# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=802

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 803

---

## [What i do in this situation?](https://discuss.elastic.co/t/what-i-do-in-this-situation/313909)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 9:00pm UTC](https://discuss.elastic.co/t/what-i-do-in-this-situation/313909 "2022-09-07T21:00:39Z")

</div>

I installed Filebeat, Elasticsearch, and Kibana 8.4.1 in ubuntu I collect FortiGate logs with Integration of Fortinet, in the "discover" the name of the index is filebeat-\* and I want to name it FortiGate like this exa…

---

## [Can't collect the logs of cisco router](https://discuss.elastic.co/t/cant-collect-the-logs-of-cisco-router/312318)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 13\
**Last updated:** [September 7, 2022, 8:47pm UTC](https://discuss.elastic.co/t/cant-collect-the-logs-of-cisco-router/312318 "2022-09-07T20:47:34Z")

</div>

this is my lab and i want to collect my router logs with syslog to filebeat installed in the same server of elasticsearch i follow this steps but i don't receive the logs my elastic server is a ubuntu server 22.04 , m…

---

## [Custom Domain Names](https://discuss.elastic.co/t/custom-domain-names/313918)

<div class="topic-metadata">

**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 6:51pm UTC](https://discuss.elastic.co/t/custom-domain-names/313918 "2022-09-07T18:51:48Z")

</div>

Are custom domain names supported yet? There are a series of posts asking for them like Custom Domain Name but each one just says it's "coming soon" I do not want to setup a proxy (e.g. nginx) for this purpose, as the …

---

## [Jdbc input plugin connection pooling?](https://discuss.elastic.co/t/jdbc-input-plugin-connection-pooling/313915)

<div class="topic-metadata">

**Author:** [@steevhise](https://discuss.elastic.co/u/steevhise)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 6:50pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-connection-pooling/313915 "2022-09-07T18:50:44Z")

</div>

Is there a way to give logstash jdbc plugin several db servers (all replicas of same master) to connect to? Do you just provide an array of connection strings? or what?

---

## [JSON filter wipes out existing objects in memory](https://discuss.elastic.co/t/json-filter-wipes-out-existing-objects-in-memory/312047)

<div class="topic-metadata">

**Author:** [@juan.domenech](https://discuss.elastic.co/u/juan.domenech)\
**Replies:** 3\
**Last updated:** [September 7, 2022, 5:40pm UTC](https://discuss.elastic.co/t/json-filter-wipes-out-existing-objects-in-memory/312047 "2022-09-07T17:40:45Z")

</div>

I'd like to share this behaviour to find out whether or not is expected or desired. Problem: A field exists in memory (i.e. log.syslog.hostname:ZEUS1 ) A JSON message arrives that includes a sub-field of the existing …

---

## [Trace sample logs error KQL](https://discuss.elastic.co/t/trace-sample-logs-error-kql/313703)

<div class="topic-metadata">

**Author:** [@davjl](https://discuss.elastic.co/u/davjl)\
**Replies:** 1\
**Last updated:** [September 6, 2022, 11:38pm UTC](https://discuss.elastic.co/t/trace-sample-logs-error-kql/313703 "2022-09-06T23:38:23Z")

</div>

Hi All, We have recently upgraded our older ELK cluster which was on 7.15.2 to 8.4, We used Log correlation but when upgrade cluster we have the next error When use investigate \> trace logs I have results do i ne…

---

## [What is the tsconfig.json file for?](https://discuss.elastic.co/t/what-is-the-tsconfig-json-file-for/312446)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 4:39pm UTC](https://discuss.elastic.co/t/what-is-the-tsconfig-json-file-for/312446 "2022-09-07T16:39:02Z")

</div>

The below is the tsconfig.json file that comes by default when creating a plugin using kibana plugin generator. What is this file for? The below are the contents in the same. { "extends": "../../tsconfig.json", "…

---

## [YML File for Elasticsearch Installed with Home-brew](https://discuss.elastic.co/t/yml-file-for-elasticsearch-installed-with-home-brew/313908)

<div class="topic-metadata">

**Author:** [@ZeroCafe](https://discuss.elastic.co/u/ZeroCafe)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 4:36pm UTC](https://discuss.elastic.co/t/yml-file-for-elasticsearch-installed-with-home-brew/313908 "2022-09-07T16:36:57Z")

