# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=914

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 915

---

## [Error in German content indexing](https://discuss.elastic.co/t/error-in-german-content-indexing/306082)

<div class="topic-metadata">

**Author:** [@pefose7968](https://discuss.elastic.co/u/pefose7968)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 6:28am UTC](https://discuss.elastic.co/t/error-in-german-content-indexing/306082 "2022-06-06T06:28:30Z")

</div>

Hello, We need some consultation regarding indexing German content. we have found that the configuration, we have done is not letting us index some of the documents if the document contains some special compound words/…

---

## [How to change the reference of visualization and dashboard](https://discuss.elastic.co/t/how-to-change-the-reference-of-visualization-and-dashboard/306065)

<div class="topic-metadata">

**Author:** [@William\_Bai](https://discuss.elastic.co/u/William_Bai)\
**Replies:** 3\
**Last updated:** [June 6, 2022, 6:01am UTC](https://discuss.elastic.co/t/how-to-change-the-reference-of-visualization-and-dashboard/306065 "2022-06-06T06:01:57Z")

</div>

I have a existing dashboard that I need to change it's data reference from a index pattern to a saved search. Or I can change its panels' reference to the saved search. Is there anyway to change the data reference of a d…

---

## [Terminology: Fields that only contain other fields in the mappings](https://discuss.elastic.co/t/terminology-fields-that-only-contain-other-fields-in-the-mappings/306248)

<div class="topic-metadata">

**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 5:39am UTC](https://discuss.elastic.co/t/terminology-fields-that-only-contain-other-fields-in-the-mappings/306248 "2022-06-06T05:39:20Z")

</div>

What is is correct term for fields like author in the below: PUT /publications { "mappings": { "properties": { "id": { "type": "text" }, "title": { "type": "text" }, "abstract": { "type": "text" …

---

## [How to create new index with old index mapping and settings](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895)

<div class="topic-metadata">

**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\
**Replies:** 5\
**Last updated:** [May 10, 2022, 6:34am UTC](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895 "2022-05-10T06:34:32Z")

</div>

Hello Team, I am new to Elasticsearch, after reading upgrade documents I came to know that we need to reindex old data, from below command I can get list of existing index , curl 'localhost:9200/\_cat/indices?v' I can…

---

## [Logstash s3 plugin to push json files to elasticsearch](https://discuss.elastic.co/t/logstash-s3-plugin-to-push-json-files-to-elasticsearch/306325)

<div class="topic-metadata">

**Author:** [@JinnaBalu](https://discuss.elastic.co/u/JinnaBalu)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 5:25am UTC](https://discuss.elastic.co/t/logstash-s3-plugin-to-push-json-files-to-elasticsearch/306325 "2022-06-06T05:25:41Z")

</div>

Usecase Push s3 JSON objects (s3 containers json files), each object will be one document) I have written a pipeline input { s3 { access\_key\_id =\> "MY\_KEY" secret\_access\_key =\> "MY\_SECRET" …

---

## [Elastic Search to return different counts along with Search results](https://discuss.elastic.co/t/elastic-search-to-return-different-counts-along-with-search-results/305358)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 5:18am UTC](https://discuss.elastic.co/t/elastic-search-to-return-different-counts-along-with-search-results/305358 "2022-06-06T05:18:45Z")

</div>

Hi , I have a requirement to get the differnt counts based on status field in my document for given search critiria. For e.g If I am searching with Comic keyword , I generally get 10 documents(default size) with TotalHi…

---

## [Elastic Cloud - This might not be the site you want](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323)

<div class="topic-metadata">

**Author:** [@milesich](https://discuss.elastic.co/u/milesich)\
**Replies:** 11\
**Last updated:** [June 6, 2022, 3:50am UTC](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323 "2022-06-06T03:50:05Z")

</div>

I am using latest Microsoft Edge browser and every time I access Kibana on Elastic Cloud I get warning about suspicious site. I have 2 clusters in Azure West Europe. Url: https://xxx.kb.westeurope.azure.elastic-cloud.co…

---

## [How can i display dot and value on lens chart](https://discuss.elastic.co/t/how-can-i-display-dot-and-value-on-lens-chart/306305)

<div class="topic-metadata">

**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\
**Replies:** 1\
**Last updated:** [June 3, 2022, 4:04pm UTC](https://discuss.elastic.co/t/how-can-i-display-dot-and-value-on-lens-chart/306305 "2022-06-03T16:04:48Z")

</div>

Used Lens kibana 7.10.1 I want display the Dot of all value as a point. If possible, I would like to display value of the chart too. And, i don't want dot line, i want just straight line. Help this please. Thank…

---

## [Logstash s3 input plugin and path-style access configuration](https://discuss.elastic.co/t/logstash-s3-input-plugin-and-path-style-access-configuration/306412)

