# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1102

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1103

---

## [How to copy only mapping not data](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415)

<div class="topic-metadata">

**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\
**Replies:** 6\
**Last updated:** [June 6, 2022, 9:55am UTC](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415 "2022-06-06T09:55:25Z")

</div>

Hello There, I am new to ES, and I want to know if we have any way to copy only mappings not data, Or any way to create new index with old mappings, without data Regards, Sam

---

## [Kibana certificate issues in ES 7.7 - unable to verify the first certificate](https://discuss.elastic.co/t/kibana-certificate-issues-in-es-7-7-unable-to-verify-the-first-certificate/306265)

<div class="topic-metadata">

**Author:** [@morariu](https://discuss.elastic.co/u/morariu)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 9:39am UTC](https://discuss.elastic.co/t/kibana-certificate-issues-in-es-7-7-unable-to-verify-the-first-certificate/306265 "2022-06-06T09:39:48Z")

</div>

Hi all. I know this has been discussed but I still can't figure it out. Getting the "unable to verify the first certificate" in the logs when starting Kibana. Here are the logs, the part where the errors start showing, …

---

## [Restoring to a different cluster](https://discuss.elastic.co/t/restoring-to-a-different-cluster/306421)

<div class="topic-metadata">

**Author:** [@A\_j\_xx](https://discuss.elastic.co/u/A_j_xx)\
**Replies:** 6\
**Last updated:** [June 6, 2022, 9:25am UTC](https://discuss.elastic.co/t/restoring-to-a-different-cluster/306421 "2022-06-06T09:25:45Z")

</div>

Hi all , Can someone list down all the settings needed to restore a snapshot to different cluster . Assuming the new cluster has no configuration at all . Some basic questions : How many nodes do we need to assign t…

---

## [Logstash update elastic search when any update in a table](https://discuss.elastic.co/t/logstash-update-elastic-search-when-any-update-in-a-table/306133)

<div class="topic-metadata">

**Author:** [@ABHISHEK\_KUMAR\_SINGH](https://discuss.elastic.co/u/ABHISHEK_KUMAR_SINGH)\
**Replies:** 15\
**Last updated:** [June 6, 2022, 9:23am UTC](https://discuss.elastic.co/t/logstash-update-elastic-search-when-any-update-in-a-table/306133 "2022-06-06T09:23:45Z")

</div>

Hello, I have a Users table in my DB and I have successfully synced my logstash to update new records. But I want a way to update the existing records on Elasticsearch. I don't have any timestamp column in the table to …

---

## [Filebeat stopping randomly - Any way to send an email when logs are incomplete?](https://discuss.elastic.co/t/filebeat-stopping-randomly-any-way-to-send-an-email-when-logs-are-incomplete/306436)

<div class="topic-metadata">

**Author:** [@LionsELK](https://discuss.elastic.co/u/LionsELK)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 9:20am UTC](https://discuss.elastic.co/t/filebeat-stopping-randomly-any-way-to-send-an-email-when-logs-are-incomplete/306436 "2022-06-06T09:20:09Z")

</div>

Hi all, Filebeat randomly stops running and we need to restart it with the filebeat command to check and pull any necessary records but is there a way I can set up ELK to notify me via email if there's any gaps in the r…

---

## [How to receive logs from multiple filebeats running on different machine(ec2) to one logstash instance?](https://discuss.elastic.co/t/how-to-receive-logs-from-multiple-filebeats-running-on-different-machine-ec2-to-one-logstash-instance/306314)

<div class="topic-metadata">

**Author:** [@Krishna\_Prasad](https://discuss.elastic.co/u/Krishna_Prasad)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 8:55am UTC](https://discuss.elastic.co/t/how-to-receive-logs-from-multiple-filebeats-running-on-different-machine-ec2-to-one-logstash-instance/306314 "2022-06-06T08:55:24Z")

