# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=750 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 751 --- ## [Rollback/Downgrade of integration possible?](https://discuss.elastic.co/t/rollback-downgrade-of-integration-possible/317624)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 2:40pm UTC](https://discuss.elastic.co/t/rollback-downgrade-of-integration-possible/317624 "2022-10-27T14:40:58Z")
Hi there Is it possible to rollback/downgrade to an earlier version of an integration? We currently observed an issue with the newest System Integration that doesn't populate ECS Fields like user.name or domain.name any… --- ## [Kibana Rules Authentication when Creator leaves Project](https://discuss.elastic.co/t/kibana-rules-authentication-when-creator-leaves-project/317091)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 4\ **Last updated:** [October 27, 2022, 1:31pm UTC](https://discuss.elastic.co/t/kibana-rules-authentication-when-creator-leaves-project/317091 "2022-10-27T13:31:56Z")
Good Morning, I am wondering if anyone has run into a similar scenario. We have implemented watchers and rules in our environment. One of the people who created some of these rules has left the project. We use AD to au… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/317390)
**Author:** [@bungearnss](https://discuss.elastic.co/u/bungearnss)\ **Replies:** 7\ **Last updated:** [October 27, 2022, 1:19pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/317390 "2022-10-27T13:19:31Z")
Hello Community, I am trying to run Kibana server but I am getting this error, can anyone give me some advice? This is my es.yml file, I want xpack.security.enabled: false remains In my kibana.yml just uncomment … --- ## [Elasticsearch integration with Zabbix](https://discuss.elastic.co/t/elasticsearch-integration-with-zabbix/316489)
**Author:** [@Muhammad\_Umar](https://discuss.elastic.co/u/Muhammad_Umar)\ **Replies:** 0\ **Last updated:** [October 13, 2022, 6:02am UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-zabbix/316489 "2022-10-13T06:02:20Z")
I tried to extract log files from Zabbix to Grafana, which came out successful. Now I want to extract the same from Grafana to Elasticsearch and view the same in Kibana. Is this possible?? If “yes” explain it briefly (o… --- ## [Newcomers seeking advice](https://discuss.elastic.co/t/newcomers-seeking-advice/317583)
**Author:** [@sir\_t](https://discuss.elastic.co/u/sir_t)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 12:01pm UTC](https://discuss.elastic.co/t/newcomers-seeking-advice/317583 "2022-10-27T12:01:28Z")
I want to run docker Elasticsearch and kibana containers separately on a cloud server, I tried to build it myself, but I can only access elasticsearch remotely by configuring https, how do I go about it, can you give me … --- ## [Dynamic Elasticsearch query execution from Node JS](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602)
**Author:** [@pravu](https://discuss.elastic.co/u/pravu)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 10:55am UTC](https://discuss.elastic.co/t/dynamic-elasticsearch-query-execution-from-node-js/317602 "2022-10-27T10:55:43Z")
I need to execute dynamic queries from Node JS . I tried the following script and getting error. async function executeDynamicTest (){ const querySrting= "{index: 'entity\_index', query: { match: { amount: '1819' }}}"; … --- ## [Elasticsearch snapshot restoration error for system indices](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138)
**Author:** [@jaykb77](https://discuss.elastic.co/u/jaykb77)\ **Replies:** 5\ **Last updated:** [October 27, 2022, 8:49am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-restoration-error-for-system-indices/317138 "2022-10-27T08:49:29Z")
Im trying to restore a snapshot(snapshot of entire cluster) and exclude internal indices as recommended in documentation (Restore a snapshot | Elasticsearch Guide \[7.17\] | Elastic ) Although this method is supposed to b… --- ## [Remove field suggestions from Query bar](https://discuss.elastic.co/t/remove-field-suggestions-from-query-bar/317471)
