# Latest

**URL:** https://discuss.elastic.co/latest.md?page=1221

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1222

---

## [How to find all the queries terminated by elasticsearch when it reaches requestTimeout](https://discuss.elastic.co/t/how-to-find-all-the-queries-terminated-by-elasticsearch-when-it-reaches-requesttimeout/299145)

<div class="topic-metadata">

**Author:** [@jatin\_gupta](https://discuss.elastic.co/u/jatin_gupta)\
**Replies:** 5\
**Last updated:** [March 11, 2022, 1:31pm UTC](https://discuss.elastic.co/t/how-to-find-all-the-queries-terminated-by-elasticsearch-when-it-reaches-requesttimeout/299145 "2022-03-11T13:31:59Z")

</div>

We have specified request\_timeout while creating Elasticsearch client using javascript library. Whenever the timeout is reached our understanding is that the query is terminated by Elasticsearch as it does not appear in …

---

## [Unable to create an enrollment token for Kibana. "Elasticsearch node HTTP layer SSL configuration Keystore doesn't contain any PrivateKey entries where the associated certificate is a CA certificate"](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032)

<div class="topic-metadata">

**Author:** [@maof97](https://discuss.elastic.co/u/maof97)\
**Replies:** 6\
**Last updated:** [March 11, 2022, 1:09pm UTC](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token-for-kibana-elasticsearch-node-http-layer-ssl-configuration-keystore-doesnt-contain-any-privatekey-entries-where-the-associated-certificate-is-a-ca-certificate/297032 "2022-03-11T13:09:32Z")

</div>

Hello, I tried today to setup my ELK stack securely so I followed the documentation and created all certs that I need using the certutil and encrypted the CA and the node cert with passwords. I placed the http.p12 file…

---

## [After adding Nodes to a Cluster - common Users cannot authenticate on said nodes](https://discuss.elastic.co/t/after-adding-nodes-to-a-cluster-common-users-cannot-authenticate-on-said-nodes/299419)

<div class="topic-metadata">

**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 1:05pm UTC](https://discuss.elastic.co/t/after-adding-nodes-to-a-cluster-common-users-cannot-authenticate-on-said-nodes/299419 "2022-03-11T13:05:51Z")

</div>

Hi Everyone, i'm currently running a 3 Node Cluster, each Node is running CentOS 7. The Version of all the components is 7.15. We added 2 new nodes - because the old "Data Storing" Nodes were set up without lvm and t…

---

## [Hadoop env Hive Connectivity through logstash](https://discuss.elastic.co/t/hadoop-env-hive-connectivity-through-logstash/299452)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 1:02pm UTC](https://discuss.elastic.co/t/hadoop-env-hive-connectivity-through-logstash/299452 "2022-03-11T13:02:37Z")

</div>

Is it possible to connect to Hadoop hive environment using hive jdbc driver, through logstash jdbc connector?

---

## [PREVENT USER FROM DELETING INDEX](https://discuss.elastic.co/t/prevent-user-from-deleting-index/299322)

<div class="topic-metadata">

**Author:** [@Darshil\_Shah](https://discuss.elastic.co/u/Darshil_Shah)\
**Replies:** 3\
**Last updated:** [March 11, 2022, 12:39pm UTC](https://discuss.elastic.co/t/prevent-user-from-deleting-index/299322 "2022-03-11T12:39:58Z")

</div>

I have created one role from Kibana in which i have given read and write privilege , but the users are still able to delete index with \_delete\_by\_query API call. How can i prevent user from deleting index ?

---

## [Is there an equivalent feature to OpenSearch's "user attributes" in Elasticsearch?](https://discuss.elastic.co/t/is-there-an-equivalent-feature-to-opensearchs-user-attributes-in-elasticsearch/299393)

<div class="topic-metadata">

**Author:** [@catmanjan](https://discuss.elastic.co/u/catmanjan)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 11:24am UTC](https://discuss.elastic.co/t/is-there-an-equivalent-feature-to-opensearchs-user-attributes-in-elasticsearch/299393 "2022-03-11T11:24:47Z")

</div>

I want to set up document level security using ABAC I want to set up a role that will mandate that a user has all the necessary attributes, but each user will have a different set of attributes - rather than making many…

---

## [Missing privileges - Stack rules not showing as rule type on creating new alert](https://discuss.elastic.co/t/missing-privileges-stack-rules-not-showing-as-rule-type-on-creating-new-alert/299437)

<div class="topic-metadata">

**Author:** [@Mark\_Veenstra](https://discuss.elastic.co/u/Mark_Veenstra)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 11:10am UTC](https://discuss.elastic.co/t/missing-privileges-stack-rules-not-showing-as-rule-type-on-creating-new-alert/299437 "2022-03-11T11:10:33Z")

