# Latest **URL:** https://discuss.elastic.co/latest.md?page=1115 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1116 --- ## [Bitnami/elasticsearch](https://discuss.elastic.co/t/bitnami-elasticsearch/305726)
**Author:** [@Kazwell](https://discuss.elastic.co/u/Kazwell)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 3:00pm UTC](https://discuss.elastic.co/t/bitnami-elasticsearch/305726 "2022-05-26T15:00:45Z")
Hello everyone, I'm using Caprover to deploy dockers, I deployed all the ELK applications with bitnami images....I was wondering if that is why security is not automatically enabled(xpack)? Is it possible to switch to t… --- ## [Изменение имени interface в filebeat](https://discuss.elastic.co/t/interface-filebeat/305724)
**Author:** [@dreshme](https://discuss.elastic.co/u/dreshme)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 2:34pm UTC](https://discuss.elastic.co/t/interface-filebeat/305724 "2022-05-26T14:34:34Z")
Доброго времени суток. Подскажите, пожалуйста, я собираю netflow с помощью filebeat. Есть поля ''' "egress\_interface" : 199, "ingress\_interface" : 277, ''' Через SNMP я узнал, какие сетевые интерфейсы соответствую… --- ## [Language detection](https://discuss.elastic.co/t/language-detection/305565)
**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 2:29pm UTC](https://discuss.elastic.co/t/language-detection/305565 "2022-05-26T14:29:02Z")
Hi everyone! I have a field "content" in my index with text in it. I would like to be able to create a field "language" that would detect the language of my field "content", is this possible? Please help me with the … --- ## [Logstash is not creating index in Elasticsearch](https://discuss.elastic.co/t/logstash-is-not-creating-index-in-elasticsearch/305675)
**Author:** [@ravis85](https://discuss.elastic.co/u/ravis85)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 2:23pm UTC](https://discuss.elastic.co/t/logstash-is-not-creating-index-in-elasticsearch/305675 "2022-05-26T14:23:45Z")
Hello, I am running ELK stack in docker container. Everything is working fine. However I am having an issue with Logstash, that whenever I use a input type file and provide a path to my logfile, the Logstash is not cre… --- ## [ML jobs kibana not working as expected](https://discuss.elastic.co/t/ml-jobs-kibana-not-working-as-expected/305718)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 1:58pm UTC](https://discuss.elastic.co/t/ml-jobs-kibana-not-working-as-expected/305718 "2022-05-26T13:58:01Z")
Hello! I have 3 machine learning jobs in kibana which seem to work correctly and then the error "datafeed has been retrieving no data for a while" appears. how can I avoid it?? Thanks in advanced. --- ## [Elasticsearch Engineer official course Module1 "information Out" questions: 21-22-23 there are no answers for validation](https://discuss.elastic.co/t/elasticsearch-engineer-official-course-module1-information-out-questions-21-22-23-there-are-no-answers-for-validation/304129)
**Author:** [@husoelasticbe](https://discuss.elastic.co/u/husoelasticbe)\ **Replies:** 4\ **Last updated:** [May 26, 2022, 1:31pm UTC](https://discuss.elastic.co/t/elasticsearch-engineer-official-course-module1-information-out-questions-21-22-23-there-are-no-answers-for-validation/304129 "2022-05-26T13:31:10Z")
Dear team, I am doing the official course online ( Elasticsearch Engineer) and I would like to validate my answers for the Elasticsearch Engineer Lab - Information out - questions: 21 - 22 - 23 "exam prep" I don't s… --- ## [Missing days on Elastic but command appears to be up to date?](https://discuss.elastic.co/t/missing-days-on-elastic-but-command-appears-to-be-up-to-date/305706)
**Author:** [@LionsELK](https://discuss.elastic.co/u/LionsELK)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 1:28pm UTC](https://discuss.elastic.co/t/missing-days-on-elastic-but-command-appears-to-be-up-to-date/305706 "2022-05-26T13:28:27Z")
Hi all, my colleague has informed me that we're missing a couple of days on Elastic. I've had a look and we're missing the 24th and 25th May. I've gone into the command line and reran filebeat -e -d "publisher" and whil… --- ## [Problem to cretae token for kibana interface](https://discuss.elastic.co/t/problem-to-cretae-token-for-kibana-interface/304829)
