# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=810 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 811 --- ## [APM Event Logger does not read Flask parameters](https://discuss.elastic.co/t/apm-event-logger-does-not-read-flask-parameters/313433)
**Author:** [@papers\_hive](https://discuss.elastic.co/u/papers_hive)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 10:49am UTC](https://discuss.elastic.co/t/apm-event-logger-does-not-read-flask-parameters/313433 "2022-09-01T10:49:07Z")
I am running a flask application with apm as an agent. I have configured my app as the following initially: app = Flask(\_\_name\_\_) APM\_DICTIONARY = { 'SERVICE\_NAME': 'MY\_SERVICE\_NAME' , 'SERVER\_U… --- ## [Logstash Error : S3 input plugins](https://discuss.elastic.co/t/logstash-error-s3-input-plugins/313432)
**Author:** [@priyankamondalhcl](https://discuss.elastic.co/u/priyankamondalhcl)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 10:48am UTC](https://discuss.elastic.co/t/logstash-error-s3-input-plugins/313432 "2022-09-01T10:48:40Z")
Hi Team, I am using us3 input plugins which was connecting with S3 bucket and provided data to elasticsearch. but suddenly, It stopped working. My configuration input { s3 { "access\_key\_id" =\> "" "secret\_access\_key… --- ## [Cisco module IOS error on parsing logs](https://discuss.elastic.co/t/cisco-module-ios-error-on-parsing-logs/313431)
**Author:** [@it\_dev](https://discuss.elastic.co/u/it_dev)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 10:34am UTC](https://discuss.elastic.co/t/cisco-module-ios-error-on-parsing-logs/313431 "2022-09-01T10:34:07Z")
There are Cisco IOS logs on local machine and filebeat installed on it. Sending that logs to Elasticsearch (Without Logstash). When I discover those logs, error message appears and logs are not parsed: \> GoError: could… --- ## [Roles with different access to index'ss](https://discuss.elastic.co/t/roles-with-different-access-to-indexss/312272)
**Author:** [@Barca88](https://discuss.elastic.co/u/Barca88)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 10:07am UTC](https://discuss.elastic.co/t/roles-with-different-access-to-indexss/312272 "2022-09-01T10:07:19Z")
I am newbie with elastic and after watching some tutorials I started digging around and fund this: Is it possible with the free and open subscription, having different roles that can only access to a specific index a… --- ## [Ingest pipeline - format error](https://discuss.elastic.co/t/ingest-pipeline-format-error/313419)
**Author:** [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 8:14am UTC](https://discuss.elastic.co/t/ingest-pipeline-format-error/313419 "2022-09-01T08:14:58Z")
Hello I create ingest pipeline, i have an error: Field \[event.created\] of type \[keyword\] doesn't support formats. My log: - 10.10.10.11 - \[01/Sep/2022:07:48:00 +0100\] "- - " 100 - "-" "-" My ingest: \[ { "pip… --- ## [Can't get any other state on a process exept Running state on Metricbeat](https://discuss.elastic.co/t/cant-get-any-other-state-on-a-process-exept-running-state-on-metricbeat/313428)
**Author:** [@Mor123460](https://discuss.elastic.co/u/Mor123460)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 9:39am UTC](https://discuss.elastic.co/t/cant-get-any-other-state-on-a-process-exept-running-state-on-metricbeat/313428 "2022-09-01T09:39:49Z")
Hey :slight\_smile: I can't get any other state on a process exept Running state on Metricbeat. According to the documents it's said that it can give you the state of the process under the module SYSTEM and under the me… --- ## [Logstash unable to decode Cisco protobuf](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/313424)
**Author:** [@Siddarajgj](https://discuss.elastic.co/u/Siddarajgj)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 9:13am UTC](https://discuss.elastic.co/t/logstash-unable-to-decode-cisco-protobuf/313424 "2022-09-01T09:13:53Z")
Hoping someone has configured logstash to receive Cisco telemetry before, I'm able to receive the events but can't decode the telemetry. I'm getting the folowing error from logstash: \[2022-09-01T09:01:23,341\]\[WARN \]\[lo… --- ## [Failed to create query: Score function should not be null](https://discuss.elastic.co/t/failed-to-create-query-score-function-should-not-be-null/313268)
