# Latest **URL:** https://discuss.elastic.co/latest.md?page=1129 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1130 --- ## [Filebeat rate limiting question](https://discuss.elastic.co/t/filebeat-rate-limiting-question/304898)
**Author:** [@can.ozdemir](https://discuss.elastic.co/u/can.ozdemir)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 8:19am UTC](https://discuss.elastic.co/t/filebeat-rate-limiting-question/304898 "2022-05-17T08:19:46Z")
Hello there, we would like to limit the producer rates from our filebeat into kafka. I found rate\_limit processor from below link can be used, but I am confused about what dropping the events mean. Is filebeat retrying t… --- ## [How to set "enabled":"False" to a field in filebeat](https://discuss.elastic.co/t/how-to-set-enabled-false-to-a-field-in-filebeat/304806)
**Author:** [@Kuo\_Hugo](https://discuss.elastic.co/u/Kuo_Hugo)\ **Replies:** 6\ **Last updated:** [May 17, 2022, 8:15am UTC](https://discuss.elastic.co/t/how-to-set-enabled-false-to-a-field-in-filebeat/304806 "2022-05-17T08:15:34Z")
Add it to setup.template.fields file. But the index template doesn't have the "enabled: false" applied. Is there a way to disable a field from indexing ? - name: message level: core type: text enabled: fa… --- ## [Elasticsearch error when enable ssl/tls](https://discuss.elastic.co/t/elasticsearch-error-when-enable-ssl-tls/304893)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 7\ **Last updated:** [May 17, 2022, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-error-when-enable-ssl-tls/304893 "2022-05-17T08:08:10Z")
i just enable ssl/tls but i have an error like this Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager - truststore file \[/etc/elasticsearch/elastic-certificates.p12\] does not exi… --- ## [Why query\_string not worked when used in highlight\_query？](https://discuss.elastic.co/t/why-query-string-not-worked-when-used-in-highlight-query/304897)
**Author:** [@slightKB](https://discuss.elastic.co/u/slightKB)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 7:39am UTC](https://discuss.elastic.co/t/why-query-string-not-worked-when-used-in-highlight-query/304897 "2022-05-17T07:39:11Z")
field "regAggress" is Text type "regContactAddress" : { "type" : "text", "analyzer" : "aliws" } query example: { "\_source": \["regContactAddress","\_id","entName"\], "highlight": { "fields": {… --- ## [Higher search rate when added final data node to cluster](https://discuss.elastic.co/t/higher-search-rate-when-added-final-data-node-to-cluster/302912)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 10\ **Last updated:** [May 17, 2022, 7:32am UTC](https://discuss.elastic.co/t/higher-search-rate-when-added-final-data-node-to-cluster/302912 "2022-05-17T07:32:39Z")
We've got a 5 data node v.6.8.23 cluster in production, that seems to increase search rate and cpu usage when the fifth node (exrhel0212) has joined the cluster, running on four nodes cluster is much calmer. Hints on ho… --- ## [Add a field when a match between an external dictionary and a field from a filebeat document occurrs](https://discuss.elastic.co/t/add-a-field-when-a-match-between-an-external-dictionary-and-a-field-from-a-filebeat-document-occurrs/304894)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 7:23am UTC](https://discuss.elastic.co/t/add-a-field-when-a-match-between-an-external-dictionary-and-a-field-from-a-filebeat-document-occurrs/304894 "2022-05-17T07:23:55Z")
Hi, in filebeat can I add a field when a match between an external dictionary and a field from a filebeat document occurrs? Im already doing this with an ingest pipeline and an enrich proccesor, but the ingestion is to … --- ## [Filebeat doesnt capture log file \[8.2\]](https://discuss.elastic.co/t/filebeat-doesnt-capture-log-file-8-2/304889)
**Author:** [@adliazaddin](https://discuss.elastic.co/u/adliazaddin)\ **Replies:** 0\ **Last updated:** [May 17, 2022, 6:33am UTC](https://discuss.elastic.co/t/filebeat-doesnt-capture-log-file-8-2/304889 "2022-05-17T06:33:40Z")
Hello, my filebeat doesnt seem to collect my logs (i have multiple source, and filebeat only capture the most bottom part. and adding file in the module.d doesnt capture either) theres nothing on the filebeat log below… --- ## [Unable to load elasticsearch certificate](https://discuss.elastic.co/t/unable-to-load-elasticsearch-certificate/304821)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 3\ **Last updated:** [May 17, 2022, 6:18am UTC](https://discuss.elastic.co/t/unable-to-load-elasticsearch-certificate/304821 "2022-05-17T06:18:26Z")
