# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=963 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 964 --- ## [Unable to access elastic search without SSL](https://discuss.elastic.co/t/unable-to-access-elastic-search-without-ssl/303201)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [April 26, 2022, 12:12am UTC](https://discuss.elastic.co/t/unable-to-access-elastic-search-without-ssl/303201 "2022-04-26T00:12:20Z")
Hello, I'm trying to pull data from Elasticsearch using logstash pipeline and seeing some issues. I'm able to connect to ES using username and pwd through API (No certificate is provided in the request). However, when t… --- ## [Custom Plugin: New visualization toast showing "undefined" added](https://discuss.elastic.co/t/custom-plugin-new-visualization-toast-showing-undefined-added/302969)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 11:48pm UTC](https://discuss.elastic.co/t/custom-plugin-new-visualization-toast-showing-undefined-added/302969 "2022-04-25T23:48:07Z")
Hello, I'm creating a new visualization type, but when I add it to the dashboard , the toast shows "undefined" added. How can I set an initial value for this component to show it in the Toast? Thanks! --- ## [Using distinct state containers (global/local) for the same component](https://discuss.elastic.co/t/using-distinct-state-containers-global-local-for-the-same-component/303045)
**Author:** [@Specialist](https://discuss.elastic.co/u/Specialist)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 11:28pm UTC](https://discuss.elastic.co/t/using-distinct-state-containers-global-local-for-the-same-component/303045 "2022-04-25T23:28:50Z")
Hi there, let's say I have a custom Kibana plugin that should access global (\_g) as well as application-specific state. To do so, have have created two state containers via createStateContainer from create\_state\_contain… --- ## [Watcher PDF reporting fails on dockerised 7.17.x](https://discuss.elastic.co/t/watcher-pdf-reporting-fails-on-dockerised-7-17-x/301572)
**Author:** [@cafuego](https://discuss.elastic.co/u/cafuego)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 11:25pm UTC](https://discuss.elastic.co/t/watcher-pdf-reporting-fails-on-dockerised-7-17-x/301572 "2022-04-25T23:25:29Z")
Since my ELK stack upate from 7.16.2 to 7.17.1 (and 7.17.2 after that) Watcher has been unable to generate PDF reports. I run a dockerised ELK on Amazon EC2- using the Elastic-provided docker images. When I went to look… --- ## [Slow log threshold question](https://discuss.elastic.co/t/slow-log-threshold-question/302159)
**Author:** [@knightsg1](https://discuss.elastic.co/u/knightsg1)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 9:35pm UTC](https://discuss.elastic.co/t/slow-log-threshold-question/302159 "2022-04-25T21:35:12Z")
I'm looking through the documentation regarding the slow log as I'd like to use it troubleshoot some performance issues we've run into. I'm a bit confused about the thresholds that are suggested in the documentation as i… --- ## [Error when exporting saved objects](https://discuss.elastic.co/t/error-when-exporting-saved-objects/303079)
**Author:** [@jeremyross](https://discuss.elastic.co/u/jeremyross)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 6:45pm UTC](https://discuss.elastic.co/t/error-when-exporting-saved-objects/303079 "2022-04-25T18:45:24Z")
I'm getting the following error when attempting to export saved objects: { "statusCode": 400, "error": "Bad Request", "message": "\[request body.attributes\]: expected value of type \[object\] but got \[undefined\]" } I… --- ## [No public build() method on Aggregation.Builder class](https://discuss.elastic.co/t/no-public-build-method-on-aggregation-builder-class/303173)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 5:34pm UTC](https://discuss.elastic.co/t/no-public-build-method-on-aggregation-builder-class/303173 "2022-04-25T17:34:52Z")
Hello, In the new Elasticsearch Java Client API, the method build() of class co.elastic.clients.Elasticsearch.\_types.aggregations.Aggregation.Builder is not public. What is the correct way of creating an instance of co… --- ## [Making a grok filed optional in grok pattern](https://discuss.elastic.co/t/making-a-grok-filed-optional-in-grok-pattern/303159)
