# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=804 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 805 --- ## [Asciifolding analyzer doesn't seem to be working](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830)
**Author:** [@Chris\_Grim](https://discuss.elastic.co/u/Chris_Grim)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:17pm UTC](https://discuss.elastic.co/t/asciifolding-analyzer-doesnt-seem-to-be-working/313830 "2022-09-06T21:17:56Z")
Hi All, I am trying to setup asciifolding so a word like séance will appear when someone types in seance. In my mapping I have $mapping-\>search\_as\_you\_type('name', \['analyzer' =\> 'standard\_asciifolding'\]); … --- ## [How to sum across all intermediate aggregate buckets?](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829)
**Author:** [@davidgAID](https://discuss.elastic.co/u/davidgAID)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 9:07pm UTC](https://discuss.elastic.co/t/how-to-sum-across-all-intermediate-aggregate-buckets/313829 "2022-09-06T21:07:21Z")
I have an index like this (simplified): { "entity\_id": {"type": "keyword"}, "attr1": { "properties": { "attr1\_id": {"type": "keyword"}, "attr1\_type": {"type": "keyword"}, … --- ## [Apache Access Logs with Filebeats-\>Logstash-\>EL\<-Kibana: Throws errors at default dashboard](https://discuss.elastic.co/t/apache-access-logs-with-filebeats-logstash-el-kibana-throws-errors-at-default-dashboard/313585)
**Author:** [@SirStephanikus](https://discuss.elastic.co/u/SirStephanikus)\ **Replies:** 10\ **Last updated:** [September 6, 2022, 8:39pm UTC](https://discuss.elastic.co/t/apache-access-logs-with-filebeats-logstash-el-kibana-throws-errors-at-default-dashboard/313585 "2022-09-06T20:39:12Z")
Hello Everyone While I'm trying to deep dive into ELK, I followed a video course that is unfortunately outdated... My ELK version is 8.3.3 However, the lab goal is this: Use filebeat to parse some apache access logs,… --- ## [Packetbeat DNS response time nanoseconds instead of microseconds](https://discuss.elastic.co/t/packetbeat-dns-response-time-nanoseconds-instead-of-microseconds/313710)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 8:33pm UTC](https://discuss.elastic.co/t/packetbeat-dns-response-time-nanoseconds-instead-of-microseconds/313710 "2022-09-06T20:33:44Z")
Dear All, I am running ELK stack 8.4.1 on latest Debian. Kibana/Packetbeat shows nice data in the DNS overview. When I move the mouse at DNS Min/Max/Avg Response Time Histogram over the graph I see for example max resp… --- ## [Logstash plugin install error](https://discuss.elastic.co/t/logstash-plugin-install-error/313611)
**Author:** [@zapatannico](https://discuss.elastic.co/u/zapatannico)\ **Replies:** 1\ **Last updated:** [September 3, 2022, 10:20pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-error/313611 "2022-09-03T22:20:36Z")
Hello im new with logstash, im trying to install syslog plugin but i always get this error, someone could help me? \\logstash\\bin\>logstash-plugin install "Using bundled JDK: C:\\logstash\\jdk\\bin\\java.exe" jruby: warning:… --- ## [Missing field from my sqs queue](https://discuss.elastic.co/t/missing-field-from-my-sqs-queue/312746)
**Author:** [@nexus1](https://discuss.elastic.co/u/nexus1)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 7:21pm UTC](https://discuss.elastic.co/t/missing-field-from-my-sqs-queue/312746 "2022-09-06T19:21:14Z")
We are running Elasticsearch on Kubernetes using the Elastic Cloud Operator. We use the input sqs plugin to pull events for our SQS queues Recently, we discovered the logs from one of our queues have the field aws.sqs.… --- ## [Filebeat limit processing events](https://discuss.elastic.co/t/filebeat-limit-processing-events/313485)
**Author:** [@amandagmsd](https://discuss.elastic.co/u/amandagmsd)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 7:08pm UTC](https://discuss.elastic.co/t/filebeat-limit-processing-events/313485 "2022-09-06T19:08:16Z")
Hi, Is there a way to increase the number of processing events of filebeat? Example: I have a configuration for filebeat to read aws cloudwatch logs, but the biggest number that is on log debug is 100 for processing e… --- ## [Reindex to data streams](https://discuss.elastic.co/t/reindex-to-data-streams/313818)
