# Latest **URL:** https://discuss.elastic.co/latest.md?page=1093 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1094 --- ## [Helm chart for Elastic Agent](https://discuss.elastic.co/t/helm-chart-for-elastic-agent/307012)
**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 9:58am UTC](https://discuss.elastic.co/t/helm-chart-for-elastic-agent/307012 "2022-06-13T09:58:03Z")
Hello Im working on integrating elastic as our infrastructure monitoring and logging. We are using elastic cloud. is there a helm chart to deploy the elastic agent into our clusters? --- ## [How to retrieve all documents](https://discuss.elastic.co/t/how-to-retrieve-all-documents/306991)
**Author:** [@ntruongsinh](https://discuss.elastic.co/u/ntruongsinh)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 9:35am UTC](https://discuss.elastic.co/t/how-to-retrieve-all-documents/306991 "2022-06-13T09:35:09Z")
Hi everyone, Currently, I want to retrieve all the documents from one engine but I could not find any solution for that, for the search and document list APIs, they just support getting a maximum of 10000 documents. D… --- ## [Aggregation query in logstash input](https://discuss.elastic.co/t/aggregation-query-in-logstash-input/307006)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 8:59am UTC](https://discuss.elastic.co/t/aggregation-query-in-logstash-input/307006 "2022-06-13T08:59:46Z")
Hi! I am trying to get the results of an aggregations query with logstash. Via dev tools this query works correctly but when passing it to logstash it ingests metadata but nothing related to max, min etc fields I am exp… --- ## [Kbn-monaco missing actions.find](https://discuss.elastic.co/t/kbn-monaco-missing-actions-find/307004)
**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 8:41am UTC](https://discuss.elastic.co/t/kbn-monaco-missing-actions-find/307004 "2022-06-13T08:41:28Z")
Hello, I'm am using kbn-monaco to create my own editors in Kibana. It seems that actions.find (Find actions, usually triggered by CTRL+F) doesn't function. Do you know how to find trigger the find action ? Thanks --- ## [Trying to add windows winlogbeat and the standard dashboards, but dashboards are empty](https://discuss.elastic.co/t/trying-to-add-windows-winlogbeat-and-the-standard-dashboards-but-dashboards-are-empty/306106)
**Author:** [@fribse](https://discuss.elastic.co/u/fribse)\ **Replies:** 3\ **Last updated:** [June 13, 2022, 8:23am UTC](https://discuss.elastic.co/t/trying-to-add-windows-winlogbeat-and-the-standard-dashboards-but-dashboards-are-empty/306106 "2022-06-13T08:23:20Z")
Hi All After rebuilding the entire elastic stack to 7.16.3 currently, I wanted to expand the elastic to also monitor our windows servers. I have a winlogbeat config that looks like this: winlogbeat.event\_logs: - nam… --- ## [Jsonp Mapping Exception](https://discuss.elastic.co/t/jsonp-mapping-exception/306992)
**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\ **Replies:** 1\ **Last updated:** [June 13, 2022, 8:07am UTC](https://discuss.elastic.co/t/jsonp-mapping-exception/306992 "2022-06-13T08:07:22Z")
Hi all. I work on Java 8 and Elastic 8.2. I'm trying to set up a search for various fields, SearchResponse\ response = esClient.search(s -\> s .index(index) .query(q -\>… --- ## [Vulnerability CVE-2020-25649 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:36am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-25649-reported-on-elasticsearch-7-17-4/306855 "2022-06-13T07:36:39Z")
Hello, vulnerability CVE-2020-25649 is reported on the jackson-databind-2.10.4.jar library of the ingest-geoip module of Elasticsearch (modules/ingest-geoip/jackson-databind-2.10.4.jar). Are there any official statemen… --- ## [Vulnerability CVE-2020-28491 reported on Elasticsearch 7.17.4](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856)
**Author:** [@sbrunot](https://discuss.elastic.co/u/sbrunot)\ **Replies:** 2\ **Last updated:** [June 13, 2022, 7:35am UTC](https://discuss.elastic.co/t/vulnerability-cve-2020-28491-reported-on-elasticsearch-7-17-4/306856 "2022-06-13T07:35:47Z")
Hello, vulnerability CVE-2020-28491 is reported on the jackson-dataformat-cbor-2.10.4.jar library of Elasticsearch (lib/jackson-dataformat-cbor-2.10.4.jar). Are there any official statements regarding if this vulnerabi… --- ## [Problem with my Elasticsearch](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 7:25am UTC](https://discuss.elastic.co/t/problem-with-my-elasticsearch/306994 "2022-06-13T07:25:33Z")
