# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=847 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 848 --- ## [Oracle Database monitoring by Elasticsearch, Logstash Pipeline](https://discuss.elastic.co/t/oracle-database-monitoring-by-elasticsearch-logstash-pipeline/310895)
**Author:** [@aji.shinde7](https://discuss.elastic.co/u/aji.shinde7)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 3:33pm UTC](https://discuss.elastic.co/t/oracle-database-monitoring-by-elasticsearch-logstash-pipeline/310895 "2022-07-28T15:33:39Z")
Hello Experts, I am trying to monitor Oracle Database (which is on a Linux Server) by Elasticsearch. I have created a Logstash Config file which I am running on my own machine. I have few questions; Please suggest / an… --- ## [ELASTIC SEARCH GRAFANA CONFIGURE](https://discuss.elastic.co/t/elastic-search-grafana-configure/310909)
**Author:** [@Vitoria\_De\_Lara](https://discuss.elastic.co/u/Vitoria_De_Lara)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 11:08pm UTC](https://discuss.elastic.co/t/elastic-search-grafana-configure/310909 "2022-07-28T23:08:48Z")
how to connect a file in elasticsearch to send data to grafana? --- ## [Upgrade from 7.5 to 8.X, (APM Server)](https://discuss.elastic.co/t/upgrade-from-7-5-to-8-x-apm-server/310928)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 11:06pm UTC](https://discuss.elastic.co/t/upgrade-from-7-5-to-8-x-apm-server/310928 "2022-07-28T23:06:08Z")
Hi we have to upgrade elasticsearch from 7.5 to 8.X, the problem is that one of our clients uses APM and we dont have access to change the APM agents intalled on our clients machines, so we have to tell them what to do. … --- ## [Downgrading License](https://discuss.elastic.co/t/downgrading-license/310931)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 10\ **Last updated:** [July 28, 2022, 10:52pm UTC](https://discuss.elastic.co/t/downgrading-license/310931 "2022-07-28T22:52:49Z")
Hi, we have a cluster with Platinium Licence, we are creating a new cluster and want to move the license there, an leave the old cluster with just a basic license. is there a way to downgrade the license to Basic, so the… --- ## [Elastic Memory crossed function](https://discuss.elastic.co/t/elastic-memory-crossed-function/309417)
**Author:** [@Rajesh.Banka](https://discuss.elastic.co/u/Rajesh.Banka)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 7:02pm UTC](https://discuss.elastic.co/t/elastic-memory-crossed-function/309417 "2022-07-28T19:02:24Z")
Hi Team, I would like to raise a ticket on ELK Watcher, which need to give some alert on the crossed memory function. so, please give an access to do it or help me in raising it. --- ## [How do you extract a Watcher's 'state', 'status' or 'execution\_state' from ctx](https://discuss.elastic.co/t/how-do-you-extract-a-watchers-state-status-or-execution-state-from-ctx/309952)
**Author:** [@ameindel](https://discuss.elastic.co/u/ameindel)\ **Replies:** 3\ **Last updated:** [July 28, 2022, 6:48pm UTC](https://discuss.elastic.co/t/how-do-you-extract-a-watchers-state-status-or-execution-state-from-ctx/309952 "2022-07-28T18:48:54Z")
Hello there! I'm currently trying to create a Watcher that has a 'condition' that will resolve to true when the Watcher execution fails (checks for a "failed" state). I have a Teams webhook that works, and I would like … --- ## [Incoming syslog date missing in timestamp](https://discuss.elastic.co/t/incoming-syslog-date-missing-in-timestamp/310916)
**Author:** [@Giridharan\_C](https://discuss.elastic.co/u/Giridharan_C)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 6:48pm UTC](https://discuss.elastic.co/t/incoming-syslog-date-missing-in-timestamp/310916 "2022-07-28T18:48:50Z")
Hi, I'm receiving Syslog from logstash pipeline and that doesn't have a date field. How can I manipulate the date using the system's current date by matching "message\_time"? "message\_time" =\> "13:51:10" --- ## [When logstash is not storing the logs it receive, what is present in pipeline of logstah?](https://discuss.elastic.co/t/when-logstash-is-not-storing-the-logs-it-receive-what-is-present-in-pipeline-of-logstah/310908)