**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\ **Replies:** 5\ **Last updated:** [October 27, 2022, 8:26am UTC](https://discuss.elastic.co/t/remove-field-suggestions-from-query-bar/317471 "2022-10-27T08:26:56Z")
These field name appear by default in the Query Bar. Please advise if we can remove these fields and have a simple text search. --- ## [Grok parse failure](https://discuss.elastic.co/t/grok-parse-failure/317379)
**Author:** [@Paf](https://discuss.elastic.co/u/Paf)\ **Replies:** 2\ **Last updated:** [October 27, 2022, 7:23am UTC](https://discuss.elastic.co/t/grok-parse-failure/317379 "2022-10-27T07:23:40Z")
Hello, I want to parse the field "ModifiedProperties" with this value : {"Name":"StrongAuthenticationMethod","NewValue":"\[\\r\\n {\\r\\n \\"MethodType\\": 5,\\r\\n \\"Default\\": true\\r\\n },\\r\\n {\\r\\n \\"MethodType\\":… --- ## [Mage package is failed in windows](https://discuss.elastic.co/t/mage-package-is-failed-in-windows/317592)
**Author:** [@nosor70637](https://discuss.elastic.co/u/nosor70637)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 7:18am UTC](https://discuss.elastic.co/t/mage-package-is-failed-in-windows/317592 "2022-10-27T07:18:22Z")
Hi, I try to build metricbeat in my windows machine, run mage package command threw error like below C:\\Program Files\\Go\\src\\beats\\metricbeat\>mage package Generated fields.yml for metricbeat to C:\\Program Files\\Go\\src\\b… --- ## [Impossible to set password for elastic builtin superuser](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305)
**Author:** [@JimJ](https://discuss.elastic.co/u/JimJ)\ **Replies:** 13\ **Last updated:** [October 27, 2022, 7:11am UTC](https://discuss.elastic.co/t/impossible-to-set-password-for-elastic-builtin-superuser/317305 "2022-10-27T07:11:51Z")
Hi, I just install elasticsearch 8.4.1 from elasticsearch-8.4.1-1.x86\_64 RPM on a Red Hat Enterprise Linux release 8.6 (Ootpa) server. Everything looks ok, elastic service is running. But I cannot find the elastic use… --- ## [Create enrollment for kibana impossible with certificate Lets Encript](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294)
**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\ **Replies:** 3\ **Last updated:** [October 27, 2022, 6:54am UTC](https://discuss.elastic.co/t/create-enrollment-for-kibana-impossible-with-certificate-lets-encript/317294 "2022-10-27T06:54:42Z")
After the problem I indicated in the post I can't get Elastic and Kibana to work with real certificates I was finally able to understand the issue of needing to pass the --url in the command. But now when I want to gene… --- ## [Oracle cloud instances logs in elk siem](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207)
**Author:** [@Sarala\_C](https://discuss.elastic.co/u/Sarala_C)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 6:50am UTC](https://discuss.elastic.co/t/oracle-cloud-instances-logs-in-elk-siem/317207 "2022-10-27T06:50:53Z")
Hello, Our requirement is to ingest oracle cloud instances logs into ELK SIEM that is hosted on azure cloud. Is this possible? if yes then please can you guide. Waiting for any solution. Thanks Sarala --- ## [ELK & APIs calls](https://discuss.elastic.co/t/elk-apis-calls/317116)
**Author:** [@noshell](https://discuss.elastic.co/u/noshell)\ **Replies:** 3\ **Last updated:** [October 27, 2022, 6:28am UTC](https://discuss.elastic.co/t/elk-apis-calls/317116 "2022-10-27T06:28:46Z")
Hello, I have a design / architecture question. In a project i wish you to implement REST APIs with custom dashboards but i want to segreagte network flows. I would like to know if i used a distributed archietcture wh… --- ## [Create a conditional mapping (enabled = false) on a single field based on field value](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572)
**Author:** [@JerryKumar](https://discuss.elastic.co/u/JerryKumar)\ **Replies:** 1\ **Last updated:** [October 27, 2022, 5:57am UTC](https://discuss.elastic.co/t/create-a-conditional-mapping-enabled-false-on-a-single-field-based-on-field-value/317572 "2022-10-27T05:57:24Z")
Hey team, I have a use case in my application where a list of items called Descriptors are generated. These are filtered for a specific prefix "descsearch" and only these are being sent to the index and everything work… --- ## [How to use XContentBuilder in Elasticsearch 8.0](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 8\ **Last updated:** [October 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256 "2022-10-27T05:56:59Z")
