# Latest **URL:** https://discuss.elastic.co/latest.md?page=1084 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1085 --- ## [ElasticSearch on AWS EC2](https://discuss.elastic.co/t/elasticsearch-on-aws-ec2/307565)
**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\ **Replies:** 2\ **Last updated:** [June 18, 2022, 7:58pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aws-ec2/307565 "2022-06-18T19:58:45Z")
Hi, My project is having Elasticsearch running on few EC2 Machines. I want to do 2 things Check ES Query's executed in last 5 minutes or 1 hour Have a tool where i can run SQL on top of Elasticsearch. If user is fro… --- ## [Ingest-attachment plugin in elassandra](https://discuss.elastic.co/t/ingest-attachment-plugin-in-elassandra/307566)
**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\ **Replies:** 3\ **Last updated:** [June 18, 2022, 4:16pm UTC](https://discuss.elastic.co/t/ingest-attachment-plugin-in-elassandra/307566 "2022-06-18T16:16:35Z")
In elassandra: bin/elasticsearch-plugin install ingest-attachment I see: org.elasticsearch.plugins.PluginCli.main(PluginCli.java:48) Caused by: java.lang.IllegalStateException: jar hell! class: org.slf4j.helpers.Bas… --- ## [Logsstash and apache kafka](https://discuss.elastic.co/t/logsstash-and-apache-kafka/307559)
**Author:** [@Henk\_Stobbe](https://discuss.elastic.co/u/Henk_Stobbe)\ **Replies:** 3\ **Last updated:** [June 18, 2022, 3:53pm UTC](https://discuss.elastic.co/t/logsstash-and-apache-kafka/307559 "2022-06-18T15:53:03Z")
hello, Newbee so maybe strange question. In my enviroments Kafka is used and the main reason for this is the ability to temporaly queue data. This functionality is (now) available in logstash. So simple question, can … --- ## [New FileBeat Version required new "Ingest Pipeline"](https://discuss.elastic.co/t/new-filebeat-version-required-new-ingest-pipeline/307497)
**Author:** [@joshn](https://discuss.elastic.co/u/joshn)\ **Replies:** 1\ **Last updated:** [June 18, 2022, 3:50pm UTC](https://discuss.elastic.co/t/new-filebeat-version-required-new-ingest-pipeline/307497 "2022-06-18T15:50:22Z")
hey, So I updated filebeat on a couple machines and got an error: "reason"=\>"pipeline with id \[filebeat-7.17.4-system-syslog-pipeline\] does not exist" After doing some digging, this was because I was previosuly using … --- ## [How yo make a fuzzy query with the new java api](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563)
**Author:** [@Dorian](https://discuss.elastic.co/u/Dorian)\ **Replies:** 2\ **Last updated:** [June 18, 2022, 2:38pm UTC](https://discuss.elastic.co/t/how-yo-make-a-fuzzy-query-with-the-new-java-api/307563 "2022-06-18T14:38:21Z")
I try to make a fuzzy query but it doesn't work. Can someone help ? --- ## [Can not log in kibana using super account](https://discuss.elastic.co/t/can-not-log-in-kibana-using-super-account/307557)
**Author:** [@hanifanrn](https://discuss.elastic.co/u/hanifanrn)\ **Replies:** 1\ **Last updated:** [June 18, 2022, 2:23pm UTC](https://discuss.elastic.co/t/can-not-log-in-kibana-using-super-account/307557 "2022-06-18T14:23:06Z")
I have upgrade my ELK to version 8.2 from 7.17.4 it works well before, but after upgrade the RAM of the server, i cannot log in to kibana I try to reset password using: bin/elasticsearch-reset-password -u elastic b… --- ## [Filebeat journald input failing to open a handle to the library](https://discuss.elastic.co/t/filebeat-journald-input-failing-to-open-a-handle-to-the-library/307505)
**Author:** [@Marko\_Todoric](https://discuss.elastic.co/u/Marko_Todoric)\ **Replies:** 2\ **Last updated:** [June 18, 2022, 9:07am UTC](https://discuss.elastic.co/t/filebeat-journald-input-failing-to-open-a-handle-to-the-library/307505 "2022-06-18T09:07:16Z")
Hello everyone, i just managed to compile filebeat to work on armv7 with journald input (regular filestream works just fine) however when starting filebeat i get a following error message, filebeat keeps on running but … --- ## [Metricbeat mysql 8.2.3 fleet integration failing](https://discuss.elastic.co/t/metricbeat-mysql-8-2-3-fleet-integration-failing/307306)