**Author:** [@Pranjal\_Sett](https://discuss.elastic.co/u/Pranjal_Sett)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 5:29pm UTC](https://discuss.elastic.co/t/making-a-grok-filed-optional-in-grok-pattern/303159 "2022-04-25T17:29:38Z")
Hi, I am trying to make my field optional. Let me give you the scenario below: let suppose my log patterns are: pattern 1: \[2022-04-25T12:51:27.967+02:00\] \[d03-c02-s02\] \[NOTIFICATION\] \[oracle.wsm.msg.logging\] \[tid: … --- ## [Setting the number of replicas in Index Creation](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 5:22pm UTC](https://discuss.elastic.co/t/setting-the-number-of-replicas-in-index-creation/303166 "2022-04-25T17:22:34Z")
Hello everyone, when I create a new Index via Logstash they always go with 1 replica and that turns the Index yellow. So I edit it in Index Management to set replicas to 0 the Index turns green; It might be silly but I … --- ## [No matching indices found: No indices match pattern "filebeat-\*"](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/302976)
**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\ **Replies:** 9\ **Last updated:** [April 25, 2022, 5:02pm UTC](https://discuss.elastic.co/t/no-matching-indices-found-no-indices-match-pattern-filebeat/302976 "2022-04-25T17:02:43Z")
Hi All, I have big problem with my recent deploy of ES version 7.8 using docker. I'm trying to connect my filebeat sources, but I have following ERROR in the Stack Management 7.8.0 (see screenshot below). Some of the sou… --- ## [Anomaly Detection Categorization: Kibana Severity vs Anomaly score](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-severity-vs-anomaly-score/303007)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 1\ **Last updated:** [April 22, 2022, 1:38pm UTC](https://discuss.elastic.co/t/anomaly-detection-categorization-kibana-severity-vs-anomaly-score/303007 "2022-04-22T13:38:03Z")
Hi, I am using Elasticsearch 8.1.0 Kibana 8.1.0 I have created a Categorization job in kibana. As input, I have given the index field which contains the log messages. After the job gets completed processing, I can s… --- ## [Elasticsearch Java Client: Support for custom mappings/settings](https://discuss.elastic.co/t/elasticsearch-java-client-support-for-custom-mappings-settings/303172)
**Author:** [@Fabrizio\_Fortino](https://discuss.elastic.co/u/Fabrizio_Fortino)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 4:17pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-support-for-custom-mappings-settings/303172 "2022-04-25T16:17:19Z")
Custom plugins sometimes require custom mappings/settings. As an example, elastiknn requires a specific setting to enable the plugin for a given index and a custom field mapping for the configuration. With the Rest Hig… --- ## [\[Kibana\]\[ML\] The job id cannot contain more than 64 characters](https://discuss.elastic.co/t/kibana-ml-the-job-id-cannot-contain-more-than-64-characters/303047)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 3:00pm UTC](https://discuss.elastic.co/t/kibana-ml-the-job-id-cannot-contain-more-than-64-characters/303047 "2022-04-25T15:00:31Z")
Hello, I'm trying to create a ML job to test the anomalies feature with observability, the Log rate job was created successfully, but when I try to create a "Categorization" job it's saying "The job id cannot contain mor… --- ## [Doc\_values and Inverted Index in Elastic 8.1](https://discuss.elastic.co/t/doc-values-and-inverted-index-in-elastic-8-1/302716)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 4\ **Last updated:** [April 25, 2022, 2:51pm UTC](https://discuss.elastic.co/t/doc-values-and-inverted-index-in-elastic-8-1/302716 "2022-04-25T14:51:18Z")
Hello everyone, my question is about the feature that makes possible to disable inverted index in Elastic 8.1. Can I still mannipulate the data I get from Logstash even without the inverted index? On my learning of ELK (… --- ## [Elasticsearch enrich index](https://discuss.elastic.co/t/elasticsearch-enrich-index/303158)
**Author:** [@Slim\_Saddem](https://discuss.elastic.co/u/Slim_Saddem)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 2:07pm UTC](https://discuss.elastic.co/t/elasticsearch-enrich-index/303158 "2022-04-25T14:07:11Z")
Hi everyone! I use enrich policy to enrich indexes with data from another indexes. Link Documentation : Enrich your data | Elasticsearch Guide \[7.16\] | Elastic its works fine, but my problem is Elasticsearch doesn't r… --- ## [Aggregation Response](https://discuss.elastic.co/t/aggregation-response/303126)