</div>

i have 2 filebeats running on different machine(Ex: A & B) and I have also specified the logstash machine IP in filebeat.yaml so i have written 2 logstash .conf file . My conf file looks like this -\> A.conf input{ bea…

---

## [Split single line log into multiple line log using filebeat](https://discuss.elastic.co/t/split-single-line-log-into-multiple-line-log-using-filebeat/306021)

<div class="topic-metadata">

**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 8:56am UTC](https://discuss.elastic.co/t/split-single-line-log-into-multiple-line-log-using-filebeat/306021 "2022-06-06T08:56:13Z")

</div>

Hi All, I have a single long line and i wanted to split the single log line into multiple line. Example Here I want to skip the log whenever E2ETRACEEVENT comes So the output should be like: Let me know if we …

---

## [Reports that output in different languages?](https://discuss.elastic.co/t/reports-that-output-in-different-languages/304346)

<div class="topic-metadata">

**Author:** [@ianturner01](https://discuss.elastic.co/u/ianturner01)\
**Replies:** 5\
**Last updated:** [June 6, 2022, 8:30am UTC](https://discuss.elastic.co/t/reports-that-output-in-different-languages/304346 "2022-06-06T08:30:36Z")

</div>

Hi, I'm new to Kibana so apologies if this is a really dumb question. I've had a quick search for similar topics before but maybe wasn't searching for the correct thing. I wondered if its possible to translate my repor…

---

## [Merging ES Clusters](https://discuss.elastic.co/t/merging-es-clusters/306419)

<div class="topic-metadata">

**Author:** [@Moe\_Hmaidan](https://discuss.elastic.co/u/Moe_Hmaidan)\
**Replies:** 3\
**Last updated:** [June 6, 2022, 5:27am UTC](https://discuss.elastic.co/t/merging-es-clusters/306419 "2022-06-06T05:27:09Z")

</div>

Hi All, We have two clusters:- Cluster A we have 5 new nodes running ES v7.17 (All data nodes out of which two are master) Cluster A Contains no data what so ever it was meant to be a backup cluster but now they w…

---

## [Logstash fields from aggregation to csv](https://discuss.elastic.co/t/logstash-fields-from-aggregation-to-csv/306376)

<div class="topic-metadata">

**Author:** [@ddcro](https://discuss.elastic.co/u/ddcro)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 7:02am UTC](https://discuss.elastic.co/t/logstash-fields-from-aggregation-to-csv/306376 "2022-06-06T07:02:40Z")

</div>

Hi guys, I'm trying to export data from elastic to csv. The conf from logstash is something like: input { elasticsearch { hosts =\> "127.0.0.1:9200" index =\> "log" ... query…

---

## [Json parse - logstash VB.net](https://discuss.elastic.co/t/json-parse-logstash-vb-net/306427)

<div class="topic-metadata">

**Author:** [@Filip\_Caha](https://discuss.elastic.co/u/Filip_Caha)\
**Replies:** 0\
**Last updated:** [June 6, 2022, 6:48am UTC](https://discuss.elastic.co/t/json-parse-logstash-vb-net/306427 "2022-06-06T06:48:07Z")

</div>

Hi, I have a problem with parsing JSON data. My source code: \> Dim xPoslatUmo As String = ConfigurationManager.AppSettings.Item("UMOPoslat") \> If xPoslatUmo = "Ano" Then \> Dim request …

---

## [Elastic common schema for Cisco ASA](https://discuss.elastic.co/t/elastic-common-schema-for-cisco-asa/305730)

<div class="topic-metadata">

**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\
**Replies:** 3\
**Last updated:** [June 6, 2022, 6:47am UTC](https://discuss.elastic.co/t/elastic-common-schema-for-cisco-asa/305730 "2022-06-06T06:47:54Z")

</div>

Hello Gents, I am using ELK stack v8 and I am integrating Cisco ASA syslog directly to logstash and then Elasticsearch database. I have noticed from the data view that I miss some field type (i.e: geo\_point). how can i …