</div>

Hello, Team! I would like to edit the .yml configuration file for the local instance of Elasticsearch I installed using Home-brew, but I can not find the location of the .yml. This is the second time I’ve run into this.…

---

## [Export Transformations Kibana](https://discuss.elastic.co/t/export-transformations-kibana/312708)

<div class="topic-metadata">

**Author:** [@atony](https://discuss.elastic.co/u/atony)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 4:07pm UTC](https://discuss.elastic.co/t/export-transformations-kibana/312708 "2022-09-07T16:07:18Z")

</div>

Hello guys, I would like to export all my dashboards, transformations and new indexes from a Kibana instance to another one. I have found that with saved objects -\> export, I can export all dashboards and related object…

---

## [Output Heap Space Usage for Kibana](https://discuss.elastic.co/t/output-heap-space-usage-for-kibana/313827)

<div class="topic-metadata">

**Author:** [@andreakatie](https://discuss.elastic.co/u/andreakatie)\
**Replies:** 2\
**Last updated:** [September 7, 2022, 3:45pm UTC](https://discuss.elastic.co/t/output-heap-space-usage-for-kibana/313827 "2022-09-07T15:45:25Z")

</div>

Hello all -- I was wondering if there was a way to gather heap space usage data for Kibana (and NGINX) specifically. Using JMeter, I am able to gather real-time heap data usage for the Elasticsearch service, but I have …

---

## [Rollover index lifecycle error](https://discuss.elastic.co/t/rollover-index-lifecycle-error/313900)

<div class="topic-metadata">

**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 3:26pm UTC](https://discuss.elastic.co/t/rollover-index-lifecycle-error/313900 "2022-09-07T15:26:09Z")

</div>

Hi all! I know there are plenty post about this error but although i read them and all the doc I cant understand what is the error. I have an index already created which contains many logs--\> intextest I want to a…

---

## [Fail to restore a snapshot of a rollover index without any error message](https://discuss.elastic.co/t/fail-to-restore-a-snapshot-of-a-rollover-index-without-any-error-message/313691)

<div class="topic-metadata">

**Author:** [@rutika\_kamble](https://discuss.elastic.co/u/rutika_kamble)\
**Replies:** 0\
**Last updated:** [September 5, 2022, 1:42pm UTC](https://discuss.elastic.co/t/fail-to-restore-a-snapshot-of-a-rollover-index-without-any-error-message/313691 "2022-09-05T13:42:41Z")

</div>

I have two indices in my setup. marimba-000001 & marimba-000002 with alias marimba. Before applying to ILM I created a policy with rollover action. Then, on the existing template, I added that policy, added an alias, …

---

## [Need to get documents with field have length \> 200 words](https://discuss.elastic.co/t/need-to-get-documents-with-field-have-length-200-words/312432)

<div class="topic-metadata">

**Author:** [@mani7](https://discuss.elastic.co/u/mani7)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 3:04pm UTC](https://discuss.elastic.co/t/need-to-get-documents-with-field-have-length-200-words/312432 "2022-09-07T15:04:01Z")

</div>

Trying to find the documents having field values lenght \> 200 characters

---

## [Elasticsearch no longer boots](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452)

<div class="topic-metadata">

**Author:** [@dw5304](https://discuss.elastic.co/u/dw5304)\
**Replies:** 10\
**Last updated:** [September 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-no-longer-boots/313452 "2022-09-07T14:55:24Z")

</div>

came in this morning to find a non working bootable version of elasticsearch. \[2022-09-01T14:02:06,208\]\[ERROR\]\[o.e.b.Elasticsearch \] \[redacted\] fatal exception while booting Elasticsearch java.lang.IllegalArgumentE…

---

## [Fleet Server - Duplicate key](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896)

<div class="topic-metadata">

**Author:** [@el-jefe3](https://discuss.elastic.co/u/el-jefe3)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 2:31pm UTC](https://discuss.elastic.co/t/fleet-server-duplicate-key/313896 "2022-09-07T14:31:09Z")

</div>

Hello everyone, I recently configured Fleet Server on my stack. During the configuration I selected Production and entered my keys (Wildcard Certificates). These are the same ones I used for transport and have obvious…

---

## [How to use multiple operators in EQL (Event query language)?](https://discuss.elastic.co/t/how-to-use-multiple-operators-in-eql-event-query-language/313852)