**Author:** [@jpv](https://discuss.elastic.co/u/jpv)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 1:55pm UTC](https://discuss.elastic.co/t/aggregation-response/303126 "2022-04-25T13:55:08Z")
I recently migrated to Elasticsearch 7.0 and currently using RestHighLevelClient. I noticed my search response, specifically the aggregation response has some added prefixes on the aggregation name (filters#. sterm, min,… --- ## [Customise Webpack Configs for Kibana (V8) Plugin development](https://discuss.elastic.co/t/customise-webpack-configs-for-kibana-v8-plugin-development/302542)
**Author:** [@artalat](https://discuss.elastic.co/u/artalat)\ **Replies:** 9\ **Last updated:** [April 25, 2022, 1:30pm UTC](https://discuss.elastic.co/t/customise-webpack-configs-for-kibana-v8-plugin-development/302542 "2022-04-25T13:30:27Z")
Hi, I'm developing a custom plugin for Kibana. The requirement is to share some code with React Native/Expo app. For this purpose, I need to customize webpack configs. I found this existing thread here on the topic, but… --- ## [ES Rally - indexing time increasing](https://discuss.elastic.co/t/es-rally-indexing-time-increasing/303136)
**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\ **Replies:** 5\ **Last updated:** [April 25, 2022, 1:19pm UTC](https://discuss.elastic.co/t/es-rally-indexing-time-increasing/303136 "2022-04-25T13:19:02Z")
Hi there, We set up a nightly race on an existing cluster to see the evolution of the cluster's performance. We are deleting existing indices from the previous race, indexing them again - 3, for a total of about 10G - … --- ## [Map Point to Point Custom Color Ramp Lower Limit](https://discuss.elastic.co/t/map-point-to-point-custom-color-ramp-lower-limit/303051)
**Author:** [@stefan.elser](https://discuss.elastic.co/u/stefan.elser)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 1:28pm UTC](https://discuss.elastic.co/t/map-point-to-point-custom-color-ramp-lower-limit/303051 "2022-04-25T13:28:28Z")
Hi, I'm trying to customize a color ramp for my point to point visualization, but can't seem to be able to set the lower limit. The values range from 0 to 2, and are the result of an Average calculation. I want to set 0… --- ## [Need to send complete xml file from filebeat to logstash in message field](https://discuss.elastic.co/t/need-to-send-complete-xml-file-from-filebeat-to-logstash-in-message-field/302844)
**Author:** [@Rohit\_Goel1](https://discuss.elastic.co/u/Rohit_Goel1)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 11:55am UTC](https://discuss.elastic.co/t/need-to-send-complete-xml-file-from-filebeat-to-logstash-in-message-field/302844 "2022-04-25T11:55:45Z")
Hi , I am using below filebeat config yaml to send below xml to logstash for filteration. but it is not sending complete xml file. and sometimes the xml being sent is not in correct format and tags are getting closed ea… --- ## [Deprecate and remove Multiple Data Paths](https://discuss.elastic.co/t/deprecate-and-remove-multiple-data-paths/297911)
**Author:** [@st4r.f1sch](https://discuss.elastic.co/u/st4r.f1sch)\ **Replies:** 9\ **Last updated:** [April 25, 2022, 11:05am UTC](https://discuss.elastic.co/t/deprecate-and-remove-multiple-data-paths/297911 "2022-04-25T11:05:25Z")
Hi there, While I don't agree that this should be discussed here, but if that helps ¯\_(ツ)\_/¯ The issue is that Elastic is removing multiple data paths from the configuration that is a big issue when you have a ton of d… --- ## [Filestream input ID without ID might lead to data duplication](https://discuss.elastic.co/t/filestream-input-id-without-id-might-lead-to-data-duplication/302471)
**Author:** [@jean.bissonnette](https://discuss.elastic.co/u/jean.bissonnette)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 10:53am UTC](https://discuss.elastic.co/t/filestream-input-id-without-id-might-lead-to-data-duplication/302471 "2022-04-25T10:53:49Z")
Filebeat 8.1.2 is installed on a windows server with web applications generating log files and using IIS. I have this error when I start filebeat via windows service. {"log.level":"error","@timestamp":"2022-04-14T15:21… --- ## [Audit log fields](https://discuss.elastic.co/t/audit-log-fields/302874)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 10:46am UTC](https://discuss.elastic.co/t/audit-log-fields/302874 "2022-04-25T10:46:06Z")