**Author:** [@rravitech](https://discuss.elastic.co/u/rravitech)\ **Replies:** 3\ **Last updated:** [July 28, 2022, 6:43pm UTC](https://discuss.elastic.co/t/when-logstash-is-not-storing-the-logs-it-receive-what-is-present-in-pipeline-of-logstah/310908 "2022-07-28T18:43:05Z")
When logstash is not storing the logs it receive, what is present in pipeline of logstah? I am just trying to reload the pipeline (or delete some entries) when the pipeline is full or blocked, due to the unavailability … --- ## [SNMPv3 Poller Input - Multiple hosts input](https://discuss.elastic.co/t/snmpv3-poller-input-multiple-hosts-input/310327)
**Author:** [@Giridharan\_C](https://discuss.elastic.co/u/Giridharan_C)\ **Replies:** 2\ **Last updated:** [July 28, 2022, 6:28pm UTC](https://discuss.elastic.co/t/snmpv3-poller-input-multiple-hosts-input/310327 "2022-07-28T18:28:16Z")
Hi, I want to collect logs using an SNMP input filter where logstash needs to poll the SNMP events using OIDs. I have successfully created an SNMP input filter and can fetch/poll events from one device. My question is h… --- ## [Question regarding Java High Level REST Client moving forward](https://discuss.elastic.co/t/question-regarding-java-high-level-rest-client-moving-forward/310805)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [July 28, 2022, 5:54pm UTC](https://discuss.elastic.co/t/question-regarding-java-high-level-rest-client-moving-forward/310805 "2022-07-28T17:54:09Z")
Is this deprecation only for java? I am still a little bit baffled by this change. Is http rest call going to be removed in the future? What about python library? We are running version 7.15 now. We typically upgrad… --- ## [New ELK Setup](https://discuss.elastic.co/t/new-elk-setup/310784)
**Author:** [@schandup](https://discuss.elastic.co/u/schandup)\ **Replies:** 5\ **Last updated:** [July 28, 2022, 5:52pm UTC](https://discuss.elastic.co/t/new-elk-setup/310784 "2022-07-28T17:52:50Z")
Hi Team, I am a brand new user to elastic community, I'm planning to setup ELK environment in our environment. Before to this I would like to know the different components which we have in ELK observability setup along … --- ## [Parse\_origination\_date definition for this key is missing](https://discuss.elastic.co/t/parse-origination-date-definition-for-this-key-is-missing/310910)
**Author:** [@HeTvaM](https://discuss.elastic.co/u/HeTvaM)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 4:46pm UTC](https://discuss.elastic.co/t/parse-origination-date-definition-for-this-key-is-missing/310910 "2022-07-28T16:46:57Z")
I am trying to update my template for indexes. But I get the following error: In the last version of this template, I added the parse\_origination\_date parameter, but there was no problem with saving then. Here are t… --- ## [How to manage Elasticsearch data across multiple indices with Filebeat, ILM,](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-to-manage-elasticsearch-data-across-multiple-indices-with-filebeat-ilm/310901 "2022-07-28T15:51:39Z")
https://www.elastic.co/blog/how-to-manage-elasticsearch-data-multiple-indices-filebeat-ilm-data-stream I have read this through but cannot seem to get it to work. My current issue is that logs are being written but the… --- ## [Getting unusual data during aggregation and curation in Elasticsearch](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899)
**Author:** [@Anika\_Sultana](https://discuss.elastic.co/u/Anika_Sultana)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 3:41pm UTC](https://discuss.elastic.co/t/getting-unusual-data-during-aggregation-and-curation-in-elasticsearch/310899 "2022-07-28T15:41:28Z")
Hi, I am using Elasticsearch 7.4. I noticed some unexpected scenarios during data aggregation and data curation. Let me explain the scenario. I have 100 user\_id and among them are AA, AB, AC, and AD. Now if I try to ag… --- ## [Difference between discover section queries and search requests by CONSOLE](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897)
**Author:** [@Purnima\_J](https://discuss.elastic.co/u/Purnima_J)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 3:38pm UTC](https://discuss.elastic.co/t/difference-between-discover-section-queries-and-search-requests-by-console/310897 "2022-07-28T15:38:05Z")
Hi, Does the queries that I run in discover as filters retrieve the results in a way of cache? I mean does it not hit the elasticsearch indices like a normal search requests in CONSOLE section? Thanks, Purnima --- ## [Is it possible to create a single document with an array of objects?](https://discuss.elastic.co/t/is-it-possible-to-create-a-single-document-with-an-array-of-objects/310616)
