# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=795 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 796 --- ## [Sending events from specific ip adress to specific index](https://discuss.elastic.co/t/sending-events-from-specific-ip-adress-to-specific-index/314344)
**Author:** [@wmulobole1](https://discuss.elastic.co/u/wmulobole1)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 11:36pm UTC](https://discuss.elastic.co/t/sending-events-from-specific-ip-adress-to-specific-index/314344 "2022-09-13T23:36:16Z")
Hi, I am trying to separate my indexes by ip address. I want logs coming from three particular ips to go a specific index and the rest to go another index. I am not successful because the index is not showing up in Kiban… --- ## [Sending fortinalyzer logs to SIEM](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 5\ **Last updated:** [September 13, 2022, 10:29pm UTC](https://discuss.elastic.co/t/sending-fortinalyzer-logs-to-siem/314149 "2022-09-13T22:29:37Z")
Hello Community Are the fortianalyzer supported by filebeat? if yes can you help me with its configuration at filebeat level by specifying the part to be addressed? Thanks, --- ## [Urgent : How to get the IOPS logs from Windows Server 2003](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 8:10pm UTC](https://discuss.elastic.co/t/urgent-how-to-get-the-iops-logs-from-windows-server-2003/314335 "2022-09-13T20:10:13Z")
Hi Community, I'm new to the community and I need an urgent support. I have a windows server 2003 R2 based couple of DB servers. My questions is how can I collect the IOPS log and monitor via Kibana interface. Note: … --- ## [Canvas mapColumn and essql query](https://discuss.elastic.co/t/canvas-mapcolumn-and-essql-query/314334)
**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 8:01pm UTC](https://discuss.elastic.co/t/canvas-mapcolumn-and-essql-query/314334 "2022-09-13T20:01:58Z")
Hi, I'm wondering if it is possible to use an essql query in a mapColumn. I try to make second column and want to use the value in the first column to check if it exists in another index by using an essql query. But I… --- ## [Elastic-Agent - failed to dispatch actions, error: could not parse the configuration from the policy: duplicate key accessing 'ssl.certificate\_authorities'](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333)
**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 7:18pm UTC](https://discuss.elastic.co/t/elastic-agent-failed-to-dispatch-actions-error-could-not-parse-the-configuration-from-the-policy-duplicate-key-accessing-ssl-certificate-authorities/314333 "2022-09-13T19:18:06Z")
Hi, I have recently added Fleet Server to my stack, but I am having problems with my SSL Certificates (\*Wild Card Certs). I have been able to successfully to integrate new certificates for both Transport and HTTP, but I … --- ## [Filebeat docker container - Can we modify filebeat.yml file using docker ENTRYPOINT](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230)
**Author:** [@ramreddy](https://discuss.elastic.co/u/ramreddy)\ **Replies:** 7\ **Last updated:** [September 13, 2022, 7:47pm UTC](https://discuss.elastic.co/t/filebeat-docker-container-can-we-modify-filebeat-yml-file-using-docker-entrypoint/314230 "2022-09-13T19:47:25Z")
Hi, we are using docker/ECS filebeat containers, currently as part of docker build we copy filebeat-(aws\_account).yml to /usr/share/filebeat/filebeat.yml with account specific values. But while doing this process we have… --- ## [Change elastic's index name to a kubernetes pod label](https://discuss.elastic.co/t/change-elastics-index-name-to-a-kubernetes-pod-label/314324)
**Author:** [@Ivan\_Gonzalez](https://discuss.elastic.co/u/Ivan_Gonzalez)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 6:03pm UTC](https://discuss.elastic.co/t/change-elastics-index-name-to-a-kubernetes-pod-label/314324 "2022-09-13T18:03:53Z")
Hi guys. I am migrating from fluentbit to filebeat to ship logs from kubernetes to graylog 4. The idea is to create 'graylog-application\_name' indexes to let me know identify properly which data holds each index. As f… --- ## [Need to know ways of controlling the write to storage account for event hub access](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551)
