# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=818 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 819 --- ## [Runtime Environment Requirement for FS Crawler](https://discuss.elastic.co/t/runtime-environment-requirement-for-fs-crawler/312753)
**Author:** [@zxuz111](https://discuss.elastic.co/u/zxuz111)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 12:07pm UTC](https://discuss.elastic.co/t/runtime-environment-requirement-for-fs-crawler/312753 "2022-08-25T12:07:39Z")
We are planning to deploy FS Crawler to the VM on Azure, and I am trying to provisioning the VM. Here is the information to support the provision: OS: Ubuntu 20.4 PDF files total size: 1.5 TB FS Crawler Schedule: Set a… --- ## [Filebeatt doesn't create multiple index](https://discuss.elastic.co/t/filebeatt-doesnt-create-multiple-index/312717)
**Author:** [@pauldon2](https://discuss.elastic.co/u/pauldon2)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 12:00pm UTC](https://discuss.elastic.co/t/filebeatt-doesnt-create-multiple-index/312717 "2022-08-25T12:00:26Z")
I use elasticsearch 8.3.3 and filebeat 8.3.3 I try read logs from different docker contaiters by using filebeat and when direct write to different indices to elasticsearch. My filebeat.yml # =========================… --- ## [Can Elasticsearch return position of the text within document](https://discuss.elastic.co/t/can-elasticsearch-return-position-of-the-text-within-document/312901)
**Author:** [@Dinesh\_Zende](https://discuss.elastic.co/u/Dinesh_Zende)\ **Replies:** 4\ **Last updated:** [August 25, 2022, 11:45am UTC](https://discuss.elastic.co/t/can-elasticsearch-return-position-of-the-text-within-document/312901 "2022-08-25T11:45:59Z")
I have created index with the attributes \, where the contents are the page content of the document. When I search for the particular query, it returns the appropriate Filename, Pageno. But to b… --- ## [Failed to setup SSL Elasticsearch](https://discuss.elastic.co/t/failed-to-setup-ssl-elasticsearch/312775)
**Author:** [@Sathiya](https://discuss.elastic.co/u/Sathiya)\ **Replies:** 3\ **Last updated:** [August 25, 2022, 11:40am UTC](https://discuss.elastic.co/t/failed-to-setup-ssl-elasticsearch/312775 "2022-08-25T11:40:59Z")
Hi All, I have tried to implement SSL for ELK which has 3 nodes in the cluster. So SAN certificate has been generated with all 3 node’s hostname and FQDN and exported as .pfx (PKCS12) format to configure same in elasti… --- ## [Index size based on Kibana Query Output](https://discuss.elastic.co/t/index-size-based-on-kibana-query-output/312909)
**Author:** [@hari\_priya1](https://discuss.elastic.co/u/hari_priya1)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 11:12am UTC](https://discuss.elastic.co/t/index-size-based-on-kibana-query-output/312909 "2022-08-25T11:12:15Z")
I have an index with a key field called adapter-id which I have to aggregate by adapter\_ids and calculate the index storage size for those buckets. Is it possible to get the index size concerning a certain key field in … --- ## [Permission error while trying to access file which is under mounted volume](https://discuss.elastic.co/t/permission-error-while-trying-to-access-file-which-is-under-mounted-volume/312881)
**Author:** [@cihady](https://discuss.elastic.co/u/cihady)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 11:08am UTC](https://discuss.elastic.co/t/permission-error-while-trying-to-access-file-which-is-under-mounted-volume/312881 "2022-08-25T11:08:26Z")
I cant access the files that are in mounted volume elasticsearch | {"type": "server", "timestamp": "2022-08-25T07:52:51,332Z", "level": "ERROR", "component": "o.e.b.ElasticsearchUncaughtExceptionHandler", "cluster.na… --- ## [Elastic search issue with Open Distro](https://discuss.elastic.co/t/elastic-search-issue-with-open-distro/312886)
**Author:** [@smabdulazeez](https://discuss.elastic.co/u/smabdulazeez)\ **Replies:** 3\ **Last updated:** [August 25, 2022, 10:48am UTC](https://discuss.elastic.co/t/elastic-search-issue-with-open-distro/312886 "2022-08-25T10:48:34Z")
we have defined the following in .ini file: Assigned Values: opendistro\_security.ssl.http.enabled= True Kesystore type = PKCS12 keystore\_filepath = /relativepath.pfx truststore\_type = PKCS12 truststore-filepath =/relati… --- ## [Elastic-agent osquery through logstash doesn't work](https://discuss.elastic.co/t/elastic-agent-osquery-through-logstash-doesnt-work/312783)
