# Latest **URL:** https://discuss.elastic.co/latest.md?page=1196 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1197 --- ## [Kibana windows notifications possibility](https://discuss.elastic.co/t/kibana-windows-notifications-possibility/299957)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 3:19pm UTC](https://discuss.elastic.co/t/kibana-windows-notifications-possibility/299957 "2022-03-29T15:19:04Z")
Good Morning, I know that Kibana/Elasticsearch is capable for providing e-mails by using watches/alerts. But is it possible for Kibana to provide windows notification similar to Slack or other web based tools? Is there… --- ## [When output from logstash to mangodb, can I specify which fields wanted in output?](https://discuss.elastic.co/t/when-output-from-logstash-to-mangodb-can-i-specify-which-fields-wanted-in-output/300817)
**Author:** [@maoxuguang](https://discuss.elastic.co/u/maoxuguang)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 2:56pm UTC](https://discuss.elastic.co/t/when-output-from-logstash-to-mangodb-can-i-specify-which-fields-wanted-in-output/300817 "2022-03-29T14:56:25Z")
I config two destination in logstash output, one is Elasticsearch, the other is mongodb. I only want to out put several fields to mongodb, not all of them. How to config to achieve that? Thanks a lot. --- ## [And/OR DSL Query](https://discuss.elastic.co/t/and-or-dsl-query/300985)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 2:56pm UTC](https://discuss.elastic.co/t/and-or-dsl-query/300985 "2022-03-29T14:56:08Z")
Hello, I'm having a difficult time getting a DSL query to work right with a combination of an AND and OR. For the OR side, one of the two must be present in the document.... { "state": "active" } { "state": "re-surfa… --- ## [Filebeat ssl issue](https://discuss.elastic.co/t/filebeat-ssl-issue/300984)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-ssl-issue/300984 "2022-03-29T14:45:30Z")
Hello, I ran into a weird issue where I was getting the following error on one of my logstash servers as I was trying to set up filebeats: ERROR \[esclientleg\] transport/logging.go:37 Error dialing x509: Certificate sig… --- ## [Using DNS processors in built in integration in Kibana](https://discuss.elastic.co/t/using-dns-processors-in-built-in-integration-in-kibana/300863)
**Author:** [@Tom\_Box](https://discuss.elastic.co/u/Tom_Box)\ **Replies:** 0\ **Last updated:** [March 28, 2022, 3:04pm UTC](https://discuss.elastic.co/t/using-dns-processors-in-built-in-integration-in-kibana/300863 "2022-03-28T15:04:11Z")
Hi, I have a built in integration application (for example: Office 365) which has an IP address field in the logs which i would like to reverse using a DNS lookup and i tried to achieve that using the DNS processor unde… --- ## [Terminate user session based on time period](https://discuss.elastic.co/t/terminate-user-session-based-on-time-period/300975)
**Author:** [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 2:18pm UTC](https://discuss.elastic.co/t/terminate-user-session-based-on-time-period/300975 "2022-03-29T14:18:46Z")
Can Elasticsearch be configured to terminate and log out privileged users after a set period? If so, is it documented anywhere? --- ## [Filebeat using default input path instead of my log path](https://discuss.elastic.co/t/filebeat-using-default-input-path-instead-of-my-log-path/300982)
**Author:** [@benny111](https://discuss.elastic.co/u/benny111)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 2:26pm UTC](https://discuss.elastic.co/t/filebeat-using-default-input-path-instead-of-my-log-path/300982 "2022-03-29T14:26:33Z")
I have a filebeat installed in Ubuntu 20.04. I have changed my input file path to my own log path. But when it starts to service, it seems to collect the default system logs. I tried to use sudo /usr/share/filebeat/b… --- ## [Reindex from AWS elasticsearch to elastic cloud](https://discuss.elastic.co/t/reindex-from-aws-elasticsearch-to-elastic-cloud/300911)
**Author:** [@Vadiraj\_B](https://discuss.elastic.co/u/Vadiraj_B)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 2:02pm UTC](https://discuss.elastic.co/t/reindex-from-aws-elasticsearch-to-elastic-cloud/300911 "2022-03-29T14:02:55Z")
We have a AWS Elasticsearch cluster. We are trying to reindex this onto elastic cloud instance. We have created Elasticsearch intstance on elastic cloud. and from kibana trying to reindex. We have listed remote source (A… --- ## [Create and email report based on query](https://discuss.elastic.co/t/create-and-email-report-based-on-query/300971)