**Author:** [@karthik\_Ravichandran](https://discuss.elastic.co/u/karthik_Ravichandran)\ **Replies:** 17\ **Last updated:** [September 13, 2022, 6:00pm UTC](https://discuss.elastic.co/t/need-to-know-ways-of-controlling-the-write-to-storage-account-for-event-hub-access/313551 "2022-09-13T18:00:41Z")
I am having azure event hub as input logstash code , please advise how can i controlling events the write to storage account for event Hub Acess , this method will help in cost saving. please advise your thoughts --- ## [Elasticsearch Installation 8.4](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 9\ **Last updated:** [September 13, 2022, 5:42pm UTC](https://discuss.elastic.co/t/elasticsearch-installation-8-4/313601 "2022-09-13T17:42:19Z")
Hi Team, I am trying to install elasticsearch-8.4 version on a centos vm. The steps i followed are: Java Installation Creating a repo file Install Elasticsearch Start ES Note: i have not made any changes in yml file.… --- ## [Pause between events ingested in elasticsearch](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 13\ **Last updated:** [September 13, 2022, 5:22pm UTC](https://discuss.elastic.co/t/pause-between-events-ingested-in-elasticsearch/314025 "2022-09-13T17:22:54Z")
hello, I would like to know if it is possible, and if there is any filter that can put a time between events before sending them to elastic, for example: I have logs in elastic that are being ingested in the same second,… --- ## [Elasticsearch 6.8.23 on Oracle Linux 8](https://discuss.elastic.co/t/elasticsearch-6-8-23-on-oracle-linux-8/314313)
**Author:** [@spincity57](https://discuss.elastic.co/u/spincity57)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/elasticsearch-6-8-23-on-oracle-linux-8/314313 "2022-09-13T15:58:30Z")
Hello, I am trying to install elasticsearch 6.8.23 on Oracle Linux 8. I am using openjdk version "11.0.16.1". I have this error at starting elasticsearch : Caused by: java.lang.IllegalArgumentException: none of the ci… --- ## [We couldn't log you in. Please try again](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/314294)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 53\ **Last updated:** [September 13, 2022, 2:49pm UTC](https://discuss.elastic.co/t/we-couldnt-log-you-in-please-try-again/314294 "2022-09-13T14:49:25Z")
After I do the Snapshot, I tried to delete all indices to test the Snapshot and Restore. At first I thought it's working coz' I can see the Kibana is working not until I tried to log in. I can't log in coz' there is mi… --- ## [SSL error when using S3 compatible repository with letsencrypt certificate](https://discuss.elastic.co/t/ssl-error-when-using-s3-compatible-repository-with-letsencrypt-certificate/313791)
**Author:** [@albanm](https://discuss.elastic.co/u/albanm)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 2:49pm UTC](https://discuss.elastic.co/t/ssl-error-when-using-s3-compatible-repository-with-letsencrypt-certificate/313791 "2022-09-13T14:49:06Z")
Hello, I have installed a minio server protected by a certificate issued by letsencrypt to serve as a snapshot repository for my elasticsearch cluster (version 7.17.6). When I try to create the registry (curl -X PUT "lo… --- ## [Not able to deploy Fleet-managed elastic agent on k8s (quickstart template)](https://discuss.elastic.co/t/not-able-to-deploy-fleet-managed-elastic-agent-on-k8s-quickstart-template/314304)
**Author:** [@Asaf\_balink](https://discuss.elastic.co/u/Asaf_balink)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 2:19pm UTC](https://discuss.elastic.co/t/not-able-to-deploy-fleet-managed-elastic-agent-on-k8s-quickstart-template/314304 "2022-09-13T14:19:59Z")
Hey, I'm trying to deploy Fleet Server and Elastic Agent on Kubernetes using the quickstart manual: Since I've deployed my stack under a different namespace, all I did was changing the namespace on the provided manife… --- ## [Copy speciifc data to another index automatically](https://discuss.elastic.co/t/copy-speciifc-data-to-another-index-automatically/314300)
**Author:** [@queried1](https://discuss.elastic.co/u/queried1)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 2:00pm UTC](https://discuss.elastic.co/t/copy-speciifc-data-to-another-index-automatically/314300 "2022-09-13T14:00:15Z")
Hello! Currently I use FIlebeat to send data to Logstash and then to Elasticsearch. There are mostly application logs that contain a lot of data. Everything is sent to an index called filebeat--0000x and is rolled over … --- ## [Is it possible to use our own custom built kibana in Elastic Cloud?](https://discuss.elastic.co/t/is-it-possible-to-use-our-own-custom-built-kibana-in-elastic-cloud/314233)
