# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=997 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 998 --- ## [ELK Product Upgrade](https://discuss.elastic.co/t/elk-product-upgrade/300905)
**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 4:46am UTC](https://discuss.elastic.co/t/elk-product-upgrade/300905 "2022-03-29T04:46:03Z")
Hi We are using Out of the box Logstash, Elasticsearch and customized Kibana. All are in 7.10.2 . We are in process in upgrade. In case upgrade delayed till May 2022 which will be EOL for 7.10.2, do we have any function… --- ## [Changue Colors on Kibana 7.15](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652)
**Author:** [@mvasqueznr](https://discuss.elastic.co/u/mvasqueznr)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 4:30am UTC](https://discuss.elastic.co/t/changue-colors-on-kibana-7-15/298652 "2022-03-29T04:30:27Z")
Hi. I'm follow the guide to personalize kibana from ManuelF and with a some changes in the folder structure in 7.15.1 version. The changes are successful. But now, I'm trying to change the color on the header where is … --- ## [Form the syslog\_pri field](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814)
**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 3:25am UTC](https://discuss.elastic.co/t/form-the-syslog-pri-field/300814 "2022-03-29T03:25:56Z")
I have the following syslog messages - Oct 18 16:11:54 1aen ai\_controller\[419\]: \[16:11:54.479933\] ERROR \[ntp\_client.cpp:113 fetch\_time()\] Can't get NTP response Oct 18 16:11:55 1aen ntpd\[442\]: bind(21) AF\_INET6 fe80… --- ## [Centralized management and monitoring of clusters](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903)
**Author:** [@Atul\_Chadha](https://discuss.elastic.co/u/Atul_Chadha)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 2:11am UTC](https://discuss.elastic.co/t/centralized-management-and-monitoring-of-clusters/300903 "2022-03-29T02:11:39Z")
Is there a way to manage and monitor various cluster across different Data centers in version 7.x ? Specific need is to manage x-pack users from one location across different clusters. --- ## [Pokémon - match\_phrase fails with edge\_ngram & asciifolding](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901)
**Author:** [@omikron](https://discuss.elastic.co/u/omikron)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:40am UTC](https://discuss.elastic.co/t/pokemon-match-phrase-fails-with-edge-ngram-asciifolding/300901 "2022-03-29T01:40:34Z")
Hi, I am having an issue with the match\_phrase query against the field with the edge\_ngram tokenizer and asciifolding filter (Elasticsearch v7.7). The field is: "mainTitle": { "type": "text", "fields": { "autocomp… --- ## [Missing Events in Logstash input SNMP](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900)
**Author:** [@Ygal\_Mizrachi](https://discuss.elastic.co/u/Ygal_Mizrachi)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:39am UTC](https://discuss.elastic.co/t/missing-events-in-logstash-input-snmp/300900 "2022-03-29T01:39:27Z")
Hello im trying to get snmp documents but some events are missing and i am looking for help. thanks in advance snmp2.conf input{ snmp { tables =\> \[{ "name" =\> "ifTable" "columns" =\> \[ "1.3.6.1.2.1.2.2.1.1", "1.3.… --- ## [Filebeat timestamp processor no year](https://discuss.elastic.co/t/filebeat-timestamp-processor-no-year/300896)
**Author:** [@kdotson](https://discuss.elastic.co/u/kdotson)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 10:42pm UTC](https://discuss.elastic.co/t/filebeat-timestamp-processor-no-year/300896 "2022-03-28T22:42:03Z")
Hello, I am trying to get filebeats to update the @timestamp with the timestamp processor but I think because the log timestamp is missing the year I am having some trouble. example log: Mar 12 07:06:38 asdefg/xx.xx.x… --- ## [Failed to update snapshot in repository](https://discuss.elastic.co/t/failed-to-update-snapshot-in-repository/300879)
**Author:** [@alicango](https://discuss.elastic.co/u/alicango)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 5:06pm UTC](https://discuss.elastic.co/t/failed-to-update-snapshot-in-repository/300879 "2022-03-28T17:06:01Z")
I have a cluster that has 3 masters, 2 hot, 2 warms, 2 colds nodes. I am trying to take a snapshot but I got this error; "type": "snapshot\_exception", "reason": "\[cul-backup:cul-snap-2022.03.28-xxxxxxxxx/xxxxxxxxxx\] f… --- ## [Validating Rollup index](https://discuss.elastic.co/t/validating-rollup-index/300799)
**Author:** [@b-v](https://discuss.elastic.co/u/b-v)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 10:26pm UTC](https://discuss.elastic.co/t/validating-rollup-index/300799 "2022-03-28T22:26:41Z")
How to validate if the rolled up index has all the data from the source index. I have a rollup job scheduled to run everyday. I will be deleting the source index after the rollup schedule is done, I want to know if the r… --- ## [Elastic Agent Enrollment behind Proxy Server](https://discuss.elastic.co/t/elastic-agent-enrollment-behind-proxy-server/300888)
