# Latest **URL:** https://discuss.elastic.co/latest.md?page=1141 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1142 --- ## [Kibana server unable to connect to :5601](https://discuss.elastic.co/t/kibana-server-unable-to-connect-to-5601/304187)
**Author:** [@Heythem\_DHAOUADI](https://discuss.elastic.co/u/Heythem_DHAOUADI)\ **Replies:** 4\ **Last updated:** [May 8, 2022, 4:21pm UTC](https://discuss.elastic.co/t/kibana-server-unable-to-connect-to-5601/304187 "2022-05-08T16:21:42Z")
This is my kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. server.port: 5601 # Specifies the address to which the Kibana server will bind. IP addresses and host names are bot… --- ## [Sending data to logstash from remote machine](https://discuss.elastic.co/t/sending-data-to-logstash-from-remote-machine/304192)
**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\ **Replies:** 4\ **Last updated:** [May 8, 2022, 3:58pm UTC](https://discuss.elastic.co/t/sending-data-to-logstash-from-remote-machine/304192 "2022-05-08T15:58:58Z")
i have logstash running on a different machine and want to read csv files from anothere mechine. Is there a way to set the ip in file input of config file? --- ## [Data type for Log Message Fields, does keyword add overhead?](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043)
**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\ **Replies:** 6\ **Last updated:** [May 8, 2022, 6:23am UTC](https://discuss.elastic.co/t/data-type-for-log-message-fields-does-keyword-add-overhead/304043 "2022-05-08T06:23:46Z")
Currently I'm indexing log messages into Elasticsearch. Generally the initial 'message' field is dissected and stored in the following fields: @timestamp(date), logLevel(keyword), logMessage(keyword/text). … --- ## [Why ingest pipline first field is default date, How can I set it string?](https://discuss.elastic.co/t/why-ingest-pipline-first-field-is-default-date-how-can-i-set-it-string/304168)
**Author:** [@kiddingl](https://discuss.elastic.co/u/kiddingl)\ **Replies:** 4\ **Last updated:** [May 8, 2022, 2:31am UTC](https://discuss.elastic.co/t/why-ingest-pipline-first-field-is-default-date-how-can-i-set-it-string/304168 "2022-05-08T02:31:39Z")
My kibane and es version is 7.8.0 I create a pipline on kibana dashboard { "description": "test", "processors": \[ { "grok": { "field": "message", "patterns": \["%{DATA:a1} %{GREEDYDATA:con… --- ## [Getting error while setting password in interactive mode](https://discuss.elastic.co/t/getting-error-while-setting-password-in-interactive-mode/304096)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 5\ **Last updated:** [May 8, 2022, 1:15am UTC](https://discuss.elastic.co/t/getting-error-while-setting-password-in-interactive-mode/304096 "2022-05-08T01:15:49Z")
Hi i am trying to generate certificate and set passwd in interactive mode during build time but getting error. Docker file ARG ELASTICSEARCH\_VER="8.1.3" ARG ELASTICSEARCH\_IMAGE=docker.elastic.co/elasticsearch/elastics… --- ## [Feature request - Security Rule exception autopopulate](https://discuss.elastic.co/t/feature-request-security-rule-exception-autopopulate/302569)
**Author:** [@smzd](https://discuss.elastic.co/u/smzd)\ **Replies:** 2\ **Last updated:** [May 7, 2022, 6:19pm UTC](https://discuss.elastic.co/t/feature-request-security-rule-exception-autopopulate/302569 "2022-05-07T18:19:29Z")
would it be possible to auto populate all the fields when create a rule exception with the data coming from the alert. Then I can simply eliminate the fields that are not relevant. This will hugely simplify the process… --- ## [ES8 Java Client API : Index API - Get index features flag seems missing](https://discuss.elastic.co/t/es8-java-client-api-index-api-get-index-features-flag-seems-missing/304081)
**Author:** [@Felton\_Fee](https://discuss.elastic.co/u/Felton_Fee)\ **Replies:** 2\ **Last updated:** [May 7, 2022, 2:23pm UTC](https://discuss.elastic.co/t/es8-java-client-api-index-api-get-index-features-flag-seems-missing/304081 "2022-05-07T14:23:28Z")
With ES8 java client to get index client.indices().get(c -\> c.index(name).features(...)) I didn't find the method corresponding to the following param: features (Optional, string) Return information about specific in… --- ## [Bulk Indexing API- To return the number of successful updates/creates](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174)
