# Elastic Stack

**URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=916

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 917

---

## [Kibana and ssl](https://discuss.elastic.co/t/kibana-and-ssl/306188)

<div class="topic-metadata">

**Author:** [@Stefano\_Bossi](https://discuss.elastic.co/u/Stefano_Bossi)\
**Replies:** 4\
**Last updated:** [June 3, 2022, 6:58am UTC](https://discuss.elastic.co/t/kibana-and-ssl/306188 "2022-06-03T06:58:45Z")

</div>

Dear forum members, I am trying to configure SSL to access ES. I have this conf in ES: # Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents xpack.security.http.ssl: client\_authen…

---

## [Configure beats to reload certificates?](https://discuss.elastic.co/t/configure-beats-to-reload-certificates/305976)

<div class="topic-metadata">

**Author:** [@fgjensen](https://discuss.elastic.co/u/fgjensen)\
**Replies:** 2\
**Last updated:** [June 3, 2022, 6:25am UTC](https://discuss.elastic.co/t/configure-beats-to-reload-certificates/305976 "2022-06-03T06:25:05Z")

</div>

We deploy most beattypes to hosts managed by different service providers. The beats ships data to Logstash beats endpoints protected with TLS and firewalls. This setup works very well. However, changing expired TLS cert…

---

## [Limit JVM heap](https://discuss.elastic.co/t/limit-jvm-heap/305920)

<div class="topic-metadata">

**Author:** [@gerardgorrion](https://discuss.elastic.co/u/gerardgorrion)\
**Replies:** 13\
**Last updated:** [June 3, 2022, 6:12am UTC](https://discuss.elastic.co/t/limit-jvm-heap/305920 "2022-06-03T06:12:26Z")

</div>

Good morning, We have a issue with the limit of JVM heap. Our Elasticsearch data nodes have a data, ingest and master role, and the node that allow it have 32gb of memory and 8 cpu. Our configuration of resources on dat…

---

## [Filebeat multiline json](https://discuss.elastic.co/t/filebeat-multiline-json/306287)

<div class="topic-metadata">

**Author:** [@Panda\_Free](https://discuss.elastic.co/u/Panda_Free)\
**Replies:** 0\
**Last updated:** [June 3, 2022, 6:03am UTC](https://discuss.elastic.co/t/filebeat-multiline-json/306287 "2022-06-03T06:03:28Z")

</div>

Hi, please help, spent more one week and cannot get correct parse settings. I have file from AWS Athena query, csv, but coverted to pure multiline json. Structure: \[{ "useridentity":"{type=somevalue={attributes={…

---

## [Gracefully restart logstash after adding an additional pipeline](https://discuss.elastic.co/t/gracefully-restart-logstash-after-adding-an-additional-pipeline/306284)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 0\
**Last updated:** [June 3, 2022, 5:15am UTC](https://discuss.elastic.co/t/gracefully-restart-logstash-after-adding-an-additional-pipeline/306284 "2022-06-03T05:15:33Z")

</div>

Hi All, in my logstash.yml I enabled the config.reload.automatic: True and doing it every 30s config.reload.interval: 30s. So now I started adding new pipelines in my pipeline.yml. Once I add a pipeline what I usually…

---

## [Documents size vs. indexing size?](https://discuss.elastic.co/t/documents-size-vs-indexing-size/306255)

<div class="topic-metadata">

**Author:** [@Denis\_Haskin](https://discuss.elastic.co/u/Denis_Haskin)\
**Replies:** 1\
**Last updated:** [June 2, 2022, 7:39pm UTC](https://discuss.elastic.co/t/documents-size-vs-indexing-size/306255 "2022-06-02T19:39:56Z")

</div>

We have an existing Kibana/Elastic setup ingesting logs from our infrastructure. I'm trying to determine what the actual documents size is, e.g. I want to exclude indices. Basically, what is the volume of logs coming o…

