# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=837

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 838

---

## [Error encrypted key](https://discuss.elastic.co/t/error-encrypted-key/311642)

<div class="topic-metadata">

**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 2:35pm UTC](https://discuss.elastic.co/t/error-encrypted-key/311642 "2022-08-08T14:35:32Z")

</div>

where do i get the encryption key?

---

## [Preselect filter during user search by text](https://discuss.elastic.co/t/preselect-filter-during-user-search-by-text/311648)

<div class="topic-metadata">

**Author:** [@Guillaume\_R](https://discuss.elastic.co/u/Guillaume_R)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 1:04pm UTC](https://discuss.elastic.co/t/preselect-filter-during-user-search-by-text/311648 "2022-08-08T13:04:41Z")

</div>

Hi all, I would like to know how to achieve this feature on e-commerce website : the user types "t-shirt woman red" for example. In the result, when I display the filter (using aggregation) I would like to "check" the c…

---

## [One shard is not assigned in TEST cluster](https://discuss.elastic.co/t/one-shard-is-not-assigned-in-test-cluster/311645)

<div class="topic-metadata">

**Author:** [@yasar](https://discuss.elastic.co/u/yasar)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 1:03pm UTC](https://discuss.elastic.co/t/one-shard-is-not-assigned-in-test-cluster/311645 "2022-08-08T13:03:46Z")

</div>

Hi team, In our test cluster, one shard could not assigned. could you please tell us how can we assign the unassigned shard in TEST cluster. If, is there any command or something to run the dev tool for assigning the un…

---

## [Locked Out of Kibana Superuser Can't Modify Index Settings](https://discuss.elastic.co/t/locked-out-of-kibana-superuser-cant-modify-index-settings/311424)

<div class="topic-metadata">

**Author:** [@bjmaynard01](https://discuss.elastic.co/u/bjmaynard01)\
**Replies:** 5\
**Last updated:** [August 8, 2022, 1:02pm UTC](https://discuss.elastic.co/t/locked-out-of-kibana-superuser-cant-modify-index-settings/311424 "2022-08-08T13:02:33Z")

</div>

I have a single node ELK instance that I am using for a pilot, and the .kibana\_security\_session\_1 index has index.blocks.read\_only\_allow\_delete set to true due to running low on disk space. I have tuned the setting to be…

---

## [Increased log retention for set of logs within an index](https://discuss.elastic.co/t/increased-log-retention-for-set-of-logs-within-an-index/311640)

<div class="topic-metadata">

**Author:** [@jsherne1](https://discuss.elastic.co/u/jsherne1)\
**Replies:** 3\
**Last updated:** [August 8, 2022, 12:38pm UTC](https://discuss.elastic.co/t/increased-log-retention-for-set-of-logs-within-an-index/311640 "2022-08-08T12:38:55Z")

</div>

Hi, is it possible to store logs within an index a greater period of time than other logs in the index? Scenario: Fleuntd collects container logs and stores them in an 'application' index in Elasticsearch The applicat…

---

## [How to add ingest pipelin to alerts connector](https://discuss.elastic.co/t/how-to-add-ingest-pipelin-to-alerts-connector/311643)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 12:08pm UTC](https://discuss.elastic.co/t/how-to-add-ingest-pipelin-to-alerts-connector/311643 "2022-08-08T12:08:29Z")

</div>

Hello, I want to use an ingest pipeline for indexing documents via alerts connection. Is it possible?

---

## [\[Elasticsearch 8.3\] Problem with the SSL encryption in the master node](https://discuss.elastic.co/t/elasticsearch-8-3-problem-with-the-ssl-encryption-in-the-master-node/311499)

<div class="topic-metadata">

**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\
**Replies:** 3\
**Last updated:** [August 8, 2022, 11:37am UTC](https://discuss.elastic.co/t/elasticsearch-8-3-problem-with-the-ssl-encryption-in-the-master-node/311499 "2022-08-08T11:37:47Z")

</div>

Hello , I'm trying to configure a cluster of 3 nodes with SSL enabled, I first created the master node, then I managed to add the other 2 nodes with the enrollment token. The issue is when I try to query the master nod…

---

## [Opensearch transform splitting array values to new events](https://discuss.elastic.co/t/opensearch-transform-splitting-array-values-to-new-events/311575)

<div class="topic-metadata">

**Author:** [@Akshay\_Kulkarni](https://discuss.elastic.co/u/Akshay_Kulkarni)\
**Replies:** 6\
**Last updated:** [August 8, 2022, 11:33am UTC](https://discuss.elastic.co/t/opensearch-transform-splitting-array-values-to-new-events/311575 "2022-08-08T11:33:47Z")