**Author:** [@Zee\_Grinch](https://discuss.elastic.co/u/Zee_Grinch)\ **Replies:** 0\ **Last updated:** [May 7, 2022, 1:24pm UTC](https://discuss.elastic.co/t/bulk-indexing-api-to-return-the-number-of-successful-updates-creates/304174 "2022-05-07T13:24:04Z")
Not sure if this is a feature request, or is something that I missed (like a parameter in the Request that can enable this): The JSON body returned by a ~/\_bulk POST will include fairly rich info in the items\[\] array, b… --- ## [How to delete field in filebeat7.8.0](https://discuss.elastic.co/t/how-to-delete-field-in-filebeat7-8-0/302908)
**Author:** [@kiddingl](https://discuss.elastic.co/u/kiddingl)\ **Replies:** 6\ **Last updated:** [May 7, 2022, 8:36am UTC](https://discuss.elastic.co/t/how-to-delete-field-in-filebeat7-8-0/302908 "2022-05-07T08:36:58Z")
I collect log file and output to es with filebeat, But I get many unused fileds,like this: The many of field which is no value, How to delete it --- ## [Event tracking for improving conversion rate](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274)
**Author:** [@yukai](https://discuss.elastic.co/u/yukai)\ **Replies:** 2\ **Last updated:** [May 6, 2022, 7:11am UTC](https://discuss.elastic.co/t/event-tracking-for-improving-conversion-rate/303274 "2022-05-06T07:11:18Z")
We built a video search platform powered by Elasticsearch. Which consists of a search bar (of course) and many interesting functions like video recommendation, search histories, video comments and so on. Which confuses… --- ## [Elastic query is not fast and response time is high](https://discuss.elastic.co/t/elastic-query-is-not-fast-and-response-time-is-high/303982)
**Author:** [@alpine\_f1](https://discuss.elastic.co/u/alpine_f1)\ **Replies:** 8\ **Last updated:** [May 7, 2022, 5:01am UTC](https://discuss.elastic.co/t/elastic-query-is-not-fast-and-response-time-is-high/303982 "2022-05-07T05:01:48Z")
Cluster setup: I am running Elasticsearch cluster (2 master, 2 data and 1 voter) as docker containers. Kibana setup: I also have Kibana configured to connect to the elastic cluster. Frontend: I have an angular web a… --- ## [How do we make a search suggestions like amazon in elasticsearch](https://discuss.elastic.co/t/how-do-we-make-a-search-suggestions-like-amazon-in-elasticsearch/304116)
**Author:** [@RohitBR\_K](https://discuss.elastic.co/u/RohitBR_K)\ **Replies:** 3\ **Last updated:** [May 7, 2022, 2:06am UTC](https://discuss.elastic.co/t/how-do-we-make-a-search-suggestions-like-amazon-in-elasticsearch/304116 "2022-05-07T02:06:15Z")
am using Elasticsearch for my suggestion. I need a suggestion like amazon. how can i do it with Elasticsearch ? --- ## [Indexes rolling over due to ILM are not adding an alias](https://discuss.elastic.co/t/indexes-rolling-over-due-to-ilm-are-not-adding-an-alias/304150)
**Author:** [@perfecto25](https://discuss.elastic.co/u/perfecto25)\ **Replies:** 1\ **Last updated:** [May 7, 2022, 12:44am UTC](https://discuss.elastic.co/t/indexes-rolling-over-due-to-ilm-are-not-adding-an-alias/304150 "2022-05-07T00:44:14Z")
Hello, is it possible to configure Filebeat, Metricbeat, etc to automaticlaly create an alias whenever the index rolls over a to a new one due to ILM lifecycle policy?, ie, my index for Fbeat rolled over due to ILM poli… --- ## [Getting a discover/dashboard error of: "Unexpected token \< in JSON at position 0"](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785)
**Author:** [@jonezy7173](https://discuss.elastic.co/u/jonezy7173)\ **Replies:** 11\ **Last updated:** [May 7, 2022, 12:26am UTC](https://discuss.elastic.co/t/getting-a-discover-dashboard-error-of-unexpected-token-in-json-at-position-0/303785 "2022-05-07T00:26:44Z")
I'm not able to find much information about this online except for this post. However, their issue was caused by a proxy. I'm simply setup on a single node in my homelab off of a span port on my switch (and I have a mana… --- ## [Issue Using the Connector from PySpark in 7.17.3](https://discuss.elastic.co/t/issue-using-the-connector-from-pyspark-in-7-17-3/304084)
