# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=875 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 876 --- ## [Ship logs of application using Filbeat](https://discuss.elastic.co/t/ship-logs-of-application-using-filbeat/307257)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 5\ **Last updated:** [July 6, 2022, 7:46am UTC](https://discuss.elastic.co/t/ship-logs-of-application-using-filbeat/307257 "2022-07-06T07:46:26Z")
Hi, I have a kubernetes cluster on which I have deployed the elastic stack using ECK. I have several microservices deployed in the cluster as pods and I want to fetch logs from particular microservice pods. Also I have… --- ## [Could not set the passworkd after enable the security](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967)
**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 7:38am UTC](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967 "2022-07-06T07:38:37Z")
ElasticSearch version:7.12 After enable the xpack security with the guide： To set password, then get the error: bin/elasticsearch-setup-passwords interactive future versions of Elasticsearch will require Java 11; you… --- ## [Enable soft deletes while restoring snapshots](https://discuss.elastic.co/t/enable-soft-deletes-while-restoring-snapshots/308986)
**Author:** [@DavidZ](https://discuss.elastic.co/u/DavidZ)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 7:24am UTC](https://discuss.elastic.co/t/enable-soft-deletes-while-restoring-snapshots/308986 "2022-07-06T07:24:06Z")
Hi, I have snapshots containing indices whose soft deletes is set to false as default. However, I need to enable it for cross-cluster replication. Is it possible to override index setting by enabling soft deletes while… --- ## [Delete default index](https://discuss.elastic.co/t/delete-default-index/308549)
**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 7:20am UTC](https://discuss.elastic.co/t/delete-default-index/308549 "2022-07-06T07:20:42Z")
Hi all, we have some indexes created by default in elasticsearch, managed by theese ILM: For example, .alerts-ilm-policy have this index: All in hot status: When try to delete older index of these ilm, index … --- ## [Unable to login to localhost:9200](https://discuss.elastic.co/t/unable-to-login-to-localhost-9200/300416)
**Author:** [@csreddy.ennam](https://discuss.elastic.co/u/csreddy.ennam)\ **Replies:** 7\ **Last updated:** [July 6, 2022, 7:08am UTC](https://discuss.elastic.co/t/unable-to-login-to-localhost-9200/300416 "2022-07-06T07:08:09Z")
we were using Elasticsearch from more than 2 years, now we are unable to open localhost:9200 (latest version: Using Elasticsearch 8.1.0 ) --- ## [LDAP Issue](https://discuss.elastic.co/t/ldap-issue/308113)
**Author:** [@RajuParipelly](https://discuss.elastic.co/u/RajuParipelly)\ **Replies:** 7\ **Last updated:** [July 6, 2022, 6:23am UTC](https://discuss.elastic.co/t/ldap-issue/308113 "2022-07-06T06:23:09Z")
Hi, We have integrated Active Directory with Elastic and it is working fine and I am able to login to Kibana with my AD user (rb\*\*\*\*). But recently we have seen the issues with elasticsearch , elasticsearch is getting … --- ## [Tweaking pipeline performance](https://discuss.elastic.co/t/tweaking-pipeline-performance/308801)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 4:48am UTC](https://discuss.elastic.co/t/tweaking-pipeline-performance/308801 "2022-07-06T04:48:52Z")
Hello, I'm trying to get the hang off tweaking logstashs performance. I searched the net but unfortunately, I can't seem to find a good guide on how to tweak and actually measure the performance of a pipeline. I can't … --- ## [Wrong date format pattern for origination date in doc?](https://discuss.elastic.co/t/wrong-date-format-pattern-for-origination-date-in-doc/308971)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 3:42am UTC](https://discuss.elastic.co/t/wrong-date-format-pattern-for-origination-date-in-doc/308971 "2022-07-06T03:42:01Z")
Hello . I would like to confirm the pattern used to parse origination date from index name. I am using elasticsearch 7.17.4 . It says, The index name must match the pattern ^.\*-{date\_format}-\\\\d+ , where the date\_… --- ## [Data streams and Indices](https://discuss.elastic.co/t/data-streams-and-indices/308970)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 3:35am UTC](https://discuss.elastic.co/t/data-streams-and-indices/308970 "2022-07-06T03:35:07Z")