<div class="topic-metadata">

**Author:** [@betheway](https://discuss.elastic.co/u/betheway)\
**Replies:** 0\
**Last updated:** [June 5, 2022, 9:41pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-and-path-style-access-configuration/306412 "2022-06-05T21:41:47Z")

</div>

With s3 path-style access, the plugin returns an error on the downloading step. From access logs: Found key {:key=\>"myFile"} Added to objects\[\] {:key=\>"myFile", :length=\>1} Processing {:bucket=\>"", :key=\>"myFile"} Downl…

---

## [Elasticsearch \<-\> kibana mutual tls authentication: Empty client certificate chain](https://discuss.elastic.co/t/elasticsearch-kibana-mutual-tls-authentication-empty-client-certificate-chain/305954)

<div class="topic-metadata">

**Author:** [@psylity](https://discuss.elastic.co/u/psylity)\
**Replies:** 11\
**Last updated:** [June 5, 2022, 9:04pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-mutual-tls-authentication-empty-client-certificate-chain/305954 "2022-06-05T21:04:29Z")

</div>

Hello! I'm using elasticsearch & kibana both 7.17.1 and can't run mutual tls authentication setup where both elasticsearch server and clients authenticate each other. I've followed official documentation on this, and it…

---

## [Is there any way to replicate kibana indices](https://discuss.elastic.co/t/is-there-any-way-to-replicate-kibana-indices/306404)

<div class="topic-metadata">

**Author:** [@Suresh\_Subramaniyan](https://discuss.elastic.co/u/Suresh_Subramaniyan)\
**Replies:** 1\
**Last updated:** [June 5, 2022, 4:54pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-replicate-kibana-indices/306404 "2022-06-05T16:54:19Z")

</div>

Need to replicate Kibana dashboards and visualization between PROD/DR cluster . Is that possible using CCR.

---

## [Is Kubernetes a good platform for ES servers?](https://discuss.elastic.co/t/is-kubernetes-a-good-platform-for-es-servers/306400)

<div class="topic-metadata">

**Author:** [@bigESFan](https://discuss.elastic.co/u/bigESFan)\
**Replies:** 0\
**Last updated:** [June 5, 2022, 11:57am UTC](https://discuss.elastic.co/t/is-kubernetes-a-good-platform-for-es-servers/306400 "2022-06-05T11:57:22Z")

</div>

Dear ES Admin , I am thinking if ES is appropriate to be installed on Kubernetes Cluster, as I have never implemented that way before. I appreciate if you could share some thoughts ? Here are my questions: I know th…

---

## [Filebeat not picking up some files](https://discuss.elastic.co/t/filebeat-not-picking-up-some-files/306386)

<div class="topic-metadata">

**Author:** [@ShefZee](https://discuss.elastic.co/u/ShefZee)\
**Replies:** 1\
**Last updated:** [June 5, 2022, 8:01am UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-some-files/306386 "2022-06-05T08:01:51Z")

</div>

I am trying to send tomcat logs to ELK. I am using Filebeat to scan the files. My log file name would be "project\_err.DD-MM-YYYY". In filebeat configuration, I am giving the file name as foldername\\project\_err\* But fileb…

---

## [Logstash not indexing date to the filebeat write index for data stream](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 4\
**Last updated:** [June 4, 2022, 10:21pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360 "2022-06-04T22:21:00Z")

</div>

Hi everybody. I've got a three nodes ES cluster. I've got the Kibana, one logstash and one filebeat running along in one of those three ES nodes. 'ubuntuelk'. Everything on version 8.2.1. My goal is to use that filebe…

---

## [Parsing fortigate logs with filebeat modules](https://discuss.elastic.co/t/parsing-fortigate-logs-with-filebeat-modules/306391)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 0\
**Last updated:** [June 4, 2022, 8:54pm UTC](https://discuss.elastic.co/t/parsing-fortigate-logs-with-filebeat-modules/306391 "2022-06-04T20:54:35Z")

</div>

Hello, I have never used filebeat for parsing the fortigate logs. I have consulted several pages on the internet about this. I concluded that the best approach is to install Filebeat at the logstash server, after acti…

---

## [Extracting data from kibana](https://discuss.elastic.co/t/extracting-data-from-kibana/305511)

<div class="topic-metadata">

**Author:** [@es.user](https://discuss.elastic.co/u/es.user)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 3:33pm UTC](https://discuss.elastic.co/t/extracting-data-from-kibana/305511 "2022-06-04T15:33:36Z")

</div>

Hi, Is there a way to extract realtime field values from dashboard visualizations? For example, I'd like to obtain the current values selected in a dropdown menu visualization. Thank you.