**Author:** [@Kiru\_Sengal](https://discuss.elastic.co/u/Kiru_Sengal)\ **Replies:** 3\ **Last updated:** [September 13, 2022, 1:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-our-own-custom-built-kibana-in-elastic-cloud/314233 "2022-09-13T13:38:34Z")
Hi, Can someone point me to documentation for how we can use a custom built kibana in Elastic Cloud? We are building our own tweaked kibana in Gitlab Cloud, and don't mind building any type of container if necessary. T… --- ## [ElasticsearchClient issue: What is the new equivalent of the old AbstractAggregationBuilder's subAggregation method](https://discuss.elastic.co/t/elasticsearchclient-issue-what-is-the-new-equivalent-of-the-old-abstractaggregationbuilders-subaggregation-method/314228)
**Author:** [@Rudy\_Bonefas](https://discuss.elastic.co/u/Rudy_Bonefas)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 1:23pm UTC](https://discuss.elastic.co/t/elasticsearchclient-issue-what-is-the-new-equivalent-of-the-old-abstractaggregationbuilders-subaggregation-method/314228 "2022-09-13T13:23:49Z")
I have inherited some old RestHighLevelClient code (7.16.3) which I wish to upgrade to the new ElasticsearchClient. I am stumped on how to upgrade the following code: AggregationBuilder ab = AggregationBuilders.composi… --- ## [What's the best way of creating a keystore with Dockerized Logstash?](https://discuss.elastic.co/t/whats-the-best-way-of-creating-a-keystore-with-dockerized-logstash/313810)
**Author:** [@rcorfield](https://discuss.elastic.co/u/rcorfield)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 1:18pm UTC](https://discuss.elastic.co/t/whats-the-best-way-of-creating-a-keystore-with-dockerized-logstash/313810 "2022-09-13T13:18:57Z")
Hi, we are currently wrestling with the problem of how to create a keystore for use with dockerized logstash. I have seen one solution in the forum already: How to use keystore in Dockerized logstash?, however we do not… --- ## [Apache HTTP Server Assets](https://discuss.elastic.co/t/apache-http-server-assets/314091)
**Author:** [@6igwig](https://discuss.elastic.co/u/6igwig)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 12:49pm UTC](https://discuss.elastic.co/t/apache-http-server-assets/314091 "2022-09-13T12:49:02Z")
I installed the assets for the Apache HTTP Server integration and everything showed up in kibana except for the Anomaly detection jobs. I have tried reinstalling all the assets to no avail. How do I install the ML jobs f… --- ## [Could Not Index Event to Elasticsearch Error?](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188)
**Author:** [@Priyanka4](https://discuss.elastic.co/u/Priyanka4)\ **Replies:** 14\ **Last updated:** [September 13, 2022, 12:42pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-error/314188 "2022-09-13T12:42:43Z")
message: \[2022-09-12T11:02:46,381\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[2a206be8e9b0598adfe625bef432d5a7f49b90230ff74f12fb3baf9c5024173f\] Could not index event to Elasticsearch. {:status=\>400, :action= --- ## [Elasticsearch array of an object using logstash](https://discuss.elastic.co/t/elasticsearch-array-of-an-object-using-logstash/314295)
**Author:** [@Hamza\_Khalid](https://discuss.elastic.co/u/Hamza_Khalid)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-array-of-an-object-using-logstash/314295 "2022-09-13T12:37:27Z")
I have a mysql database working as a primary database and i'm ingesting data into elasticsearch from mysql using logstash. I have successfully indexed the users table into elasticsearch and it is working perfectly fine h… --- ## [S3 input plugin taking really long time to process](https://discuss.elastic.co/t/s3-input-plugin-taking-really-long-time-to-process/313261)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 4\ **Last updated:** [September 13, 2022, 12:26pm UTC](https://discuss.elastic.co/t/s3-input-plugin-taking-really-long-time-to-process/313261 "2022-09-13T12:26:27Z")
Hi Team, I am using s3 input plugins to get billing data from aws. There are almost 15-20 files (ending with .csv.gz), each 115-120 MB of size. Now these files are replaced next day with new set of files Logstash conf… --- ## [Logstash not working](https://discuss.elastic.co/t/logstash-not-working/314123)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 8\ **Last updated:** [September 13, 2022, 12:23pm UTC](https://discuss.elastic.co/t/logstash-not-working/314123 "2022-09-13T12:23:07Z")