**Author:** [@Firas\_Bougrine](https://discuss.elastic.co/u/Firas_Bougrine)\ **Replies:** 7\ **Last updated:** [May 26, 2022, 12:54pm UTC](https://discuss.elastic.co/t/problem-to-cretae-token-for-kibana-interface/304829 "2022-05-26T12:54:24Z")
elastic@elastic:/usr/share/Elasticsearch/bin$ sudo ./Elasticsearch-create-enrollment-token -s kibana \`Preformatted text\`:1415) ~\[?:?\] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:450) … --- ## [ERROR pipeline/output.go:100 Failed to connect to backoff(elasticsearch(http://elasticsearch:9200)): 401 Unauthorized](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-http-elasticsearch-9200-401-unauthorized/305687)
**Author:** [@kosmylo](https://discuss.elastic.co/u/kosmylo)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 11:13am UTC](https://discuss.elastic.co/t/error-pipeline-output-go-100-failed-to-connect-to-backoff-elasticsearch-http-elasticsearch-9200-401-unauthorized/305687 "2022-05-26T11:13:39Z")
I have an express app with nginx that writes the web access logs through filebeat/logstash/Elasticsearch/kibana. I wanted to add packetbeat to this pipeline. The docker-compose is the following: packetbeat: build: … --- ## [How to configure Kibana behind nginx balancer](https://discuss.elastic.co/t/how-to-configure-kibana-behind-nginx-balancer/304654)
**Author:** [@eduhernandezm](https://discuss.elastic.co/u/eduhernandezm)\ **Replies:** 4\ **Last updated:** [May 26, 2022, 11:02am UTC](https://discuss.elastic.co/t/how-to-configure-kibana-behind-nginx-balancer/304654 "2022-05-26T11:02:32Z")
Hi to everyone, I have recently configured ELK in our enterprise environment. I have configured Kibana by default, without making changes, so to access Kibana, I do it by the configured host name and port: http://tfvs0… --- ## [Endpoint Security help](https://discuss.elastic.co/t/endpoint-security-help/305463)
**Author:** [@insurin](https://discuss.elastic.co/u/insurin)\ **Replies:** 6\ **Last updated:** [May 26, 2022, 7:19am UTC](https://discuss.elastic.co/t/endpoint-security-help/305463 "2022-05-26T07:19:36Z")
ELK 8.12 on Prem x1 server So far I have all my Active Directory domain controllers sending their logs into ELK server. This produces some great logs for me to view. I have added the Endpoint Security integration into m… --- ## [Raw logs to data compression ratio](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440)
**Author:** [@michaelv](https://discuss.elastic.co/u/michaelv)\ **Replies:** 16\ **Last updated:** [May 26, 2022, 9:23am UTC](https://discuss.elastic.co/t/raw-logs-to-data-compression-ratio/305440 "2022-05-26T09:23:20Z")
Hi All, I've been investigating some compression ratios of my live logs. Two main catergories. Auditd logs and other logs like /var/log/messages etc. Both being ingested via filebeat 7.11 and running 7.11 cluster. S… --- ## [ETL処理の実行順序について](https://discuss.elastic.co/t/etl/304896)
**Author:** [@Totsuka](https://discuss.elastic.co/u/Totsuka)\ **Replies:** 6\ **Last updated:** [May 26, 2022, 9:11am UTC](https://discuss.elastic.co/t/etl/304896 "2022-05-26T09:11:35Z")
大変初歩的な質問で申し訳ないですが、公式リファレンスや書籍では理解できなかったため、ご質問いたします。 質問内容としては、各プラグインはどのような順番で実行されているかということです。 例えば、下記の例です。 input { jdbc { jdbc\_driver\_class =\> "com.mysql.jdbc.Driver" statement =\> "SELECT \* from example\_table"… --- ## [Must have all items in array query](https://discuss.elastic.co/t/must-have-all-items-in-array-query/305561)
**Author:** [@Amit4](https://discuss.elastic.co/u/Amit4)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 8:02am UTC](https://discuss.elastic.co/t/must-have-all-items-in-array-query/305561 "2022-05-26T08:02:10Z")
Hello, i have the next document structure { id: 'offering\_1', qualification: \['11', '22'\] }, { id: 'offering\_2', qualification: \['11', '22', '33'\] } I wish to run a query that will return only records from index… --- ## [Monitoring svclog using filebeat](https://discuss.elastic.co/t/monitoring-svclog-using-filebeat/305534)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 7:07am UTC](https://discuss.elastic.co/t/monitoring-svclog-using-filebeat/305534 "2022-05-26T07:07:25Z")
Hi All, I am trying to find a way to monitor .svclog using filebeat. I can get the log but having some trouble like: Unable to harvest svclog which has large log line not sure if we have any command to make sure all … --- ## [How can i schedule logstash every minute for jdbc input plugin?](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-minute-for-jdbc-input-plugin/305662)