---

## [Sort on geo\_shape using geo\_distance filter return 500](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381)

<div class="topic-metadata">

**Author:** [@marko2](https://discuss.elastic.co/u/marko2)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 3:10pm UTC](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381 "2022-06-04T15:10:23Z")

</div>

Hey there, my objective is narrowing down nearby addresses within 100 meters and sorting them by the nearest address My mapping: mappings: { dynamic: "true", properties: { geometry: { type: "geo\_shape" }…

---

## [Lens Table: increase limit on number of values](https://discuss.elastic.co/t/lens-table-increase-limit-on-number-of-values/306268)

<div class="topic-metadata">

**Author:** [@nikaes](https://discuss.elastic.co/u/nikaes)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 2:34pm UTC](https://discuss.elastic.co/t/lens-table-increase-limit-on-number-of-values/306268 "2022-06-04T14:34:48Z")

</div>

Hi All, in may case I would like to show the top values of about 1500 elements. There is a limit on the 'number of values' though: Any chance to increase this limit on Kibana 8.2 ? Elasticsearch accepts queries wa…

---

## [My elasticsearch cannot execute "'/tmp/elastic-certificates.p12' already exists"](https://discuss.elastic.co/t/my-elasticsearch-cannot-execute-tmp-elastic-certificates-p12-already-exists/306383)

<div class="topic-metadata">

**Author:** [@rockers](https://discuss.elastic.co/u/rockers)\
**Replies:** 0\
**Last updated:** [June 4, 2022, 12:00pm UTC](https://discuss.elastic.co/t/my-elasticsearch-cannot-execute-tmp-elastic-certificates-p12-already-exists/306383 "2022-06-04T12:00:28Z")

</div>

I used an ansible script to run this Elasticsearch because i changed jvm.options using ram xs512m so i run this sctipt again which means it shows this error so its already created so how can i remove it and create it aga…

---

## [ES master only works and 2 other nodes get empty cluster id](https://discuss.elastic.co/t/es-master-only-works-and-2-other-nodes-get-empty-cluster-id/305827)

<div class="topic-metadata">

**Author:** [@rockers](https://discuss.elastic.co/u/rockers)\
**Replies:** 4\
**Last updated:** [June 4, 2022, 11:50am UTC](https://discuss.elastic.co/t/es-master-only-works-and-2-other-nodes-get-empty-cluster-id/305827 "2022-06-04T11:50:53Z")

</div>

i created 3 ES machines in virtualbox 1 master1 1 data1 1 data2 my master01 only get cluster\_uuid two other nodes failed "cluster\_uuid": "\_na\_"" master cluster.name: mycluster node.name: master1 path.data: /var/li…

---

## [Filebeat - Update Index Template and create new index](https://discuss.elastic.co/t/filebeat-update-index-template-and-create-new-index/306003)

<div class="topic-metadata">

**Author:** [@Hardik\_Sanghavi](https://discuss.elastic.co/u/Hardik_Sanghavi)\
**Replies:** 3\
**Last updated:** [June 4, 2022, 11:41am UTC](https://discuss.elastic.co/t/filebeat-update-index-template-and-create-new-index/306003 "2022-06-04T11:41:16Z")

</div>

Hello, I am new to Filebeat. I used the standard configuration setup for filebeat and got it to ship data to Elasticsearch. I have added some custom fields and they automatically got the "keyword" type. I changed the…

---

## [How to remove discovery.zen.ping.unicasts completely](https://discuss.elastic.co/t/how-to-remove-discovery-zen-ping-unicasts-completely/306344)

<div class="topic-metadata">

**Author:** [@garry12](https://discuss.elastic.co/u/garry12)\
**Replies:** 2\
**Last updated:** [June 4, 2022, 10:11am UTC](https://discuss.elastic.co/t/how-to-remove-discovery-zen-ping-unicasts-completely/306344 "2022-06-04T10:11:08Z")

</div>

I am running a Elasticsearch 7.2 version and I had a property defined in my Elasticsearch.yml file that is - discovery.zen.ping.unicast.hosts: \[IP1, IP2....\] but obviously when I read the documentation I see that this d…

---

## [How to use call chain plugin in kibana 7.9](https://discuss.elastic.co/t/how-to-use-call-chain-plugin-in-kibana-7-9/306377)

<div class="topic-metadata">

**Author:** [@Arifullah](https://discuss.elastic.co/u/Arifullah)\
**Replies:** 0\
**Last updated:** [June 4, 2022, 9:28am UTC](https://discuss.elastic.co/t/how-to-use-call-chain-plugin-in-kibana-7-9/306377 "2022-06-04T09:28:54Z")