<div class="topic-metadata">

**Author:** [@sirineb](https://discuss.elastic.co/u/sirineb)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 7:09am UTC](https://discuss.elastic.co/t/how-to-use-multiple-operators-in-eql-event-query-language/313852 "2022-09-07T07:09:31Z")

</div>

Hi, I was wondering how to use multiple operators using EQL (Event Query Language). My EQL query is : any where office\_hours == false and winlog.event\_id == 4624 or winlog.event\_id == 4625 I would like to add parenth…

---

## [Facing issues in Metric format to replicate query from Grafana to KIBANA](https://discuss.elastic.co/t/facing-issues-in-metric-format-to-replicate-query-from-grafana-to-kibana/313892)

<div class="topic-metadata">

**Author:** [@ISHIKA](https://discuss.elastic.co/u/ISHIKA)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 2:02pm UTC](https://discuss.elastic.co/t/facing-issues-in-metric-format-to-replicate-query-from-grafana-to-kibana/313892 "2022-09-07T14:02:44Z")

</div>

Hello, I am trying to replicate the below query from prometheus GRFANA to KIBANA. I am not able to get same results, not even close. sum(node\_namespace\_pod\_container:container\_cpu\_usage\_seconds\_total:sum\_irate{namespa…

---

## [Is it Better to use Elastic UI with other framework?](https://discuss.elastic.co/t/is-it-better-to-use-elastic-ui-with-other-framework/313846)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 1:55pm UTC](https://discuss.elastic.co/t/is-it-better-to-use-elastic-ui-with-other-framework/313846 "2022-09-07T13:55:39Z")

</div>

Can I use Elastic UI with other Technology like Django? or with any other backends it's Says Elastic UI The framework powering the Elastic Stack I have been wondering if I could use it with Django or Node etc

---

## [Options List Control Ignores Filters and Queries](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 7\
**Last updated:** [September 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/options-list-control-ignores-filters-and-queries/308962 "2022-09-07T13:52:44Z")

</div>

The Controls visualization has now been available for quite some time, but it is still being noted as a technical preview. Is there any plan to move this to GA? Since it was first introduced, it seems the Options List co…

---

## [Lifecycle delete phase question](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876)

<div class="topic-metadata">

**Author:** [@artax\_sb](https://discuss.elastic.co/u/artax_sb)\
**Replies:** 3\
**Last updated:** [September 7, 2022, 1:22pm UTC](https://discuss.elastic.co/t/lifecycle-delete-phase-question/313876 "2022-09-07T13:22:11Z")

</div>

Hi all, I want to make a lifecycle policy to my index I want the conditions are delete after 15days or 25gb but in delete phase it only allows me delete after n days not by n gb too Is there some way to make that? (w…

---

## [ElasticClient.DeleteByQueryAsync method is not waiting as per given Timeout](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926)

<div class="topic-metadata">

**Author:** [@ManElastic\_MakSearch](https://discuss.elastic.co/u/ManElastic_MakSearch)\
**Replies:** 2\
**Last updated:** [September 7, 2022, 12:57pm UTC](https://discuss.elastic.co/t/elasticclient-deletebyqueryasync-method-is-not-waiting-as-per-given-timeout/311926 "2022-09-07T12:57:09Z")

</div>

I am using Nest version 7.11.1. I am trying to use DeleteByQueryAsync method of ElasticClient. Below is the code I am trying to make working. var settings = await GetConnectionSettings("XYZTenant"); //// This method set…

---

## [Unable to change query paramters in rally](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711)

<div class="topic-metadata">

**Author:** [@jmlucjav](https://discuss.elastic.co/u/jmlucjav)\
**Replies:** 6\
**Last updated:** [September 7, 2022, 12:47pm UTC](https://discuss.elastic.co/t/unable-to-change-query-paramters-in-rally/313711 "2022-09-07T12:47:41Z")

</div>

Hi there, I am generating my own queries for a benchmark, my py code looks like this (adapted from some github repos I found): class QueryParamSource: def \_\_init\_\_(self, track, params, \*\*kwargs): ... def…

---

## [Inconsistent Term and Terms query resolution in filter context](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884)

<div class="topic-metadata">

**Author:** [@robertasg](https://discuss.elastic.co/u/robertasg)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 12:45pm UTC](https://discuss.elastic.co/t/inconsistent-term-and-terms-query-resolution-in-filter-context/313884 "2022-09-07T12:45:53Z")

