# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=708 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 709 --- ## [How to remove .Keywords in kibana](https://discuss.elastic.co/t/how-to-remove-keywords-in-kibana/320677)
**Author:** [@vijay78](https://discuss.elastic.co/u/vijay78)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 11:19am UTC](https://discuss.elastic.co/t/how-to-remove-keywords-in-kibana/320677 "2022-12-07T11:19:02Z")
Can someone assist here with how to remove (exclude)these highlighted .keywords in kibana ,thanking in advance. --- ## [How to change the mappings of an index in python itself?](https://discuss.elastic.co/t/how-to-change-the-mappings-of-an-index-in-python-itself/320666)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 10:15am UTC](https://discuss.elastic.co/t/how-to-change-the-mappings-of-an-index-in-python-itself/320666 "2022-12-07T10:15:23Z")
I want to change the type of text to keyword of a csv file that I'm uploading in Elasticsearch using the Elastic Search client in Python. But I'm getting this error: elasticsearch.BadRequestError: BadRequestError(400, '… --- ## [Elasticsearch increase total\_in\_bytes value Memory](https://discuss.elastic.co/t/elasticsearch-increase-total-in-bytes-value-memory/320578)
**Author:** [@b\_Ensberg](https://discuss.elastic.co/u/b_Ensberg)\ **Replies:** 13\ **Last updated:** [December 7, 2022, 10:13am UTC](https://discuss.elastic.co/t/elasticsearch-increase-total-in-bytes-value-memory/320578 "2022-12-07T10:13:09Z")
Hello I'm running a single node on an Ubuntu machine. Currently I have not enough space on my node. "mem" : { "total\_in\_bytes" : 25217441792, "free\_in\_bytes" : 674197504, "used\_in\_bytes"… --- ## [Filebeat not shipping the logs to elasticsearch](https://discuss.elastic.co/t/filebeat-not-shipping-the-logs-to-elasticsearch/320667)
**Author:** [@abaltan](https://discuss.elastic.co/u/abaltan)\ **Replies:** 0\ **Last updated:** [December 7, 2022, 9:57am UTC](https://discuss.elastic.co/t/filebeat-not-shipping-the-logs-to-elasticsearch/320667 "2022-12-07T09:57:08Z")
Hello, I'm trying to ship the logs using filebeat(filebeat version 7.17.7 (amd64)). my filebeat.yml file: filebeat.inputs: - type: log enabled: true paths: - /var/log/connection\_status/connection.log json.ke… --- ## [Deleting Snapshot via Kibana - safe for data?](https://discuss.elastic.co/t/deleting-snapshot-via-kibana-safe-for-data/320663)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 9:15am UTC](https://discuss.elastic.co/t/deleting-snapshot-via-kibana-safe-for-data/320663 "2022-12-07T09:15:35Z")
Hi there, I am running 7.17.4. In Kibana under: Stack Management -\> Snapshot and Restore -\> Snapshots and here in the Menu 'Snapshots' a have a list of (obviously) snapshots I did. My question: In case these snapshots… --- ## [Elastic-Agent System integration not sending in data for all mount points](https://discuss.elastic.co/t/elastic-agent-system-integration-not-sending-in-data-for-all-mount-points/320653)
**Author:** [@mkf1](https://discuss.elastic.co/u/mkf1)\ **Replies:** 0\ **Last updated:** [December 7, 2022, 7:44am UTC](https://discuss.elastic.co/t/elastic-agent-system-integration-not-sending-in-data-for-all-mount-points/320653 "2022-12-07T07:44:33Z")
Hi, I'm using Elastic-Agent Docker. Using version 8.5.0. My host server have multiple mount points. E.g. a mount point /app. But Elastic-Agent is not sending in any data about these mount points, see below screenshot: … --- ## [How to configure elasticsearch 6 java](https://discuss.elastic.co/t/how-to-configure-elasticsearch-6-java/320652)
**Author:** [@aleshqo](https://discuss.elastic.co/u/aleshqo)\ **Replies:** 0\ **Last updated:** [December 7, 2022, 7:43am UTC](https://discuss.elastic.co/t/how-to-configure-elasticsearch-6-java/320652 "2022-12-07T07:43:35Z")
I'm using Spring version 2.1.18.RELEASE (I can't change this version) I need to implement a crud repository for elasticsearch, for this I connect spring-data-elasticsearch (version 3.1.21.RELEASE is automatically pulled … --- ## [Change default session timeout length?](https://discuss.elastic.co/t/change-default-session-timeout-length/320636)
**Author:** [@Mike\_Cann](https://discuss.elastic.co/u/Mike_Cann)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 6:56am UTC](https://discuss.elastic.co/t/change-default-session-timeout-length/320636 "2022-12-07T06:56:46Z")
Hi, We are using Elastic Cloud and are kind of frustrated by how quickly it logs us out. Is there a way to change that? I saw in the docs there is this: Session management | Kibana Guide \[8.5\] | Elastic But im not sur… --- ## [Data does not change after changing timestamp for kibana dashboard](https://discuss.elastic.co/t/data-does-not-change-after-changing-timestamp-for-kibana-dashboard/320641)