Hi! If possible- I have a question: This is my cluster: # Source: eck-operator/templates/statefulset.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: elastic-operator namespace: button8 labels: con… --- ## [Can the snmptrap input plugin for logstash receive snmp version 3 traps?](https://discuss.elastic.co/t/can-the-snmptrap-input-plugin-for-logstash-receive-snmp-version-3-traps/306659)
**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\ **Replies:** 3\ **Last updated:** [June 13, 2022, 6:32am UTC](https://discuss.elastic.co/t/can-the-snmptrap-input-plugin-for-logstash-receive-snmp-version-3-traps/306659 "2022-06-13T06:32:16Z")
Hi Team, can we receive snmp v3 traps on logstash-input-smnptrap plugin. I have tried to get but getting errors. Below are my configuration and version details. logstash version : logstash 8.2.2 snmptrap plugin : logst… --- ## [Problems with match\_phrase](https://discuss.elastic.co/t/problems-with-match-phrase/306934)
**Author:** [@Nicolai\_Jee](https://discuss.elastic.co/u/Nicolai_Jee)\ **Replies:** 7\ **Last updated:** [June 13, 2022, 4:12am UTC](https://discuss.elastic.co/t/problems-with-match-phrase/306934 "2022-06-13T04:12:43Z")
Hi I have a query that looks like this: { "query": { "bool": { "must": \[ { "match\_phrase": { "fullAddress": "To-Bjerg 2" } } \] } }, "from": 0, … --- ## [Manually upload Winlogbeat ndjson files to Elasticsearch](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046)
**Author:** [@fl33t](https://discuss.elastic.co/u/fl33t)\ **Replies:** 6\ **Last updated:** [June 13, 2022, 2:54am UTC](https://discuss.elastic.co/t/manually-upload-winlogbeat-ndjson-files-to-elasticsearch/306046 "2022-06-13T02:54:39Z")
Greetings and salutations. I'm looking for a way to manually upload locally generated Winlogbeat (8.1.3) ndjson files to my Elastic stack as the beat has to work offline and cannot connect directly to either ES or Logsta… --- ## [Deploy an ECK on another namespace](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958)
**Author:** [@Frida](https://discuss.elastic.co/u/Frida)\ **Replies:** 2\ **Last updated:** [June 12, 2022, 9:16pm UTC](https://discuss.elastic.co/t/deploy-an-eck-on-another-namespace/306958 "2022-06-12T21:16:52Z")
Hi, I tried deploy an ECK in GKE in nemespace I created and what I got: kubectl apply -f https://download.elastic.co/downloads/eck/2.2.0/operator.yaml -n ns2 W0612 12:52:31.559080 1136 gcp.go:120\] WARNING: the g… --- ## [Multiline pattern not working in filebeat input\_type -filestream](https://discuss.elastic.co/t/multiline-pattern-not-working-in-filebeat-input-type-filestream/306947)
**Author:** [@garry12](https://discuss.elastic.co/u/garry12)\ **Replies:** 5\ **Last updated:** [June 12, 2022, 8:53pm UTC](https://discuss.elastic.co/t/multiline-pattern-not-working-in-filebeat-input-type-filestream/306947 "2022-06-12T20:53:28Z")
I want to make multiline pattern work but the snipped I used below is working only when I change input\_type: log and NOT working with input\_type:filesteam can someone please help me what I should change to make multiline… --- ## [Conditional processing in txt file](https://discuss.elastic.co/t/conditional-processing-in-txt-file/306654)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 4\ **Last updated:** [June 12, 2022, 8:10pm UTC](https://discuss.elastic.co/t/conditional-processing-in-txt-file/306654 "2022-06-12T20:10:31Z")
Hi I need to make a parsing data through logstash but in the one txt file consists four different pattern How to make logstash for write to another index after encountering a given particular pattern. I am also asking… --- ## [\[ERROR\]\[elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. getaddrinfo ENOTFOUND poem](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-getaddrinfo-enotfound-poem/306962)
