# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1136

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1137

---

## [Filebeat SSL connection to logstash](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186)

<div class="topic-metadata">

**Author:** [@ruchil](https://discuss.elastic.co/u/ruchil)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186 "2022-05-11T14:13:34Z")

</div>

Hi All, Appreciate any help in configuring SSL connection from Filebeat to logstash on ECK. Openshift 4.8.x ECK 2.1.0 ELKF stack 8.1.0 I am using to certs from Elasticsearch-es-http-certs-internal. Created pkcs8.key…

---

## [Kibana high values with short interval as explicit growing line](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130)

<div class="topic-metadata">

**Author:** [@Radoslaw\_Sieprawski](https://discuss.elastic.co/u/Radoslaw_Sieprawski)\
**Replies:** 4\
**Last updated:** [May 11, 2022, 2:02pm UTC](https://discuss.elastic.co/t/kibana-high-values-with-short-interval-as-explicit-growing-line/304130 "2022-05-11T14:02:36Z")

</div>

Hi guys, I'm looking for solution how to present in Kibana constantly growing high values as growing line graph. This what I have now is completely flat line especialy when choosen time span is low, eg 1h. I'll apprecia…

---

## [Found "Kibana server is not ready yet" after configured kibana](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268)

<div class="topic-metadata">

**Author:** [@fanfan01127](https://discuss.elastic.co/u/fanfan01127)\
**Replies:** 7\
**Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/found-kibana-server-is-not-ready-yet-after-configured-kibana/304268 "2022-05-11T13:32:58Z")

</div>

After setup of kibana and configure the yml file in my linux box, I got message "Kibana server is not ready yet" once I access to http://myipaddress:5601 And here is my kibana.yml config file. Many thanks all. …

---

## [Fleet server install failed on fresh ELK stack 8.2.0](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465)

<div class="topic-metadata">

**Author:** [@Peter\_Bodnar](https://discuss.elastic.co/u/Peter_Bodnar)\
**Replies:** 4\
**Last updated:** [May 11, 2022, 1:32pm UTC](https://discuss.elastic.co/t/fleet-server-install-failed-on-fresh-elk-stack-8-2-0/304465 "2022-05-11T13:32:43Z")

</div>

Hello, i have problem to install Fleet server on fresh ELK stack 8.2.0 (RHEL 8) Elasticsearch and kibana working fine, but when tried to install fleet server (enroll agent as fleet server, based on provided instructions…

---

## [Logstash configuration to load next pages automatically](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457)

<div class="topic-metadata">

**Author:** [@Iss](https://discuss.elastic.co/u/Iss)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/logstash-configuration-to-load-next-pages-automatically/304457 "2022-05-11T13:05:47Z")

</div>

I am new with ELK. I apologize for mistake I have to configure logstash in order to import data from an external source using an oai-pmh API. I try it using the following configuration. input{ http\_poller{ urls =\>{…

---

## [Data Table in Dashboard](https://discuss.elastic.co/t/data-table-in-dashboard/303478)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 17\
**Last updated:** [May 11, 2022, 12:45pm UTC](https://discuss.elastic.co/t/data-table-in-dashboard/303478 "2022-05-11T12:45:55Z")

</div>

Hello, i want to create a basic data table in a Kibana Dashboard with employees. I tried using the Table Lens but there is always a requirement for a metric like count, sum,.. which i do not need, as i only want to dis…

---

## [502 Bad Gateway when callback from proxy](https://discuss.elastic.co/t/502-bad-gateway-when-callback-from-proxy/304443)

<div class="topic-metadata">

**Author:** [@crimson\_riot](https://discuss.elastic.co/u/crimson_riot)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 12:42pm UTC](https://discuss.elastic.co/t/502-bad-gateway-when-callback-from-proxy/304443 "2022-05-11T12:42:17Z")

</div>

I am using oauth2 proxy to authenticate the user through google and then the authenticated user should connect to kibana which can be accessed via http://localhost:5601. However after authentication success (as mentioned…

---

## [Search cretiria with TermSet](https://discuss.elastic.co/t/search-cretiria-with-termset/304459)

<div class="topic-metadata">

**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 12:38pm UTC](https://discuss.elastic.co/t/search-cretiria-with-termset/304459 "2022-05-11T12:38:28Z")

</div>

Hi All, I have requirement to search Elastic with following details . This is part of security implementation you can assume for my website. I have different Grouptypes with each group type having set of Groups . these…