**Author:** [@carrot](https://discuss.elastic.co/u/carrot)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 6:51pm UTC](https://discuss.elastic.co/t/reindex-to-data-streams/313818 "2022-09-06T18:51:41Z")
I'm using the following to reindex to a data stream, although it completes right way... The source index has 262394 documents. POST \_reindex { "source": { "index": "syslog-prod-2021.09.07" }, "dest": { "in… --- ## [Ruby filter to check fields dynamically](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709)
**Author:** [@Anusha\_Kusanghi](https://discuss.elastic.co/u/Anusha_Kusanghi)\ **Replies:** 9\ **Last updated:** [September 6, 2022, 6:42pm UTC](https://discuss.elastic.co/t/ruby-filter-to-check-fields-dynamically/313709 "2022-09-06T18:42:30Z")
Hie All, From the following logs I want to check on condition HasErrorState = true and drop the entire event. Data field will be single entry and in that we have multiple entries for Scales. "Data": \[ { … --- ## [Logstash not starting](https://discuss.elastic.co/t/logstash-not-starting/313807)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 6\ **Last updated:** [September 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/logstash-not-starting/313807 "2022-09-06T16:41:58Z")
I just installed logstash 8.4.1 on an Ubuntu VM. When i start the service It doesn't start and keep throwing this error. Log4j configuration path used is: /etc/logstash/log4j2.properties \[2022-09-06T14:56:04,394\]\[INFO \]… --- ## [Parsing error on Metricbeat 8.3 with HAProxy 1.5](https://discuss.elastic.co/t/parsing-error-on-metricbeat-8-3-with-haproxy-1-5/313202)
**Author:** [@shim1st](https://discuss.elastic.co/u/shim1st)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 4:27pm UTC](https://discuss.elastic.co/t/parsing-error-on-metricbeat-8-3-with-haproxy-1-5/313202 "2022-09-06T16:27:30Z")
I installed Metricbeat 8.3 on CentOS and enabled HAProxy. Error occured like below. {"log.level":"debug","@timestamp":"2022-08-29T17:12:03.771+0900","log.logger":"processors","log.origin":{"file.name":"processing/proce… --- ## [Visualize Library - Tools - Controls have wrong fields in filter section](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382)
**Author:** [@Wojciech\_Kwiecien](https://discuss.elastic.co/u/Wojciech_Kwiecien)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/visualize-library-tools-controls-have-wrong-fields-in-filter-section/312382 "2022-09-06T16:24:22Z")
Hello everyone. I tried to add some filterthe s into visualization section and like you the see on screen I selecthe ted in controls panel on the right side Index patter apm-\*-transaction and I tried to add in filter ur… --- ## [Change Name in Stack Monitoring](https://discuss.elastic.co/t/change-name-in-stack-monitoring/312896)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 4:24pm UTC](https://discuss.elastic.co/t/change-name-in-stack-monitoring/312896 "2022-09-06T16:24:14Z")
By default, beats which are sending monitoring data to a dedicated monitoring cluster (by setting 'monitoring.elasticsearch.monitoring.enabled: true') are showing up in Kibana Stack Monitoring with their hostname without… --- ## [Elastic Java Client: Problem with GeoPointProperty - unknown field 'index'](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799)
**Author:** [@CodingMax](https://discuss.elastic.co/u/CodingMax)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:36pm UTC](https://discuss.elastic.co/t/elastic-java-client-problem-with-geopointproperty-unknown-field-index/313799 "2022-09-06T15:36:25Z")
Hi, according the Documentation I can use the parameter index for the field-type geo\_point. I use the Java-Client in Version 8.3.3 and a mapping like this (only a snippet): "location": { "type": "geo\_point", "inde… --- ## [Shrink shard max recommended size?](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806)