---

## [Error in German content indexing](https://discuss.elastic.co/t/error-in-german-content-indexing/306082)

<div class="topic-metadata">

**Author:** [@pefose7968](https://discuss.elastic.co/u/pefose7968)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 6:28am UTC](https://discuss.elastic.co/t/error-in-german-content-indexing/306082 "2022-06-06T06:28:30Z")

</div>

Hello, We need some consultation regarding indexing German content. we have found that the configuration, we have done is not letting us index some of the documents if the document contains some special compound words/…

---

## [How to change the reference of visualization and dashboard](https://discuss.elastic.co/t/how-to-change-the-reference-of-visualization-and-dashboard/306065)

<div class="topic-metadata">

**Author:** [@William\_Bai](https://discuss.elastic.co/u/William_Bai)\
**Replies:** 3\
**Last updated:** [June 6, 2022, 6:01am UTC](https://discuss.elastic.co/t/how-to-change-the-reference-of-visualization-and-dashboard/306065 "2022-06-06T06:01:57Z")

</div>

I have a existing dashboard that I need to change it's data reference from a index pattern to a saved search. Or I can change its panels' reference to the saved search. Is there anyway to change the data reference of a d…

---

## [Terminology: Fields that only contain other fields in the mappings](https://discuss.elastic.co/t/terminology-fields-that-only-contain-other-fields-in-the-mappings/306248)

<div class="topic-metadata">

**Author:** [@Doc\_Kaos](https://discuss.elastic.co/u/Doc_Kaos)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 5:39am UTC](https://discuss.elastic.co/t/terminology-fields-that-only-contain-other-fields-in-the-mappings/306248 "2022-06-06T05:39:20Z")

</div>

What is is correct term for fields like author in the below: PUT /publications { "mappings": { "properties": { "id": { "type": "text" }, "title": { "type": "text" }, "abstract": { "type": "text" …

---

## [How to create new index with old index mapping and settings](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895)

<div class="topic-metadata">

**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\
**Replies:** 5\
**Last updated:** [May 10, 2022, 6:34am UTC](https://discuss.elastic.co/t/how-to-create-new-index-with-old-index-mapping-and-settings/303895 "2022-05-10T06:34:32Z")

</div>

Hello Team, I am new to Elasticsearch, after reading upgrade documents I came to know that we need to reindex old data, from below command I can get list of existing index , curl 'localhost:9200/\_cat/indices?v' I can…

---

## [Logstash s3 plugin to push json files to elasticsearch](https://discuss.elastic.co/t/logstash-s3-plugin-to-push-json-files-to-elasticsearch/306325)

<div class="topic-metadata">

**Author:** [@JinnaBalu](https://discuss.elastic.co/u/JinnaBalu)\
**Replies:** 2\
**Last updated:** [June 6, 2022, 5:25am UTC](https://discuss.elastic.co/t/logstash-s3-plugin-to-push-json-files-to-elasticsearch/306325 "2022-06-06T05:25:41Z")

</div>

Usecase Push s3 JSON objects (s3 containers json files), each object will be one document) I have written a pipeline input { s3 { access\_key\_id =\> "MY\_KEY" secret\_access\_key =\> "MY\_SECRET" …

---

## [Elastic Search to return different counts along with Search results](https://discuss.elastic.co/t/elastic-search-to-return-different-counts-along-with-search-results/305358)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 4\
**Last updated:** [June 6, 2022, 5:18am UTC](https://discuss.elastic.co/t/elastic-search-to-return-different-counts-along-with-search-results/305358 "2022-06-06T05:18:45Z")

</div>

Hi , I have a requirement to get the differnt counts based on status field in my document for given search critiria. For e.g If I am searching with Comic keyword , I generally get 10 documents(default size) with TotalHi…