**Author:** [@alphabet5](https://discuss.elastic.co/u/alphabet5)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 9:27pm UTC](https://discuss.elastic.co/t/elastic-agent-enrollment-behind-proxy-server/300888 "2022-03-28T21:27:38Z")
I am trying to add Elastic Agents to windows hosts. These hosts need to communicate through a proxy (using squid currently). I've tried adding the registry keys before running the install command, as well as using envir… --- ## [Elasticsearch query](https://discuss.elastic.co/t/elasticsearch-query/300708)
**Author:** [@chrisml](https://discuss.elastic.co/u/chrisml)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 8:41pm UTC](https://discuss.elastic.co/t/elasticsearch-query/300708 "2022-03-28T20:41:24Z")
Could anyone shed any light on the nested bool should/musts here? Is it necessary or just poorly written? (the query is generated, depending on user-input) --- ## [How to build an Elasticsearch query that will take into account the distance between words?](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886)
**Author:** [@asil](https://discuss.elastic.co/u/asil)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 8:14pm UTC](https://discuss.elastic.co/t/how-to-build-an-elasticsearch-query-that-will-take-into-account-the-distance-between-words/300886 "2022-03-28T20:14:16Z")
I'm running with elasticsearch:7.6.2 I have an index with 4 simple documents: PUT demo\_idx/\_doc/1 { "content": "Distributed nature, simple REST APIs, speed, and scalability, Elasticsearch is the central c… --- ## [Kibana site can't be reached](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 8:03pm UTC](https://discuss.elastic.co/t/kibana-site-cant-be-reached/300607 "2022-03-28T20:03:13Z")
I have not made any changes to the elk stack .It was working fine till yesterday, today at the beginning it did not let me login to the kibana portal.I cleared browser history restarted Elasticsearch and kibana and tried… --- ## [Is it possible to auto increment documents as they are indexed?](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 7:56pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auto-increment-documents-as-they-are-indexed/300887 "2022-03-28T19:56:48Z")
Context: I am using the bulk API to index several documents into an index I would like to auto increment a field, 'y', present in the documents, which would tally the order in which documents are indexed. (I know i… --- ## [Kibana excluding Meta fields in Index Pattern](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787)
**Author:** [@sof](https://discuss.elastic.co/u/sof)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 5:22pm UTC](https://discuss.elastic.co/t/kibana-excluding-meta-fields-in-index-pattern/300787 "2022-03-28T17:22:41Z")
Hello. I created an index pattern in Kibana. I wish to remove \_index, \_type and similar Meta fields which were auto created by Kibana using Field Filtering from the Management -\> Index Patterns -\> Field Filters wish wo… --- ## [Saved field "logdate" of data view "app\*" is invalid for use with the "Date Histogram" aggregation](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868)
**Author:** [@userR](https://discuss.elastic.co/u/userR)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:48pm UTC](https://discuss.elastic.co/t/saved-field-logdate-of-data-view-app-is-invalid-for-use-with-the-date-histogram-aggregation/300868 "2022-03-28T15:48:20Z")
Recently, we upgraded our production machine which meant I would have to re-deploy Filebeat on this new server. All the log paths and log formats are the same, however, for whatever reason, it is having an issue with log… --- ## [Wildcard conflicting](https://discuss.elastic.co/t/wildcard-conflicting/300870)
**Author:** [@OlivierC](https://discuss.elastic.co/u/OlivierC)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 3:44pm UTC](https://discuss.elastic.co/t/wildcard-conflicting/300870 "2022-03-28T15:44:50Z")
Hello, I try to find a query for something looking easy for a human, but I can't create it with ES. Let's imagine we have an index named words with a few data: PUT words/\_doc/1 { "name": "elastic" } PUT words/\_doc/2… --- ## [Elasticsearch not able to search string contains special character](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866)
**Author:** [@Koushik\_Chatterjee](https://discuss.elastic.co/u/Koushik_Chatterjee)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-not-able-to-search-string-contains-special-character/300866 "2022-03-28T15:35:01Z")
I am developing an web application where I'm using Elasticsearch. I'm trying to search strings contains - or @ eg. email address koushik@testmail.com, but it's not working. Other fields like first name, last name etc. wo… --- ## [I create user login system with file uploading , and user can upload unlimited textfiles and search word, how to create and mapping index this case?](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 3:15pm UTC](https://discuss.elastic.co/t/i-create-user-login-system-with-file-uploading-and-user-can-upload-unlimited-textfiles-and-search-word-how-to-create-and-mapping-index-this-case/300835 "2022-03-28T15:15:05Z")
--- ## [How to upload textfile to ESdatabase and make it searchable?](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855)
**Author:** [@AJITH](https://discuss.elastic.co/u/AJITH)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-to-upload-textfile-to-esdatabase-and-make-it-searchable/300855 "2022-03-28T15:13:51Z")
i try to upload textfile to ES database, i try convert textfile to String formate and then store. i dont know is it proper way? or any other way is available in ES for store textfiles and make it searchable? --- ## [Personnel dashboards](https://discuss.elastic.co/t/personnel-dashboards/300276)