---

## [How to manage multiple virtual machines to send metrics to ELK](https://discuss.elastic.co/t/how-to-manage-multiple-virtual-machines-to-send-metrics-to-elk/306035)

<div class="topic-metadata">

**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\
**Replies:** 6\
**Last updated:** [June 3, 2022, 2:29am UTC](https://discuss.elastic.co/t/how-to-manage-multiple-virtual-machines-to-send-metrics-to-elk/306035 "2022-06-03T02:29:37Z")

</div>

Hello guys i'm trying to build a solution where i could monitor a group of virtual machines. i have installed metricbeat on these machines. what i want to do is send these metrics to my ELK stack deployed on a kubernete…

---

## [How can I connect points with null values in a line chart?](https://discuss.elastic.co/t/how-can-i-connect-points-with-null-values-in-a-line-chart/306200)

<div class="topic-metadata">

**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\
**Replies:** 2\
**Last updated:** [June 3, 2022, 2:08am UTC](https://discuss.elastic.co/t/how-can-i-connect-points-with-null-values-in-a-line-chart/306200 "2022-06-03T02:08:51Z")

</div>

please help this thanks kibana 7.10.1

---

## [Multiple Heartbeat In One Windows Server](https://discuss.elastic.co/t/multiple-heartbeat-in-one-windows-server/306249)

<div class="topic-metadata">

**Author:** [@Nicole1](https://discuss.elastic.co/u/Nicole1)\
**Replies:** 6\
**Last updated:** [June 2, 2022, 10:47pm UTC](https://discuss.elastic.co/t/multiple-heartbeat-in-one-windows-server/306249 "2022-06-02T22:47:57Z")

</div>

can we have multiple heartbeats in one windows server because we want to monitor 3 different series of endpoints(appcodes).with 3 different heartbeat.yml

---

## [Architecture to use dynamic document read permition](https://discuss.elastic.co/t/architecture-to-use-dynamic-document-read-permition/306269)

<div class="topic-metadata">

**Author:** [@jodinathan](https://discuss.elastic.co/u/jodinathan)\
**Replies:** 1\
**Last updated:** [June 2, 2022, 10:39pm UTC](https://discuss.elastic.co/t/architecture-to-use-dynamic-document-read-permition/306269 "2022-06-02T22:39:26Z")

</div>

We need to enable our customers to access our Kibana to create sales reports, however, the sale documents they can read can change over time. Each customer would have their own user in Kibana and a sale document can be …

---

## [How to filter aggregated data on the nested object](https://discuss.elastic.co/t/how-to-filter-aggregated-data-on-the-nested-object/306264)

<div class="topic-metadata">

**Author:** [@shri\_palchuri](https://discuss.elastic.co/u/shri_palchuri)\
**Replies:** 0\
**Last updated:** [June 2, 2022, 7:26pm UTC](https://discuss.elastic.co/t/how-to-filter-aggregated-data-on-the-nested-object/306264 "2022-06-02T19:26:39Z")

</div>

Here is the payload used to filter the data, holdings is a nested type and in the aggregation it includes non matched count. {"size":0,"query":{"bool":{"filter":\[{"bool":{"filter":\[{"bool":{"should":\[{"bool":{"filter":…

---

## [Time weighting after ANN search](https://discuss.elastic.co/t/time-weighting-after-ann-search/306022)

<div class="topic-metadata">

**Author:** [@lz-mn](https://discuss.elastic.co/u/lz-mn)\
**Replies:** 1\
**Last updated:** [June 2, 2022, 6:17pm UTC](https://discuss.elastic.co/t/time-weighting-after-ann-search/306022 "2022-06-02T18:17:31Z")

</div>

Hi, I'm trying to write a search query to: perform an ANN search on a dense vector field re-rank the returned documents to weight more recent documents higher, according to a custom exponential decay function applied t…