**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\ **Replies:** 3\ **Last updated:** [August 25, 2022, 10:31am UTC](https://discuss.elastic.co/t/elastic-agent-osquery-through-logstash-doesnt-work/312783 "2022-08-25T10:31:05Z")
Hello. We are managing Elastic Agents in Fleet. Entire Elastic Stack is on version 8.3.3. We have problems doing osqueries in Kibana- the query seems to be successful but we get no results and no indexes are created: "… --- ## [Serveur status RED](https://discuss.elastic.co/t/serveur-status-red/312891)
**Author:** [@Joachim\_Rodrigues](https://discuss.elastic.co/u/Joachim_Rodrigues)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 10:16am UTC](https://discuss.elastic.co/t/serveur-status-red/312891 "2022-08-25T10:16:07Z")
Hi When i run : GET /\_cluster/health I can see that the cluster is RED : { "cluster\_name" : "es-monit-cluster", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 7, "number\_of\_data\_nodes" : 5, "acti… --- ## [Can´t remove mapping from index template](https://discuss.elastic.co/t/can-t-remove-mapping-from-index-template/312900)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 10:13am UTC](https://discuss.elastic.co/t/can-t-remove-mapping-from-index-template/312900 "2022-08-25T10:13:31Z")
Hello, In an effort to trying to reduce the index size, i am removing unnecessary mapping from the index template. In Stack management -\> Index management -\> Templates -\> Edit template -\> Mappings i´m trying to delete … --- ## [Filebeat, nginx, elastic stack. Code printing out in Filebeat log](https://discuss.elastic.co/t/filebeat-nginx-elastic-stack-code-printing-out-in-filebeat-log/312899)
**Author:** [@marklad78](https://discuss.elastic.co/u/marklad78)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 10:11am UTC](https://discuss.elastic.co/t/filebeat-nginx-elastic-stack-code-printing-out-in-filebeat-log/312899 "2022-08-25T10:11:59Z")
Hi there folks, Hope you can help me as I'm at a bit of a loss. I've configured Filebeat v7.17.5 to enable the nginx module to scrape some logs located at /usr/local/kong/logs/access.log and /usr/local/kong/logs/error.… --- ## [Move data between data stream backing indexes](https://discuss.elastic.co/t/move-data-between-data-stream-backing-indexes/312803)
**Author:** [@KAFFEdev](https://discuss.elastic.co/u/KAFFEdev)\ **Replies:** 8\ **Last updated:** [August 25, 2022, 8:53am UTC](https://discuss.elastic.co/t/move-data-between-data-stream-backing-indexes/312803 "2022-08-25T08:53:59Z")
We collect telemetry from our systems and store each event in a service bus, ready for ingestion. We have also setup a data stream for ingesting telemetry events, with a corresponding ILM policy with automatic rollover, … --- ## [Sending Log from Fluentd to Filebeat or Logstash](https://discuss.elastic.co/t/sending-log-from-fluentd-to-filebeat-or-logstash/312829)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 8:49am UTC](https://discuss.elastic.co/t/sending-log-from-fluentd-to-filebeat-or-logstash/312829 "2022-08-25T08:49:53Z")
Having to take logs from Rhel 5.x machines and not being able to install neither Logstash nor Filebeat. I opted for the installation of Fluentd v0.12. So the question is: is it possible to send logs from Fluentd (Server … --- ## [Kibana dashboard is giving bad gateway](https://discuss.elastic.co/t/kibana-dashboard-is-giving-bad-gateway/312882)
**Author:** [@sandeep\_kumar5](https://discuss.elastic.co/u/sandeep_kumar5)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 8:26am UTC](https://discuss.elastic.co/t/kibana-dashboard-is-giving-bad-gateway/312882 "2022-08-25T08:26:38Z")
Hi I have set up kibana and elasticsearch thru helm chart on a k8s cluster with Xpack. my elstic search urls is someting like elk.abc.com and kibana url is like kibana.abc.com but kibana dashboard is giving me bad gate… --- ## [How to embed dashboard into website with auto login user?](https://discuss.elastic.co/t/how-to-embed-dashboard-into-website-with-auto-login-user/311619)
**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\ **Replies:** 4\ **Last updated:** [August 25, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-embed-dashboard-into-website-with-auto-login-user/311619 "2022-08-25T08:27:21Z")
I want to embed the dashboard with auto login user.. So when the user login into website, it automatically login into Kibana also with same user and role.. Is it possible? Thank you! --- ## [Logstash filter elasticsearch aggregation](https://discuss.elastic.co/t/logstash-filter-elasticsearch-aggregation/312883)