**Author:** [@swchandu](https://discuss.elastic.co/u/swchandu)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 2:55pm UTC](https://discuss.elastic.co/t/personnel-dashboards/300276 "2022-03-28T14:55:03Z")
Hi, Is it possible to have personnel dashboards in kibana. The idea is not to have a dashboard for user alone (with full control) and hidden to others. version: 8 --- ## [How to parse apache error.log](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822)
**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 2:48pm UTC](https://discuss.elastic.co/t/how-to-parse-apache-error-log/300822 "2022-03-28T14:48:27Z")
Hi, help! i can't parse this timestamp: \[Mon Mar 28 09:02:28.627528 2022\] \[mpm\_winnt:notice\] \[pid 0000:tid 000\] 0000000: Apache/00.00.0.0 (Win00) OpenSSL/0.0.0h configured -- resuming normal operations suggestions? T… --- ## [Elasticsearch stops comunication](https://discuss.elastic.co/t/elasticsearch-stops-comunication/300327)
**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 2:27pm UTC](https://discuss.elastic.co/t/elasticsearch-stops-comunication/300327 "2022-03-28T14:27:10Z")
Getting error while seach an index through the discover in Kibana. Thanks in advance --- ## [Search scroll high off-heap memory usage](https://discuss.elastic.co/t/search-scroll-high-off-heap-memory-usage/300812)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:48pm UTC](https://discuss.elastic.co/t/search-scroll-high-off-heap-memory-usage/300812 "2022-03-28T13:48:30Z")
Cluster: Elasticsearch v7.17.1 running with elastic docker image on kubernetes 6 data nodes: 4 CPUs / 14 Go HEAP / 28 Go memory Indice: 3 primary shards (+ 1 replica) , 60 Go data Usage: nightly full index export, w… --- ## [Logstash cannot connect to Elasticsearch on kubernetes](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496)
**Author:** [@skander\_khalfet](https://discuss.elastic.co/u/skander_khalfet)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:59pm UTC](https://discuss.elastic.co/t/logstash-cannot-connect-to-elasticsearch-on-kubernetes/300496 "2022-03-28T13:59:52Z")
Hi everyone, i'm having trouble concerning Logstash. So i installed ELK stack on kubernetes using helm. every pod is is running and ready. Elasticsearch and kibana are perfectly fine. the problem is with logstash as yo… --- ## [XOR on field values](https://discuss.elastic.co/t/xor-on-field-values/300346)
**Author:** [@franpom](https://discuss.elastic.co/u/franpom)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 1:23pm UTC](https://discuss.elastic.co/t/xor-on-field-values/300346 "2022-03-28T13:23:25Z")
Hello, Is it possible to use the XOR function in packetbeat processors or in Advanced / JSON input on field values? My goal is to do XOR on field values retrieved by packetbeat. --- ## [Elasticsearch Hadoop - Analyzer support](https://discuss.elastic.co/t/elasticsearch-hadoop-analyzer-support/300404)
**Author:** [@Shalini\_Pereira](https://discuss.elastic.co/u/Shalini_Pereira)\ **Replies:** 3\ **Last updated:** [March 28, 2022, 1:14pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-analyzer-support/300404 "2022-03-28T13:14:31Z")
Does es-hadoop maven dependency have support for built-in analyzers? I am setting up a project to read & write data from Elasticsearch using spark and have created simple analyzers on index but need more help on this fu… --- ## [Connection timed out when remote cluster re-indexing](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 13\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/connection-timed-out-when-remote-cluster-re-indexing/300694 "2022-03-28T13:02:46Z")
Getting Connection timed out error while re-indexing data from old cluster to new cluster. curl: (28) Failed to connect to elasticsearchurl port 9200: Connection timed out We are using curl command like this curl -… --- ## [Metricbeat Output to Secure Elasticsearch Error](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830)
**Author:** [@wcpoon](https://discuss.elastic.co/u/wcpoon)\ **Replies:** 2\ **Last updated:** [March 28, 2022, 1:02pm UTC](https://discuss.elastic.co/t/metricbeat-output-to-secure-elasticsearch-error/300830 "2022-03-28T13:02:23Z")
Hi, I'm using ELK Stack 8.0, which is Elasticsearch running in secured mode. I'm having the problem to output my metricbeat to Elasticsearch. Below is the error when I run the command "metricbeat setup -e" {"log.leve… --- ## [Remote reindex ElasticSearch API giving Null Pointer Exception](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843)
**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\ **Replies:** 1\ **Last updated:** [March 28, 2022, 1:01pm UTC](https://discuss.elastic.co/t/remote-reindex-elasticsearch-api-giving-null-pointer-exception/300843 "2022-03-28T13:01:09Z")
Remote reindex Elasticsearch API giving Null Pointer Exception GET ..../tasks/{taskid} ------ ----- "error" : { "type" : "null\_pointer\_exception", "reason" : null } Can someone know what could be the cause… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=996) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=998)