# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=951 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 952 --- ## [How to fix security issue with kibana 5.6 Timelion widget](https://discuss.elastic.co/t/how-to-fix-security-issue-with-kibana-5-6-timelion-widget/303996)
**Author:** [@kashifqazi](https://discuss.elastic.co/u/kashifqazi)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-fix-security-issue-with-kibana-5-6-timelion-widget/303996 "2022-05-05T06:29:22Z")
How to fix security issue with kibana 5.6 Timelion widget. --- ## [Using Regex in Kibana Query DSL (filter-option in discover mode)](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937)
**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\ **Replies:** 4\ **Last updated:** [May 5, 2022, 5:45am UTC](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937 "2022-05-05T05:45:38Z")
Good day everyone, I am relatively new to the use of Kibana. And I have the following problem: I want to filter out all numbers and special characters like "\_" or "-" in a field in Discover mode, so that I only have Le… --- ## [Want to send this logs to Elasticsearch without logstash](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990)
**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 5:28am UTC](https://discuss.elastic.co/t/want-to-send-this-logs-to-elasticsearch-without-logstash/303990 "2022-05-05T05:28:58Z")
Hello Every One I have Following Logs I want sent this logs using script (Powershell) to Elasticsearch without using logstash no need mediator any one can help How can I ? { "Id": "4280", "AppKey": "StoreSearchAPIUR… --- ## [Organize Filebeat inputs and Directory Hierarchy](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 0\ **Last updated:** [May 5, 2022, 4:52am UTC](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989 "2022-05-05T04:52:22Z")
The log files on my system are stored in the following manner. and these folders finally contain the log files (access, error, audit and csv files) that need to be parsed example: since it is realtime data, n… --- ## [Issue getting Zeek logs into Kibana](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974)
**Author:** [@espressobeanies](https://discuss.elastic.co/u/espressobeanies)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 3:26am UTC](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974 "2022-05-05T03:26:45Z")
I'm having problems getting my Zeek logs into Kibana using an Elastic Agent that is not Fleet Managed. I'm running the latest and greatest versions of everything and I confirmed I can see dashboard information about the … --- ## [How do I connect Kibana with ES 8.0.0?](https://discuss.elastic.co/t/how-do-i-connect-kibana-with-es-8-0-0/303573)
**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 3:00am UTC](https://discuss.elastic.co/t/how-do-i-connect-kibana-with-es-8-0-0/303573 "2022-05-05T03:00:56Z")
Hello! My new ES 8.x Cluster works so far but, not with TLS Cluster and I can´t connect Kibana (also 8) with it. \[2022-04-29T07:41:44,969\]\[WARN \]\[o.e.t.OutboundHandler \] \[node1\] send message failed \[channel: Netty4T… --- ## [Error when running pipelines.yml](https://discuss.elastic.co/t/error-when-running-pipelines-yml/303710)
**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\ **Replies:** 8\ **Last updated:** [May 5, 2022, 2:33am UTC](https://discuss.elastic.co/t/error-when-running-pipelines-yml/303710 "2022-05-05T02:33:47Z")
Hello, I'm a newbie in Elastic community and I'm trying to run my pipelines.yml on /etc/logstash/ using this command /usr/share/logstash/bin/logstash -f pipelines.yml but all I'm getting is the error below... \[WARN \] 2… --- ## [ELK Issue while enabling x-pack](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656)
**Author:** [@anubhav.bss](https://discuss.elastic.co/u/anubhav.bss)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:27am UTC](https://discuss.elastic.co/t/elk-issue-while-enabling-x-pack/303656 "2022-05-05T02:27:15Z")
Hi Friends, I am facing issue with ELK stack deployed on AWS ECS. Whenever I am trying to connect enable x-pack feature, Elasticsearch and Kibana containers are not coming up. EC2 instance is behind Application load ba… --- ## [Elasticsearch pod going into crashloopbackoff state due to no space left on the device](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719)