Hello team, I am getting below error on while running Elasticsearch. I have added new certificate and error start coming. \[2022-05-16T11:32:39,322\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[as-dev-2\] uncaugh… --- ## [Default TimeZone](https://discuss.elastic.co/t/default-timezone/304729)
**Author:** [@M.Naim](https://discuss.elastic.co/u/M.Naim)\ **Replies:** 12\ **Last updated:** [May 17, 2022, 5:18am UTC](https://discuss.elastic.co/t/default-timezone/304729 "2022-05-17T05:18:19Z")
Hi, I am getting issue in Timezone while Querying data on stored index. Issue: We have Dates stored like "2021-10-04T11:11:27-07:00" on server "GMT" but while pulling Data using Aggr it gets converted to "2021-10-04T18… --- ## [Error module logstash with metricbeat](https://discuss.elastic.co/t/error-module-logstash-with-metricbeat/304831)
**Author:** [@jojodd](https://discuss.elastic.co/u/jojodd)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 2:09am UTC](https://discuss.elastic.co/t/error-module-logstash-with-metricbeat/304831 "2022-05-17T02:09:06Z")
I don't understand why I get this error after configuring the logstash module in metricbeat. logstash.node\_stats: json: cannot unmarshal object into Go struct field --- ## [How to switch from Kibana dashboard to Elastic dashboard](https://discuss.elastic.co/t/how-to-switch-from-kibana-dashboard-to-elastic-dashboard/304876)
**Author:** [@amenbs](https://discuss.elastic.co/u/amenbs)\ **Replies:** 6\ **Last updated:** [May 17, 2022, 1:04am UTC](https://discuss.elastic.co/t/how-to-switch-from-kibana-dashboard-to-elastic-dashboard/304876 "2022-05-17T01:04:11Z")
I have Elasticsearch , Logstash and Kibana version 6.8 on centos 7 VM and i want to access to elastic dashboard but every time i go to ip:5601 Kibana dashboard opens. what should i do to access this dashboard : this … --- ## [Kibana + Elasticsearch add active directory](https://discuss.elastic.co/t/kibana-elasticsearch-add-active-directory/304834)
**Author:** [@Dmitrymig](https://discuss.elastic.co/u/Dmitrymig)\ **Replies:** 1\ **Last updated:** [May 17, 2022, 12:30am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-add-active-directory/304834 "2022-05-17T00:30:11Z")
hello guys, I've been trying to set up authorization for a domain controller for a very long time and everything has failed, I've read a lot of topics and can't find an answer, help me) telnet domain:389 successful log… --- ## [Logstash Docker Container Syslog input](https://discuss.elastic.co/t/logstash-docker-container-syslog-input/304874)
**Author:** [@doublejz](https://discuss.elastic.co/u/doublejz)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 10:30pm UTC](https://discuss.elastic.co/t/logstash-docker-container-syslog-input/304874 "2022-05-16T22:30:18Z")
I've been fighting this the last couple days and well, I give up and need help. So I have an ELK stack docker setup and I'm simply trying to setup logstash to accept syslog directly to it. I pictured random port 5514 and… --- ## [Filebeat Azure Module - Config without Storage Account](https://discuss.elastic.co/t/filebeat-azure-module-config-without-storage-account/304878)
**Author:** [@bashurst](https://discuss.elastic.co/u/bashurst)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 10:14pm UTC](https://discuss.elastic.co/t/filebeat-azure-module-config-without-storage-account/304878 "2022-05-16T22:14:14Z")
For one of our use cases we are looking to setup a filebeats azure module to pull without using a storage account. As the storage account is only used to hold the pointer and we can handle our own splitting of the refer… --- ## [Disable authentification for elasticsearch](https://discuss.elastic.co/t/disable-authentification-for-elasticsearch/304862)