**Author:** [@Ashok\_Priyadarshi1](https://discuss.elastic.co/u/Ashok_Priyadarshi1)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 6:31am UTC](https://discuss.elastic.co/t/how-can-i-schedule-logstash-every-minute-for-jdbc-input-plugin/305662 "2022-05-26T06:31:11Z")
Please explain to me the syntax to write the cron jobs for getting jdbc input every 1 minute? --- ## [Logstash install xpack plugin error](https://discuss.elastic.co/t/logstash-install-xpack-plugin-error/305660)
**Author:** [@1065916870](https://discuss.elastic.co/u/1065916870)\ **Replies:** 1\ **Last updated:** [May 26, 2022, 6:24am UTC](https://discuss.elastic.co/t/logstash-install-xpack-plugin-error/305660 "2022-05-26T06:24:58Z")
I used docker-compose setup with logstash-oss image, but I get an error when I install xpack plugin , I want to monitor my logstash service on kibana You are using the OSS-only distribution of Logstash. As of version 6.… --- ## [DataNode内のシャード再配置時の動作対象について](https://discuss.elastic.co/t/datanode/304883)
**Author:** [@takumi.yoshikawa](https://discuss.elastic.co/u/takumi.yoshikawa)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 5:38am UTC](https://discuss.elastic.co/t/datanode/304883 "2022-05-26T05:38:11Z")
・ElasticsearchはDataNode内のディスク使用率が以下の閾値を超えると保管しているシャードを別のNodeに再配置しようと働きかけます。 cluster.routing.allocation.disk.watermark.high その際に以下の基準があるかご存じでしょうか。 DataNode内のどのシャードが再配置の対象となるのか どのNodeが再配置先の対象となるのか ディスクベースのシャード割り当て|弾力… --- ## [Security vulnerabilities in Elasticsearch docker images - v 8.2.0](https://discuss.elastic.co/t/security-vulnerabilities-in-elasticsearch-docker-images-v-8-2-0/305559)
**Author:** [@salvoj](https://discuss.elastic.co/u/salvoj)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 5:23am UTC](https://discuss.elastic.co/t/security-vulnerabilities-in-elasticsearch-docker-images-v-8-2-0/305559 "2022-05-26T05:23:56Z")
Hi, My team recently deployed Elasticsearch v 8.2.0 into an HPE Ezmeral Container Platform (kubernetes based) using ECK. Everything is working. However, this platform run a Vulnerability scan on new containers and det… --- ## [Kibana painless tutorials](https://discuss.elastic.co/t/kibana-painless-tutorials/305653)
**Author:** [@behappy\_alwayz0401](https://discuss.elastic.co/u/behappy_alwayz0401)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 4:46am UTC](https://discuss.elastic.co/t/kibana-painless-tutorials/305653 "2022-05-26T04:46:21Z")
Hi, I would like some guidance on where I can take a comprehensive course to learn Kibana painless scripting from scratch. I am not a technical person but have to understand the application to create visualizations. Tha… --- ## [Disable Kibana Help button](https://discuss.elastic.co/t/disable-kibana-help-button/305651)
**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 4:41am UTC](https://discuss.elastic.co/t/disable-kibana-help-button/305651 "2022-05-26T04:41:46Z")
is there any way to remove or hide the help button? --- ## [Metricbeat error: missing field accessing 'metricbeat.modules.21.hosts.0](https://discuss.elastic.co/t/metricbeat-error-missing-field-accessing-metricbeat-modules-21-hosts-0/305648)
**Author:** [@alexander2](https://discuss.elastic.co/u/alexander2)\ **Replies:** 0\ **Last updated:** [May 26, 2022, 2:15am UTC](https://discuss.elastic.co/t/metricbeat-error-missing-field-accessing-metricbeat-modules-21-hosts-0/305648 "2022-05-26T02:15:28Z")
Hello guys. i installed metricbeat on my centos 8 machine. with this configuration file. ########################## Metricbeat Configuration ########################### # This file is a full configuration example docu… --- ## [Empty server certificate chain after upgrading from ES 6.8.0.1 to ES 6.8.22](https://discuss.elastic.co/t/empty-server-certificate-chain-after-upgrading-from-es-6-8-0-1-to-es-6-8-22/305598)
**Author:** [@Sandhyarani\_Sahoo](https://discuss.elastic.co/u/Sandhyarani_Sahoo)\ **Replies:** 0\ **Last updated:** [May 25, 2022, 11:20am UTC](https://discuss.elastic.co/t/empty-server-certificate-chain-after-upgrading-from-es-6-8-0-1-to-es-6-8-22/305598 "2022-05-25T11:20:00Z")
Hello, After the upgrade from 6.8.0.1 to ES 6.8.22 to resolve log4J issue, Elastic threw exception in the logs an "empty server certificate chain" exception. I am using the following configuration: Elasticsearch.yml: … --- ## [Ingress to load balance across data nodes](https://discuss.elastic.co/t/ingress-to-load-balance-across-data-nodes/305388)
