# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=728 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 729 --- ## [Create some tasks that may never finish](https://discuss.elastic.co/t/create-some-tasks-that-may-never-finish/318990)
**Author:** [@Sunt-ing](https://discuss.elastic.co/u/Sunt-ing)\ **Replies:** 6\ **Last updated:** [November 17, 2022, 6:50pm UTC](https://discuss.elastic.co/t/create-some-tasks-that-may-never-finish/318990 "2022-11-17T18:50:34Z")
In order to create a testbed for anomaly detection, I need to create some tasks that may never finish (unless you manually kill them) in ES. Is there any way to do that? I do find some problems with storage hardware may … --- ## [Automate Kibana query](https://discuss.elastic.co/t/automate-kibana-query/316671)
**Author:** [@baseely](https://discuss.elastic.co/u/baseely)\ **Replies:** 3\ **Last updated:** [October 21, 2022, 1:41am UTC](https://discuss.elastic.co/t/automate-kibana-query/316671 "2022-10-21T01:41:02Z")
Hello Community, I want to use some REST API so that I will be able to automate long list of queries that should be created with the same pattern at the end. For example: \ AND message: \ **Author:** [@lucas.queiroz](https://discuss.elastic.co/u/lucas.queiroz)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 5:46pm UTC](https://discuss.elastic.co/t/python-api-client-connection-with-proxy/319232 "2022-11-17T17:46:17Z") Hi use the following class to connect the client to Elastic Cloud running in Azure. The job runs in kubernetes updating my index with some data in a daily basis, and I need to setup the proxy from my organization in orde… --- ## [Removing xpack.maps.enabled as advised breaks Kibana](https://discuss.elastic.co/t/removing-xpack-maps-enabled-as-advised-breaks-kibana/319222)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 2\ **Last updated:** [November 17, 2022, 5:18pm UTC](https://discuss.elastic.co/t/removing-xpack-maps-enabled-as-advised-breaks-kibana/319222 "2022-11-17T17:18:12Z")
Kibana 7.17 The Kibana Upgrade Assistant is showing me a Critical issue: Setting "xpack.maps.enabled" is deprecated Configuring "xpack.maps.enabled" is deprecated and will be removed in 8.0.0. How to fix Remove "xp… --- ## [Custom Logs integration, drop\_fields processor doesn't work](https://discuss.elastic.co/t/custom-logs-integration-drop-fields-processor-doesnt-work/319228)
**Author:** [@luca.derugeriis](https://discuss.elastic.co/u/luca.derugeriis)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/custom-logs-integration-drop-fields-processor-doesnt-work/319228 "2022-11-17T17:16:04Z")
Hi everyone, I'm trying get a drop\_fields processor working inside Custom Logs integration in Elastic Agent. This is my configuration in the "processors" text area in the integration page on kibana. - drop\_fields: … --- ## [Anomaly Detection doesn't recongise patterns](https://discuss.elastic.co/t/anomaly-detection-doesnt-recongise-patterns/319229)
**Author:** [@PeaDubYa](https://discuss.elastic.co/u/PeaDubYa)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 5:16pm UTC](https://discuss.elastic.co/t/anomaly-detection-doesnt-recongise-patterns/319229 "2022-11-17T17:16:17Z")
I'm trying out the anomaly detection package for the first time, and there is a nice example in the tutorial, whereby elastic learns temporal oscillations. I've configured a very basic job, but the ML does not pick up t… --- ## [How can I sort strings with numbers alphabetically?](https://discuss.elastic.co/t/how-can-i-sort-strings-with-numbers-alphabetically/319088)
**Author:** [@Michal\_Stefaniuk](https://discuss.elastic.co/u/Michal_Stefaniuk)\ **Replies:** 9\ **Last updated:** [November 17, 2022, 5:11pm UTC](https://discuss.elastic.co/t/how-can-i-sort-strings-with-numbers-alphabetically/319088 "2022-11-17T17:11:04Z")
Hey guys, one quick question. I have a set of example records: Test 123 sesi 501 Alva rout and I want those to be sorted in asc/desc order in case insensitive and alphabeticall order, just like this: 501 Alva rout 12… --- ## [We are getting Ruby exception error in logstash](https://discuss.elastic.co/t/we-are-getting-ruby-exception-error-in-logstash/319188)