---

## [Elastic Cloud - This might not be the site you want](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323)

<div class="topic-metadata">

**Author:** [@milesich](https://discuss.elastic.co/u/milesich)\
**Replies:** 11\
**Last updated:** [June 6, 2022, 3:50am UTC](https://discuss.elastic.co/t/elastic-cloud-this-might-not-be-the-site-you-want/306323 "2022-06-06T03:50:05Z")

</div>

I am using latest Microsoft Edge browser and every time I access Kibana on Elastic Cloud I get warning about suspicious site. I have 2 clusters in Azure West Europe. Url: https://xxx.kb.westeurope.azure.elastic-cloud.co…

---

## [How can i display dot and value on lens chart](https://discuss.elastic.co/t/how-can-i-display-dot-and-value-on-lens-chart/306305)

<div class="topic-metadata">

**Author:** [@Cusis\_Eel](https://discuss.elastic.co/u/Cusis_Eel)\
**Replies:** 1\
**Last updated:** [June 3, 2022, 4:04pm UTC](https://discuss.elastic.co/t/how-can-i-display-dot-and-value-on-lens-chart/306305 "2022-06-03T16:04:48Z")

</div>

Used Lens kibana 7.10.1 I want display the Dot of all value as a point. If possible, I would like to display value of the chart too. And, i don't want dot line, i want just straight line. Help this please. Thank…

---

## [Watcherのconditionに記述した計算結果が想定外](https://discuss.elastic.co/t/watcher-condition/306174)

<div class="topic-metadata">

**Author:** [@NikaidoKota](https://discuss.elastic.co/u/NikaidoKota)\
**Replies:** 1\
**Last updated:** [June 6, 2022, 1:16am UTC](https://discuss.elastic.co/t/watcher-condition/306174 "2022-06-06T01:16:09Z")

</div>

お世話になります。 別途「 Watcherで各bucketのdoc\_countを集計したい」というスレッドでご質問させていただいた内容について、派生して新たな不明点が挙がってしまったため、改めてスレッドを立てさせていただきました。 具体的には、作成したwatcherについて、以下のconditionを満たしていないにも関わらずメール通知が飛ぶようになってします。 "condition": { "script": { "…

---

## [Logstash s3 input plugin and path-style access configuration](https://discuss.elastic.co/t/logstash-s3-input-plugin-and-path-style-access-configuration/306412)

<div class="topic-metadata">

**Author:** [@betheway](https://discuss.elastic.co/u/betheway)\
**Replies:** 0\
**Last updated:** [June 5, 2022, 9:41pm UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-and-path-style-access-configuration/306412 "2022-06-05T21:41:47Z")

</div>

With s3 path-style access, the plugin returns an error on the downloading step. From access logs: Found key {:key=\>"myFile"} Added to objects\[\] {:key=\>"myFile", :length=\>1} Processing {:bucket=\>"", :key=\>"myFile"} Downl…

---

## [Elasticsearch \<-\> kibana mutual tls authentication: Empty client certificate chain](https://discuss.elastic.co/t/elasticsearch-kibana-mutual-tls-authentication-empty-client-certificate-chain/305954)

<div class="topic-metadata">

**Author:** [@psylity](https://discuss.elastic.co/u/psylity)\
**Replies:** 11\
**Last updated:** [June 5, 2022, 9:04pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-mutual-tls-authentication-empty-client-certificate-chain/305954 "2022-06-05T21:04:29Z")

</div>

Hello! I'm using elasticsearch & kibana both 7.17.1 and can't run mutual tls authentication setup where both elasticsearch server and clients authenticate each other. I've followed official documentation on this, and it…

---

## [Is there any way to replicate kibana indices](https://discuss.elastic.co/t/is-there-any-way-to-replicate-kibana-indices/306404)

<div class="topic-metadata">

**Author:** [@Suresh\_Subramaniyan](https://discuss.elastic.co/u/Suresh_Subramaniyan)\
**Replies:** 1\
**Last updated:** [June 5, 2022, 4:54pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-replicate-kibana-indices/306404 "2022-06-05T16:54:19Z")

</div>

Need to replicate Kibana dashboards and visualization between PROD/DR cluster . Is that possible using CCR.