**Author:** [@ito](https://discuss.elastic.co/u/ito)\ **Replies:** 3\ **Last updated:** [May 7, 2022, 12:18am UTC](https://discuss.elastic.co/t/issue-using-the-connector-from-pyspark-in-7-17-3/304084 "2022-05-07T00:18:45Z")
I have Elasticsearch 7.17.3 running on localhost:9200, so I downloaded Elasticsearch for Apache Hadoop 7.17.3. Then I copied Elasticsearch-spark-20\_2.11-7.17.3.jar to my jar folder. I read "Using the connector from PySp… --- ## [Simple scatter plot - infinite extents when using transform](https://discuss.elastic.co/t/simple-scatter-plot-infinite-extents-when-using-transform/303981)
**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\ **Replies:** 4\ **Last updated:** [May 6, 2022, 10:59pm UTC](https://discuss.elastic.co/t/simple-scatter-plot-infinite-extents-when-using-transform/303981 "2022-05-06T22:59:16Z")
New to Kibana + Vega and going through lots of tutorials, landed on this video to try to make a simple scatter plot. Using the sample eCommerce data. I am so close, but seemingly something slightly wrong. Comparing what… --- ## [Locked myself out of my superuser role by accident, how do I get access back?](https://discuss.elastic.co/t/locked-myself-out-of-my-superuser-role-by-accident-how-do-i-get-access-back/303977)
**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\ **Replies:** 5\ **Last updated:** [May 6, 2022, 10:50pm UTC](https://discuss.elastic.co/t/locked-myself-out-of-my-superuser-role-by-accident-how-do-i-get-access-back/303977 "2022-05-06T22:50:20Z")
Being the idiot I am, I had a use case where I needed to make two accounts for myself, one with admin access and one with regular access. Instead of making the new admin account BEFORE I demoted my current account to th… --- ## [Return Selected Fields from DSL Aggregation](https://discuss.elastic.co/t/return-selected-fields-from-dsl-aggregation/304158)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 0\ **Last updated:** [May 6, 2022, 10:06pm UTC](https://discuss.elastic.co/t/return-selected-fields-from-dsl-aggregation/304158 "2022-05-06T22:06:24Z")
Hello, I have the following \_search query: { "size": 0, "aggs": { "3": { "terms": { "field": "REGIONAL.keyword", "order": { "\_count"… --- ## [Agents in Fleet Healthy, but no logs](https://discuss.elastic.co/t/agents-in-fleet-healthy-but-no-logs/304154)
**Author:** [@jumpie](https://discuss.elastic.co/u/jumpie)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 10:04pm UTC](https://discuss.elastic.co/t/agents-in-fleet-healthy-but-no-logs/304154 "2022-05-06T22:04:50Z")
Hello, I have a couple agents managed by Fleet. They say healthy in Fleet and when I run elastic-agent -health on the client, but they have no logs in Discover. I also have a couple agents running standalone and they d… --- ## [Help enhancing bubble chart](https://discuss.elastic.co/t/help-enhancing-bubble-chart/302161)
**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 8:41pm UTC](https://discuss.elastic.co/t/help-enhancing-bubble-chart/302161 "2022-05-06T20:41:03Z")
Hello. I was able to create a Bubble Chart using Vega, but I need to do the following enhancements; Add click bubble to filter Add hover legend text to highlight bubble Add "kilo" format to X axis (100.000 =\> 100K) wor… --- ## [Local Logstash 7.9.3 error: (EACCES) Permission denied - NUL](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153)
**Author:** [@JonathanHai](https://discuss.elastic.co/u/JonathanHai)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 8:23pm UTC](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153 "2022-05-06T20:23:17Z")
Hi everyone, I'm attempting to run a local instance of Logstash 7.9.3 on my windows machine. Specifically, C:\\logstash-7.9.3\\bin\>logstash.bat \[ERROR\] 2022-05-06 15:04:57.066 \[main\] Logstash - java.lang.IllegalStateExce… --- ## [Kibana keeps logging users out with message "An unexpected authentication error occurred. Please log in again."](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-with-message-an-unexpected-authentication-error-occurred-please-log-in-again/299729)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 10\ **Last updated:** [May 6, 2022, 5:00pm UTC](https://discuss.elastic.co/t/kibana-keeps-logging-users-out-with-message-an-unexpected-authentication-error-occurred-please-log-in-again/299729 "2022-05-06T17:00:39Z")
I am running an Elastic Service v7.16.2, when I open a single tab or multiply tabs of Kibana, it unexpectedly logs the user out, sometimes after a minute or less. Other times it seems to be stable and keeps user logged i… --- ## [Throttle Filter Logstash](https://discuss.elastic.co/t/throttle-filter-logstash/304104)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 4:47pm UTC](https://discuss.elastic.co/t/throttle-filter-logstash/304104 "2022-05-06T16:47:21Z")