</div>

Hi, I'm transforming following event. But the values inside of array are splitting into the new events. { "\_index": "heal\_collated\_txn\_health\_2022.05", "\_type": "\_doc", "\_id": "LAUpboIBh6C…

---

## [Fleet AWS Billing integration](https://discuss.elastic.co/t/fleet-aws-billing-integration/311138)

<div class="topic-metadata">

**Author:** [@aricau](https://discuss.elastic.co/u/aricau)\
**Replies:** 8\
**Last updated:** [August 8, 2022, 11:22am UTC](https://discuss.elastic.co/t/fleet-aws-billing-integration/311138 "2022-08-08T11:22:54Z")

</div>

Hello all, I'm trying to collect billing data with the AWS Billing integration using the elastic agent managed by Fleet. Running version 8.3.3 The agent appears to be running fine, with valid secret access key and perm…

---

## [Broken data received on kibana from metricbeat prometheus module](https://discuss.elastic.co/t/broken-data-received-on-kibana-from-metricbeat-prometheus-module/311266)

<div class="topic-metadata">

**Author:** [@saif.khan](https://discuss.elastic.co/u/saif.khan)\
**Replies:** 3\
**Last updated:** [August 8, 2022, 9:59am UTC](https://discuss.elastic.co/t/broken-data-received-on-kibana-from-metricbeat-prometheus-module/311266 "2022-08-08T09:59:07Z")

</div>

I'm collecting data from 3 targets i.e my network devices through snmp\_exporter on prometheus, from there i'm integrating it in elastic and kibana through metricbeat prometheus module, the data is received but its broken…

---

## [Failed to authenticate with host "https://elastic:9200": Hostname/IP does not match certificat](https://discuss.elastic.co/t/failed-to-authenticate-with-host-https-elastic-9200-hostname-ip-does-not-match-certificat/308167)

<div class="topic-metadata">

**Author:** [@medch1](https://discuss.elastic.co/u/medch1)\
**Replies:** 13\
**Last updated:** [August 8, 2022, 8:58am UTC](https://discuss.elastic.co/t/failed-to-authenticate-with-host-https-elastic-9200-hostname-ip-does-not-match-certificat/308167 "2022-08-08T08:58:55Z")

</div>

Hello I was running Elastic on a pod in rancher kubernetes and Kibana in another one version 8.2.3 So I ended up in this with this log \[2022-06-25T16:15:56.848+00:00\]\[ERROR\]\[plugins.interactiveSetup.elasticsearch\]…

---

## [Use Metricbeat to monitor LXC containers](https://discuss.elastic.co/t/use-metricbeat-to-monitor-lxc-containers/311329)

<div class="topic-metadata">

**Author:** [@SamTV12345](https://discuss.elastic.co/u/SamTV12345)\
**Replies:** 13\
**Last updated:** [August 8, 2022, 8:13am UTC](https://discuss.elastic.co/t/use-metricbeat-to-monitor-lxc-containers/311329 "2022-08-08T08:13:45Z")

</div>

I'd like to use metricbeat to collect cpu and memory usage so that I can better monitor running applications and be alerted when an application is crashing in a loop. I used this code to start metricbeat in docker in the…

---

## [Node shutdown itself. How to find out why](https://discuss.elastic.co/t/node-shutdown-itself-how-to-find-out-why/311622)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 4\
**Last updated:** [August 8, 2022, 8:07am UTC](https://discuss.elastic.co/t/node-shutdown-itself-how-to-find-out-why/311622 "2022-08-08T08:07:07Z")

</div>

Hello, as the title suggests our test node shutdown itself. We came back from the weekend and the service was stopped. I searched through the logs but did not really find out any reason. The log just ends abruptly. I ch…

---

## [Password saved by default android Browser](https://discuss.elastic.co/t/password-saved-by-default-android-browser/311626)

<div class="topic-metadata">

**Author:** [@soumyarani0317](https://discuss.elastic.co/u/soumyarani0317)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 7:55am UTC](https://discuss.elastic.co/t/password-saved-by-default-android-browser/311626 "2022-08-08T07:55:02Z")

</div>

When I study about default browser in android, I see the password that saved by it does't encrypt. Is it security threat? Is there any way to an android application that reads these password and abused them (with respect…

---

## [Add data according to JSON file](https://discuss.elastic.co/t/add-data-according-to-json-file/311630)

<div class="topic-metadata">

**Author:** [@mehmetalix](https://discuss.elastic.co/u/mehmetalix)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 7:39am UTC](https://discuss.elastic.co/t/add-data-according-to-json-file/311630 "2022-08-08T07:39:49Z")