Hi, i found some examples how to use XContentBuilder in Elasticsearch 7.x but these examples do not work any more since ESJAC is completely new programmed. But as XContentBuilder still exists: XContentBuilder (elasticse… --- ## [Elasticsearch Multi-word synonyms and stopword issue](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585)
**Author:** [@sudheesh](https://discuss.elastic.co/u/sudheesh)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/elasticsearch-multi-word-synonyms-and-stopword-issue/317585 "2022-10-27T05:54:33Z")
I have created an index as follows PUT /wordforms\_example { "mappings": { "dynamic": "strict", "properties": { "test\_field": { "type": "text", "analyzer": "synonym\_words\_analyzer\_… --- ## [Question about statistics delayed too long](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577)
**Author:** [@315386775](https://discuss.elastic.co/u/315386775)\ **Replies:** 2\ **Last updated:** [October 27, 2022, 5:54am UTC](https://discuss.elastic.co/t/question-about-statistics-delayed-too-long/317577 "2022-10-27T05:54:11Z")
i use the kibana with CVAT GitHub - opencv/cvat: Annotate better with CVAT, the industry-leading data engine for machine learning. Used and trusted by teams at any scale, for data of any scale. Question in Kibana. I ca… --- ## [Logstash failing to convert from csv to json and to forward to opensearch](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264)
**Author:** [@D\_Go](https://discuss.elastic.co/u/D_Go)\ **Replies:** 12\ **Last updated:** [October 27, 2022, 5:35am UTC](https://discuss.elastic.co/t/logstash-failing-to-convert-from-csv-to-json-and-to-forward-to-opensearch/317264 "2022-10-27T05:35:54Z")
Hi, I've been at this for a while and cant seem to load a csv file to AWS opensearch from logstash. Any help will be appreciated. """ \[ERROR\] 2022-10-23 04:09:20.063 \[Converge PipelineAction::Create\] agent - Failed to… --- ## [What is Elastic agent?](https://discuss.elastic.co/t/what-is-elastic-agent/317087)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 6\ **Last updated:** [October 27, 2022, 4:31am UTC](https://discuss.elastic.co/t/what-is-elastic-agent/317087 "2022-10-27T04:31:05Z")
Hi everyone, I know this is going to very basic question but I am new to ELK stack, and I have so many things to learn. I have installed ELK stack (Logstash, Elasticsearch, and Kibana), and also I have configured the f… --- ## [Elasticsearch and Kibana Url says "your connection to this site is not secure "](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 7\ **Last updated:** [October 27, 2022, 4:28am UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-url-says-your-connection-to-this-site-is-not-secure/317562 "2022-10-27T04:28:35Z")
I am running elastic 8.4. From the documentation, it says that the security is automatically enabled and configured. But when I get my elasticsearch running and visit https:localhost:9200 I get the message: Your connect… --- ## [Filebeat PANW module](https://discuss.elastic.co/t/filebeat-panw-module/317357)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 2\ **Last updated:** [October 27, 2022, 3:25am UTC](https://discuss.elastic.co/t/filebeat-panw-module/317357 "2022-10-27T03:25:08Z")
Hi, Can anyone point me in the right direction getting the panw module to work. We are running filebeat 8.4 but everything I try results in: Exiting: module panw is configured but has no enabled filesets panw module … --- ## [WinEventLog\[System\] error salvaging message: failed in EvtFormatMessage: The specified resource type cannot be found in the image file](https://discuss.elastic.co/t/wineventlog-system-error-salvaging-message-failed-in-evtformatmessage-the-specified-resource-type-cannot-be-found-in-the-image-file/317579)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 3:13am UTC](https://discuss.elastic.co/t/wineventlog-system-error-salvaging-message-failed-in-evtformatmessage-the-specified-resource-type-cannot-be-found-in-the-image-file/317579 "2022-10-27T03:13:59Z")