**Author:** [@ddraganp6](https://discuss.elastic.co/u/ddraganp6)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 1:55pm UTC](https://discuss.elastic.co/t/create-and-email-report-based-on-query/300971 "2022-03-29T13:55:02Z")
Hi everyone, I was able to succesfully retrieve the data I need - my top 10 most ERROR log producing applications - using this query : GET \_search { "size": 0, "query": { "bool": { "must": \[ { … --- ## [Permissions issues after upgrading heartbeat to 8.0](https://discuss.elastic.co/t/permissions-issues-after-upgrading-heartbeat-to-8-0/297383)
**Author:** [@Marc-Antoine\_J](https://discuss.elastic.co/u/Marc-Antoine_J)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 1:48pm UTC](https://discuss.elastic.co/t/permissions-issues-after-upgrading-heartbeat-to-8-0/297383 "2022-03-29T13:48:46Z")
Good Day, I recently upgrade my test installation of the Elastic Stack to 8.0. The Elasticsearch and kibana installations went fine. On the heartbeat side I'm getting the following errors: Cannot index event publisher.… --- ## [Logstash: \[ERROR\]\[logstash.javapipeline \]\[main\] Pipeline error | Cannot get new connection from pool](https://discuss.elastic.co/t/logstash-error-logstash-javapipeline-main-pipeline-error-cannot-get-new-connection-from-pool/300696)
**Author:** [@Bavaria](https://discuss.elastic.co/u/Bavaria)\ **Replies:** 11\ **Last updated:** [March 29, 2022, 1:40pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-javapipeline-main-pipeline-error-cannot-get-new-connection-from-pool/300696 "2022-03-29T13:40:02Z")
I am trying to start logstash pipeline. But after long search, I do not know what I am doing wrong. I am getting this output: C:\\Users\\Name\\ElasticStack\\logstash-8.0.1\>.\\bin\\logstash.bat -f erste-pipeline.conf "Using bu… --- ## [How to create an automated solution for Instance Migration in the case of Allocator Faliures?](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369)
**Author:** [@Apprentice](https://discuss.elastic.co/u/Apprentice)\ **Replies:** 18\ **Last updated:** [March 29, 2022, 1:34pm UTC](https://discuss.elastic.co/t/how-to-create-an-automated-solution-for-instance-migration-in-the-case-of-allocator-faliures/300369 "2022-03-29T13:34:27Z")
I've found this for the manual method: Move nodes or instances from allocators | Elastic Cloud Enterprise Reference \[3.1\] | Elastic I looked at the APIs here but couldn't find anything relevant to my situation. I'm new… --- ## [\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or co mmand line options are specified](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852)
**Author:** [@lug-gh](https://discuss.elastic.co/u/lug-gh)\ **Replies:** 6\ **Last updated:** [March 29, 2022, 1:23pm UTC](https://discuss.elastic.co/t/logstash-config-source-multilocal-ignoring-the-pipelines-yml-file-because-modules-or-co-mmand-line-options-are-specified/300852 "2022-03-29T13:23:34Z")
Hi, I wan't to use multiple pipelines, but after some testing I noticed the pipelines.yml won't be loaded. I searched the web and found it's ignored when you specify -f or -e (Multiple Pipelines | Logstash Reference \[8.1… --- ## [Pie chart on accumulated data](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545)
**Author:** [@MarioRojas](https://discuss.elastic.co/u/MarioRojas)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 1:25pm UTC](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545 "2022-03-29T13:25:38Z")
Hi All, I'm very new to Kibana and I need to create a pie chart based on the sum of the values present in different logs, marginalized from a given term in yet another log... In Discover the data looks like this: W… --- ## [Logstash redundancy and availability in ELK cluster](https://discuss.elastic.co/t/logstash-redundancy-and-availability-in-elk-cluster/300963)
**Author:** [@ELK\_Dummy](https://discuss.elastic.co/u/ELK_Dummy)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 1:15pm UTC](https://discuss.elastic.co/t/logstash-redundancy-and-availability-in-elk-cluster/300963 "2022-03-29T13:15:44Z")
Hi all, The question is about Logstash redundancy and availability. We have an Elasticsearch Cluster running fine with 3 CentOS nodes. One of this nodes hosts Losgstash. Logstash is set to ingest log files sent by SFT… --- ## [Write and then Read consistency](https://discuss.elastic.co/t/write-and-then-read-consistency/300785)