**Author:** [@Moshe\_Sharon1](https://discuss.elastic.co/u/Moshe_Sharon1)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 8:11am UTC](https://discuss.elastic.co/t/logstash-filter-elasticsearch-aggregation/312883 "2022-08-25T08:11:44Z")
Using logstash I am trying to filter elasticsearch index to get one of few documents with same value thanks --- ## [Unable to parse date value '2022-12-16T10:55:22.000Z' of property 'UserSign.signDate' with configured converters](https://discuss.elastic.co/t/unable-to-parse-date-value-2022-12-16t1022-000z-of-property-usersign-signdate-with-configured-converters/312876)
**Author:** [@zhou\_Mr](https://discuss.elastic.co/u/zhou_Mr)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 7:23am UTC](https://discuss.elastic.co/t/unable-to-parse-date-value-2022-12-16t1022-000z-of-property-usersign-signdate-with-configured-converters/312876 "2022-08-25T07:23:15Z")
Why can't the name attribute be mapped to the data in elasticsearch without adding it, but a date conversion error will occur after adding it？？？ @JsonFormat(pattern = "yyyy-MM-dd HH:mm:ss",timezone="GMT+8") @DateTimeFo… --- ## [How to get Combined results on tooltip in kibana maps](https://discuss.elastic.co/t/how-to-get-combined-results-on-tooltip-in-kibana-maps/311894)
**Author:** [@Ritikapawar](https://discuss.elastic.co/u/Ritikapawar)\ **Replies:** 3\ **Last updated:** [August 25, 2022, 6:53am UTC](https://discuss.elastic.co/t/how-to-get-combined-results-on-tooltip-in-kibana-maps/311894 "2022-08-25T06:53:50Z")
I'm visualizing map on kibana- guess if I have 4 layers on map shows the map for bihar state 2.shows the 10 pointers of hospitals in bihar. (fields: No of hospital, Name of hospital) Shows no of doctors in each ho… --- ## [Embedding Kibana dashboard iframe with authentication](https://discuss.elastic.co/t/embedding-kibana-dashboard-iframe-with-authentication/312370)
**Author:** [@bhushan\_pathak](https://discuss.elastic.co/u/bhushan_pathak)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 5:36am UTC](https://discuss.elastic.co/t/embedding-kibana-dashboard-iframe-with-authentication/312370 "2022-08-25T05:36:12Z")
Hello People, We are using Kibana v7.16.3 in our production. I know there are lots of similar questions asked regarding this topic and I have gone through many of them but they don't seem to answer my question. I am t… --- ## [Any way to make messages on discover readable like the observability version?](https://discuss.elastic.co/t/any-way-to-make-messages-on-discover-readable-like-the-observability-version/312780)
**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\ **Replies:** 2\ **Last updated:** [August 25, 2022, 5:39am UTC](https://discuss.elastic.co/t/any-way-to-make-messages-on-discover-readable-like-the-observability-version/312780 "2022-08-25T05:39:33Z")
Hello, In the discover panel, the messages look like this : I have to unfold the message to view in the same format as the log file : Is there a way to have it look like this by default ? Observality also has a … --- ## [Needs to drop audit beat data](https://discuss.elastic.co/t/needs-to-drop-audit-beat-data/312676)
**Author:** [@rajvel](https://discuss.elastic.co/u/rajvel)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 4:08am UTC](https://discuss.elastic.co/t/needs-to-drop-audit-beat-data/312676 "2022-08-25T04:08:49Z")
Hello Team, Have configured the auditbeat with file integraity module to capture the folder/file date and time change. In the same server have configured the filebeat to capture the application logs. both beats output… --- ## [Kibana Login with Elasticsearch Token](https://discuss.elastic.co/t/kibana-login-with-elasticsearch-token/312867)
**Author:** [@rebelweb](https://discuss.elastic.co/u/rebelweb)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 3:32am UTC](https://discuss.elastic.co/t/kibana-login-with-elasticsearch-token/312867 "2022-08-25T03:32:01Z")
Good Evening Everyone, This past weekend we finally upgraded our cluster from 7.5.2 to 7.17.5. We had a few hiccups along the way, but most of been resolved. We have one outstanding issue we're not finding a solution to… --- ## [Is the MACOS AARCH64 installation package for the MACOS m1 chip system?](https://discuss.elastic.co/t/is-the-macos-aarch64-installation-package-for-the-macos-m1-chip-system/312862)
**Author:** [@xqaiviwjxzw](https://discuss.elastic.co/u/xqaiviwjxzw)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 2:02am UTC](https://discuss.elastic.co/t/is-the-macos-aarch64-installation-package-for-the-macos-m1-chip-system/312862 "2022-08-25T02:02:16Z")
Is the MACOS AARCH64 installation package for the MACOS m1 chip system? MACOS AARCH64 --- ## [Kibana Error : Unable to retrieve version information from Elasticsearch nodes. Hostname/IP does not match certificate's altnames: IP: x.x.x.x is not in the cert's list: y.y.y.y](https://discuss.elastic.co/t/kibana-error-unable-to-retrieve-version-information-from-elasticsearch-nodes-hostname-ip-does-not-match-certificates-altnames-ip-x-x-x-x-is-not-in-the-certs-list-y-y-y-y/312740)