</div>

Within Kibana we would like to configure alert rules. When I navigate to the alerts and want to create a new rule. Some users do not have the option for Elasticsearch query based rules and/or index threshold rules. It s…

---

## [Metricbeat for NGINX : HTTP error 502 in : 502 Bad Gateway](https://discuss.elastic.co/t/metricbeat-for-nginx-http-error-502-in-502-bad-gateway/299155)

<div class="topic-metadata">

**Author:** [@elasticmind](https://discuss.elastic.co/u/elasticmind)\
**Replies:** 6\
**Last updated:** [March 11, 2022, 11:08am UTC](https://discuss.elastic.co/t/metricbeat-for-nginx-http-error-502-in-502-bad-gateway/299155 "2022-03-11T11:08:48Z")

</div>

Hello, I'm going through the observability fundamentals training and for the NGINX metrics section i'm getting this error: {"log.level":"error","@timestamp":"2022-03-09T00:57:04.303Z","log.origin":{"file.name":"module/…

---

## [Master not discovred ( multi-nodes cluster )](https://discuss.elastic.co/t/master-not-discovred-multi-nodes-cluster/299422)

<div class="topic-metadata">

**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\
**Replies:** 5\
**Last updated:** [March 11, 2022, 10:20am UTC](https://discuss.elastic.co/t/master-not-discovred-multi-nodes-cluster/299422 "2022-03-11T10:20:49Z")

</div>

my nodes can’t see each other on my Elasticsearch cluster on vm azure \`{"error":{"root\_cause":\[{"type":"master\_not\_discovered\_exception","reason":null}\],"type":"master\_not\_discovered\_exception","reason":null},"status":5…

---

## [Connecting to the Teradata Data Source through logstash](https://discuss.elastic.co/t/connecting-to-the-teradata-data-source-through-logstash/299420)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 9:22am UTC](https://discuss.elastic.co/t/connecting-to-the-teradata-data-source-through-logstash/299420 "2022-03-11T09:22:07Z")

</div>

Is it possible to use the logstash JDBC connector to connect to the Teradata data platform?

---

## [Elastic startup exception](https://discuss.elastic.co/t/elastic-startup-exception/299415)

<div class="topic-metadata">

**Author:** [@zx\_emo](https://discuss.elastic.co/u/zx_emo)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 9:05am UTC](https://discuss.elastic.co/t/elastic-startup-exception/299415 "2022-03-11T09:05:29Z")

</div>

\[es@localhost elasticsearch-8.0.1\]$ vim config/elasticsearch.yml \[es@localhost elasticsearch-8.0.1\]$ bin/elasticsearch warning: ignoring JAVA\_HOME=/usr/local/java/jdk1.8.0\_311; using bundled JDK warning: ignoring JAVA\_H…

---

## [Unable to use RESTful API in Elastic Cloud with curl](https://discuss.elastic.co/t/unable-to-use-restful-api-in-elastic-cloud-with-curl/299358)

<div class="topic-metadata">

**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\
**Replies:** 1\
**Last updated:** [March 11, 2022, 8:28am UTC](https://discuss.elastic.co/t/unable-to-use-restful-api-in-elastic-cloud-with-curl/299358 "2022-03-11T08:28:10Z")

</div>

Hi, I have a deployment on Elastic Cloud with an endpoint of the form: https://my\_host\_name.es.westusa.azure.elastic-cloud.com I wish to use the api to edit the extensions, specifically to add a synonyms file, using c…

---

## [Can't run Logstash as a Service](https://discuss.elastic.co/t/cant-run-logstash-as-a-service/299202)

<div class="topic-metadata">

**Author:** [@Simone1](https://discuss.elastic.co/u/Simone1)\
**Replies:** 26\
**Last updated:** [March 11, 2022, 8:06am UTC](https://discuss.elastic.co/t/cant-run-logstash-as-a-service/299202 "2022-03-11T08:06:57Z")

</div>

If i run logstash manually it works fine and sends all data in the right way. But when i try to run it as a service it shows this error: Cmd that i use: sudo systemctl start logstash.service OS Ubuntu 20.04.1 Log…

---

## [Can I open a case about logstash in elastic support?](https://discuss.elastic.co/t/can-i-open-a-case-about-logstash-in-elastic-support/299399)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 8:06am UTC](https://discuss.elastic.co/t/can-i-open-a-case-about-logstash-in-elastic-support/299399 "2022-03-11T08:06:16Z")

</div>

Hi, our enterprise has 5 different platinium subscriptions, and whe are having a problem with logstash, it is posible to open a case? or the support its only for Elasticsearch?