**Author:** [@ayushsharma191](https://discuss.elastic.co/u/ayushsharma191)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:25am UTC](https://discuss.elastic.co/t/elasticsearch-pod-going-into-crashloopbackoff-state-due-to-no-space-left-on-the-device/303719 "2022-05-05T02:25:40Z")
Caused by: org.Elasticsearch.gateway.WriteStateException: failed to write state to the first location tmp file /usr/share/Elasticsearch/data/nodes/0/node-1.st.tmp", "at org.Elasticsearch.gateway.MetaDataStateFormat.writ… --- ## [Elasticsearch check if key exist in document](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816)
**Author:** [@Hovo\_Baghdasaryan](https://discuss.elastic.co/u/Hovo_Baghdasaryan)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:23am UTC](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816 "2022-05-05T02:23:48Z")
Hi All. I have key "field1" in the document of Elasticsearch. With mapping, a field is an object. sometimes field does not exist, sometimes the field exists but is empty (\[\]), sometimes the field has the correct value -… --- ## [Data is not populating in kibana](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830)
**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:20am UTC](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830 "2022-05-05T02:20:39Z")
Hi Team, I have created a index on kibana.But I am not able to see the data in the same index. please check the below logs for reference. The logs are showing as follows :- Total time for which application threads we… --- ## [Filebeat 7.17.2 not sending logs to kibana](https://discuss.elastic.co/t/filebeat-7-17-2-not-sending-logs-to-kibana/303590)
**Author:** [@njain213](https://discuss.elastic.co/u/njain213)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 2:15am UTC](https://discuss.elastic.co/t/filebeat-7-17-2-not-sending-logs-to-kibana/303590 "2022-05-05T02:15:02Z")
Hi Team, I have upgraded filebeat from 5.6.5 to 7.17.2 in windows machine. Filebeat is running fine after upgrade but it is not sending logs to Kibana. When I reverted changes back to 5.6.5 , logs are coming to kibana s… --- ## [Is it possible to pass multiple hosts in scroll api](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919)
**Author:** [@Gojo](https://discuss.elastic.co/u/Gojo)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 2:13am UTC](https://discuss.elastic.co/t/is-it-possible-to-pass-multiple-hosts-in-scroll-api/303919 "2022-05-05T02:13:59Z")
hi all , is it possible to pass multiple hosts in scroll api , i want to get multiple logs from multiple hosts using scroll request url = '{0}/{1}/\_search?scroll=1m&ignore\_unavailable=true'.format( … --- ## [Vector Tile API: Updated mvt\_sample error](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291)
**Author:** [@Joseph\_Parish](https://discuss.elastic.co/u/Joseph_Parish)\ **Replies:** 2\ **Last updated:** [May 5, 2022, 1:59am UTC](https://discuss.elastic.co/t/vector-tile-api-updated-mvt-sample-error/303291 "2022-05-05T01:59:14Z")
The latest update to the mvt\_sample throws this ResponseError: x\_content\_parse\_exception: \[x\_content\_parse\_exception\] Reason: \[1:36\] \[vector-tile\] unknown field \[grid\_agg\] did you mean \[grid\_type\]? If the grid\_agg field … --- ## [All shards failed across multiple indexes](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033)
**Author:** [@adowney-lm](https://discuss.elastic.co/u/adowney-lm)\ **Replies:** 5\ **Last updated:** [May 5, 2022, 1:30am UTC](https://discuss.elastic.co/t/all-shards-failed-across-multiple-indexes/301033 "2022-05-05T01:30:29Z")
We are using 7.7.1 ELK and have a simple, single node, setup with a couple of dozen indexes. I'm finding a very large number of "all shards failed" messages in the logs, and have seen a connection failure for a minute o… --- ## [How to grant a plugin permissions for updating indices and index templates](https://discuss.elastic.co/t/how-to-grant-a-plugin-permissions-for-updating-indices-and-index-templates/303868)