</div>

According to Elasticsearch docs it says that TermsQuery is the same as a TermQuery but can be operate with multiple values. The terms query is the same as the term query, except you can search for multiple values. Ho…

---

## [Monitoring Elastic License On Prometheus](https://discuss.elastic.co/t/monitoring-elastic-license-on-prometheus/313870)

<div class="topic-metadata">

**Author:** [@takshika\_jambhule](https://discuss.elastic.co/u/takshika_jambhule)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 12:34pm UTC](https://discuss.elastic.co/t/monitoring-elastic-license-on-prometheus/313870 "2022-09-07T12:34:50Z")

</div>

I have installed elasticsearch\_exporter on my elastic boxes to set up alerts and monitoring on Prometheus.(GitHub - prometheus-community/elasticsearch\_exporter: Elasticsearch stats exporter for Prometheus) However, elast…

---

## [How to implement query termsAgregation to get the documents for each of the buckets that the query generates. I am using java spring boot](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883)

<div class="topic-metadata">

**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\
**Replies:** 0\
**Last updated:** [September 7, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-implement-query-termsagregation-to-get-the-documents-for-each-of-the-buckets-that-the-query-generates-i-am-using-java-spring-boot/313883 "2022-09-07T12:31:05Z")

</div>

Hi, I am trying to get each of the elements that the elasticsearch group by generates. What I get now is the key and the amount of elements for each of the buckets, my interest is to get each of those elements that conta…

---

## [Use case Kibana Alerts vs Watcher](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844)

<div class="topic-metadata">

**Author:** [@vwong](https://discuss.elastic.co/u/vwong)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844 "2022-09-07T12:29:06Z")

</div>

Hi, As I read from document, Kibana Alerts and watcher are both used to detect conditions and can trigger actions in response. As they offer similar function, would there use cases that can share for using either one o…

---

## [Error establishing direct connection to mongo node Error output: no reachable servers](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395)

<div class="topic-metadata">

**Author:** [@Asher\_Manangan](https://discuss.elastic.co/u/Asher_Manangan)\
**Replies:** 6\
**Last updated:** [September 7, 2022, 12:09pm UTC](https://discuss.elastic.co/t/error-establishing-direct-connection-to-mongo-node-error-output-no-reachable-servers/313395 "2022-09-07T12:09:00Z")

</div>

Hi, Here is the log: Error establishing direct connection to mongo node at \[127.0.0.1:27017\]. Error output: no reachable servers I tried a lot of things, but after so many days, I can't find it work. Here is my mong…

---

## [Kibana Canvas](https://discuss.elastic.co/t/kibana-canvas/313786)

<div class="topic-metadata">

**Author:** [@RobinIT](https://discuss.elastic.co/u/RobinIT)\
**Replies:** 8\
**Last updated:** [September 7, 2022, 11:59am UTC](https://discuss.elastic.co/t/kibana-canvas/313786 "2022-09-07T11:59:49Z")

</div>

Hello, I have a dashboard with a Pie, including some filters to specify the Slices of the pie. I want to build the Pie in canvas, but I don't know how. Can someone guide me a little bit, with some hints....how to get t…

---

## [ISSUE WITH INSTALATION KIBANA IN CENTOS](https://discuss.elastic.co/t/issue-with-instalation-kibana-in-centos/312451)

<div class="topic-metadata">

**Author:** [@andres07](https://discuss.elastic.co/u/andres07)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 11:59am UTC](https://discuss.elastic.co/t/issue-with-instalation-kibana-in-centos/312451 "2022-09-07T11:59:23Z")

</div>

Hi, I am trying to install Kibana on a centos server so that I can collect logs from different machines. On my server and installed kibana, elasticsearch and logstash. All these agents are working, but I am not able to…

---

## [Copy paste Kibana settings to multiple clusters](https://discuss.elastic.co/t/copy-paste-kibana-settings-to-multiple-clusters/313464)

<div class="topic-metadata">

**Author:** [@Austin\_ES\_Questions](https://discuss.elastic.co/u/Austin_ES_Questions)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 11:49am UTC](https://discuss.elastic.co/t/copy-paste-kibana-settings-to-multiple-clusters/313464 "2022-09-07T11:49:53Z")

</div>

We are running several elasticsearch/kibana clusters, with some modifications to the "advanced settings" in kibana Is there a way that we can automatically sync/propagate settings from one instance to another, to avoid …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=801)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=803)