**Author:** [@Tony\_Cheng](https://discuss.elastic.co/u/Tony_Cheng)\ **Replies:** 1\ **Last updated:** [June 12, 2022, 3:03pm UTC](https://discuss.elastic.co/t/error-elasticsearch-service-unable-to-retrieve-version-information-from-elasticsearch-nodes-getaddrinfo-enotfound-poem/306962 "2022-06-12T15:03:12Z")
Hi all. I tried to install elastic stack 8.2.2 with docker following the instruction in document. But Kibana server just cannot be ready. Could anybody help me please... My docker-compose: version: "3" services: ela… --- ## [Kibana ingress show 404 server not found](https://discuss.elastic.co/t/kibana-ingress-show-404-server-not-found/306939)
**Author:** [@mohamed\_atef](https://discuss.elastic.co/u/mohamed_atef)\ **Replies:** 3\ **Last updated:** [June 12, 2022, 9:04am UTC](https://discuss.elastic.co/t/kibana-ingress-show-404-server-not-found/306939 "2022-06-12T09:04:37Z")
--- ## [First boot after install fails to display password, token, etc](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949)
**Author:** [@Jack\_Park](https://discuss.elastic.co/u/Jack_Park)\ **Replies:** 11\ **Last updated:** [June 12, 2022, 2:33am UTC](https://discuss.elastic.co/t/first-boot-after-install-fails-to-display-password-token-etc/306949 "2022-06-12T02:33:11Z")
Version 8.2.2 Since I installed before but failed to grab those values, I started over. What this is telling me is that ES maintains a hidden record, which I cannot find. This is on a Mac. There is no ~/.elastic fie a… --- ## [Packetbeat no data but error Cannot index event publisher.Event](https://discuss.elastic.co/t/packetbeat-no-data-but-error-cannot-index-event-publisher-event/306946)
**Author:** [@mayer](https://discuss.elastic.co/u/mayer)\ **Replies:** 0\ **Last updated:** [June 11, 2022, 8:04pm UTC](https://discuss.elastic.co/t/packetbeat-no-data-but-error-cannot-index-event-publisher-event/306946 "2022-06-11T20:04:13Z")
Dear All, I am running ELK 8.2.2 on Debian 11 bullseye and installed packetbeat 8.2.2. "packetbeat setup" brings no errors. And packetbeat test config Config OK packetbeat test output elasticsearch: https://kibana8.h… --- ## [ELK 8.2 using our ca certifiate for enrolling elastics node](https://discuss.elastic.co/t/elk-8-2-using-our-ca-certifiate-for-enrolling-elastics-node/306390)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 7:21pm UTC](https://discuss.elastic.co/t/elk-8-2-using-our-ca-certifiate-for-enrolling-elastics-node/306390 "2022-06-11T19:21:03Z")
Hello, I want to use my own CA certificate in enrolling elastic nodes in the same cluster. What are the steps to follow? Thanks. --- ## [IP enrichment to Hostname](https://discuss.elastic.co/t/ip-enrichment-to-hostname/306944)
**Author:** [@xfaith](https://discuss.elastic.co/u/xfaith)\ **Replies:** 0\ **Last updated:** [June 11, 2022, 7:16pm UTC](https://discuss.elastic.co/t/ip-enrichment-to-hostname/306944 "2022-06-11T19:16:30Z")
Trying to figure how to provide hostname based off the IP, issue is system is reading information out of band so no DNS or anything to tie back to. I could do a basic file/hostfile for majority of IP --\> hostname, or co… --- ## [What should I do if I need special analyzer in ElasticSearch?](https://discuss.elastic.co/t/what-should-i-do-if-i-need-special-analyzer-in-elasticsearch/306941)
**Author:** [@Gresmir](https://discuss.elastic.co/u/Gresmir)\ **Replies:** 1\ **Last updated:** [June 11, 2022, 7:00pm UTC](https://discuss.elastic.co/t/what-should-i-do-if-i-need-special-analyzer-in-elasticsearch/306941 "2022-06-11T19:00:50Z")
In my textual data, I have structures like this: ст. ст. 40, 131, 132, 176-178, 183, ч. 2 ст. 187, 188, 184, 189, 194 KK Where KK is the name of a codex, ст. ст., or ст. mean article, ч. mean part. I want Elasticsear… --- ## [Filebeat config for log group with wildcard for aws-cloudwatch?](https://discuss.elastic.co/t/filebeat-config-for-log-group-with-wildcard-for-aws-cloudwatch/306835)