**Author:** [@rbos](https://discuss.elastic.co/u/rbos)\ **Replies:** 7\ **Last updated:** [June 18, 2022, 5:15am UTC](https://discuss.elastic.co/t/metricbeat-mysql-8-2-3-fleet-integration-failing/307306 "2022-06-18T05:15:16Z")
On all my hosts that have upgraded to elastic-agent 8.2.3 (with the RHEL packages), the "mysql" integration is failing with: {"log.level":"error","@timestamp":"2022-06-15T09:01:06.421-0700","log.origin":{"file.name":"lo… --- ## [Assigning specific indices to specific storage devices / data tiers within a node](https://discuss.elastic.co/t/assigning-specific-indices-to-specific-storage-devices-data-tiers-within-a-node/306943)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 2\ **Last updated:** [June 18, 2022, 12:05am UTC](https://discuss.elastic.co/t/assigning-specific-indices-to-specific-storage-devices-data-tiers-within-a-node/306943 "2022-06-18T00:05:19Z")
I know it is possible to add multiple drives as data locations on a specific node but I am curious if it is possible to assign specific indices to a data tier within the same node. We are indexing a lot of data but we ha… --- ## [Painless Script to calculate time difference between 2 dates](https://discuss.elastic.co/t/painless-script-to-calculate-time-difference-between-2-dates/307335)
**Author:** [@Avnish\_Singh](https://discuss.elastic.co/u/Avnish_Singh)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:46pm UTC](https://discuss.elastic.co/t/painless-script-to-calculate-time-difference-between-2-dates/307335 "2022-06-17T22:46:38Z")
Hi I have 2 columns as date datatype in my Kibana Index Pattern and I want to add a third column as the difference between the 2 columns: Here is sample and format of the columns: Col1: Jun 16, 2022 , 09:00:00.000 Col2… --- ## [Regular expression query](https://discuss.elastic.co/t/regular-expression-query/307252)
**Author:** [@Krishna\_Sai\_Nag\_G](https://discuss.elastic.co/u/Krishna_Sai_Nag_G)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 10:19pm UTC](https://discuss.elastic.co/t/regular-expression-query/307252 "2022-06-17T22:19:02Z")
I have a text like this "10-year-old", how can i search this using regular expression query. How can we search over special characters in Elasticsearch. I am using the below query, it is not returning the output. GET … --- ## [Publish kibana](https://discuss.elastic.co/t/publish-kibana/307322)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 9:57pm UTC](https://discuss.elastic.co/t/publish-kibana/307322 "2022-06-17T21:57:08Z")
Hi, I have a question if possible: (I work with GKE) this it my kibana: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: quickstart spec: version: 7.6.2 count: 1 elasticsearchRef: name: c… --- ## [Instead of Beats 7.17.3v in kibana 8v index templates are showing](https://discuss.elastic.co/t/instead-of-beats-7-17-3v-in-kibana-8v-index-templates-are-showing/307217)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 0\ **Last updated:** [June 15, 2022, 5:37am UTC](https://discuss.elastic.co/t/instead-of-beats-7-17-3v-in-kibana-8v-index-templates-are-showing/307217 "2022-06-15T05:37:43Z")
Hi , I have downgraded elk and beats of 8v to 7.17.3v. And all 8v were uninstalled and deleted but beats(metric,packet,winlog) of 8v index templates & Data stream is only coming up in kibana 7.17.3v. It's not showing 7… --- ## [Parse json file](https://discuss.elastic.co/t/parse-json-file/307291)
**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\ **Replies:** 0\ **Last updated:** [June 15, 2022, 2:53pm UTC](https://discuss.elastic.co/t/parse-json-file/307291 "2022-06-15T14:53:01Z")
Hello Team, grateful if you can help for the json parser. How can I modify the code below as per sample code? input { file { start\_position =\> "beginning" path =\> "/data/KONG1/logs/b0197a09e1f3d7de67d47bdbc5f33f5b06… --- ## [Kibana not ready yet after xpack.security.enabled: false](https://discuss.elastic.co/t/kibana-not-ready-yet-after-xpack-security-enabled-false/307294)
**Author:** [@Babli\_Sahu](https://discuss.elastic.co/u/Babli_Sahu)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 9:24pm UTC](https://discuss.elastic.co/t/kibana-not-ready-yet-after-xpack-security-enabled-false/307294 "2022-06-17T21:24:41Z")
Hello, I don't need any authentication for Elasticsearch and kibana, so I put false for xpack.security.enabled . This removes the login dialog box on Elasticsearch, but kibana is not accessible afterwards. It shows kiba… --- ## [JDBC Streaming with list parameter](https://discuss.elastic.co/t/jdbc-streaming-with-list-parameter/307546)