**Author:** [@TheGreatBaldOne](https://discuss.elastic.co/u/TheGreatBaldOne)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 1:11pm UTC](https://discuss.elastic.co/t/write-and-then-read-consistency/300785 "2022-03-29T13:11:59Z")
I am trying to achieve write and then read consistency. In other words, once i update or insert a document, I want to immediately read it correctly. I am getting a a list of a user's posts from ES insert a new pos… --- ## [Kibana.yml map.regionmap](https://discuss.elastic.co/t/kibana-yml-map-regionmap/300935)
**Author:** [@rhsnfl1122](https://discuss.elastic.co/u/rhsnfl1122)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 1:10pm UTC](https://discuss.elastic.co/t/kibana-yml-map-regionmap/300935 "2022-03-29T13:10:50Z")
I'm using Kibana version 8.1.0 In my kibana.yml, I append code as follow for use "configured GeoJSON menu" map.regionmap: layers: - name: "SEOUL ZIPCODE" url: "http://localhost/TL\_KODIS\_BAS\_11.geojson" … --- ## [Input the data into Elastic](https://discuss.elastic.co/t/input-the-data-into-elastic/300957)
**Author:** [@Thiago\_Paiva](https://discuss.elastic.co/u/Thiago_Paiva)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 1:00pm UTC](https://discuss.elastic.co/t/input-the-data-into-elastic/300957 "2022-03-29T13:00:33Z")
Hi, I have an elastic cluster with 3 master nodes, ten data nodes, and of these three are ingest too. But all nodes accept data in elastic open port. I used in the logstash output master:port and node:port, always \_docs… --- ## [Can't remove key in keystone](https://discuss.elastic.co/t/cant-remove-key-in-keystone/300943)
**Author:** [@chaishiqi](https://discuss.elastic.co/u/chaishiqi)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 12:53pm UTC](https://discuss.elastic.co/t/cant-remove-key-in-keystone/300943 "2022-03-29T12:53:52Z")
/usr/share/Elasticsearch/bin/Elasticsearch-keystore remove xpack.security.authc.realms.oidc.oidc1.rp.client\_secret ERROR: will not overwrite keystore at \[/etc/Elasticsearch/Elasticsearch.keystore\], because this incurs c… --- ## [Logstash service fails to start due to Ruby Error](https://discuss.elastic.co/t/logstash-service-fails-to-start-due-to-ruby-error/300902)
**Author:** [@ASA01](https://discuss.elastic.co/u/ASA01)\ **Replies:** 2\ **Last updated:** [March 29, 2022, 12:45pm UTC](https://discuss.elastic.co/t/logstash-service-fails-to-start-due-to-ruby-error/300902 "2022-03-29T12:45:25Z")
I cannot get logstash to start and keep running. I have verified all my logstash confs work individually with test\_and\_exit, but when I try to start it as a service I get the following error. \[2022-03-29T01:37:10,010\]\[… --- ## [Sum index size based on unique identifier](https://discuss.elastic.co/t/sum-index-size-based-on-unique-identifier/300581)
**Author:** [@phager](https://discuss.elastic.co/u/phager)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:33pm UTC](https://discuss.elastic.co/t/sum-index-size-based-on-unique-identifier/300581 "2022-03-29T12:33:29Z")
I have data within Elasticsearch indexed by customer, i.e. index-custnumber-2022-w11, that I would like to sum index size per unique customer into a chart in Kibana. I can run curl -X GET "localhost:9200/\_cat/indices/ind… --- ## [Automated Curations in Meta Engines](https://discuss.elastic.co/t/automated-curations-in-meta-engines/299353)
**Author:** [@miki\_haiat](https://discuss.elastic.co/u/miki_haiat)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 12:31pm UTC](https://discuss.elastic.co/t/automated-curations-in-meta-engines/299353 "2022-03-29T12:31:47Z")
Automated curation is a very cool feature but for some unknown reason it dosent work on meta engine. im currently using v 8.0 and im wondering if its a version issue ? --- ## [How to use "DAY" Grok Pattern on Filebeat Multiline](https://discuss.elastic.co/t/how-to-use-day-grok-pattern-on-filebeat-multiline/300910)
**Author:** [@mvasqueznr](https://discuss.elastic.co/u/mvasqueznr)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 12:31pm UTC](https://discuss.elastic.co/t/how-to-use-day-grok-pattern-on-filebeat-multiline/300910 "2022-03-29T12:31:42Z")
Hi. I'm use the next configuration to read a multiline file on logstash. For identify the begin of the message I use a grok pattern file { path =\> "Sample\_Type1/\*" start\_position =\> "beginning" … --- ## [Metricbeat SQL module date fields](https://discuss.elastic.co/t/metricbeat-sql-module-date-fields/297348)
