# Latest **URL:** https://discuss.elastic.co/latest.md?page=1016 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1017 --- ## [Unable to view geo.location on Kibana even though I have created an index template that includes geo.location](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 13\ **Last updated:** [August 8, 2022, 1:53am UTC](https://discuss.elastic.co/t/unable-to-view-geo-location-on-kibana-even-though-i-have-created-an-index-template-that-includes-geo-location/311477 "2022-08-08T01:53:58Z")
I am using Logstash's geoip filter to get location information from ip. As far as I can see from the Logstash output result (codec =\> rubydebug), I am getting geoip.location, but I cannot display it on Kibana. In order… --- ## [How setup cluster on two different vps](https://discuss.elastic.co/t/how-setup-cluster-on-two-different-vps/311516)
**Author:** [@Himan\_Yukubov](https://discuss.elastic.co/u/Himan_Yukubov)\ **Replies:** 1\ **Last updated:** [August 8, 2022, 12:55am UTC](https://discuss.elastic.co/t/how-setup-cluster-on-two-different-vps/311516 "2022-08-08T00:55:05Z")
I have vps\_master and vps\_node. When i try setup cluster - its show on vps\_node skipping cluster bootstrapping as local node does not match What's wrong in my config? version: '3.9' services: master: image: ela… --- ## [Filebeat setup: "Exiting: module system is configured but has no enabled filesets"](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584)
**Author:** [@JoeShabadu2000](https://discuss.elastic.co/u/JoeShabadu2000)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 11:41pm UTC](https://discuss.elastic.co/t/filebeat-setup-exiting-module-system-is-configured-but-has-no-enabled-filesets/311584 "2022-08-07T23:41:43Z")
I'm trying to set up filebeat on Ubuntu, to send system log data to Logstash. I am having issues setting up the "filebeat system" module. Upon running: sudo filebeat setup --pipelines --modules system I receive the er… --- ## [Very complex filter (like group by)?](https://discuss.elastic.co/t/very-complex-filter-like-group-by/311585)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 1\ **Last updated:** [August 7, 2022, 11:26pm UTC](https://discuss.elastic.co/t/very-complex-filter-like-group-by/311585 "2022-08-07T23:26:50Z")
Hi Guys, I need an help because I cannot find a way to filter a simple datatable. My index pattern consists of the following csv: ID;Class;User Age 1234;A;18 1235;A;23 1236;B;25 I would like to set a filter in the to… --- ## [ElasticSearch location in a docker](https://discuss.elastic.co/t/elasticsearch-location-in-a-docker/311572)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 1\ **Last updated:** [August 7, 2022, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-location-in-a-docker/311572 "2022-08-07T23:19:59Z")
It's a basic question but is /var/lib/docker/containers/ \ the only location for elasticsearch logs installed on a docker? Also, How can i see the logs in kibana. Filebeat is not yet setup --- ## [Regexp is ignored in must\_not clause](https://discuss.elastic.co/t/regexp-is-ignored-in-must-not-clause/311544)
**Author:** [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 1:46pm UTC](https://discuss.elastic.co/t/regexp-is-ignored-in-must-not-clause/311544 "2022-08-05T13:46:42Z")
I'm trying to exclude a log-entry from showing up in my hits, but it is necessary to use regular expression (expensive is allowed in configuration). The log entry follows the pattern: message:Aug 2 05:01:14 \ \<… --- ## [Beats index stopped rotating](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 4\ **Last updated:** [August 7, 2022, 11:03pm UTC](https://discuss.elastic.co/t/beats-index-stopped-rotating/311353 "2022-08-07T23:03:26Z")
I am having an issue with my beats index rotating I have the following configurations setup and looks like my data is not going into the right index. Any ideas what may be wrong? --- ## [How to change/ modify kibana login landing page logo and text](https://discuss.elastic.co/t/how-to-change-modify-kibana-login-landing-page-logo-and-text/311401)