**Author:** [@upreddy](https://discuss.elastic.co/u/upreddy)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 5:02pm UTC](https://discuss.elastic.co/t/we-are-getting-ruby-exception-error-in-logstash/319188 "2022-11-17T17:02:46Z")
Hi, we are getting ruby exception error in logstash as shown in below. \[ERROR\]\[logstash.filters.ruby \]\[xxxxxxxxxx\]\[634d732ae35f96b2b7a40d6e0005815a22897257fd1aa2279fe1d02125a79ba0\] Ruby exception occurred: undefined… --- ## [Kibana logs](https://discuss.elastic.co/t/kibana-logs/319115)
**Author:** [@mauroslucios](https://discuss.elastic.co/u/mauroslucios)\ **Replies:** 2\ **Last updated:** [November 17, 2022, 4:44pm UTC](https://discuss.elastic.co/t/kibana-logs/319115 "2022-11-17T16:44:27Z")
I have an ELK cluster that has a different time in the logs than the machine where it is installed. Does anyone have any idea how to resolve? Below is an image of my server. --- ## [Set dynamic headers in every request](https://discuss.elastic.co/t/set-dynamic-headers-in-every-request/319118)
**Author:** [@rbr66](https://discuss.elastic.co/u/rbr66)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 3:46pm UTC](https://discuss.elastic.co/t/set-dynamic-headers-in-every-request/319118 "2022-11-17T15:46:17Z")
Hi, We are monitoring a series of machines with heartbeat and we have a special casuistic in which we need heartbeat to send the timestamp in which the request is made, we don't care if by headers, params, or query para… --- ## [Angular routing Kibana iframe](https://discuss.elastic.co/t/angular-routing-kibana-iframe/319160)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 9:56am UTC](https://discuss.elastic.co/t/angular-routing-kibana-iframe/319160 "2022-11-17T09:56:31Z")
Hello All, We've intregrated kibana pages into angular web application using iframe,Now the issue that we are facing is we need to redirect from our home page dashboard(monitoring) -conataining several url to designate… --- ## [Wrong path in logstash output (FileBeat)](https://discuss.elastic.co/t/wrong-path-in-logstash-output-filebeat/319215)
**Author:** [@Vrops](https://discuss.elastic.co/u/Vrops)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 3:22pm UTC](https://discuss.elastic.co/t/wrong-path-in-logstash-output-filebeat/319215 "2022-11-17T15:22:55Z")
I have a problem when taking logs with FileBeat to Logstash, my logs arrive well in a file but the path of log is wrong in the output (It's the default location on an apache server). Here the config of FileBeat in the c… --- ## [Elasticsearch isn't allowed to allocate this shard to any of the nodes in the cluster](https://discuss.elastic.co/t/elasticsearch-isnt-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster/319085)
**Author:** [@sunil\_s](https://discuss.elastic.co/u/sunil_s)\ **Replies:** 11\ **Last updated:** [November 17, 2022, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-isnt-allowed-to-allocate-this-shard-to-any-of-the-nodes-in-the-cluster/319085 "2022-11-17T15:14:58Z")
Shards are unassigned s&pretty" { "persistent" : { "cluster.routing.allocation.enable" : "all", "indices.recovery.max\_bytes\_per\_sec" : "50mb" }, "transient" : { "cluster.routing.allocation.enable" : "… --- ## [TLS Logstash](https://discuss.elastic.co/t/tls-logstash/318865)
**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 2:50pm UTC](https://discuss.elastic.co/t/tls-logstash/318865 "2022-11-17T14:50:45Z")
Hello, I have an ELK stack secured in TLS. Exchanges between nodes and with kibana are secure. I have set up logstash to collect logs from the different equipments via the syslog protocol. I have questions about the … --- ## [Winlogbeat not sending logs after xpack.security was enabled](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-after-xpack-security-was-enabled/319213)
**Author:** [@Tucker\_Green](https://discuss.elastic.co/u/Tucker_Green)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 2:48pm UTC](https://discuss.elastic.co/t/winlogbeat-not-sending-logs-after-xpack-security-was-enabled/319213 "2022-11-17T14:48:06Z")
Hey guys! I had the stack running, winlogbeats were sending logs to elastic and I could view them in kibana. I then enabled security so we could have accounts and logins for different users, and it broke everything. I … --- ## [Logstash Cloudwatch Logs](https://discuss.elastic.co/t/logstash-cloudwatch-logs/319211)