**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:30pm UTC](https://discuss.elastic.co/t/metricbeat-sql-module-date-fields/297348 "2022-03-29T12:30:16Z")
I am ingesting some sql queries via the metricbeat sql module, including date/time fields. I would like to use these fields on a Lens graph, but cannot as they are ingested as a string format. Is there any way to get K… --- ## [Using the payload data (fields) after aggregated to bucket, in Elastic Watcher Action email](https://discuss.elastic.co/t/using-the-payload-data-fields-after-aggregated-to-bucket-in-elastic-watcher-action-email/300779)
**Author:** [@SararhHewage](https://discuss.elastic.co/u/SararhHewage)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 12:08pm UTC](https://discuss.elastic.co/t/using-the-payload-data-fields-after-aggregated-to-bucket-in-elastic-watcher-action-email/300779 "2022-03-29T12:08:40Z")
HI, I am seeking some help to resolve an issue that I am having in one of my Elastic Watchers. First of all, I must say this is a complex Watcher. In our environment, we gather some log data from file transferring jobs… --- ## [How to add Available Fields on my Discover menu for visualization purposes on my dashboards?](https://discuss.elastic.co/t/how-to-add-available-fields-on-my-discover-menu-for-visualization-purposes-on-my-dashboards/300954)
**Author:** [@renatoa12](https://discuss.elastic.co/u/renatoa12)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 11:42am UTC](https://discuss.elastic.co/t/how-to-add-available-fields-on-my-discover-menu-for-visualization-purposes-on-my-dashboards/300954 "2022-03-29T11:42:06Z")
Hi everyone, Does anyone here know how can i add specific fields for my index for visualization purposes on my dashboards?? --- ## [Stop standard tokenizer from splitting on punctuations](https://discuss.elastic.co/t/stop-standard-tokenizer-from-splitting-on-punctuations/300951)
**Author:** [@Nipun\_Tulsyan](https://discuss.elastic.co/u/Nipun_Tulsyan)\ **Replies:** 0\ **Last updated:** [March 29, 2022, 11:28am UTC](https://discuss.elastic.co/t/stop-standard-tokenizer-from-splitting-on-punctuations/300951 "2022-03-29T11:28:00Z")
Hi We use the "standard" tokenizer in custom analyzer definitions. By default the standard tokenizer splits words on hyphens and ampersands, so for example "i-mac" is tokenized to "i" and "mac" Is there any way to co… --- ## [Enterprise Search Not Grabbing Product Images From Shopify Product Page](https://discuss.elastic.co/t/enterprise-search-not-grabbing-product-images-from-shopify-product-page/299105)
**Author:** [@thahunt](https://discuss.elastic.co/u/thahunt)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 10:24am UTC](https://discuss.elastic.co/t/enterprise-search-not-grabbing-product-images-from-shopify-product-page/299105 "2022-03-29T10:24:46Z")
Upon first ingestion, a default text based schema was created for me. I need to create a custom schema for the web crawler to index. The default index did a good job but it did not grab the product image, which is pr… --- ## [Kibana behind apache reverse proxy](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454)
**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 9:37am UTC](https://discuss.elastic.co/t/kibana-behind-apache-reverse-proxy/300454 "2022-03-29T09:37:35Z")
Hi I'm trying to get kibana working behind and apache reverse proxy. I already have it working, but there's one issue (for which I already have a workaround) but I need to know if it's a configuration issue or a bug. The… --- ## [Filtering a Pivot Transform](https://discuss.elastic.co/t/filtering-a-pivot-transform/299371)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 9:35am UTC](https://discuss.elastic.co/t/filtering-a-pivot-transform/299371 "2022-03-29T09:35:37Z")
I have a pivot transform that calculates a duration between two timestamped documents by grouping them, matching like documents, then aggregating the min timestamp, the max timestamp and using a script to calculate the d… [Previous page](https://discuss.elastic.co/latest.md?page=1195) [Next page](https://discuss.elastic.co/latest.md?page=1197)