# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=872 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 873 --- ## [Python elasticsearch client : TypeError: index() got an unexpected keyword argument 'document'](https://discuss.elastic.co/t/python-elasticsearch-client-typeerror-index-got-an-unexpected-keyword-argument-document/308758)
**Author:** [@Jay\_Urbain](https://discuss.elastic.co/u/Jay_Urbain)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 7:04am UTC](https://discuss.elastic.co/t/python-elasticsearch-client-typeerror-index-got-an-unexpected-keyword-argument-document/308758 "2022-07-08T07:04:34Z")
elasticsearch: 8.3.1 python 3.9 Mac OS: Montery 12.4, ARM architecture. Running the getting started example from elasticsearch docs (Python Elasticsearch Client — Python Elasticsearch client 8.3.1 documentation) I'm g… --- ## [Deletion time - index managed by ilm](https://discuss.elastic.co/t/deletion-time-index-managed-by-ilm/308987)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 2\ **Last updated:** [July 8, 2022, 6:30am UTC](https://discuss.elastic.co/t/deletion-time-index-managed-by-ilm/308987 "2022-07-08T06:30:13Z")
We are using this ILM: PUT \_ilm/policy/ilm-custom { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { "set\_priority": { "priority": 10 } … --- ## [ElasticSearch POST \_doc and doc issue](https://discuss.elastic.co/t/elasticsearch-post-doc-and-doc-issue/309097)
**Author:** [@Even\_Zhang](https://discuss.elastic.co/u/Even_Zhang)\ **Replies:** 5\ **Last updated:** [July 8, 2022, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-post-doc-and-doc-issue/309097 "2022-07-08T05:36:58Z")
Hi everyone, I through curl to POST new index with doc like curl -XPOST -H "Content-Type: application/json" 'http://localhost:9200/portstats/doc/' -d '{"bytesReceived":0,"bytesSent":0,"@timestamp":"2022-07-10T23:43:01.… --- ## [Filebeat using IAM role for ECS tasks does not work](https://discuss.elastic.co/t/filebeat-using-iam-role-for-ecs-tasks-does-not-work/308851)
**Author:** [@masato](https://discuss.elastic.co/u/masato)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 5:01am UTC](https://discuss.elastic.co/t/filebeat-using-iam-role-for-ecs-tasks-does-not-work/308851 "2022-07-08T05:01:30Z")
Hi team, I've tried to run filebeat with the cisco module (umbrella) in the ECS task. The umbrella module is configured without access\_key\_id and secret\_access\_key. I think I can now achieve filebeat using the IAM role … --- ## [Elasticsearch-plugin install nlp plugin remain error](https://discuss.elastic.co/t/elasticsearch-plugin-install-nlp-plugin-remain-error/309015)
**Author:** [@zhigang9521](https://discuss.elastic.co/u/zhigang9521)\ **Replies:** 4\ **Last updated:** [July 8, 2022, 2:37am UTC](https://discuss.elastic.co/t/elasticsearch-plugin-install-nlp-plugin-remain-error/309015 "2022-07-08T02:37:45Z")
appuser@elasticsearch:~/app/elasticsearch-7.14.1$ ./bin/elasticsearch-plugin install file:///data/elasticsearch-data/analysis-hanlp -\> Installing file:///data/elasticsearch-data/analysis-hanlp -\> Downloading file:///data… --- ## [Anomaly detection](https://discuss.elastic.co/t/anomaly-detection/309098)
**Author:** [@Amit\_Thombre](https://discuss.elastic.co/u/Amit_Thombre)\ **Replies:** 1\ **Last updated:** [July 8, 2022, 2:14am UTC](https://discuss.elastic.co/t/anomaly-detection/309098 "2022-07-08T02:14:23Z")
We are trying to use anomaly detection from Machine Learning. But very little information is available on the internet regarding it. Can you please help us with the following? Details of anomaly detection algorithm, whi… --- ## [Delegate Authorization from Saml](https://discuss.elastic.co/t/delegate-authorization-from-saml/309013)
**Author:** [@Keemtaker](https://discuss.elastic.co/u/Keemtaker)\ **Replies:** 3\ **Last updated:** [July 8, 2022, 12:35am UTC](https://discuss.elastic.co/t/delegate-authorization-from-saml/309013 "2022-07-08T00:35:46Z")
I have setup single sign-on via saml and also completed a basic role map. I will like to switch from using role mapping to delegated authorization. So users authenticate via saml but authorization is handled by different… --- ## [The certificate is not trusted elasticsearch, but I do have the SSL certificates](https://discuss.elastic.co/t/the-certificate-is-not-trusted-elasticsearch-but-i-do-have-the-ssl-certificates/309164)