</div>

Hi, I'm ingesting data from database and trying to create new field and ingest data according to a JSON file. Let me give an example: I have field named 'type' and data in this field as 'cat', 'dog', 'flower'. Also ha…

---

## [Problem with two types of logs from one input port 513](https://discuss.elastic.co/t/problem-with-two-types-of-logs-from-one-input-port-513/311624)

<div class="topic-metadata">

**Author:** [@Arslonbek\_Toshev](https://discuss.elastic.co/u/Arslonbek_Toshev)\
**Replies:** 0\
**Last updated:** [August 8, 2022, 6:56am UTC](https://discuss.elastic.co/t/problem-with-two-types-of-logs-from-one-input-port-513/311624 "2022-08-08T06:56:20Z")

</div>

Good day everyone! Please help me with problem. I install Elastic 8.3. and try use only elastic agent with default integrations. The problem is on port 513 I receive logs from two different firewalls (fortinet and che…

---

## [Switch to another dashboard/internal site using href on a mark in vega](https://discuss.elastic.co/t/switch-to-another-dashboard-internal-site-using-href-on-a-mark-in-vega/310623)

<div class="topic-metadata">

**Author:** [@Sybye](https://discuss.elastic.co/u/Sybye)\
**Replies:** 4\
**Last updated:** [August 8, 2022, 6:33am UTC](https://discuss.elastic.co/t/switch-to-another-dashboard-internal-site-using-href-on-a-mark-in-vega/310623 "2022-08-08T06:33:05Z")

</div>

I'd like to switch to another dashboard or to the home screen when clicking a mark in a vega visualization. How am I supposed to define the href value? Relative paths are not working for me.. "href": {"value": "/app/h…

---

## [Labels in vertical histogram is too long, that it hides the graph](https://discuss.elastic.co/t/labels-in-vertical-histogram-is-too-long-that-it-hides-the-graph/311269)

<div class="topic-metadata">

**Author:** [@Abhishek\_Soni1](https://discuss.elastic.co/u/Abhishek_Soni1)\
**Replies:** 4\
**Last updated:** [August 8, 2022, 5:59am UTC](https://discuss.elastic.co/t/labels-in-vertical-histogram-is-too-long-that-it-hides-the-graph/311269 "2022-08-08T05:59:51Z")

</div>

As displayed in the graph, It hides the actual graphs. Is there any way to fix this? We are using version 7.8.0 Thanks in advance :slight\_smile:

---

## ['Elastic did not load properly' error from AdBlocker](https://discuss.elastic.co/t/elastic-did-not-load-properly-error-from-adblocker/310420)

<div class="topic-metadata">

**Author:** [@stevewritescode](https://discuss.elastic.co/u/stevewritescode)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 4:28am UTC](https://discuss.elastic.co/t/elastic-did-not-load-properly-error-from-adblocker/310420 "2022-08-08T04:28:33Z")

</div>

Recently I discovered that, in certain circumstances, some Kibana .js resources are blocked from loading by popular ad blockers. As an example, this entry in the commonly used EasyList ad block list can trigger on Kibana…

---

## [Yarn kbn bootstrap failed](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failed/311607)

<div class="topic-metadata">

**Author:** [@wwh2077](https://discuss.elastic.co/u/wwh2077)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 4:22am UTC](https://discuss.elastic.co/t/yarn-kbn-bootstrap-failed/311607 "2022-08-08T04:22:31Z")

</div>

I am trying to setup kibana 7.16 development environment and to bootstrap Kibana and install all the dependencies. Sadly, I've this message failed \[bootstrap\] failed I can't get the code from git using the git clone com…

---

## [Is there any way to change the size of points on Maps based on the number of logs?](https://discuss.elastic.co/t/is-there-any-way-to-change-the-size-of-points-on-maps-based-on-the-number-of-logs/311614)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 2\
**Last updated:** [August 8, 2022, 4:02am UTC](https://discuss.elastic.co/t/is-there-any-way-to-change-the-size-of-points-on-maps-based-on-the-number-of-logs/311614 "2022-08-08T04:02:44Z")

</div>

I am using Logstash's geoip filter to get geo\_points from my access logs. I am plotting these points on Maps, but the size of the points are all uniform. In the options, I have found Symbol size, but it only shows the …

---

## [Can i use jvm11 version for elasticsearch 8.3.2 version?](https://discuss.elastic.co/t/can-i-use-jvm11-version-for-elasticsearch-8-3-2-version/311616)

<div class="topic-metadata">

**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Replies:** 2\
**Last updated:** [August 8, 2022, 2:34am UTC](https://discuss.elastic.co/t/can-i-use-jvm11-version-for-elasticsearch-8-3-2-version/311616 "2022-08-08T02:34:12Z")

</div>

Can i use jvm11 version for elasticsearch 8.3.2 version? i used ubuntu 20.04 version.