**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\ **Replies:** 7\ **Last updated:** [May 16, 2022, 10:03pm UTC](https://discuss.elastic.co/t/disable-authentification-for-elasticsearch/304862 "2022-05-16T22:03:32Z")
hi everyone, can i delete my user elastic and the password and make kibana and elastic accessible without any authentication needed. if so send me an article or a tutorial, thanks. --- ## [Can filebeat ingest a JSON-format file as a single document?](https://discuss.elastic.co/t/can-filebeat-ingest-a-json-format-file-as-a-single-document/304872)
**Author:** [@kmp](https://discuss.elastic.co/u/kmp)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 9:29pm UTC](https://discuss.elastic.co/t/can-filebeat-ingest-a-json-format-file-as-a-single-document/304872 "2022-05-16T21:29:11Z")
I'm guessing this is really simple or ... not so much: we have an application deployed on a number of hosts that has a configuration file in JSON. We'd like to ingest the file as a single document using filebeat, in or… --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491)
**Author:** [@MAD\_MIkE](https://discuss.elastic.co/u/MAD_MIkE)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 7:32pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/303491 "2022-05-16T19:32:11Z")
In order to install ELK in offline mode. I download all three rm package of Elasticsearch, kibana, logstash version 8.1.3 Elasticsearchsearch is installed successefully and service is running. Kibana is installed eithe… --- ## [Rename logstash.yml](https://discuss.elastic.co/t/rename-logstash-yml/304850)
**Author:** [@Marc\_Jacques](https://discuss.elastic.co/u/Marc_Jacques)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 7:26pm UTC](https://discuss.elastic.co/t/rename-logstash-yml/304850 "2022-05-16T19:26:54Z")
Hello Elastic, is this possible to rename logstash.yml? I would like to have something like logstash-name-name.yml I haven't found anything on the doc or web. There is a setting directory in startup.options, but no v… --- ## [Task cancelled warning message on elastic master node](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838)
**Author:** [@Thuunder7](https://discuss.elastic.co/u/Thuunder7)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 6:59pm UTC](https://discuss.elastic.co/t/task-cancelled-warning-message-on-elastic-master-node/304838 "2022-05-16T18:59:00Z")
Hello guys, My master node is printing the following warning message quite frequently: \[2022-05-16T16:03:39,712\]\[WARN \]\[r.suppressed \] \[loganshrdb03s\] path: /\_xpack/usage, params: {} java.util.concurrent.Ca… --- ## [Aggregate Json input](https://discuss.elastic.co/t/aggregate-json-input/304842)
**Author:** [@shacharaj](https://discuss.elastic.co/u/shacharaj)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 4:05pm UTC](https://discuss.elastic.co/t/aggregate-json-input/304842 "2022-05-16T16:05:42Z")
Hello everyone, I am trying to aggregate JSON input I harvest through filebeat, This is my application log file: }{ "timestamp" : "2022-05-16 15:47:40", "level" : "ERROR", "thread" : "main", "logger" : "com.cr… --- ## [JSON Filter works but filter refresh doesn't fix cache mapping error](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 10\ **Last updated:** [May 16, 2022, 3:44pm UTC](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708 "2022-05-16T15:44:48Z")
Hello, I have JSON messages coming to logstash and they are getting parsed properly, however, I get the error message "no cache mapping, refresh index field list". I have done this multiple times but the error does not g… --- ## [.NET Client Connection Issue](https://discuss.elastic.co/t/net-client-connection-issue/304830)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 3:14pm UTC](https://discuss.elastic.co/t/net-client-connection-issue/304830 "2022-05-16T15:14:17Z")
NEST/Elasticsearch.Net version : 7.17.1 Elasticsearch version : 7.16.2 (standalone instance) .NET runtime version : Framework 4.7.1 Operating system version : Windows 10 ENT (build 19042) Description of the problem i… --- ## [Elasticsearch cluster](https://discuss.elastic.co/t/elasticsearch-cluster/304760)