**Author:** [@gunlomboy](https://discuss.elastic.co/u/gunlomboy)\ **Replies:** 2\ **Last updated:** [May 26, 2022, 12:10am UTC](https://discuss.elastic.co/t/ingress-to-load-balance-across-data-nodes/305388 "2022-05-26T00:10:07Z")
Hi, I'm completely new to Kubernetes and ECK, so I hope this question is easy to answer. I am deploying a number of Elasticsearch data nodes in a cluster which I would like to target via an Ingress controller. I note … --- ## [INFO - Elastic APM Mule3 Agent impact on Mule performances (latency)](https://discuss.elastic.co/t/info-elastic-apm-mule3-agent-impact-on-mule-performances-latency/303410)
**Author:** [@gchiartosini](https://discuss.elastic.co/u/gchiartosini)\ **Replies:** 6\ **Last updated:** [May 25, 2022, 11:40pm UTC](https://discuss.elastic.co/t/info-elastic-apm-mule3-agent-impact-on-mule-performances-latency/303410 "2022-05-25T23:40:37Z")
Summary: looking for help/information about impact of custom Mule APM Agent on application performance. Context: we have a 7.12.1 Elastic Stack installed "on premise" on dedicated VMs in a Google Cloud Platform envi… --- ## [Unable to retrieve version information from Elasticsearch nodes. connect ETIMEDOUT 53.244.254.96:9200](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout-53-244-254-96-9200/305570)
**Author:** [@Maximus0x](https://discuss.elastic.co/u/Maximus0x)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 11:45pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes-connect-etimedout-53-244-254-96-9200/305570 "2022-05-25T23:45:53Z")
Kibana.yml--\> # For more configuration options see the configuration guide for Kibana in # https://www.elastic.co/guide/index.html # =================== System: Kibana Server =================== # Kibana is served by a… --- ## [Delete unnecessary mappings from a given index](https://discuss.elastic.co/t/delete-unnecessary-mappings-from-a-given-index/305612)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 11:43pm UTC](https://discuss.elastic.co/t/delete-unnecessary-mappings-from-a-given-index/305612 "2022-05-25T23:43:33Z")
Hi, I have an index template called "suricata-ids" created by default from Filebeat. This index template has many fields that are simply not used by the suricata logs. How can i delete that unnecessary fields? Is it pos… --- ## [Elastic Search text similarity search](https://discuss.elastic.co/t/elastic-search-text-similarity-search/305643)
**Author:** [@gkumargaur](https://discuss.elastic.co/u/gkumargaur)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 10:59pm UTC](https://discuss.elastic.co/t/elastic-search-text-similarity-search/305643 "2022-05-25T22:59:24Z")
what is the best way to search San Jose and SanJose in Elasticsearch. Data is stored as text and correct value in ES is San Jose. Sample query not working: { "match" : { "cssot\_city" : { "… --- ## [Recorded Future Integration Package Setup Stack Traces](https://discuss.elastic.co/t/recorded-future-integration-package-setup-stack-traces/303559)
**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\ **Replies:** 7\ **Last updated:** [May 25, 2022, 9:52pm UTC](https://discuss.elastic.co/t/recorded-future-integration-package-setup-stack-traces/303559 "2022-05-25T21:52:01Z")
Setting up the Recorded Future integration package. Package installed smoothly and I was setting up feeds for domain, hash, url, ip. When setting up the url feed, I got an error when clicking Save. Believe it was from c… --- ## [Logstash aggregating through different events](https://discuss.elastic.co/t/logstash-aggregating-through-different-events/305492)
**Author:** [@alyafeai](https://discuss.elastic.co/u/alyafeai)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 8:06pm UTC](https://discuss.elastic.co/t/logstash-aggregating-through-different-events/305492 "2022-05-25T20:06:51Z")
Hello, I have a question regarding aggregating with logstash my usecase is that I a csv file with specific attrbuites but some of the attrbuites come empty then I receive another file that contain these missing attrbu… [Previous page](https://discuss.elastic.co/latest.md?page=1114) [Next page](https://discuss.elastic.co/latest.md?page=1116)