---

## [Create 2 versions of the same index (one with less fields)](https://discuss.elastic.co/t/create-2-versions-of-the-same-index-one-with-less-fields/305506)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 9\
**Last updated:** [June 2, 2022, 5:46pm UTC](https://discuss.elastic.co/t/create-2-versions-of-the-same-index-one-with-less-fields/305506 "2022-06-02T17:46:56Z")

</div>

Hello, I have the requirement of ingesting metricbeat/filebeat data twice, once with all the default fields, and a second time with only the fields the dashboards will be using. This two versions will have different re…

---

## [Elastic Endpoint: securing elasticsearch (port 9200) server public access from brute force attacks](https://discuss.elastic.co/t/elastic-endpoint-securing-elasticsearch-port-9200-server-public-access-from-brute-force-attacks/306043)

<div class="topic-metadata">

**Author:** [@raymondbagats](https://discuss.elastic.co/u/raymondbagats)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 4:06pm UTC](https://discuss.elastic.co/t/elastic-endpoint-securing-elasticsearch-port-9200-server-public-access-from-brute-force-attacks/306043 "2022-06-02T16:06:30Z")

</div>

Hi team, My elastic stack is currently working and endpoint security is working and is being managed by fleet. I'm planning to expose port 8220 and 9200 so my mobile endpoints can search the server when outside the comp…

---

## [Multiple index search and PIT index ID reuse](https://discuss.elastic.co/t/multiple-index-search-and-pit-index-id-reuse/306247)

<div class="topic-metadata">

**Author:** [@mattsbennett](https://discuss.elastic.co/u/mattsbennett)\
**Replies:** 0\
**Last updated:** [June 2, 2022, 3:01pm UTC](https://discuss.elastic.co/t/multiple-index-search-and-pit-index-id-reuse/306247 "2022-06-02T15:01:14Z")

</div>

I’m planning to search multiple different sets of multiple indices at once. I’d also like to use search\_after with point-in-time indices for deep pagination. I’ve got some general questions about how/if PIT works in this…

---

## [How to configure current age using the date plugin filter from logstash](https://discuss.elastic.co/t/how-to-configure-current-age-using-the-date-plugin-filter-from-logstash/306244)

<div class="topic-metadata">

**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\
**Replies:** 0\
**Last updated:** [June 2, 2022, 2:49pm UTC](https://discuss.elastic.co/t/how-to-configure-current-age-using-the-date-plugin-filter-from-logstash/306244 "2022-06-02T14:49:34Z")

</div>

hello I'm trying to create an age range with the logstash plugin filter, so I have date of birth data, the following is an example of the data: id, Nik,Phone,Date Of Birth,Gender 1,3710144892657,6289123432134,06/06/196…

---

## [Change Logo On Kibana 7.17.3](https://discuss.elastic.co/t/change-logo-on-kibana-7-17-3/306214)

<div class="topic-metadata">

**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\
**Replies:** 1\
**Last updated:** [June 2, 2022, 1:03pm UTC](https://discuss.elastic.co/t/change-logo-on-kibana-7-17-3/306214 "2022-06-02T13:03:41Z")

</div>

Hello Elastic Team, How to change logo on kibana 7.17.3?? Thankyou

---

## [When is Elasticsearch 8 coming to Homebrew on MacOS?](https://discuss.elastic.co/t/when-is-elasticsearch-8-coming-to-homebrew-on-macos/306227)

<div class="topic-metadata">

**Author:** [@pelmered](https://discuss.elastic.co/u/pelmered)\
**Replies:** 0\
**Last updated:** [June 2, 2022, 12:51pm UTC](https://discuss.elastic.co/t/when-is-elasticsearch-8-coming-to-homebrew-on-macos/306227 "2022-06-02T12:51:35Z")

</div>

When is Elasticsearch 8.\* coming to Homebrew on MacOS? Do I need to install from package to upgrade in the future?

