# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=745 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 746 --- ## [Pulsar connectivity](https://discuss.elastic.co/t/pulsar-connectivity/317939)
**Author:** [@omicronian8](https://discuss.elastic.co/u/omicronian8)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 11:40pm UTC](https://discuss.elastic.co/t/pulsar-connectivity/317939 "2022-11-02T23:40:43Z")
I need to store the output of logstash onto a pulsar topic. Looking at the documentation and other threads here, I couldn't find any leads on it. I could only get a git repo where we can use pulsar topic as an input to l… --- ## [Unable to create pipeline when using drop processor](https://discuss.elastic.co/t/unable-to-create-pipeline-when-using-drop-processor/317897)
**Author:** [@matttjones60](https://discuss.elastic.co/u/matttjones60)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 11:51pm UTC](https://discuss.elastic.co/t/unable-to-create-pipeline-when-using-drop-processor/317897 "2022-11-02T23:51:28Z")
Hi Fairly new to Elastic so apologies if this is an obvious issue! I'm trying to create a new processor to drop any entries containing: user\_agent.original =="GoogleHC/1.0" But when I add a processor containing that… --- ## [Logbeat PanOS module not working](https://discuss.elastic.co/t/logbeat-panos-module-not-working/317915)
**Author:** [@ithamster](https://discuss.elastic.co/u/ithamster)\ **Replies:** 0\ **Last updated:** [November 1, 2022, 5:54pm UTC](https://discuss.elastic.co/t/logbeat-panos-module-not-working/317915 "2022-11-01T17:54:08Z")
I am new to Elasticsearch, Kibana and Filebeats. We have setup logbeat module for panos and panw.yml has following information: - module: panw panos: enabled: true var.syslog\_host: 0.0.0.0 var.syslog\_port: 514 We … --- ## [ICU and upgrading from 7.17.1 to 8.5](https://discuss.elastic.co/t/icu-and-upgrading-from-7-17-1-to-8-5/317929)
**Author:** [@elasticism](https://discuss.elastic.co/u/elasticism)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 11:19pm UTC](https://discuss.elastic.co/t/icu-and-upgrading-from-7-17-1-to-8-5/317929 "2022-11-02T23:19:24Z")
On the page for ICU (ICU Analysis Plugin | Elasticsearch Plugins and Integrations \[8.5\] | Elastic), there's a callout that says ICU analysis and backwards compatibility From time to time, the ICU library receives updat… --- ## [Export Kibana dashboards into PDF](https://discuss.elastic.co/t/export-kibana-dashboards-into-pdf/24497)
**Author:** [@frank\_van](https://discuss.elastic.co/u/frank_van)\ **Replies:** 3\ **Last updated:** [June 6, 2017, 2:48pm UTC](https://discuss.elastic.co/t/export-kibana-dashboards-into-pdf/24497 "2017-06-06T14:48:30Z")
Hi, It appears Kibana 4 doesn't have a way to export dashboards into PDF, which is a key feature for many enterprise customers. Does anyone know if there's any work around solutions (preferably open source)? Also is th… --- ## [Elasticsearch data nodes - pagefile/hard faults vs. heap usage](https://discuss.elastic.co/t/elasticsearch-data-nodes-pagefile-hard-faults-vs-heap-usage/317570)
**Author:** [@BradVido](https://discuss.elastic.co/u/BradVido)\ **Replies:** 3\ **Last updated:** [November 2, 2022, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-data-nodes-pagefile-hard-faults-vs-heap-usage/317570 "2022-11-02T22:03:22Z")
I have an Elasticsearch cluster version 7.8.1running on Windows server 2019. There are 3 3 data nodes, 3 master nodes, and 1 coordinating node, in the cluster. That data nodes each have 48gb ram, and 24gb is dedicated to… --- ## [Searching for image changes](https://discuss.elastic.co/t/searching-for-image-changes/318047)
**Author:** [@cheshirecat](https://discuss.elastic.co/u/cheshirecat)\ **Replies:** 4\ **Last updated:** [November 2, 2022, 9:55pm UTC](https://discuss.elastic.co/t/searching-for-image-changes/318047 "2022-11-02T21:55:01Z")
Hello There! With my Friend we would like to know if there is a possibility to use Elastic as a tool to find that images were changed. We would like to upload an image and check if it is an original picture or not. For… --- ## [Why My Elastic Agent status showing unhealthy? Assuming Elastic agent restarting itself](https://discuss.elastic.co/t/why-my-elastic-agent-status-showing-unhealthy-assuming-elastic-agent-restarting-itself/317950)