---

## [Elasticsearch can-match phase](https://discuss.elastic.co/t/elasticsearch-can-match-phase/299331)

<div class="topic-metadata">

**Author:** [@qixian](https://discuss.elastic.co/u/qixian)\
**Replies:** 1\
**Last updated:** [March 11, 2022, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-can-match-phase/299331 "2022-03-11T07:24:09Z")

</div>

hello,who can help me with this question,thanks. I konw that the old version of Elasticsearch before 7.16,during the can-match phase,the search’s coordinating node sent an individual request to each shard checked,is it …

---

## [Elasticsearch restore cluster with TLS enabled](https://discuss.elastic.co/t/elasticsearch-restore-cluster-with-tls-enabled/299392)

<div class="topic-metadata">

**Author:** [@auto\_reply\_007](https://discuss.elastic.co/u/auto_reply_007)\
**Replies:** 3\
**Last updated:** [March 11, 2022, 6:42am UTC](https://discuss.elastic.co/t/elasticsearch-restore-cluster-with-tls-enabled/299392 "2022-03-11T06:42:54Z")

</div>

Hello! we have Elasticsearch 7.10.2 cluster in Delhi ( with InterNode tls and users enabled ) and we want to move cluster data onto another location ( Dubai ) and how to backup all data except security indices? because …

---

## [Keycloak with ELK stack](https://discuss.elastic.co/t/keycloak-with-elk-stack/299311)

<div class="topic-metadata">

**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\
**Replies:** 3\
**Last updated:** [March 11, 2022, 6:23am UTC](https://discuss.elastic.co/t/keycloak-with-elk-stack/299311 "2022-03-11T06:23:17Z")

</div>

I'm trying to use Keycloak to login into kibana dashboard. Can anyone help me on this as some of the solutions I found on the forum were not working out for me.

---

## [Want to disable Logstash http://localhost:9600/ URL JSON output](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352)

<div class="topic-metadata">

**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\
**Replies:** 6\
**Last updated:** [March 11, 2022, 5:51am UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352 "2022-03-11T05:51:51Z")

</div>

Hi Team, We don't want to see JSON output as it contains Hostname and other sensitive information and it's accessible without user id and password too. Please share details to disable this so that security vulnerabilit…

---

## [Logstash Helm install with jdbc connection to MySQL/Mariadb](https://discuss.elastic.co/t/logstash-helm-install-with-jdbc-connection-to-mysql-mariadb/299396)

<div class="topic-metadata">

**Author:** [@Matthew\_Ong](https://discuss.elastic.co/u/Matthew_Ong)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 4:53am UTC](https://discuss.elastic.co/t/logstash-helm-install-with-jdbc-connection-to-mysql-mariadb/299396 "2022-03-11T04:53:51Z")

</div>

Hi, I am new to logstash(2 weeks). Please help me with these questions. Thanks very much in advance. How to perform JDBC connection to mysql with helm chart installation and how to upload the jdbc driver after the inst…

---

## [Create New Fields from Metricbeat](https://discuss.elastic.co/t/create-new-fields-from-metricbeat/299394)

<div class="topic-metadata">

**Author:** [@personal.riz](https://discuss.elastic.co/u/personal.riz)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 4:37am UTC](https://discuss.elastic.co/t/create-new-fields-from-metricbeat/299394 "2022-03-11T04:37:56Z")

</div>

Hi guys, i want to ask how to create new fields from metricbeat value like host.network.in.bytes for network monitoring. i want to create query PPL from metricbeat value but the value is null, i think because the value …

---

## [Not able to create ES cluster with ECK1.9.1](https://discuss.elastic.co/t/not-able-to-create-es-cluster-with-eck1-9-1/299206)

<div class="topic-metadata">

**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\
**Replies:** 2\
**Last updated:** [March 11, 2022, 4:22am UTC](https://discuss.elastic.co/t/not-able-to-create-es-cluster-with-eck1-9-1/299206 "2022-03-11T04:22:15Z")

</div>

Hi Team, We trying to create ES-7.16.3 version cluster with ECK 1.9 but ECK is not creating the ES cluster. unfortunately I do not see any errors also in the eck logs. I tried to create the es cluster using below confi…

---

## [How to convert scripted field to runtime field - KIbana \_doc compile error](https://discuss.elastic.co/t/how-to-convert-scripted-field-to-runtime-field-kibana-doc-compile-error/299391)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 1\
**Last updated:** [March 11, 2022, 3:42am UTC](https://discuss.elastic.co/t/how-to-convert-scripted-field-to-runtime-field-kibana-doc-compile-error/299391 "2022-03-11T03:42:02Z")

</div>

Some time ago I fought scripted fields in this post: Painless doc values; how to reference grouped fields Now scripted fields are deprecated and I'm trying to convert this to a runtime field. I'm using the KIbana compon…

---

## [How to Update a Field in a document to NULL usiong NEST and the Update API](https://discuss.elastic.co/t/how-to-update-a-field-in-a-document-to-null-usiong-nest-and-the-update-api/299003)