**Author:** [@Ryan5](https://discuss.elastic.co/u/Ryan5)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 2:40pm UTC](https://discuss.elastic.co/t/logstash-cloudwatch-logs/319211 "2022-11-17T14:40:39Z")
Hi, Whats the best way to get aws cloudwatch logs into logstash version 8.5? We want to avoid using this plugin due to it no longer being maintained and having dependency issues. dependency conflict · Issue #101 · lukew… --- ## [Fleet agents go offline then return healty](https://discuss.elastic.co/t/fleet-agents-go-offline-then-return-healty/319206)
**Author:** [@mammodde](https://discuss.elastic.co/u/mammodde)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 2:32pm UTC](https://discuss.elastic.co/t/fleet-agents-go-offline-then-return-healty/319206 "2022-11-17T14:32:02Z")
Hi, i have 3 agents other than the fleet server. this morning all 4 were healty, now 3 of them are labelled as offline (included the fleet server) and one of them is still healty. How is this possible? and why sometimes… --- ## [Does Elasticsearch Java API Client \[7.17\] support elasticsearch version 7.10?](https://discuss.elastic.co/t/does-elasticsearch-java-api-client-7-17-support-elasticsearch-version-7-10/319203)
**Author:** [@Aniruddh\_Dandotiya](https://discuss.elastic.co/u/Aniruddh_Dandotiya)\ **Replies:** 2\ **Last updated:** [November 17, 2022, 2:27pm UTC](https://discuss.elastic.co/t/does-elasticsearch-java-api-client-7-17-support-elasticsearch-version-7-10/319203 "2022-11-17T14:27:32Z")
I am using elasticsearch version 7.10 and trying to migrate from JestClient to Elasticsearch Java API Client \[7.17\]. Does Does Elasticsearch Java API Client \[7.17\] support previous versions of Elasticsearch? --- ## [Json and normal logs as input](https://discuss.elastic.co/t/json-and-normal-logs-as-input/319205)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 2:17pm UTC](https://discuss.elastic.co/t/json-and-normal-logs-as-input/319205 "2022-11-17T14:17:40Z")
Hi, what is the best practice when using filestream as type and having 2 different input paths of logs where 1 is a simple \*.log and the other one is a \*.json? Should I still just use e.g. the following although like 5… --- ## [How to get sum\_other\_doc\_count in aggregations?](https://discuss.elastic.co/t/how-to-get-sum-other-doc-count-in-aggregations/319200)
**Author:** [@Purushottam22](https://discuss.elastic.co/u/Purushottam22)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 1:52pm UTC](https://discuss.elastic.co/t/how-to-get-sum-other-doc-count-in-aggregations/319200 "2022-11-17T13:52:59Z")
I am running an aggregation to see what document types does my 'documents' index has (documentType is the field that has the type): GET my\_documents/\_search { size: 0, "aggs": { "dataTypes": { "terms": { "field": … --- ## [Elasticsearch readiness probe failing on enabling xpack](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failing-on-enabling-xpack/319198)
**Author:** [@yasin\_mohammed](https://discuss.elastic.co/u/yasin_mohammed)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-readiness-probe-failing-on-enabling-xpack/319198 "2022-11-17T13:33:24Z")
We have Elastic search 7.17.6 basic version running on our Azure kubernetes cluster. The stack comes up when xpack is disabled. Once we enable xpack the readiness probe fails and there are no error messages in the logs t… --- ## [Nginx Ingress Controller Logs \[v1.2.0\] - Integration not working](https://discuss.elastic.co/t/nginx-ingress-controller-logs-v1-2-0-integration-not-working/319197)
**Author:** [@jolt](https://discuss.elastic.co/u/jolt)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 1:12pm UTC](https://discuss.elastic.co/t/nginx-ingress-controller-logs-v1-2-0-integration-not-working/319197 "2022-11-17T13:12:18Z")
It appears that the Nginx Ingress Controller Logs integration - version 1.2.0 - is not working properly. The logs are being collected by k8s from the nginx-ingress-controller pods \[which default to outputting the error… --- ## [Query\_string search is not working correctly when field value contains dots](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860)
**Author:** [@DarwinGoyal](https://discuss.elastic.co/u/DarwinGoyal)\ **Replies:** 8\ **Last updated:** [November 17, 2022, 1:07pm UTC](https://discuss.elastic.co/t/query-string-search-is-not-working-correctly-when-field-value-contains-dots/318860 "2022-11-17T13:07:16Z")
Hi. An index contains a text property named description. Value of the description is "2:1.9.4" When I try to search using below query GET finding-index/\_search { "query": { "bool" : { "must" : \[ { … --- ## [Win10 elastic agent "failed to fix permissions" error](https://discuss.elastic.co/t/win10-elastic-agent-failed-to-fix-permissions-error/319191)