**Author:** [@Vijaykumar\_Deshmukh1](https://discuss.elastic.co/u/Vijaykumar_Deshmukh1)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 6:50am UTC](https://discuss.elastic.co/t/why-my-elastic-agent-status-showing-unhealthy-assuming-elastic-agent-restarting-itself/317950 "2022-11-02T06:50:10Z")
here are the logs \[elastic\_agent\]\[info\] operation 'operation-install' skipped for metricbeat.8.4.3 12:17:56.513 elastic\_agent \[elastic\_agent\]\[info\] operation 'operation-start' skipped for metricbeat.8.4.3 12:17:56.7… --- ## [ELK Stack filebeat config for multiple clients](https://discuss.elastic.co/t/elk-stack-filebeat-config-for-multiple-clients/317957)
**Author:** [@PJ111288](https://discuss.elastic.co/u/PJ111288)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 9:47pm UTC](https://discuss.elastic.co/t/elk-stack-filebeat-config-for-multiple-clients/317957 "2022-11-02T21:47:54Z")
Hello Saviors, I have running ELK stack with 1 Master and 1 client setup with filebeat. I am trying to add more clients in this stack and configured one more filebeat client but no logs are forwarding to LogServer. My … --- ## [Does logstash 8.4 supports Elastic Search 7.8 later?](https://discuss.elastic.co/t/does-logstash-8-4-supports-elastic-search-7-8-later/317960)
**Author:** [@djrshn2346](https://discuss.elastic.co/u/djrshn2346)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 9:47pm UTC](https://discuss.elastic.co/t/does-logstash-8-4-supports-elastic-search-7-8-later/317960 "2022-11-02T21:47:13Z")
I am using logstash 8.4.3, along with Elasticsearch versions 7.8.1 and 7.10.2. Does logstash will support this version of ES? --- ## [I was not getting any errors in filebeat but logs are not parsing. Please help me on this. I was new to this](https://discuss.elastic.co/t/i-was-not-getting-any-errors-in-filebeat-but-logs-are-not-parsing-please-help-me-on-this-i-was-new-to-this/318009)
**Author:** [@Nikhil\_Kotni](https://discuss.elastic.co/u/Nikhil_Kotni)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 3:09pm UTC](https://discuss.elastic.co/t/i-was-not-getting-any-errors-in-filebeat-but-logs-are-not-parsing-please-help-me-on-this-i-was-new-to-this/318009 "2022-11-02T15:09:35Z")
filebeat logs: 2022-11-02T18:11:20.778+0530 DEBUG \[publisher\] memqueue/ackloop.go:131 ackloop: done send ack 2022-11-02T18:11:20.778+0530 DEBUG \[registrar\] registrar/registrar.go:263 Processing 1 events 2022-11-02T18:1… --- ## [Failed to start Filebeat sends log files to Logstash or directly to Elasticsearch](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/318023)
**Author:** [@stefanny\_chavez\_anto](https://discuss.elastic.co/u/stefanny_chavez_anto)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 9:39pm UTC](https://discuss.elastic.co/t/failed-to-start-filebeat-sends-log-files-to-logstash-or-directly-to-elasticsearch/318023 "2022-11-02T21:39:38Z")
× filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since We… --- ## [Show aggregations of same category after filter](https://discuss.elastic.co/t/show-aggregations-of-same-category-after-filter/318055)
**Author:** [@Peter\_Valek](https://discuss.elastic.co/u/Peter_Valek)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 9:21pm UTC](https://discuss.elastic.co/t/show-aggregations-of-same-category-after-filter/318055 "2022-11-02T21:21:35Z")
Hello everyone ! I would like to create filter and aggregations after filter for procuts in Elasticsearch. I am having base aggregations for all products: "size": { "doc\_count\_error\_upper\_bound": 0, "su… --- ## [Kibana map entegrations with elasticsearch indices](https://discuss.elastic.co/t/kibana-map-entegrations-with-elasticsearch-indices/318036)
**Author:** [@sevbans](https://discuss.elastic.co/u/sevbans)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 6:20pm UTC](https://discuss.elastic.co/t/kibana-map-entegrations-with-elasticsearch-indices/318036 "2022-11-02T18:20:10Z")
Hi there. I have a index which involve corona virus values. There are almost all countries and their name. I must to create a map like this; But I don't know how can i create this. country names are have to be w… --- ## [AutoDelete Index](https://discuss.elastic.co/t/autodelete-index/317985)
**Author:** [@Grigio\_Basi](https://discuss.elastic.co/u/Grigio_Basi)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 4:51pm UTC](https://discuss.elastic.co/t/autodelete-index/317985 "2022-11-02T16:51:13Z")
Hi. I have following settings elastic in my Docker File. environment: - node.name=es01 - cluster.name=es-docker-cluster - discovery.type=single-node - bootstrap.memory\_lock=true - "ES\_JAVA\_… --- ## [Go get github.com/elastic/beats@v8 fails](https://discuss.elastic.co/t/go-get-github-com-elastic-beats-v8-fails/318027)