**Author:** [@kved](https://discuss.elastic.co/u/kved)\ **Replies:** 3\ **Last updated:** [May 5, 2022, 1:24am UTC](https://discuss.elastic.co/t/how-to-grant-a-plugin-permissions-for-updating-indices-and-index-templates/303868 "2022-05-05T01:24:05Z")
I created a plugin to manage index templates and index settings, however I'm seeing an error that action \[indices:admin/template/get\] is unauthorized for user \[\_system\] I tried adding the superuser role to the \_system … --- ## [ElasticSearch FIPS (BouncyCastle)](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298)
**Author:** [@datencio](https://discuss.elastic.co/u/datencio)\ **Replies:** 11\ **Last updated:** [May 5, 2022, 1:19am UTC](https://discuss.elastic.co/t/elasticsearch-fips-bouncycastle/303298 "2022-05-05T01:19:50Z")
I am tasked with trying to get Elasticsearch working in FIPS mode. I know there is probably no experts on this topic in the forums but wanted to see if anyone could give me just a working solution. In my Elasticsearch.y… --- ## [Problem on starting elasticsearch](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 1\ **Last updated:** [May 5, 2022, 12:27am UTC](https://discuss.elastic.co/t/problem-on-starting-elasticsearch/303911 "2022-05-05T00:27:30Z")
root@elastic:~# systemctl status elasticsearch.service ● elasticsearch.service - Elasticsearch Loaded: loaded (/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result:… --- ## [Upgrading error from 6.8 to 7.13](https://discuss.elastic.co/t/upgrading-error-from-6-8-to-7-13/303943)
**Author:** [@Zurka](https://discuss.elastic.co/u/Zurka)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 10:47pm UTC](https://discuss.elastic.co/t/upgrading-error-from-6-8-to-7-13/303943 "2022-05-04T22:47:44Z")
Hi! I have a RedHat8 machine with Elasticsearch 5.6 installed and I want to upgrade to 7.x. I've been able to upgrade to 6.8 following the guide but somehow, I am getting an error when trying to start the Elasticsearch … --- ## [Latest Open source elasticsearch version](https://discuss.elastic.co/t/latest-open-source-elasticsearch-version/303938)
**Author:** [@anshulgoyal](https://discuss.elastic.co/u/anshulgoyal)\ **Replies:** 4\ **Last updated:** [May 4, 2022, 10:10pm UTC](https://discuss.elastic.co/t/latest-open-source-elasticsearch-version/303938 "2022-05-04T22:10:32Z")
Hi All, I have configured Elasticsearch 7.17 version on the system but not sure if it is open source, non-licensed, and log4j vulnerable or not. If it is not all of the three, please suggest me a version which has all t… --- ## [Grafana fails connect to elastic search](https://discuss.elastic.co/t/grafana-fails-connect-to-elastic-search/303966)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 3:48pm UTC](https://discuss.elastic.co/t/grafana-fails-connect-to-elastic-search/303966 "2022-05-04T15:48:22Z")
Hi everyone, i'm new with Elasticsearch, i want to export some logs from elastic to grafana so i can create a dashboard. I followed the instruction of grafana documentation grafana doc, but i got this error when i try … --- ## [Kibana visualization TSVB not showing entire data and gives error](https://discuss.elastic.co/t/kibana-visualization-tsvb-not-showing-entire-data-and-gives-error/303963)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 7:03pm UTC](https://discuss.elastic.co/t/kibana-visualization-tsvb-not-showing-entire-data-and-gives-error/303963 "2022-05-04T19:03:21Z")
Hello All, I'm trying create a tsvb in which I need to get data for ex: from past 9 months and while selecting the time range I get below error,Mostly I'm facing this issue due to TSVB only.I've a dashboard considerin… --- ## [IO wait when using dense\_vector field](https://discuss.elastic.co/t/io-wait-when-using-dense-vector-field/303261)