**Author:** [@Xavier\_Font](https://discuss.elastic.co/u/Xavier_Font)\ **Replies:** 0\ **Last updated:** [July 8, 2022, 12:28am UTC](https://discuss.elastic.co/t/the-certificate-is-not-trusted-elasticsearch-but-i-do-have-the-ssl-certificates/309164 "2022-07-08T00:28:26Z")
when trying to access endpoints of my self-hosted elasticsearch, On Safari I https://i.stack.imgur.com/YA6Be.png)\](https://i.stack.imgur.com/YA6Be.png And on my Rust client I get code: -67843, message: "The certificate… --- ## [Logstash output question](https://discuss.elastic.co/t/logstash-output-question/309138)
**Author:** [@jlbai](https://discuss.elastic.co/u/jlbai)\ **Replies:** 3\ **Last updated:** [July 7, 2022, 10:25pm UTC](https://discuss.elastic.co/t/logstash-output-question/309138 "2022-07-07T22:25:25Z")
sh-4.2$ sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/firewall.conf Using bundled JDK: /usr/share/logstash/jdk OpenJDK 64-Bit Server VM warning: Option UseConcMarkSweepGC was deprecated in version 9.0 a… --- ## [How do I check if field contains certain string?](https://discuss.elastic.co/t/how-do-i-check-if-field-contains-certain-string/309148)
**Author:** [@DataStorageMuse](https://discuss.elastic.co/u/DataStorageMuse)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 9:23pm UTC](https://discuss.elastic.co/t/how-do-i-check-if-field-contains-certain-string/309148 "2022-07-07T21:23:21Z")
How do I query an index to return documents where a field contains only a certain string (analagous to SQL contains). This is the corresponding SQL query I would like to do in ElasticSearch. SELECT \* FROM table WHERE CON… --- ## [No recovery message generated when using Elasticsearch query Kibana Alert type](https://discuss.elastic.co/t/no-recovery-message-generated-when-using-elasticsearch-query-kibana-alert-type/309126)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 8:24pm UTC](https://discuss.elastic.co/t/no-recovery-message-generated-when-using-elasticsearch-query-kibana-alert-type/309126 "2022-07-07T20:24:11Z")
Hello, I want to deploy notification based on custom query. For this scenario, I use logstash to fetch data from devices I want to catch all new documents where i.e. the field "failover.status.message" has a different… --- ## [Java client hangs](https://discuss.elastic.co/t/java-client-hangs/309152)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 2\ **Last updated:** [July 7, 2022, 8:04pm UTC](https://discuss.elastic.co/t/java-client-hangs/309152 "2022-07-07T20:04:21Z")
Hello! I am writing a Java program to work with Elasticsearch server. My Java client version is 7.17.4, server version is 7.17.0. Consider the following code: RestClient restClient = RestClient.builder(new HttpHost("… --- ## [More complicated calculation/visualisaton - is it possible?](https://discuss.elastic.co/t/more-complicated-calculation-visualisaton-is-it-possible/309136)
**Author:** [@Frantisek\_Sitler](https://discuss.elastic.co/u/Frantisek_Sitler)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 7:52pm UTC](https://discuss.elastic.co/t/more-complicated-calculation-visualisaton-is-it-possible/309136 "2022-07-07T19:52:52Z")
Hello, I have an issue to create a bit more complex calculation and visualization. It should take data from multiple indices, always an record will be connected via one field - IN number. There is always multiple recor… --- ## [Question about EQL capabilities](https://discuss.elastic.co/t/question-about-eql-capabilities/309147)
**Author:** [@nicole.oresme](https://discuss.elastic.co/u/nicole.oresme)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 7:14pm UTC](https://discuss.elastic.co/t/question-about-eql-capabilities/309147 "2022-07-07T19:14:21Z")
I'm evaluating EQL for use in some sequence analysis software we are working on. I'm having trouble figuring out two things: (1) it seems order is always fixed in sequence queries. Is this correct? Can I, for instance,… --- ## [Drop Processors on .yml file](https://discuss.elastic.co/t/drop-processors-on-yml-file/309109)