---

## [Pipeline simulation](https://discuss.elastic.co/t/pipeline-simulation/304391)

<div class="topic-metadata">

**Author:** [@hebph001](https://discuss.elastic.co/u/hebph001)\
**Replies:** 5\
**Last updated:** [May 11, 2022, 12:33pm UTC](https://discuss.elastic.co/t/pipeline-simulation/304391 "2022-05-11T12:33:15Z")

</div>

Hi Elastic community, I'm having a hard time figuring out what is wrong with my pipeline simulation. I'm trying to simulate this way GET /\_ingest/pipeline/test-pipeline/\_simulate { "docs": \[ { "\_source": { …

---

## [Convert two repeated values in array into a string](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429)

<div class="topic-metadata">

**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\
**Replies:** 1\
**Last updated:** [May 11, 2022, 12:21pm UTC](https://discuss.elastic.co/t/convert-two-repeated-values-in-array-into-a-string/304429 "2022-05-11T12:21:49Z")

</div>

Hello, I have some old documents where a field has an array of two vales repeated, something like this: "task" : \[ "first\_task", "first\_task" \], I'm trying to convert this a…

---

## [Can not extract the "value" from the Aggregation](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281)

<div class="topic-metadata">

**Author:** [@cugo](https://discuss.elastic.co/u/cugo)\
**Replies:** 3\
**Last updated:** [May 11, 2022, 11:51am UTC](https://discuss.elastic.co/t/can-not-extract-the-value-from-the-aggregation/304281 "2022-05-11T11:51:22Z")

</div>

I have a list of Buckets (parentSalaries) that has a list of Aggregations of size 2. One of the Aggregations (average\_salary) has the following fields; value, name, valueAsString and metadata. I am trying to extract the …

---

## [Elasticsearch Term suggester is not returning correct suggestions when one character is missing (instead of misspelling)](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369)

<div class="topic-metadata">

**Author:** [@hesamrasouli](https://discuss.elastic.co/u/hesamrasouli)\
**Replies:** 4\
**Last updated:** [May 11, 2022, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369 "2022-05-11T11:24:19Z")

</div>

I'm using Elasticsearch term suggester for spell correction. my index contains huge list of ads. Each ad has subject and body fields. I've found a problematic example for which the suggester is not suggesting correct sug…

---

## [Explain diff\_from\_typical meaning in custom rules](https://discuss.elastic.co/t/explain-diff-from-typical-meaning-in-custom-rules/304419)

<div class="topic-metadata">

**Author:** [@ixperdomo](https://discuss.elastic.co/u/ixperdomo)\
**Replies:** 1\
**Last updated:** [May 11, 2022, 11:19am UTC](https://discuss.elastic.co/t/explain-diff-from-typical-meaning-in-custom-rules/304419 "2022-05-11T11:19:40Z")

</div>

Hi, When configuring Machine Learning jobs in ES, you can customise your detectors by using custom\_rules. I'm wondering about the actual meaning of the applies\_to value diff\_from\_typical. My main question is if diff\_fr…

---

## [How can I have multiple kibana URLs for each server while my ELK is setup on the same centralised machine?](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413)

<div class="topic-metadata">

**Author:** [@Yash\_garg](https://discuss.elastic.co/u/Yash_garg)\
**Replies:** 1\
**Last updated:** [May 11, 2022, 10:49am UTC](https://discuss.elastic.co/t/how-can-i-have-multiple-kibana-urls-for-each-server-while-my-elk-is-setup-on-the-same-centralised-machine/304413 "2022-05-11T10:49:27Z")

</div>

Hi there, I am using ELK stack with filebeat. filebeat is sending logs from multiple servers and logstash is collecting logs and sending them to Elasticsearch , then it is sending it to kibana. But I am looking for a so…

---

## [Certificate revocation list checking](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939)

<div class="topic-metadata">

**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 10:19am UTC](https://discuss.elastic.co/t/certificate-revocation-list-checking/303939 "2022-05-11T10:19:24Z")

</div>

Hi, I didn't find any topic that would give me a definitive answer. Also, I'm not that good at how certifications work at this level. I was thinking about creating a new set of certificates for my Elastic cluster and I…

---

## [Adding data to Elasticsearch datastreams using nodejs](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449)

<div class="topic-metadata">

**Author:** [@Aisha\_Deshmukh](https://discuss.elastic.co/u/Aisha_Deshmukh)\
**Replies:** 0\
**Last updated:** [May 11, 2022, 10:11am UTC](https://discuss.elastic.co/t/adding-data-to-elasticsearch-datastreams-using-nodejs/304449 "2022-05-11T10:11:58Z")

</div>

Hi, can someone help me with inserting logs into datastream using nodejs? Thanks in advance.