---

## [What role should I attach to anonymous user?](https://discuss.elastic.co/t/what-role-should-i-attach-to-anonymous-user/304919)

<div class="topic-metadata">

**Author:** [@rachit\_upadhyay](https://discuss.elastic.co/u/rachit_upadhyay)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 12:48pm UTC](https://discuss.elastic.co/t/what-role-should-i-attach-to-anonymous-user/304919 "2022-06-02T12:48:23Z")

</div>

So, I am using the Elasticsearch and have the xpack.security.enabled as true. When I try to open the IP:Port and check the status of Elasticsearch node, I have to authorize myself. I wanted to know is it possible to have…

---

## [Editing an enrich policy](https://discuss.elastic.co/t/editing-an-enrich-policy/305494)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 12:17pm UTC](https://discuss.elastic.co/t/editing-an-enrich-policy/305494 "2022-06-02T12:17:04Z")

</div>

It appears that if I need to edit an enrichment policy that an ingest pipeline uses, I have to delete the pipe, then delete the policy, then create the new edited policy, then create the ingest pipeline. That is the proc…

---

## [Change CSS for Metric visualization?](https://discuss.elastic.co/t/change-css-for-metric-visualization/306031)

<div class="topic-metadata">

**Author:** [@Srikanth\_V](https://discuss.elastic.co/u/Srikanth_V)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 11:48am UTC](https://discuss.elastic.co/t/change-css-for-metric-visualization/306031 "2022-06-02T11:48:59Z")

</div>

Hello! I want to modify the style of a metric visualization that I create in Kibana. The issue is the text is align to center and I would like to move to left. Is it possible to modify it? Thanks in advance, Regards, S…

---

## [Logstash from 2 different resource in one logstash](https://discuss.elastic.co/t/logstash-from-2-different-resource-in-one-logstash/306185)

<div class="topic-metadata">

**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\
**Replies:** 1\
**Last updated:** [June 2, 2022, 11:22am UTC](https://discuss.elastic.co/t/logstash-from-2-different-resource-in-one-logstash/306185 "2022-06-02T11:22:30Z")

</div>

Hi, i have two differetent resource log and i want to filtered in one server with one logstash. I've created the grok filter as I want it using the grol debugger and it's working and producing the appropriate output. But…

---

## [How to add privileges to elastic/fleet-server](https://discuss.elastic.co/t/how-to-add-privileges-to-elastic-fleet-server/306153)

<div class="topic-metadata">

**Author:** [@rupam1](https://discuss.elastic.co/u/rupam1)\
**Replies:** 4\
**Last updated:** [June 2, 2022, 11:08am UTC](https://discuss.elastic.co/t/how-to-add-privileges-to-elastic-fleet-server/306153 "2022-06-02T11:08:44Z")

</div>

I have generated token with elastic fleet-server, while creating new index with that token I am getting security exception saying unauthorised user elastic/fleet-server

---

## [Indices are not deleteing using Lifecycle policy](https://discuss.elastic.co/t/indices-are-not-deleteing-using-lifecycle-policy/306105)

<div class="topic-metadata">

**Author:** [@santosh\_rout](https://discuss.elastic.co/u/santosh_rout)\
**Replies:** 3\
**Last updated:** [June 2, 2022, 9:59am UTC](https://discuss.elastic.co/t/indices-are-not-deleteing-using-lifecycle-policy/306105 "2022-06-02T09:59:52Z")

</div>

In elastic 7.12, I have tried through kibana gui but indices are not able to linked so I used these commands in cli but Indices are linked in kibana but not deleting so please help me on this? #curl -u elastic: -XPUT -s…

---

## [Filebeat exclude\_files is not working as expected](https://discuss.elastic.co/t/filebeat-exclude-files-is-not-working-as-expected/305995)

<div class="topic-metadata">

**Author:** [@omeryosef](https://discuss.elastic.co/u/omeryosef)\
**Replies:** 6\
**Last updated:** [June 2, 2022, 9:29am UTC](https://discuss.elastic.co/t/filebeat-exclude-files-is-not-working-as-expected/305995 "2022-06-02T09:29:58Z")