Hi, I have a set of audit call events, Example: type=SYSCALL msg=audit(1647800652.003:104): arch=c00000b7 syscall=221 success=yes exit=0 a0=ffff96c3a518 a1=ffffe65a32e8 a2=ffffe65a3c78 a3=8 items=0 ppid=5916 pid=7997 au… --- ## [Fields returned on a certain index are out of scope](https://discuss.elastic.co/t/fields-returned-on-a-certain-index-are-out-of-scope/303133)
**Author:** [@Draken](https://discuss.elastic.co/u/Draken)\ **Replies:** 0\ **Last updated:** [April 25, 2022, 9:03am UTC](https://discuss.elastic.co/t/fields-returned-on-a-certain-index-are-out-of-scope/303133 "2022-04-25T09:03:14Z")
Hello, we are currently working on a monitoring application which utilizes Elasticsearch for data storage, we are working with Elasticsearch 7.17.0 and currently using RestHighLevelClient to interact with it from our app… --- ## [Elastic CORS Problem ....disappear after a refresh](https://discuss.elastic.co/t/elastic-cors-problem-disappear-after-a-refresh/303132)
**Author:** [@Avinash\_123](https://discuss.elastic.co/u/Avinash_123)\ **Replies:** 0\ **Last updated:** [April 25, 2022, 8:48am UTC](https://discuss.elastic.co/t/elastic-cors-problem-disappear-after-a-refresh/303132 "2022-04-25T08:48:24Z")
Hi Team, We have enabled the CORS with below configuration in Elastic cloud environment which we are using for production. http.cors.enabled: true http.cors.allow-origin: /^(https?://).\*?(websitename).\\w+(.\\w+)?$/ ht… --- ## [Trying to make all the fields as Dynamic false](https://discuss.elastic.co/t/trying-to-make-all-the-fields-as-dynamic-false/303117)
**Author:** [@Shaiju\_Sam](https://discuss.elastic.co/u/Shaiju_Sam)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 7:51am UTC](https://discuss.elastic.co/t/trying-to-make-all-the-fields-as-dynamic-false/303117 "2022-04-25T07:51:02Z")
Hi Team, I am getting an error in logstash from an index since the total fields crossed 2000. I am trying to make all the fields as dynamic=false so there wont be additional fields adding up. Can someone pls let me know… --- ## [Resource management with Ingest and Transform](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 7\ **Last updated:** [April 25, 2022, 7:23am UTC](https://discuss.elastic.co/t/resource-management-with-ingest-and-transform/302239 "2022-04-25T07:23:13Z")
Hi, I currently have a running pipeline like this: Filebeat -\> Logstash -\> Elasticsearch \> Elasticsearch Transform I'm trying to process 10GB of logs. The data ingestion (Logstash -\> Elasticsearch) takes 30 mins, use… --- ## [Grok Match but not include](https://discuss.elastic.co/t/grok-match-but-not-include/303046)
**Author:** [@sukur55](https://discuss.elastic.co/u/sukur55)\ **Replies:** 2\ **Last updated:** [April 25, 2022, 6:42am UTC](https://discuss.elastic.co/t/grok-match-but-not-include/303046 "2022-04-25T06:42:27Z")
Hello, I am trying to parse a custom date&time field like: date=2022-04-22 time=09:38:04, currently I have filter like: (?\%{YEAR}-%{MONTHNUM}-%{MONTHDAY} time=%{TIME}) and result of timestamp is: 2022-04… --- ## [Two Transform jobs overwrite result doc ID of each other (duplicate \_id)](https://discuss.elastic.co/t/two-transform-jobs-overwrite-result-doc-id-of-each-other-duplicate-id/303064)
**Author:** [@goldsky](https://discuss.elastic.co/u/goldsky)\ **Replies:** 1\ **Last updated:** [April 25, 2022, 6:14am UTC](https://discuss.elastic.co/t/two-transform-jobs-overwrite-result-doc-id-of-each-other-duplicate-id/303064 "2022-04-25T06:14:10Z")
Hello, during my journey with migration of existing, "home-made" transformations to Transform API (continuous mode), I faced one minor issue - ability to add static fields into result documents, on the beginning I tried… --- ## [Filebeat: docker autodiscover problem](https://discuss.elastic.co/t/filebeat-docker-autodiscover-problem/301452)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 6:08am UTC](https://discuss.elastic.co/t/filebeat-docker-autodiscover-problem/301452 "2022-04-25T06:08:05Z")
I need to using filebeat auto discover to input the docker container log My container log name pantsel/konga This is my config in filebeat.yml #==============Using Autodiscover======================= filebeat.autodisc… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=962) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=964)