**Author:** [@maviles](https://discuss.elastic.co/u/maviles)\ **Replies:** 6\ **Last updated:** [July 7, 2022, 6:17pm UTC](https://discuss.elastic.co/t/drop-processors-on-yml-file/309109 "2022-07-07T18:17:07Z")
Hi, I am unable to use the following drop processors on yml processors: drop\_event.when: network: destination.ip: \['8.8.8.8/32', '8.8.4.4/32', '10.10.10.10/32'\] --- ## [SecurityNetty4HttpServerTransport received plaintext http traffic on an https channel](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137)
**Author:** [@Sameer\_Malik](https://discuss.elastic.co/u/Sameer_Malik)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 6:11pm UTC](https://discuss.elastic.co/t/securitynetty4httpservertransport-received-plaintext-http-traffic-on-an-https-channel/309137 "2022-07-07T18:11:30Z")
Hello everyone! I'm quite new to Elasticsearch and networks. I just managed to install elasticsearch on an external disk, and it seemed to install just fine ✅ Elasticsearch security features have been automatically co… --- ## [Unable to Configure SLM](https://discuss.elastic.co/t/unable-to-configure-slm/309132)
**Author:** [@Mnchstrcityblues79](https://discuss.elastic.co/u/Mnchstrcityblues79)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 6:05pm UTC](https://discuss.elastic.co/t/unable-to-configure-slm/309132 "2022-07-07T18:05:38Z")
Greetings. I run the Graylog Open edition that uses ElasticSearch under the hood. Unfortunately, the archive feature is behind a paywall. Nonetheless, I need to backup my data and snapshots are the best way. I have be… --- ## [Changing ownership of filebeat installtion from root](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 5\ **Last updated:** [July 7, 2022, 4:19pm UTC](https://discuss.elastic.co/t/changing-ownership-of-filebeat-installtion-from-root/307521 "2022-07-07T16:19:34Z")
Hi experts, I installed filebeat as root in my RedHat. We did using yum install filebeat-version.rpm. Now what happened is, when install, we did it as root user. I believe there is security risk by installing as root u… --- ## [Snapshot deletion is in-progress](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-deletion-is-in-progress/309122 "2022-07-07T13:52:14Z")
Hello World! I'm trying to delete-snapshot by following: Create a snapshot | Elasticsearch Guide \[7.17\] | Elastic, yet per GET /\_cat/tasks, this task is STILL running (it's been over 18+ hours now) GET /\_tasks/mUxakOw… --- ## [Kibana logs is full](https://discuss.elastic.co/t/kibana-logs-is-full/307903)
**Author:** [@ptang](https://discuss.elastic.co/u/ptang)\ **Replies:** 3\ **Last updated:** [July 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/kibana-logs-is-full/307903 "2022-07-07T14:55:47Z")
can anyone help me how to cleanup the kibana.log files under /var/log/kibana directory. kibana.log filled my diskspace and no space to write the logs. Thanks, pradeep --- ## [How to implement export functionality inside custom plugin](https://discuss.elastic.co/t/how-to-implement-export-functionality-inside-custom-plugin/308893)
**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\ **Replies:** 3\ **Last updated:** [July 7, 2022, 2:26pm UTC](https://discuss.elastic.co/t/how-to-implement-export-functionality-inside-custom-plugin/308893 "2022-07-07T14:26:03Z")
how can I export data which I rendered in a dataGrid inside of a custom plugin using data plugin How did I render the data inside a plugin? follow -\> Git app.tsx I want to export this data using the kibana plugin … --- ## [Conexión SharePoint a logstash](https://discuss.elastic.co/t/conexion-sharepoint-a-logstash/309047)
**Author:** [@arley\_nova\_salgado](https://discuss.elastic.co/u/arley_nova_salgado)\ **Replies:** 2\ **Last updated:** [July 7, 2022, 2:18pm UTC](https://discuss.elastic.co/t/conexion-sharepoint-a-logstash/309047 "2022-07-07T14:18:36Z")
I'm trying to create an input that receives data from sharepoint, but I can't find any information on this topic. Can you help me, please. --- ## [Change existing field to nested field in index mappinfg](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090)