**Author:** [@Andrew\_Martinez](https://discuss.elastic.co/u/Andrew_Martinez)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 4:26pm UTC](https://discuss.elastic.co/t/go-get-github-com-elastic-beats-v8-fails/318027 "2022-11-02T16:26:28Z")
Was looking at github.com/elastic/beats and saw releases for v8.\*.\*, but the go.mod file for all of those tagged versions has module github.com/elastic/beats/v7. It seems like they should be module github.com/elastic/bea… --- ## [Logstash does not take all the logs from eventhub](https://discuss.elastic.co/t/logstash-does-not-take-all-the-logs-from-eventhub/318024)
**Author:** [@Pavelm](https://discuss.elastic.co/u/Pavelm)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 4:19pm UTC](https://discuss.elastic.co/t/logstash-does-not-take-all-the-logs-from-eventhub/318024 "2022-11-02T16:19:22Z")
Hi, I am using Logstash to connect to Eventhub in Azure and then push logs to ELK. For some reason, the Outgoing queue is much smaller than the Incoming as you may see in the screenshot: What can be the reason? --- ## [8.3 Memory calculations and nested fields](https://discuss.elastic.co/t/8-3-memory-calculations-and-nested-fields/317988)
**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\ **Replies:** 6\ **Last updated:** [November 2, 2022, 4:10pm UTC](https://discuss.elastic.co/t/8-3-memory-calculations-and-nested-fields/317988 "2022-11-02T16:10:04Z")
Hi, Trying to better understanding the new memory planning for 8.3. Do nested fields count just like other fields? My indices have nested fields. So a single index including its nested fields has 100 fields. Accordin… --- ## [Parsing big xml files in logstash](https://discuss.elastic.co/t/parsing-big-xml-files-in-logstash/318018)
**Author:** [@mhoro](https://discuss.elastic.co/u/mhoro)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 3:57pm UTC](https://discuss.elastic.co/t/parsing-big-xml-files-in-logstash/318018 "2022-11-02T15:57:31Z")
I would like to load data from multiple big xml files to elasticsearch using logstash. Files are up to 3gb with many lines, all with the same structure. They contain a list of elements and I would like one element to bec… --- ## [Is it possible to acknowledge an alert / watcher?](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540)
**Author:** [@GinkoLucas](https://discuss.elastic.co/u/GinkoLucas)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 2:57pm UTC](https://discuss.elastic.co/t/is-it-possible-to-acknowledge-an-alert-watcher/317540 "2022-11-02T14:57:30Z")
Hello, is it possible to acknowledge an alert? Let's imagine that every 10 minutes, an application sends to Elasticsearch an information telling me if there is an error or not : The application send me two kind of data… --- ## [Logstash Arcsight Module Implementation Issues](https://discuss.elastic.co/t/logstash-arcsight-module-implementation-issues/317977)
**Author:** [@jakinmayowa](https://discuss.elastic.co/u/jakinmayowa)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 2:44pm UTC](https://discuss.elastic.co/t/logstash-arcsight-module-implementation-issues/317977 "2022-11-02T14:44:42Z")
Completed installation of the ELK stack version 8.4 - single node installation Used a test pipeline to confirm comms between Elasticsearch and Logstash on local machine on the commandline interface. So, I tried impleme… --- ## [Elasticserach cannot show indices](https://discuss.elastic.co/t/elasticserach-cannot-show-indices/318004)
**Author:** [@toughLuck](https://discuss.elastic.co/u/toughLuck)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 2:43pm UTC](https://discuss.elastic.co/t/elasticserach-cannot-show-indices/318004 "2022-11-02T14:43:51Z")
I am new to ELK, trying to set up a basic ELK following a youtube video, but cannot load the index to elasticsearch/ The logstash log \[2022-11-02T10:38:08,489\]\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[bef0a8230c929… --- ## [Issue with Elastic agent installation](https://discuss.elastic.co/t/issue-with-elastic-agent-installation/317830)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [November 2, 2022, 2:03pm UTC](https://discuss.elastic.co/t/issue-with-elastic-agent-installation/317830 "2022-11-02T14:03:47Z")