**Author:** [@alex\_96](https://discuss.elastic.co/u/alex_96)\ **Replies:** 3\ **Last updated:** [May 16, 2022, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster/304760 "2022-05-16T15:06:33Z")
Hi, a little confused reading the documentation on creating a cluster https://www.elastic.co/guide/en/elasticsearch/reference/7.17/high-availability-cluster-small-clusters.html#high-availability-cluster-design-two-nodes … --- ## [Ruby filter logstash (.length)](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832)
**Author:** [@alex\_vermex](https://discuss.elastic.co/u/alex_vermex)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:32pm UTC](https://discuss.elastic.co/t/ruby-filter-logstash-length/304832 "2022-05-16T14:32:12Z")
Hi, I would like to fix the length of message logstash.conf: filter { mutate { split =\> {"message" =\> "|"} ruby { code =\> "event.set('number\_of\_elements', event.get('message').length) " } … --- ## [How are Index Limits Reached?](https://discuss.elastic.co/t/how-are-index-limits-reached/304489)
**Author:** [@ezekiel.buck](https://discuss.elastic.co/u/ezekiel.buck)\ **Replies:** 4\ **Last updated:** [May 16, 2022, 2:08pm UTC](https://discuss.elastic.co/t/how-are-index-limits-reached/304489 "2022-05-16T14:08:11Z")
I'm attempting to estimate a reasonable limit to the index mappings variable and I'm in dire need of knowledge regarding what all contributes to the limit (I've read field/object mappings and field aliases go toward this… --- ## [Some Lessons in Elastic Observability could't open](https://discuss.elastic.co/t/some-lessons-in-elastic-observability-couldt-open/304513)
**Author:** [@jongpil.won](https://discuss.elastic.co/u/jongpil.won)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 2:07pm UTC](https://discuss.elastic.co/t/some-lessons-in-elastic-observability-couldt-open/304513 "2022-05-16T14:07:36Z")
I recently logged on to review Observability Fundamentlas (1 year access) There are four sessions in total, but two sessions are not connected. Lesson 1 and 2 is not opened. The page shows only "Your course is loading"… --- ## [Logstash how to keep only last elements of an array?](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366)
**Author:** [@zid57](https://discuss.elastic.co/u/zid57)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 2:01pm UTC](https://discuss.elastic.co/t/logstash-how-to-keep-only-last-elements-of-an-array/304366 "2022-05-16T14:01:28Z")
Hello all, I have a field which is an array and I would like to keep only the last element and put it into a new field. "data": { "path": \[ 1111, 2222, 3333 \] I tried to copy da… --- ## [Elastic Agent not sending data to ES through proxy (Windows)](https://discuss.elastic.co/t/elastic-agent-not-sending-data-to-es-through-proxy-windows/303020)
**Author:** [@James\_Shaw](https://discuss.elastic.co/u/James_Shaw)\ **Replies:** 2\ **Last updated:** [May 16, 2022, 1:49pm UTC](https://discuss.elastic.co/t/elastic-agent-not-sending-data-to-es-through-proxy-windows/303020 "2022-05-16T13:49:04Z")
Hi all, Sorry if this has been asked before, but I am pretty much baffled now and can't get this working. Version: 1.17.1 Fleet Managed Agents. Problem: Elastic agents aren't sending data through the proxy to Elastic… --- ## [Removing Data View Filelds](https://discuss.elastic.co/t/removing-data-view-filelds/304825)
**Author:** [@mehrnaz](https://discuss.elastic.co/u/mehrnaz)\ **Replies:** 0\ **Last updated:** [May 16, 2022, 1:15pm UTC](https://discuss.elastic.co/t/removing-data-view-filelds/304825 "2022-05-16T13:15:54Z")
Hello, I am trying to create a dashboard in Grafana with my Elasticsearch database. However, the fields that I am interested in are not showing up in Grafana. I am interested in the Available fields that I can see in Ki… --- ## [Data in app search](https://discuss.elastic.co/t/data-in-app-search/304781)
**Author:** [@Ines\_ZAYANI](https://discuss.elastic.co/u/Ines_ZAYANI)\ **Replies:** 7\ **Last updated:** [May 16, 2022, 12:51pm UTC](https://discuss.elastic.co/t/data-in-app-search/304781 "2022-05-16T12:51:53Z")
Hi everyone, I'm kindda new to app search, so would anyone be able to tell me where is data that is indexed and collected by spp searxh stored?? Is it stored on elasticsearch's cluster and nodes? Or does it have it's o… [Previous page](https://discuss.elastic.co/latest.md?page=1128) [Next page](https://discuss.elastic.co/latest.md?page=1130)