**Author:** [@Ayaan\_Shaik](https://discuss.elastic.co/u/Ayaan_Shaik)\ **Replies:** 4\ **Last updated:** [August 7, 2022, 6:23pm UTC](https://discuss.elastic.co/t/how-to-change-modify-kibana-login-landing-page-logo-and-text/311401 "2022-08-07T18:23:55Z")
Hi, I have upgraded with 8.3.3 version of ELK and As I can see in 7.1 version kibana logo and text at login page are at /usr/share/kibana/x-pack/plugins/security/target/public/security.chunk.4.js this path But I can'… --- ## [Convert String to date and compare it](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 9\ **Last updated:** [August 7, 2022, 4:41pm UTC](https://discuss.elastic.co/t/convert-string-to-date-and-compare-it/311394 "2022-08-07T16:41:14Z")
Hi, I have two fields and I want to compare it field1: 20220720091723 field2: 07/20/22 09:17 I want to compare it so i don't know if i should convert to date then compare and how or can someone please tell me what i … --- ## [Distinct records with geo\_distance sort on aggregation ES](https://discuss.elastic.co/t/distinct-records-with-geo-distance-sort-on-aggregation-es/311606)
**Author:** [@ZulQ](https://discuss.elastic.co/u/ZulQ)\ **Replies:** 0\ **Last updated:** [August 7, 2022, 4:31pm UTC](https://discuss.elastic.co/t/distinct-records-with-geo-distance-sort-on-aggregation-es/311606 "2022-08-07T16:31:49Z")
I'm working on nearby API using elasticsearch. I'm trying to run 4 actions in ES query match condition (here running a script to get records within radius) get distinct records based on company's Key (want to get one … --- ## [Problem in yarn kbn bootstrap.Error: No module factory available for dependency type: CssDependency](https://discuss.elastic.co/t/problem-in-yarn-kbn-bootstrap-error-no-module-factory-available-for-dependency-type-cssdependency/311314)
**Author:** [@wwh2077](https://discuss.elastic.co/u/wwh2077)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 4:14pm UTC](https://discuss.elastic.co/t/problem-in-yarn-kbn-bootstrap-error-no-module-factory-available-for-dependency-type-cssdependency/311314 "2022-08-07T16:14:53Z")
I am trying to setup kibana 7.16 development environment and to bootstrap Kibana and install all the dependencies, I've to use this cmd yarn kbn bootstrap . Sadly, I've this message failed \[bootstrap\] failed . $ yarn kb… --- ## [How to get file names of my Snapshot using curl?](https://discuss.elastic.co/t/how-to-get-file-names-of-my-snapshot-using-curl/310874)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [August 7, 2022, 2:09pm UTC](https://discuss.elastic.co/t/how-to-get-file-names-of-my-snapshot-using-curl/310874 "2022-08-07T14:09:14Z")
Hi Elasticsearch Team! Just wondering if we do have a command to get the list of our snapshot file names using curl? Scenario: I used the step provided for snapshot and restore " Restore a snapshot | Elasticsearch Gui… --- ## [Manage\_index\_templates privilege not work in component\_template api](https://discuss.elastic.co/t/manage-index-templates-privilege-not-work-in-component-template-api/311029)
**Author:** [@Bryce\_Huang](https://discuss.elastic.co/u/Bryce_Huang)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 3:18pm UTC](https://discuss.elastic.co/t/manage-index-templates-privilege-not-work-in-component-template-api/311029 "2022-08-06T15:18:09Z")
I give a test role manage\_index\_templates privilege, but it still can't put component template.kibana return 403 permission forbidden. In https://www.elastic.co/guide/en/elasticsearch/reference/7.17/indices-component-te… --- ## [Kibana Alert When No Metricbeat Data - to include hostname](https://discuss.elastic.co/t/kibana-alert-when-no-metricbeat-data-to-include-hostname/310048)
**Author:** [@abidub](https://discuss.elastic.co/u/abidub)\ **Replies:** 2\ **Last updated:** [August 6, 2022, 12:11pm UTC](https://discuss.elastic.co/t/kibana-alert-when-no-metricbeat-data-to-include-hostname/310048 "2022-08-06T12:11:54Z")
Hi there, I would like to receive an alert when any of the hosts that I have Metricbeat installed on, now longer reports in data, for whatever reason (it could be stopped, server is turned off etc.). I want to avoid ha… --- ## [Elasticsearch not forming a cluster in kubernetes](https://discuss.elastic.co/t/elasticsearch-not-forming-a-cluster-in-kubernetes/311463)
**Author:** [@willsc](https://discuss.elastic.co/u/willsc)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 8:29am UTC](https://discuss.elastic.co/t/elasticsearch-not-forming-a-cluster-in-kubernetes/311463 "2022-08-06T08:29:53Z")
Can anyone assist with trying to work out why an es cluster doesnt discover it nodes in kubernetes. Currently deploying 7.17.4 in an rke2 cluster, that claims to have no network policy. Elastic is being deployed as a s… --- ## [Logstash showing error when executed from python but executes from terminal](https://discuss.elastic.co/t/logstash-showing-error-when-executed-from-python-but-executes-from-terminal/311508)