**Author:** [@Sarit\_Ghosh](https://discuss.elastic.co/u/Sarit_Ghosh)\ **Replies:** 1\ **Last updated:** [September 1, 2022, 9:09am UTC](https://discuss.elastic.co/t/failed-to-create-query-score-function-should-not-be-null/313268 "2022-09-01T09:09:59Z")
We are trying to move from ES 6.8 to ES 7.17. On an ES query we are getting the following error (the same query was working fine in ES 6.8): When I try Kibana also, I get the same error: "root\_cause": \[ { "type": "qu… --- ## [Autodetect\_column\_name with 2 different CSV](https://discuss.elastic.co/t/autodetect-column-name-with-2-different-csv/313310)
**Author:** [@EliottB](https://discuss.elastic.co/u/EliottB)\ **Replies:** 4\ **Last updated:** [September 1, 2022, 8:37am UTC](https://discuss.elastic.co/t/autodetect-column-name-with-2-different-csv/313310 "2022-09-01T08:37:16Z")
Hello all, I have an issue with the autodetect\_column\_name of my pipeline below: filter { csv { separator =\>"," autodetect\_column\_names =\> true } When I process the first CSV message country,city,name… --- ## [Bug: Drilldowns do not take over values from Controls](https://discuss.elastic.co/t/bug-drilldowns-do-not-take-over-values-from-controls/313349)
**Author:** [@Martin\_Braendle](https://discuss.elastic.co/u/Martin_Braendle)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 8:10am UTC](https://discuss.elastic.co/t/bug-drilldowns-do-not-take-over-values-from-controls/313349 "2022-09-01T08:10:18Z")
Elasticsearch / Kibana 8.3.3 I've replaced the Input Control Visualisations (that were outlined as deprecated) with the new controls. However, a drilldown does not take over the values that have been set by a control,… --- ## [Elasticsearch error after upgrade "can not run elasticsearch as root"](https://discuss.elastic.co/t/elasticsearch-error-after-upgrade-can-not-run-elasticsearch-as-root/312632)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [September 1, 2022, 7:48am UTC](https://discuss.elastic.co/t/elasticsearch-error-after-upgrade-can-not-run-elasticsearch-as-root/312632 "2022-09-01T07:48:43Z")
Hello team, I have update my elasticsearch data node from 7,16,3 to 7.17.5. But it is through below error. Can you please help on same.. All files running as root.elasticsearch \[2022-08-22T18:26:40,213\]\[ERROR\]\[o.e.b… --- ## [Elasticsearch\_1 exited with code 1](https://discuss.elastic.co/t/elasticsearch-1-exited-with-code-1/313416)
**Author:** [@boot4root](https://discuss.elastic.co/u/boot4root)\ **Replies:** 1\ **Last updated:** [September 1, 2022, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-1-exited-with-code-1/313416 "2022-09-01T07:43:46Z")
Hello, when I try to run elasticsearch and kibana through docker-compose, I get the following error. Elasticsearch\_1 exited with code 1 Here is manual with this settings. Elastiflow I tried different versions, I also… --- ## [Monitor kibana using metricbeat](https://discuss.elastic.co/t/monitor-kibana-using-metricbeat/313384)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 4\ **Last updated:** [September 1, 2022, 7:37am UTC](https://discuss.elastic.co/t/monitor-kibana-using-metricbeat/313384 "2022-09-01T07:37:32Z")
Hi Experts, I using ELK 7.16.2v. I am doing a cluster stack monitoring using metricbeat. I have installed metricbeat on kibana server and enable the kibana-xpack module , disbale the system module. Confgure kibana-xpa… --- ## [MetricBeat is not sending Kubernets node pods etc data but getting system information](https://discuss.elastic.co/t/metricbeat-is-not-sending-kubernets-node-pods-etc-data-but-getting-system-information/313415)
**Author:** [@saifulshihab](https://discuss.elastic.co/u/saifulshihab)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 7:00am UTC](https://discuss.elastic.co/t/metricbeat-is-not-sending-kubernets-node-pods-etc-data-but-getting-system-information/313415 "2022-09-01T07:00:12Z")
Hellow I configured metric beat to minitor kubernets cluster node pods deployments. But it is not working as documents. How to check what is the missing in my configuration. I need to troubleshoot the issue. But there … --- ## [Preloading all documents to filesystem cache](https://discuss.elastic.co/t/preloading-all-documents-to-filesystem-cache/313381)
**Author:** [@9guar1](https://discuss.elastic.co/u/9guar1)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 6:51am UTC](https://discuss.elastic.co/t/preloading-all-documents-to-filesystem-cache/313381 "2022-09-01T06:51:12Z")
Hi community, Is there any possibility to preload all documents to the filesystem cache using 'index.store.preload' to increase search perfomance of the fetch phase? Search query is below: POST /structure/\_search?type… --- ## [Kibana server is not ready yet, error : Unable to get issuer certificate](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-unable-to-get-issuer-certificate/313218)
