documents/321129 "2022-12-13T15:25:38Z")

</div>

I have an index with 2 shards which have 1600M documents each (~3200M total), but when I calculate a histogram, the sum does not give me the total number of documents, the result is much less, what is the reason?

---

## [Store query in cache](https://discuss.elastic.co/t/store-query-in-cache/318994)

<div class="topic-metadata">

**Author:** [@Ismet](https://discuss.elastic.co/u/Ismet)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 2:22pm UTC](https://discuss.elastic.co/t/store-query-in-cache/318994 "2022-12-13T14:22:53Z")

</div>

Hi, how to put query with aggregation in ram cache? I can't find an example. Version: 7.9 There is my query: GET product/\_search { "size": 0, "query": { "bool": { "must\_not": { "match": { …

---

## [Elastic search cluster showing unhealthy, Cluster "red"](https://discuss.elastic.co/t/elastic-search-cluster-showing-unhealthy-cluster-red/321070)

<div class="topic-metadata">

**Author:** [@Harsh3](https://discuss.elastic.co/u/Harsh3)\
**Replies:** 5\
**Last updated:** [December 13, 2022, 1:51pm UTC](https://discuss.elastic.co/t/elastic-search-cluster-showing-unhealthy-cluster-red/321070 "2022-12-13T13:51:35Z")

</div>

Hello ! I am new to Elasticsearch! This is the first time i am doing installation, if someone can pls help, have spent days searching for the issue but no luck .. We have kibana running inside EKS cluster and Elastic-s…

---

## [Another Cloudflare integration issue](https://discuss.elastic.co/t/another-cloudflare-integration-issue/320085)

<div class="topic-metadata">

**Author:** [@ethhack](https://discuss.elastic.co/u/ethhack)\
**Replies:** 12\
**Last updated:** [December 13, 2022, 1:41pm UTC](https://discuss.elastic.co/t/another-cloudflare-integration-issue/320085 "2022-12-13T13:41:03Z")

</div>

Similar to this post for which I see no resolution anywhere, I have an issue with the Cloudflare logpull integration erroring out about the 168h maximum: "message":"Error while processing http request: failed to execute…

---

## [ElasticSearch Azure storage](https://discuss.elastic.co/t/elasticsearch-azure-storage/321124)

<div class="topic-metadata">

**Author:** [@OlLap](https://discuss.elastic.co/u/OlLap)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 1:30pm UTC](https://discuss.elastic.co/t/elasticsearch-azure-storage/321124 "2022-12-13T13:30:54Z")

</div>

Hello everyone, is it possible to use Azure Storage account (Files share or Blob container) for Elasticsearch data nodes?

---

## [Unable to access elastic console](https://discuss.elastic.co/t/unable-to-access-elastic-console/318887)

<div class="topic-metadata">

**Author:** [@Ravi\_Vishwakarma](https://discuss.elastic.co/u/Ravi_Vishwakarma)\
**Replies:** 2\
**Last updated:** [November 15, 2022, 1:57pm UTC](https://discuss.elastic.co/t/unable-to-access-elastic-console/318887 "2022-11-15T13:57:55Z")

</div>

Hi, we have already created space on Elasticsearch server but still facing issue. we also checked for cluster allocation and found below output. \`\`{ "note" : "No shard was specified in the explain API request, so thi…

---

## [Nginx module on k8s - access and error from the same path?](https://discuss.elastic.co/t/nginx-module-on-k8s-access-and-error-from-the-same-path/321126)

<div class="topic-metadata">

**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\
**Replies:** 0\
**Last updated:** [December 13, 2022, 12:57pm UTC](https://discuss.elastic.co/t/nginx-module-on-k8s-access-and-error-from-the-same-path/321126 "2022-12-13T12:57:27Z")

</div>

Hey, So I have a micro service with nginx, I am using filebeat nginx module to read the logs: filebeat.autodiscover: providers: - type: kubernetes hints.enabled: true tem…

---

## [ECK managed elasticsearch (with TLS enabled) getting flooded with "received plaintext http traffic on an https channel" logs](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117)

<div class="topic-metadata">

**Author:** [@Daithi\_O\_Conchobhair](https://discuss.elastic.co/u/Daithi_O_Conchobhair)\
**Replies:** 4\
**Last updated:** [December 13, 2022, 12:36pm UTC](https://discuss.elastic.co/t/eck-managed-elasticsearch-with-tls-enabled-getting-flooded-with-received-plaintext-http-traffic-on-an-https-channel-logs/321117 "2022-12-13T12:36:33Z")

</div>

Hi there, This is such a strange issue I am not sure if it is a defect or something that I am doing wrong. I will say in my defence that I see it when I just use the quickstart guide also. Versions: IBM Kubernetes Se…

---

## [Elastic.Clients.Elasticsearch 8.0.1](https://discuss.elastic.co/t/elastic-clients-elasticsearch-8-0-1/320388)

<div class="topic-metadata">

**Author:** [@bobwiller](https://discuss.elastic.co/u/bobwiller)\
**Replies:** 1\
**Last updated:** [December 13, 2022, 12:36pm UTC](https://discuss.elastic.co/t/elastic-clients-elasticsearch-8-0-1/320388 "2022-12-13T12:36:30Z")

</div>

Does anyone know if the \[Text(Ignore = true)\] attribute is available in the new 8.x .Net Client yet? Or is there a new/different way of doing this? Thanks, Bob

---

## [ECS category & type vs Grok](https://discuss.elastic.co/t/ecs-category-type-vs-grok/321063)

<div class="topic-metadata">

**Author:** [@tricia](https://discuss.elastic.co/u/tricia)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 12:19pm UTC](https://discuss.elastic.co/t/ecs-category-type-vs-grok/321063 "2022-12-13T12:19:39Z")

</div>

Hi! This seems like it should be a simple question but I'm having trouble finding relevant documentation, so I appreciate any advice y'all might have. I'm trying to write filters to handle OpenSSH log data, and I'd like…

---

## [Table displaying sum of latest values](https://discuss.elastic.co/t/table-displaying-sum-of-latest-values/321109)

<div class="topic-metadata">

**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\
**Replies:** 2\
**Last updated:** [December 13, 2022, 12:11pm UTC](https://discuss.elastic.co/t/table-displaying-sum-of-latest-values/321109 "2022-12-13T12:11:39Z")

</div>

Hi! Given the following example dataset showing the number of warnings in C++ files for a given date, and also containing information about which project each C++ file belongs to: { "file": "a.cpp", "project": "foo", "…

---

## [Kibana dashboard search view "aborted"](https://discuss.elastic.co/t/kibana-dashboard-search-view-aborted/320448)

<div class="topic-metadata">

**Author:** [@Marcin\_Frankiewicz](https://discuss.elastic.co/u/Marcin_Frankiewicz)\
**Replies:** 3\
**Last updated:** [December 13, 2022, 12:08pm UTC](https://discuss.elastic.co/t/kibana-dashboard-search-view-aborted/320448 "2022-12-13T12:08:04Z")

</div>

Hello, That topic is similar to : Kibana dashboard table view results in "Aborted" I have few a dashboard with every contains few visualisation, and they works fine, but one of them (search view) often shows me a messa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=699)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=701)