**Author:** [@Wellington\_Bezerra](https://discuss.elastic.co/u/Wellington_Bezerra)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 3:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-single-document-with-an-array-of-objects/310616 "2022-07-28T15:09:05Z")
I'm creating a query to feed my index that has a field in common and I wanted to include all values ​​with the same field in a single document. Example SQL DATA: ID NAME CODE ACTIVE QTD PROD 181304… --- ## [Failed to obtain node locks when starting elasticsearch](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892)
**Author:** [@Leonardo\_Henrique](https://discuss.elastic.co/u/Leonardo_Henrique)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 3:06pm UTC](https://discuss.elastic.co/t/failed-to-obtain-node-locks-when-starting-elasticsearch/310892 "2022-07-28T15:06:21Z")
Some background: I had an elasticsearch installed in my CentOS with yum. After I uninstalled that with yum remove. Right now, I want to run elasticsearch in the same machine, but the error below appears when I run sudo s… --- ## [Monitoring ELK](https://discuss.elastic.co/t/monitoring-elk/310887)
**Author:** [@escanor\_sama](https://discuss.elastic.co/u/escanor_sama)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 2:53pm UTC](https://discuss.elastic.co/t/monitoring-elk/310887 "2022-07-28T14:53:06Z")
Hi everyone, so I installed the ELK stack 8.2 for my cluster with 11 nodes, and I want to know if there is any possibility to monitor the stack, for example if ElasticSearch or kibana shut down or something like this I w… --- ## [Httpjson Input](https://discuss.elastic.co/t/httpjson-input/310884)
**Author:** [@Hani\_Atalla](https://discuss.elastic.co/u/Hani_Atalla)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 2:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884 "2022-07-28T14:37:38Z")
I am configuring an HTTPJSON Input from Fleet using the UI and doing a POST on a REST endpoint. I need to send a body in the request. The documentation isn't too clear about the format it should be in inside the request … --- ## [HTTP output plugin failed to execute](https://discuss.elastic.co/t/http-output-plugin-failed-to-execute/310878)
**Author:** [@tylersiemers](https://discuss.elastic.co/u/tylersiemers)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 2:08pm UTC](https://discuss.elastic.co/t/http-output-plugin-failed-to-execute/310878 "2022-07-28T14:08:24Z")
Trying to use the http output plugin and have some basic newbie questions on the payload. I am getting these errors when trying to use the plugin. Jul 28 13:57:00 nt-logstash logstash\[335749\]: \[2022-07-28T13:57:00,180\]\[… --- ## [Alerting API. Where can I find alert\_id?](https://discuss.elastic.co/t/alerting-api-where-can-i-find-alert-id/310730)
**Author:** [@oandreiev](https://discuss.elastic.co/u/oandreiev)\ **Replies:** 3\ **Last updated:** [July 28, 2022, 1:17pm UTC](https://discuss.elastic.co/t/alerting-api-where-can-i-find-alert-id/310730 "2022-07-28T13:17:01Z")
Hello, I'm trying to use Kibana's alerting api for muting an alert. It looks like this: POST \:\/api/alerting/rule/\/alert/\/\_mute Where I can find the alert\_id? I've thought that I … --- ## [Display text in kibana pretty](https://discuss.elastic.co/t/display-text-in-kibana-pretty/310525)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 6\ **Last updated:** [July 28, 2022, 12:25pm UTC](https://discuss.elastic.co/t/display-text-in-kibana-pretty/310525 "2022-07-28T12:25:19Z")
Hi, i use the elastic together with kibana. Success and error messages are saved in the logs into the elastic. So there is an attribute errorState, which can be true or false. In addition, there is an errorMessage attri… --- ## [Eland error after upgrading Elastic](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858)