Hi Everyone, While doing the Create Policy \> Data streams and indices, I was confused why index name is not showing, only the alias are showing. Is it valid and why only alias are showing not their index? Example: X is… --- ## [Using elasticsearch graph for data lineage analysis](https://discuss.elastic.co/t/using-elasticsearch-graph-for-data-lineage-analysis/308823)
**Author:** [@mengjiann](https://discuss.elastic.co/u/mengjiann)\ **Replies:** 1\ **Last updated:** [July 6, 2022, 2:31am UTC](https://discuss.elastic.co/t/using-elasticsearch-graph-for-data-lineage-analysis/308823 "2022-07-06T02:31:00Z")
Hi, there was a question asked previously: Using Elasticsearch graph for Data lineage Analysis 2 years back. Just wondering if there is any replies now? Thanks --- ## [Compound DSL Querys on Logstash template](https://discuss.elastic.co/t/compound-dsl-querys-on-logstash-template/308965)
**Author:** [@jubilla073](https://discuss.elastic.co/u/jubilla073)\ **Replies:** 0\ **Last updated:** [July 6, 2022, 1:31am UTC](https://discuss.elastic.co/t/compound-dsl-querys-on-logstash-template/308965 "2022-07-06T01:31:14Z")
Hi guys, Today, i working to include query's templates into my logstash pipelines. In this use case, i need search by two factors, an especific field and only get last X hours (around 6 hours). For this, i wrote a Compo… --- ## [Stack Monitoring - Elasticsearch Nodes not displayed as monitored with Metricbeat](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979)
**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 1:23am UTC](https://discuss.elastic.co/t/stack-monitoring-elasticsearch-nodes-not-displayed-as-monitored-with-metricbeat/307979 "2022-07-06T01:23:46Z")
Hi, I'm trying to set up Stack Monitoring and I went through all the steps from here: Collecting Elasticsearch monitoring data with Metricbeat | Elasticsearch Guide \[8.2\] | Elastic Enabled the collection of monitoring… --- ## [Test field type with ruby filter and rename the field](https://discuss.elastic.co/t/test-field-type-with-ruby-filter-and-rename-the-field/308831)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 1:03am UTC](https://discuss.elastic.co/t/test-field-type-with-ruby-filter-and-rename-the-field/308831 "2022-07-06T01:03:10Z")
I have a field "identity" that is mapped as a keyword, but some logs received have the field as an object. How do I rename the field? I tried the below config but got a syntax error, unexpected tCONSTANT. Please advise. … --- ## [Vega sankey sort by](https://discuss.elastic.co/t/vega-sankey-sort-by/307771)
**Author:** [@Micah\_Barsness](https://discuss.elastic.co/u/Micah_Barsness)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 11:09pm UTC](https://discuss.elastic.co/t/vega-sankey-sort-by/307771 "2022-07-05T23:09:40Z")
I have netflow data indexing and am working on using the code below to make a sankey chart. On the chart I've identified that it is sorting by IP address alphabetically and not by the sum of my "network.bytes" field as I… --- ## [Kibana Visualization (Options List/Selector Control)](https://discuss.elastic.co/t/kibana-visualization-options-list-selector-control/307701)
**Author:** [@Ryan\_Clark](https://discuss.elastic.co/u/Ryan_Clark)\ **Replies:** 4\ **Last updated:** [July 5, 2022, 10:27pm UTC](https://discuss.elastic.co/t/kibana-visualization-options-list-selector-control/307701 "2022-07-05T22:27:56Z")
Are there any plans to allow the "Controls" visualizations to connect to a saved search? Currently it only connects to an index pattern which allows the "Controls" to affect the whole dashboard. It would be nice to tie a… --- ## [Updating index.max\_shingle\_diff](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937)
**Author:** [@Benjamin1](https://discuss.elastic.co/u/Benjamin1)\ **Replies:** 4\ **Last updated:** [July 5, 2022, 9:12pm UTC](https://discuss.elastic.co/t/updating-index-max-shingle-diff/308937 "2022-07-05T21:12:47Z")
When I try to create an index I get this message: ServerError: Type: illegal\_argument\_exception Reason: "In Shingle TokenFilter the difference between max\_shingle\_size and min\_shingle\_size (and +1 if outputting unigrams… --- ## [How to restrict access to an external plugin using privileges?](https://discuss.elastic.co/t/how-to-restrict-access-to-an-external-plugin-using-privileges/308951)