**Author:** [@Kamal\_Hamzat](https://discuss.elastic.co/u/Kamal_Hamzat)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 1:48am UTC](https://discuss.elastic.co/t/kibana-error-unable-to-retrieve-version-information-from-elasticsearch-nodes-hostname-ip-does-not-match-certificates-altnames-ip-x-x-x-x-is-not-in-the-certs-list-y-y-y-y/312740 "2022-08-25T01:48:00Z")
I am running an elasticsearch-8.3.3 and kibana-8.3.3 on my local machine. I had set up basic security for elastic stack and plus secured htpps traffic and both elasticsearch and kibana were working fine. In the set up I … --- ## [High Disk space utilization Elastic Indices](https://discuss.elastic.co/t/high-disk-space-utilization-elastic-indices/312855)
**Author:** [@AmarKolhapuri](https://discuss.elastic.co/u/AmarKolhapuri)\ **Replies:** 4\ **Last updated:** [August 25, 2022, 1:08am UTC](https://discuss.elastic.co/t/high-disk-space-utilization-elastic-indices/312855 "2022-08-25T01:08:53Z")
Hi All, On the ELK mount, we are seeing high diskspace utilization. We have docker image of elasticsearch 7.14 and indices is consuming 2.8T of space. Can we do housekeeping on this or update the ELK policy?. Or how to … --- ## [How to setup a single node cluster for Elasticsearch 8.3 on Windows 10 on a laptop?](https://discuss.elastic.co/t/how-to-setup-a-single-node-cluster-for-elasticsearch-8-3-on-windows-10-on-a-laptop/312530)
**Author:** [@JamesD\_7](https://discuss.elastic.co/u/JamesD_7)\ **Replies:** 13\ **Last updated:** [August 25, 2022, 12:54am UTC](https://discuss.elastic.co/t/how-to-setup-a-single-node-cluster-for-elasticsearch-8-3-on-windows-10-on-a-laptop/312530 "2022-08-25T00:54:07Z")
Hello All, I downloaded Elasticsearch 8.3 and Kibana 8.3 and I've run into lots of questions and issues about setting up a simple configuration to read a small CSV file. After running into some errors I started chang… --- ## [Using elastic 8.3.2 in java web services & connecting to multiple elastic nodes more than 3 nodes](https://discuss.elastic.co/t/using-elastic-8-3-2-in-java-web-services-connecting-to-multiple-elastic-nodes-more-than-3-nodes/312735)
**Author:** [@BaswaPrasad](https://discuss.elastic.co/u/BaswaPrasad)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 12:43am UTC](https://discuss.elastic.co/t/using-elastic-8-3-2-in-java-web-services-connecting-to-multiple-elastic-nodes-more-than-3-nodes/312735 "2022-08-25T00:43:31Z")
Hello, 'I am trying to connect to multiple elastic nodes by configuring the nodes details in properties and using them i am creating the Elasticsearchclient like below and creating for across the container and by aut… --- ## [Snapshot and restore](https://discuss.elastic.co/t/snapshot-and-restore/312723)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 1\ **Last updated:** [August 25, 2022, 12:42am UTC](https://discuss.elastic.co/t/snapshot-and-restore/312723 "2022-08-25T00:42:47Z")
Hi Is there a way if I can restore the snapshot that is stored on shared folder to a fresh independent elastic node. Here in my case i have taken a snapshot and stored on shared folder, now i created a independent elas… --- ## [Elasticsearch Java monitor](https://discuss.elastic.co/t/elasticsearch-java-monitor/312792)
**Author:** [@vnovotny98](https://discuss.elastic.co/u/vnovotny98)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 10:27am UTC](https://discuss.elastic.co/t/elasticsearch-java-monitor/312792 "2022-08-24T10:27:56Z")
Hello, I am using ES 7 in docker. Which tool are you using to monitor heap in docker? I have monitoring on the servers by Node Exporter but I need a tool to collect heap from running OS like JVM. Ideally, it would be m… --- ## [Threat Intel Problems](https://discuss.elastic.co/t/threat-intel-problems/312801)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 0\ **Last updated:** [August 24, 2022, 11:23am UTC](https://discuss.elastic.co/t/threat-intel-problems/312801 "2022-08-24T11:23:40Z")
I'm trying to know if my threatintel.yml is working right? Because i'm trying to use misp on threat intel but is don't display anything but the other modules are displaying information, for example, the abuseURL. misp: … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=817) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=819)