---

## [How to limit the storage size of my indeces and automatically generate new index after reaching the assign storage size?](https://discuss.elastic.co/t/how-to-limit-the-storage-size-of-my-indeces-and-automatically-generate-new-index-after-reaching-the-assign-storage-size/303092)

<div class="topic-metadata">

**Author:** [@renatoa12](https://discuss.elastic.co/u/renatoa12)\
**Replies:** 11\
**Last updated:** [May 11, 2022, 9:39am UTC](https://discuss.elastic.co/t/how-to-limit-the-storage-size-of-my-indeces-and-automatically-generate-new-index-after-reaching-the-assign-storage-size/303092 "2022-05-11T09:39:37Z")

</div>

Good Day ELK masters, just want to ask on how can i limit my indeces/day storage size into i.e. 2gb? Please can somene help me i already created index life cycle policy but still it doesn't generate new index when exceed…

---

## [Index sizing dashboard creation](https://discuss.elastic.co/t/index-sizing-dashboard-creation/304380)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 9:34am UTC](https://discuss.elastic.co/t/index-sizing-dashboard-creation/304380 "2022-05-11T09:34:00Z")

</div>

Hi Team, We are creating daily rotating indices in our Elasticsearch cluster. Our cluster is on elastic cloud and we have enabled monitoring Elasticsearch. Now i have a requirement to create a dashboard for index sizes…

---

## [Merging 2 log lines into 1](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 5\
**Last updated:** [May 11, 2022, 8:31am UTC](https://discuss.elastic.co/t/merging-2-log-lines-into-1/304370 "2022-05-11T08:31:20Z")

</div>

Hi, I am looking at 2 indices that have 1 field in common and then different fields. Would it be possible to merge them into 1 log line using the similar field? Using the example above, both lines have the same value…

---

## [Multiple Dashboards for real time data](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372)

<div class="topic-metadata">

**Author:** [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Replies:** 5\
**Last updated:** [May 11, 2022, 8:42am UTC](https://discuss.elastic.co/t/multiple-dashboards-for-real-time-data/303372 "2022-05-11T08:42:36Z")

</div>

I have a multiple units numbered (1,2,3...) each unit has multiple type of log files(such as opereational, selinux audit, access & error) is it possible to create a UI on kibana that has a dashboard displaying all these…

---

## [How to add Document View to a Dashboard](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 5\
**Last updated:** [May 11, 2022, 8:41am UTC](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072 "2022-05-11T08:41:24Z")

</div>

In Discover, there is a document table that always appears. It never appears on my Dashboard even though I saved the query in Discover, and loaded the query for my Dashboard. What else must I do? I set doc\_table:lega…

---

## [Metricbeat sql module - specify database name when connecting to MSSQL](https://discuss.elastic.co/t/metricbeat-sql-module-specify-database-name-when-connecting-to-mssql/304336)

<div class="topic-metadata">

**Author:** [@ianufurnish.com](https://discuss.elastic.co/u/ianufurnish.com)\
**Replies:** 8\
**Last updated:** [May 11, 2022, 8:35am UTC](https://discuss.elastic.co/t/metricbeat-sql-module-specify-database-name-when-connecting-to-mssql/304336 "2022-05-11T08:35:26Z")

</div>

According to the documentation, it doesn't appear to be possible to specify the database name when connecting to Microsoft SQL. I'd like to use this module to connect to Azure SQL in order to run a query against a databa…

---

## [Logstash Multi Output and selective Information](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431)

<div class="topic-metadata">

**Author:** [@dharminfadia](https://discuss.elastic.co/u/dharminfadia)\
**Replies:** 0\
**Last updated:** [May 11, 2022, 8:25am UTC](https://discuss.elastic.co/t/logstash-multi-output-and-selective-information/304431 "2022-05-11T08:25:40Z")

</div>

input { http { host =\> "0.0.0.0" # default: 0.0.0.0 port =\> 0000 # default: 8080 } } filter { urldecode { all\_fields =\> true } } filter { mutate { gsub =\> \[ "message", "\\\]", "}", "message", "\\\[", "{" \] } …

---

## [Kibana and Fleet setup failed unable to authenticate user](https://discuss.elastic.co/t/kibana-and-fleet-setup-failed-unable-to-authenticate-user/304325)