**Author:** [@Morning\_Star](https://discuss.elastic.co/u/Morning_Star)\ **Replies:** 4\ **Last updated:** [August 6, 2022, 6:15am UTC](https://discuss.elastic.co/t/logstash-showing-error-when-executed-from-python-but-executes-from-terminal/311508 "2022-08-06T06:15:49Z")
I'm new to ELK stack and any help would be appriciated I have tried both os and subprocess both are giving same error This is getting executed from terminal \` /usr/share/logstash/bin/logstash -f /root/folder1/folder… --- ## [Aggregated Logs and Reformatting for QRADAR](https://discuss.elastic.co/t/aggregated-logs-and-reformatting-for-qradar/311557)
**Author:** [@ombit](https://discuss.elastic.co/u/ombit)\ **Replies:** 1\ **Last updated:** [August 6, 2022, 5:28am UTC](https://discuss.elastic.co/t/aggregated-logs-and-reformatting-for-qradar/311557 "2022-08-06T05:28:03Z")
Hi all, I'm currently researching logstash (along with filebeat) as a possible solution for a problem we're seeing. We currently have a log server that is acting as a central manager, with a bunch of different Linux an… --- ## [Logstash port 5044 is not listening after logstash Installation](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening-after-logstash-installation/311472)
**Author:** [@Nilesh1997](https://discuss.elastic.co/u/Nilesh1997)\ **Replies:** 2\ **Last updated:** [August 6, 2022, 4:56am UTC](https://discuss.elastic.co/t/logstash-port-5044-is-not-listening-after-logstash-installation/311472 "2022-08-06T04:56:52Z")
Dear all, I would like to receive log from remote server through file beat .However I find the port 5044 is not listening but status of logstash is active and enable. I did all the configuration needed for logstash.any … --- ## [I created a plugin in kibana, and I wanted to rename its header](https://discuss.elastic.co/t/i-created-a-plugin-in-kibana-and-i-wanted-to-rename-its-header/311441)
**Author:** [@Gabriel\_Vasconcelos](https://discuss.elastic.co/u/Gabriel_Vasconcelos)\ **Replies:** 1\ **Last updated:** [August 5, 2022, 8:46pm UTC](https://discuss.elastic.co/t/i-created-a-plugin-in-kibana-and-i-wanted-to-rename-its-header/311441 "2022-08-05T20:46:24Z")
Hi guys, I wanted to ask for your help. I created a plugin in kibana, but when I access it, in its header is the name "Kibana" and I would like to rename it to the name of my application, could you help me? Here is the i… --- ## [Issue with gsub and regex not affecting the resulting strings](https://discuss.elastic.co/t/issue-with-gsub-and-regex-not-affecting-the-resulting-strings/311570)
**Author:** [@I\_need\_an\_adult](https://discuss.elastic.co/u/I_need_an_adult)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 8:45pm UTC](https://discuss.elastic.co/t/issue-with-gsub-and-regex-not-affecting-the-resulting-strings/311570 "2022-08-05T20:45:23Z")
Hello, I'm attempting to remove specific items of a return string so that I have accurate aggregated filetypes within elasticsearch. The general format of the TrID output is this: 34.2% (.DLL) Win32 Dynamic Link Librar… --- ## [Repeat field extraction and aggregation](https://discuss.elastic.co/t/repeat-field-extraction-and-aggregation/311558)
**Author:** [@RitzMak](https://discuss.elastic.co/u/RitzMak)\ **Replies:** 6\ **Last updated:** [August 5, 2022, 7:49pm UTC](https://discuss.elastic.co/t/repeat-field-extraction-and-aggregation/311558 "2022-08-05T19:49:17Z")
Hello All, I have some logs as below and I would like to get a total of all CACHE\_TIMING and DATABASE\_TIMING fields. I am thinking to create an array of these fields using gsub replacement and kv filter and then add the… --- ## [Subfield query not returning any data](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561)
**Author:** [@Baerswords](https://discuss.elastic.co/u/Baerswords)\ **Replies:** 4\ **Last updated:** [August 5, 2022, 6:44pm UTC](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561 "2022-08-05T18:44:21Z")
New to Elasticsearch, so please bear with me if this is a simple question that I should know. I have an index with fairly simple documents. When I try to query against anything in AppDataDict, though, I don't ever get … --- ## [Elasticsearch 8.3 intermittent snapshot issues with AWS S3 on EKS](https://discuss.elastic.co/t/elasticsearch-8-3-intermittent-snapshot-issues-with-aws-s3-on-eks/311566)