</div>

Hi everyone, I have the following structure of directories and I am trying to avoid duplications by excluding "current" dir: # ls -l total 12 drwxrwxr-x 11 node node 4096 May 25 10:42 3.123.0 drwxrwxr-x 11 node node 40…

---

## [Case Insensitive search kibana](https://discuss.elastic.co/t/case-insensitive-search-kibana/306137)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 0\
**Last updated:** [June 1, 2022, 2:10pm UTC](https://discuss.elastic.co/t/case-insensitive-search-kibana/306137 "2022-06-01T14:10:34Z")

</div>

Hello All, I'm trying to do a use case where in I'm integrating my kibana dashboard in extenal web ui through iframe,following this I'm providing search functionality,the challenge that is faced is -Search result are ca…

---

## [How to find Class implementing Function\< CreateIndexRequest.Builder, ObjectBuilder\< CreateIndexRequest\>\>?](https://discuss.elastic.co/t/how-to-find-class-implementing-function-createindexrequest-builder-objectbuilder-createindexrequest/306114)

<div class="topic-metadata">

**Author:** [@Enomine](https://discuss.elastic.co/u/Enomine)\
**Replies:** 2\
**Last updated:** [June 2, 2022, 8:53am UTC](https://discuss.elastic.co/t/how-to-find-class-implementing-function-createindexrequest-builder-objectbuilder-createindexrequest/306114 "2022-06-02T08:53:05Z")

</div>

Hi, may one create a new index to the client by client.indices().create(c -\> c.index("products2")); May one other be interested in doing so without using lambda-expression. He will need to give a CreateIndexRequest Ob…

---

## [Elasticseach JDK and sql-cli vulnerability mitigation](https://discuss.elastic.co/t/elasticseach-jdk-and-sql-cli-vulnerability-mitigation/306124)

<div class="topic-metadata">

**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\
**Replies:** 2\
**Last updated:** [June 2, 2022, 8:16am UTC](https://discuss.elastic.co/t/elasticseach-jdk-and-sql-cli-vulnerability-mitigation/306124 "2022-06-02T08:16:23Z")

</div>

Hi, I'm using Elastic Version - 7.6.0, as per the vulnerability scan below 2 are impacted. Elasticsearch-sql-cli-7.6.0.jar Elasticsearch-7.6.0/jdk - 1.13.0.2.8 Is there a way to just upgrade only these 2 libs as a qu…

---

## [Resource metricbeat-7.17.1 exists, but it is not an alias](https://discuss.elastic.co/t/resource-metricbeat-7-17-1-exists-but-it-is-not-an-alias/306030)

<div class="topic-metadata">

**Author:** [@Evgeny\_Barykin](https://discuss.elastic.co/u/Evgeny_Barykin)\
**Replies:** 6\
**Last updated:** [June 2, 2022, 7:49am UTC](https://discuss.elastic.co/t/resource-metricbeat-7-17-1-exists-but-it-is-not-an-alias/306030 "2022-06-02T07:49:12Z")

</div>

Hello! I have an issue with connecting second cluster to Elasticsearch. I changed dynamic mappings and added best\_compression to the settings, but now I get an error every time I try to connect new beats to it. If I le…

---

## [Kibana Control options - show only certain values](https://discuss.elastic.co/t/kibana-control-options-show-only-certain-values/306104)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [June 2, 2022, 7:44am UTC](https://discuss.elastic.co/t/kibana-control-options-show-only-certain-values/306104 "2022-06-02T07:44:35Z")

</div>

Hi all, I'm trying to show only certain dropdown options in my kibana Controls visualization. For example In my index pattern "fruits" , there is a field "fruit\_id". It has values of both oranges & apples. Apple Id is…

[Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=915)

[Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=917)