**Author:** [@Florian-LB](https://discuss.elastic.co/u/Florian-LB)\ **Replies:** 2\ **Last updated:** [September 1, 2022, 6:47am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-error-unable-to-get-issuer-certificate/313218 "2022-09-01T06:47:47Z")
Hello, I’ve been struggling for some time with the SSL configuration of Kibana. I need to set the elasticsearch.ssl.verificationMode on "full" or on "certificate" but Kibana is only working in "none". When I start the… --- ## [Apache integration - own log pattern](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357)
**Author:** [@elkuser1234](https://discuss.elastic.co/u/elkuser1234)\ **Replies:** 1\ **Last updated:** [September 1, 2022, 5:32am UTC](https://discuss.elastic.co/t/apache-integration-own-log-pattern/313357 "2022-09-01T05:32:56Z")
Hi I used elk stack 8.3 I would like to use the apache integration, but the log format is non-standard. access\_log\_pattern=%{X-Forwarded-For}i %h %l %u %t \\"%r\\" %s %b \\"%{Referer}i\\" \\"%{User-Agent}i\\" I get the mes… --- ## [Fetch values from excel sheet in Logstash](https://discuss.elastic.co/t/fetch-values-from-excel-sheet-in-logstash/313406)
**Author:** [@ImranArif](https://discuss.elastic.co/u/ImranArif)\ **Replies:** 0\ **Last updated:** [September 1, 2022, 3:46am UTC](https://discuss.elastic.co/t/fetch-values-from-excel-sheet-in-logstash/313406 "2022-09-01T03:46:05Z")
Hi all, I am parsing CDN logs, which contains a web url that serves images to users, and push these logs to Elasticsearch using Logstash. I want to add a field 'site region' in the logs which contains the region that we… --- ## [Parse Nested Airflow Logs with Logstash](https://discuss.elastic.co/t/parse-nested-airflow-logs-with-logstash/313401)
**Author:** [@Chma](https://discuss.elastic.co/u/Chma)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 10:58pm UTC](https://discuss.elastic.co/t/parse-nested-airflow-logs-with-logstash/313401 "2022-08-31T22:58:08Z")
I am new to Logstash and ELK as a whole. I am trying to send my airflow logs to Logstash. I am confused on how to configure my configuration file, especially because I have several (nested) log files. My airflow is depl… --- ## [Can I push logs to logstash via an API endpoint?](https://discuss.elastic.co/t/can-i-push-logs-to-logstash-via-an-api-endpoint/313399)
**Author:** [@clarkmcc](https://discuss.elastic.co/u/clarkmcc)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 10:43pm UTC](https://discuss.elastic.co/t/can-i-push-logs-to-logstash-via-an-api-endpoint/313399 "2022-08-31T22:43:33Z")
We have ~30 services that run on customer-premise (not our premise) and we'd like to push logs from our service on their machine to an Elasticsearch instance for debugging and analysis. We'd like to avoid having to insta… --- ## [Empty array getting dropped from output, how do I keep it?](https://discuss.elastic.co/t/empty-array-getting-dropped-from-output-how-do-i-keep-it/313392)
**Author:** [@Ben-G](https://discuss.elastic.co/u/Ben-G)\ **Replies:** 2\ **Last updated:** [August 31, 2022, 10:02pm UTC](https://discuss.elastic.co/t/empty-array-getting-dropped-from-output-how-do-i-keep-it/313392 "2022-08-31T22:02:12Z")
The input to my logstash is is populating \[Current\]\[Alarms\] from the input ...\\"Alarms\\":null... when there are no alarms, and when there are alarms then it is a list. When there are no alarms, I still want to see "Ala… --- ## [Get the latest index of a certain form in elasticsearch](https://discuss.elastic.co/t/get-the-latest-index-of-a-certain-form-in-elasticsearch/313379)
**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:22pm UTC](https://discuss.elastic.co/t/get-the-latest-index-of-a-certain-form-in-elasticsearch/313379 "2022-08-31T21:22:15Z")
I am periodically training an anomaly detection model and I am saving it in elasticsearch index of the form 'anomaly\_detection\_model-' + date\_model\_trained. This means that I am ending up with indices of the form: anomal… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/313385)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 9:07pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/313385 "2022-08-31T21:07:55Z")