**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 4:29pm UTC](https://discuss.elastic.co/t/filebeat-config-for-log-group-with-wildcard-for-aws-cloudwatch/306835 "2022-06-11T16:29:37Z")
If set of CloudWatch log groups... example1.{guid} example2.{guid} example3.{guid} Is it possible to configure filebeat.inputs for aws-cloudwatch with a single entry using wildcard? Like for example set above with … --- ## [Unable to start kibana with systemd on ubuntu while manually does](https://discuss.elastic.co/t/unable-to-start-kibana-with-systemd-on-ubuntu-while-manually-does/306925)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [June 11, 2022, 2:00pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-with-systemd-on-ubuntu-while-manually-does/306925 "2022-06-11T14:00:01Z")
Hi Team, I am facing a weird isssue. On my ubuntu system I am unable to start kibana process with systemd and its failing while if I am starting from command line or manually it does. Any clud why? below are the error … --- ## [Snapshots Compression](https://discuss.elastic.co/t/snapshots-compression/306932)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 12:58pm UTC](https://discuss.elastic.co/t/snapshots-compression/306932 "2022-06-11T12:58:03Z")
What is the difference if I toggle switch On the Snapshot Compression? What's the difference when I leave it as Off? Does it any make sense? --- ## [Unable to Parse response from elastic search in Java Spring Data Elasticsearch](https://discuss.elastic.co/t/unable-to-parse-response-from-elastic-search-in-java-spring-data-elasticsearch/306225)
**Author:** [@Waqas\_Rana](https://discuss.elastic.co/u/Waqas_Rana)\ **Replies:** 1\ **Last updated:** [June 11, 2022, 8:30am UTC](https://discuss.elastic.co/t/unable-to-parse-response-from-elastic-search-in-java-spring-data-elasticsearch/306225 "2022-06-11T08:30:27Z")
I am just creating/posting new entry that is created successful but while responding its getting issue of parsing . testRepository.save(application); I am not using any client because JavaHighlevel Rest client… --- ## [Cluster health changing from GREEN to RED](https://discuss.elastic.co/t/cluster-health-changing-from-green-to-red/306929)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 0\ **Last updated:** [June 11, 2022, 6:56am UTC](https://discuss.elastic.co/t/cluster-health-changing-from-green-to-red/306929 "2022-06-11T06:56:39Z")
I am running elastic cluster on kubernetes Master Logs {"@timestamp":"2022-06-11T06:31:02.487Z", "log.level": "INFO", "message":"transport connection to \[{es-data}{NZYIeN70Qzypz7Oh3rAuHQ}{fuY88RvWS3eSlb\_g7GXQyQ}{10.244.… --- ## ["doc\_as\_upsert" overwrites logs instead of appending the logs](https://discuss.elastic.co/t/doc-as-upsert-overwrites-logs-instead-of-appending-the-logs/306898)
**Author:** [@Marc\_Jacques](https://discuss.elastic.co/u/Marc_Jacques)\ **Replies:** 1\ **Last updated:** [June 11, 2022, 4:19am UTC](https://discuss.elastic.co/t/doc-as-upsert-overwrites-logs-instead-of-appending-the-logs/306898 "2022-06-11T04:19:12Z")
Hello Elastic, I have a filebeat agent that harvests logs. It sends the logs to Logstash on the same server, which sends it after to Elastic Cloud, the field "message" has the value of the log on Elastic cloud. After a… --- ## [Download reports by curl](https://discuss.elastic.co/t/download-reports-by-curl/306912)
**Author:** [@PascalThalmann](https://discuss.elastic.co/u/PascalThalmann)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 11:15pm UTC](https://discuss.elastic.co/t/download-reports-by-curl/306912 "2022-06-10T23:15:53Z")
Hi, I have an Elastic Cloud deployment and would like to download saved reports with curl and an API key. I tried curl and wget, but I don't know how to get the right URL of the report. When I download the image manuall… --- ## [Twitter Logstash issue](https://discuss.elastic.co/t/twitter-logstash-issue/306914)
**Author:** [@Didi\_Sisi](https://discuss.elastic.co/u/Didi_Sisi)\ **Replies:** 0\ **Last updated:** [June 10, 2022, 8:57pm UTC](https://discuss.elastic.co/t/twitter-logstash-issue/306914 "2022-06-10T20:57:11Z")
Hello; I have an issue with my twitter app and logstash twitter plugin. I have to extract tweets using the logstash twitter plugin. When I was using my old aps, it works perfectly (I have created it in 2020) Now I cre… [Previous page](https://discuss.elastic.co/latest.md?page=1092) [Next page](https://discuss.elastic.co/latest.md?page=1094)