**Author:** [@gaurav\_vivek](https://discuss.elastic.co/u/gaurav_vivek)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 8:43pm UTC](https://discuss.elastic.co/t/jdbc-streaming-with-list-parameter/307546 "2022-06-17T20:43:44Z")
I have to pass a list in JDBC steaming query for Oracle, since the list can have more than 1000 record so i cannot use in query .i.e. select name from table where id in (..) I tried two option use tuple : Create tup… --- ## [Beats 7.17.3v agents are running properly but no data showing 7.17.3v in data stream](https://discuss.elastic.co/t/beats-7-17-3v-agents-are-running-properly-but-no-data-showing-7-17-3v-in-data-stream/307345)
**Author:** [@jisha](https://discuss.elastic.co/u/jisha)\ **Replies:** 0\ **Last updated:** [June 16, 2022, 6:19am UTC](https://discuss.elastic.co/t/beats-7-17-3v-agents-are-running-properly-but-no-data-showing-7-17-3v-in-data-stream/307345 "2022-06-16T06:19:46Z")
Hi, Beats 7.17.3v agents are running properly and data is coming but not showing 7.17.3v in data stream instead its showing 8v data stream --- ## [I have problem with the address of the kibana](https://discuss.elastic.co/t/i-have-problem-with-the-address-of-the-kibana/307376)
**Author:** [@Mish6](https://discuss.elastic.co/u/Mish6)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 7:20pm UTC](https://discuss.elastic.co/t/i-have-problem-with-the-address-of-the-kibana/307376 "2022-06-17T19:20:23Z")
Hi, I have a question about ingress: this is my kibana: apiVersion: kibana.k8s.elastic.co/v1 kind: Kibana metadata: name: quickstart spec: version: 7.6.2 count: 1 elasticsearchRef: name: cdbridgerpayelasti… --- ## [Content-Security-Policy for embedded kibana dashboards](https://discuss.elastic.co/t/content-security-policy-for-embedded-kibana-dashboards/305466)
**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 7:18pm UTC](https://discuss.elastic.co/t/content-security-policy-for-embedded-kibana-dashboards/305466 "2022-06-17T19:18:59Z")
I'm having an application with kibana dashboards embedded in iframe. The application is proxied by Nginx, with an additional Apache front-end. My goal is to come up with a CSP without unsafe-hashes, unsafe-inline, unsaf… --- ## [Pipeline aggregation | Cumulative sum aggregation on a nested field](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539)
**Author:** [@mehtaanshul](https://discuss.elastic.co/u/mehtaanshul)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 7:13pm UTC](https://discuss.elastic.co/t/pipeline-aggregation-cumulative-sum-aggregation-on-a-nested-field/307539 "2022-06-17T19:13:08Z")
My Elasticsearch index mappings - { "mappings": { "properties": { "timestamp": { "type": "date" }, "detail": { "type": "nested", … --- ## [Is superuser the only way to access Fleet?](https://discuss.elastic.co/t/is-superuser-the-only-way-to-access-fleet/306806)
**Author:** [@mhoward](https://discuss.elastic.co/u/mhoward)\ **Replies:** 0\ **Last updated:** [June 9, 2022, 2:57pm UTC](https://discuss.elastic.co/t/is-superuser-the-only-way-to-access-fleet/306806 "2022-06-09T14:57:59Z")
From my understanding, superuser Role is required for a user to access Fleet. Is there another to configure Roles to allow a user to access Fleet without having the broad permissions superuser grants? I'm trying to gra… --- ## [Mapping conflict field host.ip Filebeat](https://discuss.elastic.co/t/mapping-conflict-field-host-ip-filebeat/307535)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 0\ **Last updated:** [June 17, 2022, 6:19pm UTC](https://discuss.elastic.co/t/mapping-conflict-field-host-ip-filebeat/307535 "2022-06-17T18:19:34Z")
Hello there, I got this cluster setup and apparently is working fine apart from that I got some mapping conflicts under the hood. After added Custom Windows Event Logs integrations using fleet, I checked if logs was co… --- ## [Pie chart with extracting major from JRE version in Kibana](https://discuss.elastic.co/t/pie-chart-with-extracting-major-from-jre-version-in-kibana/307522)
**Author:** [@vmassol](https://discuss.elastic.co/u/vmassol)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 5:53pm UTC](https://discuss.elastic.co/t/pie-chart-with-extracting-major-from-jre-version-in-kibana/307522 "2022-06-17T17:53:51Z")
Hi there, In my index I have documents with a java.version field representing java versions (e.g. 11.0.13, 11.0.14.1, etc). I'm trying to extract the major version (e.g. 11) and display that in a pie chart in Kibana. W… --- ## [How to split a single line message, into parts](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982)