upgraded Elasticsearch from 7.10 to 7.17. After Upgrade, the ES & kibana nodes are up but when trying to access the Kibana frontend, gets error"Kibana server is not ready yet". I checked logs at \\var\\logs\\messages\\ and… --- ## [Using a single Life Cycle Policy for many Index Templates](https://discuss.elastic.co/t/using-a-single-life-cycle-policy-for-many-index-templates/311236)
**Author:** [@dturner](https://discuss.elastic.co/u/dturner)\ **Replies:** 4\ **Last updated:** [August 31, 2022, 8:03pm UTC](https://discuss.elastic.co/t/using-a-single-life-cycle-policy-for-many-index-templates/311236 "2022-08-31T20:03:55Z")
Hello, We are using Elastic agent with different policies for different integrations. This has created many index templates for these different data sources. Each one of these index templates is using a different index … --- ## [Switching from cert-util to cert-manager](https://discuss.elastic.co/t/switching-from-cert-util-to-cert-manager/312195)
**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\ **Replies:** 1\ **Last updated:** [August 31, 2022, 7:52pm UTC](https://discuss.elastic.co/t/switching-from-cert-util-to-cert-manager/312195 "2022-08-31T19:52:50Z")
Elasticsearch version: 7.6.2 Running it with Helm on AWS EKS Old setup (v1): cert-util is run manually (some makefile/script) before helm install in CI. Not using InitContainers Current setup (v2): helm chart now crea… --- ## [Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/312954)
**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\ **Replies:** 14\ **Last updated:** [August 31, 2022, 5:17pm UTC](https://discuss.elastic.co/t/failed-to-connect-to-localhost-port-9200-connection-refused/312954 "2022-08-31T17:17:08Z")
I am trying to install Elasticsearch 8.4.0 and kibana on Rocky Linux 8.6 using this article. Both elasticsearch and kibana are active and running but running this cmd: curl -X GET 'http://localhost:9200' I get curl: … --- ## [How to reset Fleet Server default output configuration?](https://discuss.elastic.co/t/how-to-reset-fleet-server-default-output-configuration/313178)
**Author:** [@GustavoPires](https://discuss.elastic.co/u/GustavoPires)\ **Replies:** 7\ **Last updated:** [August 31, 2022, 4:34pm UTC](https://discuss.elastic.co/t/how-to-reset-fleet-server-default-output-configuration/313178 "2022-08-31T16:34:55Z")
Hello, I am trying to change default output fleet server configuration, It is possible? I don't want to reinstall all my elasticsearch again. --- ## [Best way to implement a daily based time series, where current day data is being refreshed](https://discuss.elastic.co/t/best-way-to-implement-a-daily-based-time-series-where-current-day-data-is-being-refreshed/313377)
**Author:** [@dashiad](https://discuss.elastic.co/u/dashiad)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 4:11pm UTC](https://discuss.elastic.co/t/best-way-to-implement-a-daily-based-time-series-where-current-day-data-is-being-refreshed/313377 "2022-08-31T16:11:00Z")
We're trying to find which would be the best way to handle this case: We are storing daily data from a remote source. This remote source updates the data several times per day, so we'd need to refresh the index too, for… --- ## [Kibana Generate CSV - Could Not Load Plugin](https://discuss.elastic.co/t/kibana-generate-csv-could-not-load-plugin/313298)
**Author:** [@JulieB](https://discuss.elastic.co/u/JulieB)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 3:44pm UTC](https://discuss.elastic.co/t/kibana-generate-csv-could-not-load-plugin/313298 "2022-08-31T15:44:54Z")
Hi there, I am trying to export some data using Share \> CSV Reports \> Generate CSV feature (see picture). Once the file is ready to download, a new tab would normally open and trigger the download of the CSV file. Howeve… --- ## [How to create users for file based auth and deploy using Helm Chart](https://discuss.elastic.co/t/how-to-create-users-for-file-based-auth-and-deploy-using-helm-chart/313374)
**Author:** [@Rohit\_Shrivastava](https://discuss.elastic.co/u/Rohit_Shrivastava)\ **Replies:** 0\ **Last updated:** [August 31, 2022, 3:38pm UTC](https://discuss.elastic.co/t/how-to-create-users-for-file-based-auth-and-deploy-using-helm-chart/313374 "2022-08-31T15:38:24Z")
Hi I wanted to know how should I automate the users file creation (file based authentication) with helm chart. Docs suggests to use elasticsearch-users cli, should I run an init container and run the script? Should I g… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=809) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=811)