**Author:** [@Vtech](https://discuss.elastic.co/u/Vtech)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 12:38pm UTC](https://discuss.elastic.co/t/win10-elastic-agent-failed-to-fix-permissions-error/319191 "2022-11-17T12:38:14Z")
When attempting to install an elastic agent on Win10 server, I receive the following error messages Error: failed to fix permissions: The operation completed successfully. For help, please see our troubleshooting guide… --- ## [Indexes getting deleted if deleted from one cluster](https://discuss.elastic.co/t/indexes-getting-deleted-if-deleted-from-one-cluster/319179)
**Author:** [@Rahul\_Gupta1](https://discuss.elastic.co/u/Rahul_Gupta1)\ **Replies:** 6\ **Last updated:** [November 17, 2022, 12:31pm UTC](https://discuss.elastic.co/t/indexes-getting-deleted-if-deleted-from-one-cluster/319179 "2022-11-17T12:31:41Z")
Hi, in my current system i am using a single log stash configuration to write into two different Elasticsearch cluster, one is on version 7.5.1 and another is on version 7.17.7 using the following configuration file: - … --- ## [Multiple modules and/or pipelines in containers in kubernetes autodiscover with hints](https://discuss.elastic.co/t/multiple-modules-and-or-pipelines-in-containers-in-kubernetes-autodiscover-with-hints/319190)
**Author:** [@arpderp](https://discuss.elastic.co/u/arpderp)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 12:24pm UTC](https://discuss.elastic.co/t/multiple-modules-and-or-pipelines-in-containers-in-kubernetes-autodiscover-with-hints/319190 "2022-11-17T12:24:43Z")
Hi, I have containers running drupal and drupal is among another things generating its own syslog messages and nginx access logs. I want to capture nginx access logs and the drupal syslogs and pass them to elasticsearc… --- ## [Static Lookup Table in Elastic](https://discuss.elastic.co/t/static-lookup-table-in-elastic/319181)
**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\ **Replies:** 2\ **Last updated:** [November 17, 2022, 11:49am UTC](https://discuss.elastic.co/t/static-lookup-table-in-elastic/319181 "2022-11-17T11:49:40Z")
Hello - I am wondering if there is a way in which you can store static data in Elastic which can then be referenced by an ingestion pipeline? The reason for it is that i want to parse my http.referrer field and then if … --- ## [Getting token using http\_poller to do some request](https://discuss.elastic.co/t/getting-token-using-http-poller-to-do-some-request/319153)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 1\ **Last updated:** [November 17, 2022, 11:44am UTC](https://discuss.elastic.co/t/getting-token-using-http-poller-to-do-some-request/319153 "2022-11-17T11:44:48Z")
Hi there, maybe this topic has been opened by many people, but I still haven't found the answer. so, i would like to ask. i have configuration like this: input{ http\_poller{ test4 =\> { method =\> post … --- ## [Timestamp in DSL query](https://discuss.elastic.co/t/timestamp-in-dsl-query/319058)
**Author:** [@oalimerko](https://discuss.elastic.co/u/oalimerko)\ **Replies:** 3\ **Last updated:** [November 17, 2022, 11:39am UTC](https://discuss.elastic.co/t/timestamp-in-dsl-query/319058 "2022-11-17T11:39:08Z")
Dear all, i have the query below for monitoring the logs of my application in case any issue with database connection occurs in the last 6min: GET \_search { "query": { "query\_string": { "query"… --- ## [Enable TLS for filebeat.input \[Newbie\]](https://discuss.elastic.co/t/enable-tls-for-filebeat-input-newbie/319180)
**Author:** [@dant0005](https://discuss.elastic.co/u/dant0005)\ **Replies:** 0\ **Last updated:** [November 17, 2022, 11:30am UTC](https://discuss.elastic.co/t/enable-tls-for-filebeat-input-newbie/319180 "2022-11-17T11:30:12Z")
Hallo community, Quite new to the elastic stack but lurking for a while in this community. I got the task to set up log management based on the elastic stack. Use case: External system (SAAS) sends logs (a variety of … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=727) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=729)