I don't know much about windows server system, what does this error mean? How to solve? Thanks for any suggestion. {"log.level":"info","@timestamp":"2022-10-27T10:31:51.822+0800","log.origin":{"file.name":"instance/beat… --- ## [Configure Logstash to connect to Elasticsearch as output](https://discuss.elastic.co/t/configure-logstash-to-connect-to-elasticsearch-as-output/317578)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 3\ **Last updated:** [October 27, 2022, 3:01am UTC](https://discuss.elastic.co/t/configure-logstash-to-connect-to-elasticsearch-as-output/317578 "2022-10-27T03:01:10Z")
I am running elasticsearch 8.4 and have configured logstash to index into elasticsearch. But I am getting the error: \]\[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline error {:pipeline\_id=\>"main", :exception=\>#\ **Author:** [@Shakib\_farooq](https://discuss.elastic.co/u/Shakib_farooq)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 2:32am UTC](https://discuss.elastic.co/t/multiline-filebeat-parser-for-aws-module/317576 "2022-10-27T02:32:45Z") Hello, I am ingesting logs from AWS cloudwatch using the Aws input filebeat module but getting single-line logs in kibana. I tried to use multiline parsers as shown in the image but still, it doesn't seem to work. … --- ## [Config dir ownership mismatch error on windows 1809 container for elasticsearch](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568)
**Author:** [@Maleki](https://discuss.elastic.co/u/Maleki)\ **Replies:** 0\ **Last updated:** [October 27, 2022, 1:23am UTC](https://discuss.elastic.co/t/config-dir-ownership-mismatch-error-on-windows-1809-container-for-elasticsearch/317568 "2022-10-27T01:23:24Z")
Due to some restrictions at my company we are not allowed to use linux based containers. I am therefore creating a windows container based ELK stack. My dockerfile is heavily inspired by diamol/Dockerfile at master · s… --- ## [Automate Elasticsearch-reset-password in bash script](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 10\ **Last updated:** [October 27, 2022, 12:20am UTC](https://discuss.elastic.co/t/automate-elasticsearch-reset-password-in-bash-script/317429 "2022-10-27T00:20:45Z")
I am running the latest elasticsearch version via a script, and I am trying to automate the reset password process via this method recommended @TimV back in 2018, but it seems to no longer work with the latest version: H… --- ## [String inteprolation in logstash data\_stream fields](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556)
**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\ **Replies:** 6\ **Last updated:** [October 26, 2022, 9:42pm UTC](https://discuss.elastic.co/t/string-inteprolation-in-logstash-data-stream-fields/317556 "2022-10-26T21:42:05Z")
How can I write to different data streams for different kinesis input? We are trying to add fields in the inputs and use string interpolation in the outputs to no avail. We had been using index+ilm\_enabled in logstash, … --- ## [System integration doesn't populate ECS Fields -\> Predefined Dashboards not usable anymore](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 0\ **Last updated:** [October 26, 2022, 9:09pm UTC](https://discuss.elastic.co/t/system-integration-doesnt-populate-ecs-fields-predefined-dashboards-not-usable-anymore/317559 "2022-10-26T21:09:33Z")
Hey there We've observed a change in the populated fields from the system integration. Since about two weeks we have very different fields populated (or not) therefore leading to missing fields in our own and the predef… --- ## [Filebeat Can't parse MSSQL Logs](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773)
**Author:** [@praveenpesala33](https://discuss.elastic.co/u/praveenpesala33)\ **Replies:** 4\ **Last updated:** [October 26, 2022, 9:01pm UTC](https://discuss.elastic.co/t/filebeat-cant-parse-mssql-logs/316773 "2022-10-26T21:01:29Z")
I have installed filebeat 7.15.1 on windows server with mssql logs module. When I run filebeat in foreground with .\\filebeat.exe -c .\\filebeat.yml -e -d "\*" , it can not parse the logs. Filebeat Config: filebeat.inputs… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=749) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=751)