**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\ **Replies:** 8\ **Last updated:** [December 7, 2022, 5:42am UTC](https://discuss.elastic.co/t/data-does-not-change-after-changing-timestamp-for-kibana-dashboard/320641 "2022-12-07T05:42:19Z")
Hi I've imported a kibana dashboard to another using ansible playbook. After importing I've changed the index for the dashboard, since the index for the imported dashboard does not exist. Ev erything works fine after cha… --- ## [Remote-connect to Elastic Node via Python](https://discuss.elastic.co/t/remote-connect-to-elastic-node-via-python/320485)
**Author:** [@ElasticUser11](https://discuss.elastic.co/u/ElasticUser11)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 5:06am UTC](https://discuss.elastic.co/t/remote-connect-to-elastic-node-via-python/320485 "2022-12-07T05:06:21Z")
Trying to connect to a single Elastic node via Python, but I keep getting errors, mostly related to certificate issues. I have Elastic installed on an Ubuntu server and then try to connect to it from a Windows 10 machine… --- ## [Missing error details when adding Elasticsearch Datasource in Grafana](https://discuss.elastic.co/t/missing-error-details-when-adding-elasticsearch-datasource-in-grafana/320570)
**Author:** [@woocats](https://discuss.elastic.co/u/woocats)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 11:23am UTC](https://discuss.elastic.co/t/missing-error-details-when-adding-elasticsearch-datasource-in-grafana/320570 "2022-12-06T11:23:42Z")
I'm trying to add an Elasticsearch instance that is deployed on a machine inside our network. We have a Grafana instance, that can add datasources from Elasticsearch cloud but when we try to add an Elasticsearch datasou… --- ## [Logstash mutate nested dynamic field path](https://discuss.elastic.co/t/logstash-mutate-nested-dynamic-field-path/320594)
**Author:** [@Shrouk\_Negm](https://discuss.elastic.co/u/Shrouk_Negm)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 2:40pm UTC](https://discuss.elastic.co/t/logstash-mutate-nested-dynamic-field-path/320594 "2022-12-06T14:40:13Z")
logstash add field from third level BUT second level name is dynamic based on another field value like the bellow example entityType value depending on serviceName value so how should i do it input { kafka{ codec… --- ## [Elasticsearch:8.5.2 docker "access denied (\\"java.lang.RuntimePermission\\" \\"modifyThread\\")"](https://discuss.elastic.co/t/elasticsearch-8-5-2-docker-access-denied-java-lang-runtimepermission-modifythread/320409)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 6\ **Last updated:** [December 7, 2022, 3:16am UTC](https://discuss.elastic.co/t/elasticsearch-8-5-2-docker-access-denied-java-lang-runtimepermission-modifythread/320409 "2022-12-07T03:16:20Z")
{"@timestamp":"2022-12-03T09:13:59.279Z", "log.level":"ERROR", "message":"uncaught exception in thread \[process reaper (pid 117)\]", "ecs.version": "1.2.0","service.name":"ES\_ECS","event.dataset":"elasticsearch.server","p… --- ## [Cannot start elasticsearch with the root user](https://discuss.elastic.co/t/cannot-start-elasticsearch-with-the-root-user/320607)
**Author:** [@ericmalta](https://discuss.elastic.co/u/ericmalta)\ **Replies:** 9\ **Last updated:** [December 7, 2022, 3:02am UTC](https://discuss.elastic.co/t/cannot-start-elasticsearch-with-the-root-user/320607 "2022-12-07T03:02:44Z")
Have you seen that when you start the cluster it says you cannot start with the root user but then you change the /usr/share/elasticsearch and elasticsearch data directory ownership to the elasticsearch user and still th… --- ## [Manage kibana dashboard,visualization queries,configurations in distributed version control system like GIT](https://discuss.elastic.co/t/manage-kibana-dashboard-visualization-queries-configurations-in-distributed-version-control-system-like-git/316403)
**Author:** [@sai\_gddm](https://discuss.elastic.co/u/sai_gddm)\ **Replies:** 1\ **Last updated:** [November 9, 2022, 5:46am UTC](https://discuss.elastic.co/t/manage-kibana-dashboard-visualization-queries-configurations-in-distributed-version-control-system-like-git/316403 "2022-11-09T05:46:41Z")
I'm new to kibana and found from UI that we cannot get back saved dashboard once after deleting it.Is it possible to integrate the kibana dashboard configurations in GIT ? --- ## [How do I Mitigate LOG4J CVE on Elasticsearch 7.4.0?](https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632)