**Author:** [@cannoli](https://discuss.elastic.co/u/cannoli)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 6:08pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-intermittent-snapshot-issues-with-aws-s3-on-eks/311566 "2022-08-05T18:08:38Z")
Hello, I'm having difficulties with snapshotting with S3 on AWS. After an undetermined amount of ES snapshots to AWS S3 fail with an access denied error. The only resolution appears to be to restart all data and master … --- ## [Logstash filter verifier - daemon mode in Docker](https://discuss.elastic.co/t/logstash-filter-verifier-daemon-mode-in-docker/311556)
**Author:** [@rilcy](https://discuss.elastic.co/u/rilcy)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 3:54pm UTC](https://discuss.elastic.co/t/logstash-filter-verifier-daemon-mode-in-docker/311556 "2022-08-05T15:54:05Z")
Hi everyone, I use this great project from Magnus Bäck GitHub - magnusbaeck/logstash-filter-verifier to validate my Logstash filters in a Gitlab CI. It runs the version 1.6.3 in a Docker container to validate filters f… --- ## [Enforcing events to be outputted in order](https://discuss.elastic.co/t/enforcing-events-to-be-outputted-in-order/311552)
**Author:** [@ebram96](https://discuss.elastic.co/u/ebram96)\ **Replies:** 0\ **Last updated:** [August 5, 2022, 3:27pm UTC](https://discuss.elastic.co/t/enforcing-events-to-be-outputted-in-order/311552 "2022-08-05T15:27:07Z")
I've a pipeline like this: input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/postgresql-42.2.6.jar" jdbc\_driver\_class =\> "org.postgresql.Driver" jdbc\_connection\_string =\> "$… --- ## [Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 48\ **Last updated:** [August 5, 2022, 3:24pm UTC](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842 "2022-08-05T15:24:51Z")
\###################### Filebeat Configuration ######################### # You can find the full configuration reference here: # https://www.elastic.co/guide/en/beats/filebeat/index.html #===========================… --- ## [Do data streams require rollover\_alias setting](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437)
**Author:** [@djkprojects](https://discuss.elastic.co/u/djkprojects)\ **Replies:** 3\ **Last updated:** [August 5, 2022, 3:21pm UTC](https://discuss.elastic.co/t/do-data-streams-require-rollover-alias-setting/311437 "2022-08-05T15:21:43Z")
Whilst setting up a new heartbeat-8.3.2 I've noticed that the automatically created template has only index.lifecycle.name setting but not the rollover\_alias. Does that mean it's not required when using data streams? The… --- ## [Error on filebeat](https://discuss.elastic.co/t/error-on-filebeat/311330)
**Author:** [@VitorBarroso](https://discuss.elastic.co/u/VitorBarroso)\ **Replies:** 10\ **Last updated:** [August 5, 2022, 3:19pm UTC](https://discuss.elastic.co/t/error-on-filebeat/311330 "2022-08-05T15:19:57Z")
My elasticsearch and kibana is ok but by filebeat doesn't work but when i do filebeat test config say its ok. Any suggestions for resolve this problem? Thank you. --- ## [Elastic search machine learning/ pattern recognition version 7.10.2](https://discuss.elastic.co/t/elastic-search-machine-learning-pattern-recognition-version-7-10-2/311202)
**Author:** [@zain.jutt](https://discuss.elastic.co/u/zain.jutt)\ **Replies:** 5\ **Last updated:** [August 5, 2022, 3:12pm UTC](https://discuss.elastic.co/t/elastic-search-machine-learning-pattern-recognition-version-7-10-2/311202 "2022-08-05T15:12:14Z")
Hi, I have a question to find the root cause of a failed test. In 1st step, we have centralized the data in the Elasticsearch(7.10.2) index which contains the test id and the message(log event). For the failed tests to … --- ## [FsCrawler add script to \_settings.yaml file](https://discuss.elastic.co/t/fscrawler-add-script-to-settings-yaml-file/311524)
**Author:** [@Julien70](https://discuss.elastic.co/u/Julien70)\ **Replies:** 2\ **Last updated:** [August 5, 2022, 3:05pm UTC](https://discuss.elastic.co/t/fscrawler-add-script-to-settings-yaml-file/311524 "2022-08-05T15:05:06Z")
Hi everyone, I have a lot of geotagged photos (among other geodata). I have imported them into Elastic (v7.11) with FsCrawler (v2.9 for es7). It's working pretty well. But, the fields "latitude" "longitude" taken from… [Previous page](https://discuss.elastic.co/latest.md?page=1015) [Next page](https://discuss.elastic.co/latest.md?page=1017)