**Author:** [@Todd\_Lyons](https://discuss.elastic.co/u/Todd_Lyons)\ **Replies:** 3\ **Last updated:** [September 6, 2022, 4:07pm UTC](https://discuss.elastic.co/t/shrink-shard-max-recommended-size/313806 "2022-09-06T16:07:56Z")
Is there a max recommended size for shrunk shards? We are on a 7.17.4 ES cluster with 10 data nodes and large volumes. We have one index that's kinda busy so we have an index template that defines 10/1 shards/replicas.… --- ## [My exec input plugin does not compatible with ecs](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718)
**Author:** [@MKH](https://discuss.elastic.co/u/MKH)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 4:03pm UTC](https://discuss.elastic.co/t/my-exec-input-plugin-does-not-compatible-with-ecs/313718 "2022-09-06T16:03:15Z")
Hi, I am trying to learn ow to use ecs schema within logstash. I use logstash 7.10.0 and input plugin I want to use in my logstash config file is "exec input". I am trying to just follow the documentation guideline htt… --- ## [Hot\_threads per interpretation](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809)
**Author:** [@Nicolaegis](https://discuss.elastic.co/u/Nicolaegis)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 3:57pm UTC](https://discuss.elastic.co/t/hot-threads-per-interpretation/313809 "2022-09-06T15:57:36Z")
Hello, I would like to know how to read the hot threads information for a particular node and track the operations that cause high CPU usage. Below is a sample: {field1}{field2}{field3}{IP1}{IP2:port}{di}{rack\_ud=1, ra… --- ## [L2 & L3 SW Integration](https://discuss.elastic.co/t/l2-l3-sw-integration/313472)
**Author:** [@zaheernew](https://discuss.elastic.co/u/zaheernew)\ **Replies:** 2\ **Last updated:** [September 6, 2022, 3:44pm UTC](https://discuss.elastic.co/t/l2-l3-sw-integration/313472 "2022-09-06T15:44:05Z")
Dear All, I'm new to the community and I have a small question also. how do integrate L2 and L3 switches to elasticsearch to monitor via kibana? Looking for your answers. Thanks --- ## [Custom Logo for Kibana 8.3.3 - Guide](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 9:38am UTC](https://discuss.elastic.co/t/custom-logo-for-kibana-8-3-3-guide/312894 "2022-08-25T09:38:34Z")
I would like to change the header logo in Kibana 8.3.3. :innocent: Change Header Logo and Text Change loading Text and Logo Change login page logo and text Change Page Title I have achieved it by editing f… --- ## [Histogram in kibana](https://discuss.elastic.co/t/histogram-in-kibana/313436)
**Author:** [@Matanueces](https://discuss.elastic.co/u/Matanueces)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 2:55pm UTC](https://discuss.elastic.co/t/histogram-in-kibana/313436 "2022-09-06T14:55:05Z")
Hello, I'm trying to create a visualization of a histogram in kibana from the following data: Discover: The field that contains the data for the histogram is "current\_hist" If I do a query with the devtools, they … --- ## [Issues with new search query](https://discuss.elastic.co/t/issues-with-new-search-query/313804)
**Author:** [@rzaal](https://discuss.elastic.co/u/rzaal)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 2:21pm UTC](https://discuss.elastic.co/t/issues-with-new-search-query/313804 "2022-09-06T14:21:38Z")
Hi i have recently been busy reworking our old and outdated ES now um running 8.4 and im trying to create a similar query to what i had in the old one. But i have a hard time finding examples or the right documentation T… --- ## [Error with paging large result set using SQL Server](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483)
**Author:** [@manuel.urbano](https://discuss.elastic.co/u/manuel.urbano)\ **Replies:** 7\ **Last updated:** [September 6, 2022, 1:27pm UTC](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483 "2022-09-06T13:27:59Z")
Hello everyone! I'm trying to import a data set with more than 4 million rows from my database in SQL Server. I followed the advice here Jdbc input plugin | Logstash Reference \[8.4\] | Elastic and set jdbc\_fetch\_size wi… --- ## [Kibana not loading through Iframe on Raspberry PI, but runs in separate tab](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871)