**Author:** [@mruiter](https://discuss.elastic.co/u/mruiter)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 11:25am UTC](https://discuss.elastic.co/t/eland-error-after-upgrading-elastic/310858 "2022-07-28T11:25:48Z")
After upgrading ElasticSearch from version 8.3.1 to 8.3.2 none of my Eland/Pandas code seems to work anymore. The thing that seems to cause the error is converting the Eland object to Pandas using .to\_pandas() import el… --- ## [How to run packetbeat as non-root in Kubernetes?](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862)
**Author:** [@yurikizio](https://discuss.elastic.co/u/yurikizio)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 11:55am UTC](https://discuss.elastic.co/t/how-to-run-packetbeat-as-non-root-in-kubernetes/310862 "2022-07-28T11:55:23Z")
Hi, I want to run packetbeat as non-root user because of security issue and I didn't find any solution how to do it. I tried to use these securityContext settings and I received this error. containers: - name:… --- ## [How to use BulkProcessor in Version 8.x.x?](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708)
**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\ **Replies:** 2\ **Last updated:** [July 28, 2022, 11:54am UTC](https://discuss.elastic.co/t/how-to-use-bulkprocessor-in-version-8-x-x/309708 "2022-07-28T11:54:23Z")
Hello, in this Video: "Introduction into the Java HTTP Elasticsearch REST client- April 23, 2020 Elastic Meetup" from Official Elastic Community at Timeindex 17:23 it is showing the BulkProcessor. How to… --- ## [Changing elasticsearch FS repository path](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658)
**Author:** [@amirmono](https://discuss.elastic.co/u/amirmono)\ **Replies:** 4\ **Last updated:** [July 28, 2022, 11:26am UTC](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658 "2022-07-28T11:26:15Z")
I'm using elastiSearch 8.3 on a windows machine, and created a shared file system repository - my\_repo: PUT \_snapshot/my\_repo { "type": "fs", "settings": { "location": "relative\_path" … --- ## [A way to ensure additional field will be with correct type inside index](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 4\ **Last updated:** [July 28, 2022, 11:11am UTC](https://discuss.elastic.co/t/a-way-to-ensure-additional-field-will-be-with-correct-type-inside-index/310770 "2022-07-28T11:11:20Z")
Hello, I was using the scripted field to get a date field from system.uptime.duration.ms field value. I used below painless script. String val = "system.uptime.duration.ms"; if (doc\[val\] != null){ if (doc\[val\]… --- ## [Unable to convert fields into DATE type in Logstash](https://discuss.elastic.co/t/unable-to-convert-fields-into-date-type-in-logstash/310830)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 10:35am UTC](https://discuss.elastic.co/t/unable-to-convert-fields-into-date-type-in-logstash/310830 "2022-07-28T10:35:28Z")
Hello team, I am unbale to convert field into data type. Can you please help me on this. Format is coming as Text only Sample Log: CIG,CCI05\_05\_NRW\_22102020043728\_000014635.txt,26/07/2022 04:37:50,26/07/2022 04:42:12,… --- ## [Unable to integrate logstash to salesforce](https://discuss.elastic.co/t/unable-to-integrate-logstash-to-salesforce/310850)
**Author:** [@Ayaan\_Shaik](https://discuss.elastic.co/u/Ayaan_Shaik)\ **Replies:** 0\ **Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/unable-to-integrate-logstash-to-salesforce/310850 "2022-07-28T10:13:21Z")
Hi, I'm Trying to integrate salesforce to the logstash for data log ingest into ELK stack, But i'm not able connect succefully to the logstash salesforce connection. I have done connected app as per elastic doc and the… --- ## [Automatically export/import saved objects in kibana](https://discuss.elastic.co/t/automatically-export-import-saved-objects-in-kibana/310732)
**Author:** [@BaptisteA](https://discuss.elastic.co/u/BaptisteA)\ **Replies:** 1\ **Last updated:** [July 28, 2022, 10:13am UTC](https://discuss.elastic.co/t/automatically-export-import-saved-objects-in-kibana/310732 "2022-07-28T10:13:58Z")
Hello, I work with the kibana version 8.3.1 on a docker container and I want to find a solution to export and saved my dashboards automatically on my computer. And import them when I restart Kibana. For the moment I tr… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=846) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=848)