**Author:** [@Zerra\_Triani](https://discuss.elastic.co/u/Zerra_Triani)\ **Replies:** 8\ **Last updated:** [June 17, 2022, 5:36pm UTC](https://discuss.elastic.co/t/how-to-split-a-single-line-message-into-parts/306982 "2022-06-17T17:36:32Z")
Hi, I've created a logstash to filter a log and output a single message. Then I want to split that message into several fields. What filter plugin should I use? I try to use split filter and it doesn't work The example… --- ## [Logstash parse mixed json text](https://discuss.elastic.co/t/logstash-parse-mixed-json-text/307362)
**Author:** [@Saathvi](https://discuss.elastic.co/u/Saathvi)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 5:21pm UTC](https://discuss.elastic.co/t/logstash-parse-mixed-json-text/307362 "2022-06-17T17:21:31Z")
please can any one help me to parse below mixed json txt from below logentry. need to extract request json fields & response json fields 2020-01-06 01:02:10.869 +01:00 \[Information\] WIN HTTP Response at 2020-01-06T01:0… --- ## [How to create engine on my local elastic enterprise search?](https://discuss.elastic.co/t/how-to-create-engine-on-my-local-elastic-enterprise-search/307427)
**Author:** [@MaralErdene\_Tumursuh](https://discuss.elastic.co/u/MaralErdene_Tumursuh)\ **Replies:** 1\ **Last updated:** [June 17, 2022, 5:09pm UTC](https://discuss.elastic.co/t/how-to-create-engine-on-my-local-elastic-enterprise-search/307427 "2022-06-17T17:09:16Z")
Hello Dears, I installed elastic 7.7, elastic-enterprise-search 7.7 and kibana 7.7 on my own ubuntu server. Then now i want to create engine using app search like below image. /This is my cloud.elastic configuration… --- ## [Elasticsearch mapping - Different types of data in same field](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526)
**Author:** [@Elie](https://discuss.elastic.co/u/Elie)\ **Replies:** 2\ **Last updated:** [June 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-different-types-of-data-in-same-field/307526 "2022-06-17T16:21:45Z")
I am trying to create a mapping for my Elasticsearch that would make me insert both an array and a string into my field "value". The following shows the data I want inserted: { "Data": \[{ "key": "keyNa… --- ## [Kibana doesn’t recognize keyword fields](https://discuss.elastic.co/t/kibana-doesn-t-recognize-keyword-fields/307464)
**Author:** [@AscentisKelvinGo](https://discuss.elastic.co/u/AscentisKelvinGo)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 2:23pm UTC](https://discuss.elastic.co/t/kibana-doesn-t-recognize-keyword-fields/307464 "2022-06-17T14:23:39Z")
Hi, I'm using Elastic Cloud Stack Kibana but I found out that the dashboard couldn't recognize the 'keyword' fields type. The 'exception.ClassName.raw' is keyword type and aggregatable. However I can't create a vis… --- ## [Unable to join the node in a cluster, elasticsearch 8.2](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222)
**Author:** [@Aman\_Kasot](https://discuss.elastic.co/u/Aman_Kasot)\ **Replies:** 4\ **Last updated:** [June 17, 2022, 3:25pm UTC](https://discuss.elastic.co/t/unable-to-join-the-node-in-a-cluster-elasticsearch-8-2/307222 "2022-06-17T15:25:35Z")
closing connection Netty4TcpChannel{localAddress=/xx.xx.xx.xx:9300, remoteAddress=/xx.xx.xx.xx:port, profile=default} \[2022-06-15T11:51:04,468\]\[WARN \]\[o.e.x.c.s.t.n.SecurityNetty4Transport\] \[es-master-1\] client did not … --- ## [Deploying ELK stack using ECK on GCK Auto Pilot](https://discuss.elastic.co/t/deploying-elk-stack-using-eck-on-gck-auto-pilot/306891)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 3\ **Last updated:** [June 17, 2022, 3:24pm UTC](https://discuss.elastic.co/t/deploying-elk-stack-using-eck-on-gck-auto-pilot/306891 "2022-06-17T15:24:41Z")
Hello, When I was first trying deploying elasticaserach stack using ECK on Google Cloud Kubernetes in Auto Pilot mode. I could not perform only one thing from the documentation which was setting command: \['sh', '-c', '… [Previous page](https://discuss.elastic.co/latest.md?page=1083) [Next page](https://discuss.elastic.co/latest.md?page=1085)