Hi As there are some deduplicated log ingressing into logstash That's why I would like to use the Throttle Filter to filter out the log The config is listed as below filter { if \[name\] == "pack\_incident\_response… --- ## [XML plugin parse](https://discuss.elastic.co/t/xml-plugin-parse/304124)
**Author:** [@adrianfusco](https://discuss.elastic.co/u/adrianfusco)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 4:41pm UTC](https://discuss.elastic.co/t/xml-plugin-parse/304124 "2022-05-06T16:41:09Z")
Hello, I've been using the XML filtering plugin because I need to parse some XML data. This is a simple example: \ \ \ Desc… --- ## [Grok help needed](https://discuss.elastic.co/t/grok-help-needed/304102)
**Author:** [@sdevasy73](https://discuss.elastic.co/u/sdevasy73)\ **Replies:** 6\ **Last updated:** [May 6, 2022, 3:53pm UTC](https://discuss.elastic.co/t/grok-help-needed/304102 "2022-05-06T15:53:16Z")
i am a newbie to grok pattern, trying to parse the below mentioned cisco firewall syslog. With the try struggling with what type to use to extract the interested fields, some of them works if i paste it individually, bu… --- ## [Logstash can't connect to Elasticsearch](https://discuss.elastic.co/t/logstash-cant-connect-to-elasticsearch/303623)
**Author:** [@ozz](https://discuss.elastic.co/u/ozz)\ **Replies:** 2\ **Last updated:** [May 6, 2022, 3:37pm UTC](https://discuss.elastic.co/t/logstash-cant-connect-to-elasticsearch/303623 "2022-05-06T15:37:51Z")
Hi guys. I'm trying to connect to Elasticsearch from Logstash, but it fails due to certificate issues. To give some background data: Version 8.1.3 on Kubernetes with Rancher. I build a couple of kustomization yaml files… --- ## [Kibana\_system privileges - unauthorized for user \[kibana\_system\] with roles \[kibana\_system\] on indices](https://discuss.elastic.co/t/kibana-system-privileges-unauthorized-for-user-kibana-system-with-roles-kibana-system-on-indices/303505)
**Author:** [@Penchev](https://discuss.elastic.co/u/Penchev)\ **Replies:** 3\ **Last updated:** [May 6, 2022, 3:01pm UTC](https://discuss.elastic.co/t/kibana-system-privileges-unauthorized-for-user-kibana-system-with-roles-kibana-system-on-indices/303505 "2022-05-06T15:01:23Z")
Hi, I changed the deprecated user kibana to kibana\_system and now I have this error. {"type":"log","@timestamp":"2022-04-28T02:45:00-04:00","tags":\["error","plugins","wazuh","monitoring"\],"pid":29306,"message":"secur… --- ## [Visualize grouped endpoints excluding unique IDs](https://discuss.elastic.co/t/visualize-grouped-endpoints-excluding-unique-ids/302217)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 3\ **Last updated:** [May 6, 2022, 2:34pm UTC](https://discuss.elastic.co/t/visualize-grouped-endpoints-excluding-unique-ids/302217 "2022-05-06T14:34:07Z")
Hi I'm trying to get a visualization of the count of endpoints hit in a timeframe. My issue is that when I add my url.path feild to the visualization it displays like this (as an example) /rest/endpoint/8372812 /rest/e… --- ## [Kibana Dashboard import from 7.x to 8.x](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003)
**Author:** [@Aman\_Gupta1](https://discuss.elastic.co/u/Aman_Gupta1)\ **Replies:** 4\ **Last updated:** [May 6, 2022, 2:13pm UTC](https://discuss.elastic.co/t/kibana-dashboard-import-from-7-x-to-8-x/304003 "2022-05-06T14:13:30Z")
Hi Team, I have moved my ELK stack from 7.x to 8.x i have exported dashboards from 7.x but while uploading to 8.x it gives error. Not supported. As format is changed from .json to .ndjson. Is there any way to do this… --- ## [Elasticsearch nodejs client 8.2 msearch error](https://discuss.elastic.co/t/elasticsearch-nodejs-client-8-2-msearch-error/304132)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-nodejs-client-8-2-msearch-error/304132 "2022-05-06T14:02:35Z")
We have been using elastic node js client version 8.1.0 and updated to @elastic/Elasticsearch@8.2.0. Suddently our msearch query stopped working with ResponseError: illegal\_argument\_exception: \[illegal\_argument\_except… [Previous page](https://discuss.elastic.co/latest.md?page=1140) [Next page](https://discuss.elastic.co/latest.md?page=1142)