**Author:** [@Mathias\_Christian\_Cl](https://discuss.elastic.co/u/Mathias_Christian_Cl)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 1:09pm UTC](https://discuss.elastic.co/t/kibana-not-loading-through-iframe-on-raspberry-pi-but-runs-in-separate-tab/312871 "2022-09-06T13:09:04Z")
Hi, We are running Kibana through reverse proxy to provide password-less access through our web gui. However we have experienced on some of our Raspberry PIs that Kibana is loading forever, and when it is supposed to sh… --- ## [Cant access kibana over https](https://discuss.elastic.co/t/cant-access-kibana-over-https/312924)
**Author:** [@cihady](https://discuss.elastic.co/u/cihady)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 12:58pm UTC](https://discuss.elastic.co/t/cant-access-kibana-over-https/312924 "2022-09-06T12:58:36Z")
I am using docker-compose file below. I believe, I set all the necessary options for https but when I try to connect kibana over https I cant reach but I can over http. Do you have any idea, What is wrong with my config… --- ## [Kibana alert type Metric threshold add fields index to body Email](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777)
**Author:** [@jorge\_Flores\_Machuca](https://discuss.elastic.co/u/jorge_Flores_Machuca)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 12:48pm UTC](https://discuss.elastic.co/t/kibana-alert-type-metric-threshold-add-fields-index-to-body-email/311777 "2022-09-06T12:48:59Z")
Hello everyone, how can I take fields from the metricbeat index and add them to the body of my email, as shown in the example on the green line? this my rule and this my definition email if you could guide me tha… --- ## [Disable system module](https://discuss.elastic.co/t/disable-system-module/313790)
**Author:** [@maheshmotukuri](https://discuss.elastic.co/u/maheshmotukuri)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 12:15pm UTC](https://discuss.elastic.co/t/disable-system-module/313790 "2022-09-06T12:15:33Z")
I'm running metricbeat in container Run Metricbeat on Docker | Metricbeat Reference \[8.4\] | Elastic but don't have any idea how to disable systems module or any other module ? tried to disable in metricbeat.yaml metr… --- ## [Parsing advise](https://discuss.elastic.co/t/parsing-advise/313712)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 4\ **Last updated:** [September 6, 2022, 12:21pm UTC](https://discuss.elastic.co/t/parsing-advise/313712 "2022-09-06T12:21:38Z")
Hello All, How can I parse the below message? The below events are sent over syslog, and the output is sent to Sentinel. I tried to use the KV filter but its failing, as part of parsing, I should also extract the usern… --- ## [Is there a time limit for Filebeat or Logstash to attempt to retransmit?](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 5\ **Last updated:** [September 6, 2022, 12:19pm UTC](https://discuss.elastic.co/t/is-there-a-time-limit-for-filebeat-or-logstash-to-attempt-to-retransmit/313721 "2022-09-06T12:19:30Z")
I am using Filebeat, Logstash, and Elasticsearch to collect logs. I have received a query that some logs are not being captured by Elasticsearch. Is it possible to lose logs in this ELK server configuration? For examp… --- ## [Is there a way to create scheduled slack text reports from Kibana?](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788)
**Author:** [@KappaRossa](https://discuss.elastic.co/u/KappaRossa)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:46am UTC](https://discuss.elastic.co/t/is-there-a-way-to-create-scheduled-slack-text-reports-from-kibana/313788 "2022-09-06T11:46:41Z")
I would like to create a daily Kibana table report in a dedicated Slack channel. E.g. Every day, at 10:00 AM I would like a text report on basic information from Kibana visualizations to trigger and say something between… --- ## [Data migration: ClickHouse to Elasticsearch, Any connectors](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784)
**Author:** [@bilal\_abdu](https://discuss.elastic.co/u/bilal_abdu)\ **Replies:** 0\ **Last updated:** [September 6, 2022, 11:20am UTC](https://discuss.elastic.co/t/data-migration-clickhouse-to-elasticsearch-any-connectors/313784 "2022-09-06T11:20:32Z")
Hi All, Do we have connector for data migration from ClickHouse to Elastic Search. [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=803) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=805)