</div>

How to use call chain plugin in kibana 7.9

---

## [Unable to authenticate user after password creation](https://discuss.elastic.co/t/unable-to-authenticate-user-after-password-creation/306359)

<div class="topic-metadata">

**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\
**Replies:** 2\
**Last updated:** [June 4, 2022, 8:39am UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-after-password-creation/306359 "2022-06-04T08:39:48Z")

</div>

I have created Elasticsearch built-in users password with: bin/elasticsearch-setup-passwords interactive I set for every user password asdfasdf. All successfuly: Initiating the setup of passwords for reserved users el…

---

## ["Empty client certificate chain" error stops inter-node handshake using wildcard certs](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278)

<div class="topic-metadata">

**Author:** [@Anil\_Kumar\_2003](https://discuss.elastic.co/u/Anil_Kumar_2003)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 6:02am UTC](https://discuss.elastic.co/t/empty-client-certificate-chain-error-stops-inter-node-handshake-using-wildcard-certs/306278 "2022-06-04T06:02:58Z")

</div>

Hi Team, I need help securing ES inter-node communication. Environment Details: ES version: 7.14.1, cluster with 2 nodes (reduced size to get to the root cause) Java: openjdk-16.0.2 OS: Ubuntu 20.02 JVM options: al…

---

## [Read column of datatype "JSON" from database using Logstash](https://discuss.elastic.co/t/read-column-of-datatype-json-from-database-using-logstash/306369)

<div class="topic-metadata">

**Author:** [@bhavani\_nandakumar](https://discuss.elastic.co/u/bhavani_nandakumar)\
**Replies:** 0\
**Last updated:** [June 3, 2022, 10:31pm UTC](https://discuss.elastic.co/t/read-column-of-datatype-json-from-database-using-logstash/306369 "2022-06-03T22:31:24Z")

</div>

I have developed a script to read table from Postgres Database and load the data in a json format inside Kafka topic. The problem is one of the columns (cust\_record) in the table is JSON type and I could not read that co…

---

## [How to slow down output ingestion rate with logstash?](https://discuss.elastic.co/t/how-to-slow-down-output-ingestion-rate-with-logstash/306363)

<div class="topic-metadata">

**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\
**Replies:** 2\
**Last updated:** [June 3, 2022, 9:26pm UTC](https://discuss.elastic.co/t/how-to-slow-down-output-ingestion-rate-with-logstash/306363 "2022-06-03T21:26:09Z")

</div>

Hello, I've millions of records in Elasticsearch and sending outputs as individual files using file output plugin. I've noticed logstash extraction rate is high and used a sleep plugin to slow down after every few secs…

---

## [Not able to run elasticsearch after installing tls demo certificate(search guard)](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-after-installing-tls-demo-certificate-search-guard/306335)

<div class="topic-metadata">

**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\
**Replies:** 1\
**Last updated:** [June 3, 2022, 9:23pm UTC](https://discuss.elastic.co/t/not-able-to-run-elasticsearch-after-installing-tls-demo-certificate-search-guard/306335 "2022-06-03T21:23:50Z")

</div>

i have metioned the error code below: \[2022-06-03T13:18:26,086\]\[WARN \]\[o.e.d.PeerFinder \] \[node-2\] address \[1.xx.xx9.xxx:9xx\], node \[null\], requesting \[false\] connection failed: \[1.xx.xx9.xxx:9xx\] general node connectio…

---

## [Compare unstructured texts with conditions within one index](https://discuss.elastic.co/t/compare-unstructured-texts-with-conditions-within-one-index/306367)

<div class="topic-metadata">

**Author:** [@Rubyfan](https://discuss.elastic.co/u/Rubyfan)\
**Replies:** 0\
**Last updated:** [June 3, 2022, 8:55pm UTC](https://discuss.elastic.co/t/compare-unstructured-texts-with-conditions-within-one-index/306367 "2022-06-03T20:55:26Z")

</div>

Hi, The use case is that we want to see what is the difference between two unstructured text contents(transcripts) within one index. These two text contents will be selected based on filters(different time ranges; diffe…

---

## [CSV data enrichment with Geolocation](https://discuss.elastic.co/t/csv-data-enrichment-with-geolocation/306354)

<div class="topic-metadata">

**Author:** [@Vitaliy.N](https://discuss.elastic.co/u/Vitaliy.N)\
**Replies:** 4\
**Last updated:** [June 3, 2022, 8:18pm UTC](https://discuss.elastic.co/t/csv-data-enrichment-with-geolocation/306354 "2022-06-03T20:18:04Z")

</div>

Hello, I am just starting with Elk stack and need a nudge in the right direction. Is there a way to convert string address into a longitude and latitude coordinates and add them back to CSV file using Logstash? Or does …

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=913)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=915)