**Author:** [@kashahyah](https://discuss.elastic.co/u/kashahyah)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 1:36am UTC](https://discuss.elastic.co/t/how-do-i-mitigate-log4j-cve-on-elasticsearch-7-4-0/320632 "2022-12-07T01:36:16Z")
I have a 3-node ELK cluster in linux. Carbon Black scan picked up some vulnerable jar files. Should I: Upgrade Elasticsearch to 7.16 or later ? Remove the vulnerable JAR files ? Upgrade LOG4J components bundled in Elas… --- ## [Logstash applying json filter on all messages in filter when I did not apply it](https://discuss.elastic.co/t/logstash-applying-json-filter-on-all-messages-in-filter-when-i-did-not-apply-it/320628)
**Author:** [@d14](https://discuss.elastic.co/u/d14)\ **Replies:** 1\ **Last updated:** [December 7, 2022, 12:08am UTC](https://discuss.elastic.co/t/logstash-applying-json-filter-on-all-messages-in-filter-when-i-did-not-apply-it/320628 "2022-12-07T00:08:42Z")
I have a pipeline that looks like the below, for some reason I still get \[2022-12-06T17:30:17,641\]\[ERROR\]\[logstash.codecs.json \]\[main\] \[f764d264.....\] JSON parse error, original data now in message field ...........… --- ## [How do I transfer mappings from one index to another with Java Api Client](https://discuss.elastic.co/t/how-do-i-transfer-mappings-from-one-index-to-another-with-java-api-client/320489)
**Author:** [@JDev64](https://discuss.elastic.co/u/JDev64)\ **Replies:** 1\ **Last updated:** [December 6, 2022, 10:31pm UTC](https://discuss.elastic.co/t/how-do-i-transfer-mappings-from-one-index-to-another-with-java-api-client/320489 "2022-12-06T22:31:38Z")
Hello, I'm currently building a Spring Java application and I use the \[Elastic Java Client\] (Elasticsearch Java API Client \[8.5\] | Elastic) (Version: 8.3.3) to communicate between my application and my elastic cluster. I… --- ## [Winlogbeat 8.5 and Windows 11 22H2](https://discuss.elastic.co/t/winlogbeat-8-5-and-windows-11-22h2/318676)
**Author:** [@logs4drew](https://discuss.elastic.co/u/logs4drew)\ **Replies:** 7\ **Last updated:** [December 6, 2022, 8:58pm UTC](https://discuss.elastic.co/t/winlogbeat-8-5-and-windows-11-22h2/318676 "2022-12-06T20:58:41Z")
Greetings! It appears that variables (e.g. %1, %2) in windows events shipped via winlogbeat do not have these variables replaced with their real values. Example: Credential Manager credentials were read. Subject: Sec… --- ## [How to dissect uneven space in log with filebeat processors](https://discuss.elastic.co/t/how-to-dissect-uneven-space-in-log-with-filebeat-processors/320609)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 1\ **Last updated:** [December 6, 2022, 6:48pm UTC](https://discuss.elastic.co/t/how-to-dissect-uneven-space-in-log-with-filebeat-processors/320609 "2022-12-06T18:48:53Z")
Hey all, I have a python microservice that output logs like so: INFO ; 2022-12-02 01:30:00; bla bla bla... DEBUG ; 2022-12-02 01:30:00; bla bla bla... Note how the space is different on the loglevel. I am parsing… --- ## [New GeoIP ingest processor is missing databases, but existing GeoIP processors work fine](https://discuss.elastic.co/t/new-geoip-ingest-processor-is-missing-databases-but-existing-geoip-processors-work-fine/320381)
**Author:** [@twilson](https://discuss.elastic.co/u/twilson)\ **Replies:** 14\ **Last updated:** [December 6, 2022, 7:59pm UTC](https://discuss.elastic.co/t/new-geoip-ingest-processor-is-missing-databases-but-existing-geoip-processors-work-fine/320381 "2022-12-06T19:59:32Z")
Elasticsearch 8.4.1 and 8.5.2. When creating a new ingest pipeline with the GeoIP processor the MaxMind databases are not found. Yet, the existing managed pipelines (logs-system.security\*, logs-iptables.log\*, etc) don'… --- ## [How to create a data view and an index aat the same time in elastic search using python](https://discuss.elastic.co/t/how-to-create-a-data-view-and-an-index-aat-the-same-time-in-elastic-search-using-python/320620)
**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\ **Replies:** 3\ **Last updated:** [December 6, 2022, 7:39pm UTC](https://discuss.elastic.co/t/how-to-create-a-data-view-and-an-index-aat-the-same-time-in-elastic-search-using-python/320620 "2022-12-06T19:39:46Z")
I am trying to push a CSV file directly into Elasticsearch using python and it's working. But, it is only creating an index. I want to create a data view along with it so that I can create a dashboard in Kibana but I'm g… --- ## [\[SOLVED\] Issue with runtime field](https://discuss.elastic.co/t/solved-issue-with-runtime-field/320618)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 2\ **Last updated:** [December 6, 2022, 7:27pm UTC](https://discuss.elastic.co/t/solved-issue-with-runtime-field/320618 "2022-12-06T19:27:42Z")