---

## ['./bin/kibana' means automatic starting?](https://discuss.elastic.co/t/bin-kibana-means-automatic-starting/311579)

<div class="topic-metadata">

**Author:** [@hellocomputer](https://discuss.elastic.co/u/hellocomputer)\
**Replies:** 4\
**Last updated:** [August 8, 2022, 2:33am UTC](https://discuss.elastic.co/t/bin-kibana-means-automatic-starting/311579 "2022-08-08T02:33:15Z")

</div>

hello! i want to know that command "./bin/kibana" it means automatic starting, when i reboot my server?

---

## [Unable to view geo.location on Kibana even though I have created an index template that includes geo.location](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 13\
**Last updated:** [August 8, 2022, 1:53am UTC](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477 "2022-08-08T01:53:58Z")

</div>

I am using Logstash's geoip filter to get location information from ip. As far as I can see from the Logstash output result (codec =\> rubydebug), I am getting geoip.location, but I cannot display it on Kibana. In order…

---

## [How setup cluster on two different vps](https://discuss.elastic.co/t/how-setup-cluster-on-two-different-vps/311516)

<div class="topic-metadata">

**Author:** [@Himan\_Yukubov](https://discuss.elastic.co/u/Himan_Yukubov)\
**Replies:** 1\
**Last updated:** [August 8, 2022, 12:55am UTC](https://discuss.elastic.co/t/how-setup-cluster-on-two-different-vps/311516 "2022-08-08T00:55:05Z")

</div>

I have vps\_master and vps\_node. When i try setup cluster - its show on vps\_node skipping cluster bootstrapping as local node does not match What's wrong in my config? version: '3.9' services: master: image: ela…

---

## [Filebeat setup: "Exiting: module system is configured but has no enabled filesets"](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584)

<div class="topic-metadata">

**Author:** [@JoeShabadu2000](https://discuss.elastic.co/u/JoeShabadu2000)\
**Replies:** 2\
**Last updated:** [August 7, 2022, 11:41pm UTC](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584 "2022-08-07T23:41:43Z")

</div>

I'm trying to set up filebeat on Ubuntu, to send system log data to Logstash. I am having issues setting up the "filebeat system" module. Upon running: sudo filebeat setup --pipelines --modules system I receive the er…

---

## [Very complex filter (like group by)?](https://discuss.elastic.co/t/very-complex-filter-like-group-by/311585)

<div class="topic-metadata">

**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\
**Replies:** 1\
**Last updated:** [August 7, 2022, 11:26pm UTC](https://discuss.elastic.co/t/very-complex-filter-like-group-by/311585 "2022-08-07T23:26:50Z")

</div>

Hi Guys, I need an help because I cannot find a way to filter a simple datatable. My index pattern consists of the following csv: ID;Class;User Age 1234;A;18 1235;A;23 1236;B;25 I would like to set a filter in the to…

---

## [ElasticSearch location in a docker](https://discuss.elastic.co/t/elasticsearch-location-in-a-docker/311572)

<div class="topic-metadata">

**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\
**Replies:** 1\
**Last updated:** [August 7, 2022, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-location-in-a-docker/311572 "2022-08-07T23:19:59Z")

</div>

It's a basic question but is /var/lib/docker/containers/ \<xxxxxx\<-json.log files\> the only location for elasticsearch logs installed on a docker? Also, How can i see the logs in kibana. Filebeat is not yet setup

---

## [Regexp is ignored in must\_not clause](https://discuss.elastic.co/t/regexp-is-ignored-in-must-not-clause/311544)

<div class="topic-metadata">

**Author:** [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\
**Replies:** 0\
**Last updated:** [August 5, 2022, 1:46pm UTC](https://discuss.elastic.co/t/regexp-is-ignored-in-must-not-clause/311544 "2022-08-05T13:46:42Z")

</div>

I'm trying to exclude a log-entry from showing up in my hits, but it is necessary to use regular expression (expensive is allowed in configuration). The log entry follows the pattern: message:Aug 2 05:01:14 \<hostname\> \<…

---

## [Beats index stopped rotating](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 4\
**Last updated:** [August 7, 2022, 11:03pm UTC](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353 "2022-08-07T23:03:26Z")

</div>

I am having an issue with my beats index rotating I have the following configurations setup and looks like my data is not going into the right index. Any ideas what may be wrong?

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=836)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=838)