<div class="topic-metadata">

**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\
**Replies:** 1\
**Last updated:** [May 11, 2022, 8:08am UTC](https://discuss.elastic.co/t/kibana-and-fleet-setup-failed-unable-to-authenticate-user/304325 "2022-05-11T08:08:06Z")

</div>

Im trying to setup kibana and fleet uisng the following example. https://github.com/elastic/cloud-on-k8s/blob/main/config/recipes/elastic-agent/fleet-kubernetes-integration.yaml However kibana is giving me the following…

---

## [\_tier\_preference setting](https://discuss.elastic.co/t/tier-preference-setting/303907)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 8:03am UTC](https://discuss.elastic.co/t/tier-preference-setting/303907 "2022-05-11T08:03:14Z")

</div>

Hi Can You explain me why below index showing \_tier\_preference": "data\_cold,data\_warm,data\_hot" after moving from data warm to data cold tier? I need to store such kind of index due to life policy only in particular dat…

---

## [Installing ElasticAgent with GPO](https://discuss.elastic.co/t/installing-elasticagent-with-gpo/302250)

<div class="topic-metadata">

**Author:** [@kotvmrc](https://discuss.elastic.co/u/kotvmrc)\
**Replies:** 5\
**Last updated:** [May 11, 2022, 8:01am UTC](https://discuss.elastic.co/t/installing-elasticagent-with-gpo/302250 "2022-05-11T08:01:46Z")

</div>

Hi all, I'm looking for installing elastic-agent 7.16 on several Windows PCs with a GPO, EPs could be too many to install it manually. I can't find any guide to do it, so I tried to do it by myself creating a Powershel…

---

## [.Net client socket error after many inserts](https://discuss.elastic.co/t/net-client-socket-error-after-many-inserts/304088)

<div class="topic-metadata">

**Author:** [@r03](https://discuss.elastic.co/u/r03)\
**Replies:** 3\
**Last updated:** [May 10, 2022, 3:47pm UTC](https://discuss.elastic.co/t/net-client-socket-error-after-many-inserts/304088 "2022-05-10T15:47:35Z")

</div>

I'm trying to create documents in Elastic with the .Net client. (7.17.1 on server 8.1.3) This works, but on the first sync I have many documents and after a lot of successul inserts the elastic client stops working. I …

---

## [Dashboard with a graph problem with datetime axis](https://discuss.elastic.co/t/dashboard-with-a-graph-problem-with-datetime-axis/304316)

<div class="topic-metadata">

**Author:** [@marcw](https://discuss.elastic.co/u/marcw)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 7:12am UTC](https://discuss.elastic.co/t/dashboard-with-a-graph-problem-with-datetime-axis/304316 "2022-05-11T07:12:36Z")

</div>

I use a dashboard with a graph in an external application via iframe. The datetime range selector is hidden because we don't want that the user changes the settings for the period. Otherwise the user can zoom in (what is…

---

## [ECK Operator unable to verify basic license in OpenShift](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423)

<div class="topic-metadata">

**Author:** [@RRGTHWAR](https://discuss.elastic.co/u/RRGTHWAR)\
**Replies:** 7\
**Last updated:** [May 11, 2022, 5:02am UTC](https://discuss.elastic.co/t/eck-operator-unable-to-verify-basic-license-in-openshift/303423 "2022-05-11T05:02:23Z")

</div>

Hello, I have the ECK Operator (2.1) running in OpenShift. Both Elasticsearch and Kibana are up and running properly with version 7.17.2, but the operator is stuck on trying to verify the (basic) license for Elasticsear…

---

## [Cannot use SecureSettings and availably zone awareness at the same time](https://discuss.elastic.co/t/cannot-use-securesettings-and-availably-zone-awareness-at-the-same-time/304304)

<div class="topic-metadata">

**Author:** [@Zijun\_X](https://discuss.elastic.co/u/Zijun_X)\
**Replies:** 2\
**Last updated:** [May 11, 2022, 4:54am UTC](https://discuss.elastic.co/t/cannot-use-securesettings-and-availably-zone-awareness-at-the-same-time/304304 "2022-05-11T04:54:07Z")

</div>

Hi there, I try to use the SecureSettings section to hold the credentials for the AWS S3 snapshot repo. But the k8s pod failed at the elastic-internal-init-keystore container step. The following is the error message: %…

[Previous page](https://discuss.elastic.co/latest.md?page=1135)

[Next page](https://discuss.elastic.co/latest.md?page=1137)