**Author:** [@anand\_tripathi](https://discuss.elastic.co/u/anand_tripathi)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 2:10pm UTC](https://discuss.elastic.co/t/change-existing-field-to-nested-field-in-index-mappinfg/309090 "2022-07-07T14:10:30Z")
Hi Everyone, I have an existing index with the mapping below { "family": { "mappings": { "properties": { "@timestamp": { "type": "date" }, "@version": { "type": "… --- ## [Multiline events not parsed correctly](https://discuss.elastic.co/t/multiline-events-not-parsed-correctly/309123)
**Author:** [@DLP\_Admin](https://discuss.elastic.co/u/DLP_Admin)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:57pm UTC](https://discuss.elastic.co/t/multiline-events-not-parsed-correctly/309123 "2022-07-07T13:57:36Z")
We are trying to replace custom log parsing performed via Filebeat + Logstash by using the Elastic Agent + Fleet. We built and tested the Ingest Pipeline successfully, and set up the Fleet infrastructure. Reading the log… --- ## [What exactly does "size" mean for a data stream in Kibana](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982)
**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\ **Replies:** 4\ **Last updated:** [July 7, 2022, 1:28pm UTC](https://discuss.elastic.co/t/what-exactly-does-size-mean-for-a-data-stream-in-kibana/308982 "2022-07-07T13:28:13Z")
Hey all. I've got a fleet managed agent which is, via the kubernetes integration (and others), creating data streams. I'm trying to understand what the size column is telling me and I don't seem to be able to find any do… --- ## [Which prometheus metric will give information about snapshot backups](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 1:07pm UTC](https://discuss.elastic.co/t/which-prometheus-metric-will-give-information-about-snapshot-backups/309117 "2022-07-07T13:07:24Z")
Hi Team, Could some help me is there any promethesu metric which will give information about elastic snapshot backups. As i am using elasticsearch exporter and sending the data to prometheus Thanks, --- ## [How to resolve "Can not decode an entire message...." error in logstash while usingImap plugin?](https://discuss.elastic.co/t/how-to-resolve-can-not-decode-an-entire-message-error-in-logstash-while-usingimap-plugin/309114)
**Author:** [@Ayush\_Gupta](https://discuss.elastic.co/u/Ayush_Gupta)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 12:32pm UTC](https://discuss.elastic.co/t/how-to-resolve-can-not-decode-an-entire-message-error-in-logstash-while-usingimap-plugin/309114 "2022-07-07T12:32:19Z")
Hi, I am new to Elasticsearch and logstash when I use imap plugin "Can not decode an entire message...." error appears. I have read many posts, understood a few but still unable to get what to do to resolve these errors … --- ## [Lofg file not getting picked up from filebeat](https://discuss.elastic.co/t/lofg-file-not-getting-picked-up-from-filebeat/309105)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 12:26pm UTC](https://discuss.elastic.co/t/lofg-file-not-getting-picked-up-from-filebeat/309105 "2022-07-07T12:26:54Z")
Hello, Facing issue where log files are not getting picked up from filebeat in same dir. files - files1.log (this is not getting picked up) files-access.log (this file gets picked up) filebeat config filebeat.input… --- ## [Date field is not Parsing](https://discuss.elastic.co/t/date-field-is-not-parsing/309006)
**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\ **Replies:** 3\ **Last updated:** [July 7, 2022, 12:14pm UTC](https://discuss.elastic.co/t/date-field-is-not-parsing/309006 "2022-07-07T12:14:43Z")
Hello Team, i have some data carrying date and this data is tagged with date data type. but sometime this filed is carrying empty body (without Date String) How can i parse for both conditions ? In the Time of Date is i… --- ## [Error while installing index templates](https://discuss.elastic.co/t/error-while-installing-index-templates/309110)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 0\ **Last updated:** [July 7, 2022, 12:11pm UTC](https://discuss.elastic.co/t/error-while-installing-index-templates/309110 "2022-07-07T12:11:30Z")
Hi guys, I am having a problem across some pipelines on logstash. Everytime i restart or start logstash i can see that it outputs an error line for some of the pipelines configured. The error is the following: Failed … [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=871) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=873)