**Author:** [@josemartinez](https://discuss.elastic.co/u/josemartinez)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/how-to-restrict-access-to-an-external-plugin-using-privileges/308951 "2022-07-05T20:25:26Z")
Hello. I have created a plugin as indicated here. How can I restrict access to the plugin with privileges? This means that only the superuser can view the plugin and that in the menu it is only visible by the superuse… --- ## [Filebeat disk queue not working as documented](https://discuss.elastic.co/t/filebeat-disk-queue-not-working-as-documented/308609)
**Author:** [@ulisses](https://discuss.elastic.co/u/ulisses)\ **Replies:** 4\ **Last updated:** [July 5, 2022, 7:19pm UTC](https://discuss.elastic.co/t/filebeat-disk-queue-not-working-as-documented/308609 "2022-07-05T19:19:50Z")
According to this documentation Internal Queue: Queue data is deleted from disk after it has been successfully sent to the output. This is not happening. Sent data still exists in the files (\*.seg). And to make matt… --- ## [Inventory data being aggregated with periodic data](https://discuss.elastic.co/t/inventory-data-being-aggregated-with-periodic-data/308614)
**Author:** [@mtuska](https://discuss.elastic.co/u/mtuska)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:57pm UTC](https://discuss.elastic.co/t/inventory-data-being-aggregated-with-periodic-data/308614 "2022-07-05T17:57:41Z")
Hi, I am working on creating an application that will do a nightly inventory of CPE equipment, meanwhile also do every minute and every 5 minute statistics. I then would like to be able to display this data via Kibana d… --- ## [Curl: (77) error setting certificate verify locations:](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945)
**Author:** [@CBrad](https://discuss.elastic.co/u/CBrad)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:38pm UTC](https://discuss.elastic.co/t/curl-77-error-setting-certificate-verify-locations/308945 "2022-07-05T17:38:05Z")
I am installing Elasticsearch on Amazon Linux 2 EC2 instances, and using the latest version of ES 8.2.3. When I run: sudo systemctl status elasticsearch.service ES shows as running on all three, but when I check: $ cu… --- ## [No index pattern for logstash](https://discuss.elastic.co/t/no-index-pattern-for-logstash/308124)
**Author:** [@AkilanGIP](https://discuss.elastic.co/u/AkilanGIP)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 5:14pm UTC](https://discuss.elastic.co/t/no-index-pattern-for-logstash/308124 "2022-07-05T17:14:09Z")
Hello, I am strugling because i have installed logstash but it don't appear and when i type filebeat-\* it says " The index pattern you've entered doesn't match any indices. You can match your 1 index, below." but it isn'… --- ## [Logstash parsing @timestamp even before the filter is triggered](https://discuss.elastic.co/t/logstash-parsing-timestamp-even-before-the-filter-is-triggered/308700)
**Author:** [@Rakesh\_B](https://discuss.elastic.co/u/Rakesh_B)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 5:09pm UTC](https://discuss.elastic.co/t/logstash-parsing-timestamp-even-before-the-filter-is-triggered/308700 "2022-07-05T17:09:31Z")
Hi, We are noticing that logstash is parsing the @timestamp field even before the filter{} is triggered and this is causing the warning Error parsing @timestamp string value and spamming our logs We push logs from flue… --- ## [CPU utilization visualization showing 0 % always](https://discuss.elastic.co/t/cpu-utilization-visualization-showing-0-always/308915)