<div class="topic-metadata">

**Author:** [@xef](https://discuss.elastic.co/u/xef)\
**Replies:** 4\
**Last updated:** [March 11, 2022, 3:40am UTC](https://discuss.elastic.co/t/how-to-update-a-field-in-a-document-to-null-usiong-nest-and-the-update-api/299003 "2022-03-11T03:40:40Z")

</div>

This is the third time we are posting this in the hope someone can shed some light on it - Please. We are using the NEST library with Elasticsearch versions 7.14. Lets say we have assigned a field a value of "hello Wor…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/299385)

<div class="topic-metadata">

**Author:** [@AlexIch](https://discuss.elastic.co/u/AlexIch)\
**Replies:** 7\
**Last updated:** [March 11, 2022, 1:56am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/299385 "2022-03-11T01:56:36Z")

</div>

HI guys Im getting Kibana server is not ready yet error when Opening Kibana dashboard Elasticsearch.yml: cluster.name: xiake-els-server node.name: node-1 path.data: /data/Elasticsearch/data path.logs: /data/Elastic…

---

## [Can one specify format of datetime in query?](https://discuss.elastic.co/t/can-one-specify-format-of-datetime-in-query/299263)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 5\
**Last updated:** [March 11, 2022, 1:47am UTC](https://discuss.elastic.co/t/can-one-specify-format-of-datetime-in-query/299263 "2022-03-11T01:47:47Z")

</div>

Is there a way of specifying the format of times used in a query? In most of my indexes I convert times to ISO8601 but one data source had a totally non standard format and I decided that it was easier to simply specify…

---

## [Elasticsearch java api tail](https://discuss.elastic.co/t/elasticsearch-java-api-tail/299387)

<div class="topic-metadata">

**Author:** [@111505](https://discuss.elastic.co/u/111505)\
**Replies:** 0\
**Last updated:** [March 11, 2022, 1:35am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-tail/299387 "2022-03-11T01:35:24Z")

</div>

Hi. I want to implement the "tail" function with Java. Will the Elasticsearch java API provide similar functions to "tail"? I plan to use it when I look at Log. The Scroll API seems to be difficult to write due to the…

---

## [Renaming multiple fields that are nested](https://discuss.elastic.co/t/renaming-multiple-fields-that-are-nested/299376)

<div class="topic-metadata">

**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\
**Replies:** 3\
**Last updated:** [March 11, 2022, 12:05am UTC](https://discuss.elastic.co/t/renaming-multiple-fields-that-are-nested/299376 "2022-03-11T00:05:25Z")

</div>

I need help renaming multiple fields that are nested, here is my problem, I can only rename "did" within example.devices but when I attempt to rename others I would assume it's the same pattern but the results are what i…

---

## [How do I logout of Kibana](https://discuss.elastic.co/t/how-do-i-logout-of-kibana/299015)

<div class="topic-metadata">

**Author:** [@codewriterguy](https://discuss.elastic.co/u/codewriterguy)\
**Replies:** 8\
**Last updated:** [March 10, 2022, 11:18pm UTC](https://discuss.elastic.co/t/how-do-i-logout-of-kibana/299015 "2022-03-10T23:18:39Z")

</div>

I know this is incredibly basic and I'm not trolling, I can't find a logout button

---

## [Unable to get terminal for logstash 8.0.1](https://discuss.elastic.co/t/unable-to-get-terminal-for-logstash-8-0-1/299370)

<div class="topic-metadata">

**Author:** [@uma\_rengasamy](https://discuss.elastic.co/u/uma_rengasamy)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 9:38pm UTC](https://discuss.elastic.co/t/unable-to-get-terminal-for-logstash-8-0-1/299370 "2022-03-10T21:38:21Z")

</div>

Getting below error OCI runtime exec failed: exec failed: container\_linux.go:380: starting container process caused: exec: "/bin/bash": stat /bin/bash: no such file or directory: unknown

---

## [Interested in providing feedback? Let’s chat!](https://discuss.elastic.co/t/interested-in-providing-feedback-let-s-chat/299359)

<div class="topic-metadata">

**Author:** [@daphne](https://discuss.elastic.co/u/daphne)\
**Replies:** 0\
**Last updated:** [March 10, 2022, 5:15pm UTC](https://discuss.elastic.co/t/interested-in-providing-feedback-let-s-chat/299359 "2022-03-10T17:15:40Z")

</div>

Hi! My name is Daphne and I am a user experience researcher at Elastic. I’d love to hear from our users about pricing at Elastic. We are working on a few concepts to help you more precisely estimate your costs to use Ela…

[Previous page](https://discuss.elastic.co/latest.md?page=1220)

[Next page](https://discuss.elastic.co/latest.md?page=1222)