**Author:** [@gioele](https://discuss.elastic.co/u/gioele)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 6:49pm UTC](https://discuss.elastic.co/t/io-wait-when-using-dense-vector-field/303261 "2022-05-04T18:49:37Z")
Elasticsearch 7.15.2 While testing the performances of various types of queries using the dense\_vector field type we noticed that a significant amount of time is spent loading the dense\_vector from the disk. We observe… --- ## [Unable to get event host.name in Metricbeat](https://discuss.elastic.co/t/unable-to-get-event-host-name-in-metricbeat/301490)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 6:25pm UTC](https://discuss.elastic.co/t/unable-to-get-event-host-name-in-metricbeat/301490 "2022-05-04T18:25:28Z")
Hello All, I've written a javascript script processor in which I'm trying to get only those mount points which have reached thrshold greater than some value,ex:greater than 90 %\[kibana-\>panel filter-\> field \> 0.9\],The c… --- ## [How to get a Term list for a field?](https://discuss.elastic.co/t/how-to-get-a-term-list-for-a-field/303968)
**Author:** [@iam](https://discuss.elastic.co/u/iam)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 3:50pm UTC](https://discuss.elastic.co/t/how-to-get-a-term-list-for-a-field/303968 "2022-05-04T15:50:33Z")
Hi All, Is there a way to get a sorted list of terms from a field in Elasticsearch? We are going to migrate from Solr to ES and we need something similar to /terms handler, for example: http://localhost:8983/solr/myda… --- ## [Logstash Error](https://discuss.elastic.co/t/logstash-error/303872)
**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 6:07pm UTC](https://discuss.elastic.co/t/logstash-error/303872 "2022-05-04T18:07:59Z")
Hello there, I am using Elasticsearch three node implementation cluster. I am using version 7.16.2. I have set up this cluster with basic settings. No security has been set up. Here is the example of data I tried to I… --- ## [\[JAVA\] Error deserializing TermSuggest](https://discuss.elastic.co/t/java-error-deserializing-termsuggest/303970)
**Author:** [@danielbenedi6](https://discuss.elastic.co/u/danielbenedi6)\ **Replies:** 0\ **Last updated:** [May 4, 2022, 5:11pm UTC](https://discuss.elastic.co/t/java-error-deserializing-termsuggest/303970 "2022-05-04T17:11:08Z")
I am using the Java client in its version 8.2.0. When running my search I get a runtime error when I add the suggest and it happens when deserializing. My code: SearchResponse\ response = client.search( … --- ## [Filtering documents with another index](https://discuss.elastic.co/t/filtering-documents-with-another-index/303956)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 4:51pm UTC](https://discuss.elastic.co/t/filtering-documents-with-another-index/303956 "2022-05-04T16:51:32Z")
Hi everyone, and thank you for your time reading this. I'm having two indexes, let's think of those, for sake of semplicity, as: index1: log content file index2: list of hostnames Now, I developed a dashboard in Kiba… --- ## [Convert field to an array](https://discuss.elastic.co/t/convert-field-to-an-array/303884)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 2\ **Last updated:** [May 4, 2022, 4:47pm UTC](https://discuss.elastic.co/t/convert-field-to-an-array/303884 "2022-05-04T16:47:32Z")
Hello, I'm looking to convert the following field to a hash of values.... Source Field: "ip\_addresses": "{192.168.1.1, 192.168.1.2, 192.168.1.3}" Desired Result: "ip\_addresses": \[ "192.168.1.1", "192… --- ## [Terms Enum Api text support](https://discuss.elastic.co/t/terms-enum-api-text-support/295943)
**Author:** [@ffoeta](https://discuss.elastic.co/u/ffoeta)\ **Replies:** 1\ **Last updated:** [May 4, 2022, 4:40pm UTC](https://discuss.elastic.co/t/terms-enum-api-text-support/295943 "2022-05-04T16:40:47Z")
Currently terms API does not support text fieldType. I've tried creating custom field extension combining code from Keyword and Text types, basically creating exact copy of text type with getTerms(...) method implement… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=950) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=952)