If create a runtime field for searches with aggregations. PUT /work-analyzers/\_mapping { "runtime": { "total\_consumption": { "type": "double", "script": { "source": """ emit(doc\['pa1\_w'… --- ## [Trouble with enabling TLS between Filebeat and logstash](https://discuss.elastic.co/t/trouble-with-enabling-tls-between-filebeat-and-logstash/320619)
**Author:** [@Zekir](https://discuss.elastic.co/u/Zekir)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 6:41pm UTC](https://discuss.elastic.co/t/trouble-with-enabling-tls-between-filebeat-and-logstash/320619 "2022-12-06T18:41:32Z")
Hello guys, I'm here because i got some troubles while enabling TLS between filebeat and logstash For a little context I'm all my machines run under debian 11, i got 3 servers, first is filebeat who communicate with a … --- ## [Can't enable 'Minimal' security](https://discuss.elastic.co/t/cant-enable-minimal-security/320473)
**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\ **Replies:** 6\ **Last updated:** [December 6, 2022, 5:27pm UTC](https://discuss.elastic.co/t/cant-enable-minimal-security/320473 "2022-12-06T17:27:54Z")
I am attempting to enable Minimal security on a 7 node V7.17.7 cluster using the Basic license, with the intent of moving on to Basic Security to allow us to upgrade to the latest version. I am working from this set of i… --- ## [How does logstash match?](https://discuss.elastic.co/t/how-does-logstash-match/320610)
**Author:** [@stefanocog](https://discuss.elastic.co/u/stefanocog)\ **Replies:** 4\ **Last updated:** [December 6, 2022, 4:57pm UTC](https://discuss.elastic.co/t/how-does-logstash-match/320610 "2022-12-06T16:57:45Z")
Hello, I need to match some logs that differ only in one fields (url), I match with grok, each grok rule matches a log, so I have different filters but with different grok rules, but now I realize that some logs after d… --- ## [DLQ Processing](https://discuss.elastic.co/t/dlq-processing/320603)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 1\ **Last updated:** [December 6, 2022, 4:34pm UTC](https://discuss.elastic.co/t/dlq-processing/320603 "2022-12-06T16:34:54Z")
Hi, I'm trying to process events written to a dlq due to mapping conflicts. I'm not trying to preprocess any of those messages (yet). Instead, am just reading them in and writing them to a new index name. However, I get… --- ## [Activemq module give Grok error on filebeat](https://discuss.elastic.co/t/activemq-module-give-grok-error-on-filebeat/320608)
**Author:** [@amir\_Bialek](https://discuss.elastic.co/u/amir_Bialek)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 3:58pm UTC](https://discuss.elastic.co/t/activemq-module-give-grok-error-on-filebeat/320608 "2022-12-06T15:58:35Z")
Hello all, Running in k8s I have activemq and filebeat, elasticsearch, kibana. filebeat collect the logs from activemq like so: filebeat.autodiscover: providers: - type: kubernetes … --- ## [8.5.2 won't start](https://discuss.elastic.co/t/8-5-2-wont-start/320516)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 6, 2022, 3:16pm UTC](https://discuss.elastic.co/t/8-5-2-wont-start/320516 "2022-12-06T15:16:58Z")
I have try to upgrade one of the cluster to 8.5.2 and it won't start I found this which is exact error I am getting. this is not on docker though. running on centos8.x https://github.com/elastic/elasticsearch/pull/9170… --- ## [How to setup watcher condition ctx.payload.hits.total in percentage?](https://discuss.elastic.co/t/how-to-setup-watcher-condition-ctx-payload-hits-total-in-percentage/320593)
**Author:** [@dharini\_u](https://discuss.elastic.co/u/dharini_u)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 2:22pm UTC](https://discuss.elastic.co/t/how-to-setup-watcher-condition-ctx-payload-hits-total-in-percentage/320593 "2022-12-06T14:22:51Z")
Hi Folks, Please help me in setting up a watcher with the below condition: percentage of ctx.payload.hits.total of variable1 in percentage of variable2 \> 10% currently the condition is ctx.payload.hits.total \> params.… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=707) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=709)