We are using Elastic Cloud Enterprise 2.13. When installing the Elastic agents in windows PC, getting the below warnings. Info: Starting enrollment to URL: https://hostname:9243 Warn: Remote server is not ready to acc… --- ## [Add custom headers to fleet-managed ActiveMQ integration](https://discuss.elastic.co/t/add-custom-headers-to-fleet-managed-activemq-integration/317925)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [November 2, 2022, 1:36pm UTC](https://discuss.elastic.co/t/add-custom-headers-to-fleet-managed-activemq-integration/317925 "2022-11-02T13:36:03Z")
I am using a fleet-managed agent with the ActiveMQ integration to attempt to monitor ActiveMQ metrics. When I deploy, I get this error from the agent: \[elastic\_agent.metricbeat\]\[error\] Error fetching data for metricset … --- ## [Logstash webhdfs output plugin AlreadyBeingCreatedException](https://discuss.elastic.co/t/logstash-webhdfs-output-plugin-alreadybeingcreatedexception/317887)
**Author:** [@Rakhshunda\_Noorein\_J](https://discuss.elastic.co/u/Rakhshunda_Noorein_J)\ **Replies:** 10\ **Last updated:** [November 2, 2022, 1:20pm UTC](https://discuss.elastic.co/t/logstash-webhdfs-output-plugin-alreadybeingcreatedexception/317887 "2022-11-02T13:20:54Z")
Hello, I have created a webhdfc logstash configuaration file which will take file input and insert the data in hdfs through webhdfs output. sharing you the config file below. input { file { path =\> "C:/Users/user/… --- ## [Metricbeat and Elastic agent configuration?](https://discuss.elastic.co/t/metricbeat-and-elastic-agent-configuration/317987)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 1:19pm UTC](https://discuss.elastic.co/t/metricbeat-and-elastic-agent-configuration/317987 "2022-11-02T13:19:55Z")
We are using Fleet managed Elastic agents version 7.17.4 in ECE. Is it possible to edit the metricbeat.yml which is inside the elastic agent? I tried editing it but got "metricbeat corrupted" during the Elastic agent in… --- ## [TCP data splitted into several documents](https://discuss.elastic.co/t/tcp-data-splitted-into-several-documents/317986)
**Author:** [@Fangy](https://discuss.elastic.co/u/Fangy)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 1:14pm UTC](https://discuss.elastic.co/t/tcp-data-splitted-into-several-documents/317986 "2022-11-02T13:14:37Z")
Hi. I'm trying to ingest some new type of message. The message header is very similar to the syslog format, but the message itself is an xml format. Each line in the message ends with 0x0a (LF). These packets are ingeste… --- ## [Filebeat cannot create custom index - even when ilm is disabled](https://discuss.elastic.co/t/filebeat-cannot-create-custom-index-even-when-ilm-is-disabled/317688)
**Author:** [@gisellecarballo](https://discuss.elastic.co/u/gisellecarballo)\ **Replies:** 14\ **Last updated:** [November 2, 2022, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-cannot-create-custom-index-even-when-ilm-is-disabled/317688 "2022-11-02T12:46:17Z")
Hi Team, I would like to ask for help as I cannot create custom index even when setup.ilm.enabled: is set to false. Below is my filebeat config. Thanks. setup.ilm.enabled: false setup.template.enabled: true setup.te… --- ## [Logstash jdbc config throwing error](https://discuss.elastic.co/t/logstash-jdbc-config-throwing-error/317974)
**Author:** [@ashiqab](https://discuss.elastic.co/u/ashiqab)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 10:57am UTC](https://discuss.elastic.co/t/logstash-jdbc-config-throwing-error/317974 "2022-11-02T10:57:54Z")
Hello, I am facing the error below when trying to execute logstash jdbc config file: \[ERROR\] 2022-11-02 11:52:26.435 \[Converge PipelineAction::Create\] agent - Failed to execute action {:action=\>LogStash::PipelineAction… --- ## [Elasticsearch dis\_max with PHP](https://discuss.elastic.co/t/elasticsearch-dis-max-with-php/317976)
**Author:** [@Makaveli1O](https://discuss.elastic.co/u/Makaveli1O)\ **Replies:** 0\ **Last updated:** [November 2, 2022, 11:01am UTC](https://discuss.elastic.co/t/elasticsearch-dis-max-with-php/317976 "2022-11-02T11:01:12Z")
My console query looks like this: { "query": { "dis\_max": { "tie\_breaker": 0.7, "boost": 1.2, "queries": \[ { "multi\_match": { "query": "this exact phrase", … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=744) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=746)