---

## [Is Kubernetes a good platform for ES servers?](https://discuss.elastic.co/t/is-kubernetes-a-good-platform-for-es-servers/306400)

<div class="topic-metadata">

**Author:** [@bigESFan](https://discuss.elastic.co/u/bigESFan)\
**Replies:** 0\
**Last updated:** [June 5, 2022, 11:57am UTC](https://discuss.elastic.co/t/is-kubernetes-a-good-platform-for-es-servers/306400 "2022-06-05T11:57:22Z")

</div>

Dear ES Admin , I am thinking if ES is appropriate to be installed on Kubernetes Cluster, as I have never implemented that way before. I appreciate if you could share some thoughts ? Here are my questions: I know th…

---

## [Filebeat not picking up some files](https://discuss.elastic.co/t/filebeat-not-picking-up-some-files/306386)

<div class="topic-metadata">

**Author:** [@ShefZee](https://discuss.elastic.co/u/ShefZee)\
**Replies:** 1\
**Last updated:** [June 5, 2022, 8:01am UTC](https://discuss.elastic.co/t/filebeat-not-picking-up-some-files/306386 "2022-06-05T08:01:51Z")

</div>

I am trying to send tomcat logs to ELK. I am using Filebeat to scan the files. My log file name would be "project\_err.DD-MM-YYYY". In filebeat configuration, I am giving the file name as foldername\\project\_err\* But fileb…

---

## [Logstash not indexing date to the filebeat write index for data stream](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360)

<div class="topic-metadata">

**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\
**Replies:** 4\
**Last updated:** [June 4, 2022, 10:21pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-date-to-the-filebeat-write-index-for-data-stream/306360 "2022-06-04T22:21:00Z")

</div>

Hi everybody. I've got a three nodes ES cluster. I've got the Kibana, one logstash and one filebeat running along in one of those three ES nodes. 'ubuntuelk'. Everything on version 8.2.1. My goal is to use that filebe…

---

## [Parsing fortigate logs with filebeat modules](https://discuss.elastic.co/t/parsing-fortigate-logs-with-filebeat-modules/306391)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 0\
**Last updated:** [June 4, 2022, 8:54pm UTC](https://discuss.elastic.co/t/parsing-fortigate-logs-with-filebeat-modules/306391 "2022-06-04T20:54:35Z")

</div>

Hello, I have never used filebeat for parsing the fortigate logs. I have consulted several pages on the internet about this. I concluded that the best approach is to install Filebeat at the logstash server, after acti…

---

## [Extracting data from kibana](https://discuss.elastic.co/t/extracting-data-from-kibana/305511)

<div class="topic-metadata">

**Author:** [@es.user](https://discuss.elastic.co/u/es.user)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 3:33pm UTC](https://discuss.elastic.co/t/extracting-data-from-kibana/305511 "2022-06-04T15:33:36Z")

</div>

Hi, Is there a way to extract realtime field values from dashboard visualizations? For example, I'd like to obtain the current values selected in a dropdown menu visualization. Thank you.

---

## [Sort on geo\_shape using geo\_distance filter return 500](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381)

<div class="topic-metadata">

**Author:** [@marko2](https://discuss.elastic.co/u/marko2)\
**Replies:** 1\
**Last updated:** [June 4, 2022, 3:10pm UTC](https://discuss.elastic.co/t/sort-on-geo-shape-using-geo-distance-filter-return-500/306381 "2022-06-04T15:10:23Z")

</div>

Hey there, my objective is narrowing down nearby addresses within 100 meters and sorting them by the nearest address My mapping: mappings: { dynamic: "true", properties: { geometry: { type: "geo\_shape" }…

[Previous page](https://discuss.elastic.co/latest.md?page=1101)

[Next page](https://discuss.elastic.co/latest.md?page=1103)