Hello, My logstash instance which is integrated with Azure Sentinel was working well with out any error (All the pipelines were functional, and the events were received at Azure Sentinel). A while ago, I made a couple o… --- ## [Does Elastic Cloud have any hard limits on http.max\_content\_length](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 12:21pm UTC](https://discuss.elastic.co/t/does-elastic-cloud-have-any-hard-limits-on-http-max-content-length/314285 "2022-09-13T12:21:28Z")
Hi, we are currently running AWS OpenSearch and are hitting some hard limits on http.max\_content\_length. This is a non-configurable 100mb limit. We are using Logstash to process events from Filebeat and hitting an endles… --- ## [Monitor Kafka using kafka module from metricbeat](https://discuss.elastic.co/t/monitor-kafka-using-kafka-module-from-metricbeat/314291)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 12:10pm UTC](https://discuss.elastic.co/t/monitor-kafka-using-kafka-module-from-metricbeat/314291 "2022-09-13T12:10:09Z")
Hi Team, I want to do kafka monitoring using metricbeat kafka module version 7.17v. I have followed the document -\> kafka-module Configured the output to elasticsearch in metricbeat.yml file. Executed the below two c… --- ## [Include empty rows not working for date field in Kibana table lens](https://discuss.elastic.co/t/include-empty-rows-not-working-for-date-field-in-kibana-table-lens/313792)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 5\ **Last updated:** [September 13, 2022, 11:18am UTC](https://discuss.elastic.co/t/include-empty-rows-not-working-for-date-field-in-kibana-table-lens/313792 "2022-09-13T11:18:44Z")
Hello, i'm creating ES indices every month where one of the date fields can be empty for all documents from time to time. To make sure that visualizations do not break if this happens i added a mapping for this field to… --- ## [Not yet initialized (you may need to run securityadmin)](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280)
**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\ **Replies:** 2\ **Last updated:** [September 13, 2022, 10:23am UTC](https://discuss.elastic.co/t/not-yet-initialized-you-may-need-to-run-securityadmin/314280 "2022-09-13T10:23:05Z")
I was trying to enable opendistro security by running security admin tools, but getting below error after enabling configs, es version : 7.10.x command : bash /usr/share/elasticsearch/plugins/opendistro\_security/tools… --- ## [ResourceStatus: CREATE\_FAILED, ResourceStatusReason: Resource handler returned message: \\"The specified log group does not exist](https://discuss.elastic.co/t/resourcestatus-create-failed-resourcestatusreason-resource-handler-returned-message-the-specified-log-group-does-not-exist/313785)
**Author:** [@ayushi.sharma91](https://discuss.elastic.co/u/ayushi.sharma91)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 10:19am UTC](https://discuss.elastic.co/t/resourcestatus-create-failed-resourcestatusreason-resource-handler-returned-message-the-specified-log-group-does-not-exist/313785 "2022-09-13T10:19:25Z")
I am trying to install functionbeat 8.4 on an AWS (tried it on both amazon linux and Ubuntu). Elasticsearch is self hosted. Followed the installation guide(Functionbeat quick start: installation and configuration | Funct… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314273)
**Author:** [@khanchand](https://discuss.elastic.co/u/khanchand)\ **Replies:** 10\ **Last updated:** [September 13, 2022, 10:00am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/314273 "2022-09-13T10:00:46Z")
Hi everyone, I am new on Elasticsearch and have created my lab before going to deploy in production. For lab purpose I have deployed all three (elasticsearch, kibana & logstash) on a single centos server. While I am faci… --- ## [Multiple user per index](https://discuss.elastic.co/t/multiple-user-per-index/314278)
**Author:** [@RaiZiStyle](https://discuss.elastic.co/u/RaiZiStyle)\ **Replies:** 0\ **Last updated:** [September 13, 2022, 9:58am UTC](https://discuss.elastic.co/t/multiple-user-per-index/314278 "2022-09-13T09:58:03Z")
Hey everyone, I'm having kind of an issue with the user, role and space We have multiple application log in ELK, each application as an index template (For example, we have one apache-MM-YYYY, one moodle-MM-YYYY, and s… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=794) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=796)