**Author:** [@ritesh811](https://discuss.elastic.co/u/ritesh811)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 5:00pm UTC](https://discuss.elastic.co/t/cpu-utilization-visualization-showing-0-always/308915 "2022-07-05T17:00:54Z")
Hi team, I am trying to create the time series visualization in Kibana for CPU usage on the server, but CPU utilization is showing up as 0% all the time. However, data for the fields system.cpu.user.pct, system.cpu.sys… --- ## [Elastic-agent cannot configure filebeat error "failed for nwparser.icmp\_code"](https://discuss.elastic.co/t/elastic-agent-cannot-configure-filebeat-error-failed-for-nwparser-icmp-code/308603)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [July 5, 2022, 4:57pm UTC](https://discuss.elastic.co/t/elastic-agent-cannot-configure-filebeat-error-failed-for-nwparser-icmp-code/308603 "2022-07-05T16:57:29Z")
The Elastic Agent that I have assigned to my Fleet server policy cannot configure it's Filebeat instance. This is version 8.2.3 on Ubuntu 18.04. elastic-agent status gives me: Status: FAILED Message: (no message) Appl… --- ## [Setting elasticsearch and kibana versions 8.3.0 on windows](https://discuss.elastic.co/t/setting-elasticsearch-and-kibana-versions-8-3-0-on-windows/308897)
**Author:** [@Chigozie\_Mbonu](https://discuss.elastic.co/u/Chigozie_Mbonu)\ **Replies:** 2\ **Last updated:** [July 5, 2022, 4:52pm UTC](https://discuss.elastic.co/t/setting-elasticsearch-and-kibana-versions-8-3-0-on-windows/308897 "2022-07-05T16:52:59Z")
I ran Elasticsearch from the directory where I unzipped the file, using the command "bin\\elasticsearch.bat", the command ran successfully, and part of the outputs printed on the console are a 'Password' created for user … --- ## [How to create a dashboard to monitor CPU and memory usage of Kubernetes cluster?](https://discuss.elastic.co/t/how-to-create-a-dashboard-to-monitor-cpu-and-memory-usage-of-kubernetes-cluster/308402)
**Author:** [@Nimit\_Batham](https://discuss.elastic.co/u/Nimit_Batham)\ **Replies:** 8\ **Last updated:** [July 5, 2022, 4:49pm UTC](https://discuss.elastic.co/t/how-to-create-a-dashboard-to-monitor-cpu-and-memory-usage-of-kubernetes-cluster/308402 "2022-07-05T16:49:19Z")
How to create a dashboard to monitor CPU and memory usage of Kubernetes cluster? --- ## [How can i integrate custom visualization plugin into kibana Dashboard](https://discuss.elastic.co/t/how-can-i-integrate-custom-visualization-plugin-into-kibana-dashboard/308547)
**Author:** [@Kushal\_Roy](https://discuss.elastic.co/u/Kushal_Roy)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-integrate-custom-visualization-plugin-into-kibana-dashboard/308547 "2022-07-05T16:23:50Z")
Hii, I developed a custom visualization Kibana Plugin. It's a React App which is visualizing data queried from an Elasticsearch index in its React components. Now i am trying to implement my custom Kibana plugin app as… --- ## [How to change kibana login splash screen icon image](https://discuss.elastic.co/t/how-to-change-kibana-login-splash-screen-icon-image/308927)
**Author:** [@diegoneto](https://discuss.elastic.co/u/diegoneto)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 3:52pm UTC](https://discuss.elastic.co/t/how-to-change-kibana-login-splash-screen-icon-image/308927 "2022-07-05T15:52:14Z")
Hello guys. I would like to know where I can change this icon. I know that the icon above "Administrator", is somewhere on the server, but I don't know the path. How to change? --- ## [Update errors to version 8.3.1](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808)
**Author:** [@PM75](https://discuss.elastic.co/u/PM75)\ **Replies:** 1\ **Last updated:** [July 5, 2022, 3:41pm UTC](https://discuss.elastic.co/t/update-errors-to-version-8-3-1/308808 "2022-07-05T15:41:57Z")
Hello, I would like to specify that I am French and that my English is not my best. Following the security alert : I have just tried to update from 8.2.0 to 8.3.1 by following the instructions: Since then, I have t… --- ## [Node discovery on ECS FARGATE - nodes see each other but won't join up](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 0\ **Last updated:** [July 5, 2022, 3:27pm UTC](https://discuss.elastic.co/t/node-discovery-on-ecs-fargate-nodes-see-each-other-but-wont-join-up/308933 "2022-07-05T15:27:56Z")
I'm running a Service in ECS that has two small elasticsearch tasks. It uses service discovery, so both are registered under A records in Route 53 hosted zones. I've configured elasticsearch to use the route 53 dns as t… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=874) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=876)